$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json) Hash identifier: 8ZBG2xUoWUuJWR6eml4eH5+pjIKxocuX/RORXP+yPV8= Subject key identifier: 26:87:7D:15:BF:2D:2F:A6:C9:F8:06:AB:4E:96:FD:EA:91:7F:D5:5B Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft Manifest number: 02E1 Signing time: Mon 21 Sep 2026 01:03:36 +0000 Manifest this update: Mon 21 Sep 2026 01:03:36 +0000 Manifest next update: Mon 28 Sep 2026 01:03:36 +0000 Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: AUCOwrXXfv3wlf+OOjwkAEDoKlYiQbeFRp7LMcIrwIc=) 2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: lsL1bzm7xgDwCWDuOlZQ/MIqVfUaWity48F6FNEzoq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: Sep 21 01:03:36 2026 GMT Not After : Sep 28 01:03:36 2026 GMT Subject: CN=6ab08268-719d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c1:d8:5c:c3:f8:bc:12:eb:d6:54:76:bb:08: ff:df:2e:ee:ae:e5:d2:e2:42:7b:5c:18:e1:9b:39: 99:ee:e4:ac:6f:96:34:4f:c2:81:5a:70:ab:58:fd: 7e:af:33:d8:64:82:84:38:aa:81:32:f9:4d:be:bb: fb:7e:8b:0a:b8:ac:ba:f0:26:14:8f:4c:4d:56:f6: 2f:66:d6:71:0d:0f:2a:8c:38:b8:27:88:aa:56:8a: 13:df:89:32:96:17:f1:3b:47:a1:e2:3f:b3:87:a5: d4:9d:2f:6f:5b:d1:f9:b6:8e:80:0a:89:ab:a3:97: 5d:21:7c:a9:6c:5b:4a:64:29:f9:b9:61:a5:54:7c: 89:ad:af:0a:95:db:0c:a3:c3:cd:71:1e:b2:4e:d8: a9:fb:7e:8d:0d:b2:25:4a:1a:91:2d:d0:88:11:20: de:d5:c8:ab:4d:3d:23:54:43:42:5a:26:5d:0d:3e: 1e:76:1c:11:9d:2a:81:fb:f5:67:b6:b6:b0:59:1a: e5:e3:13:0d:27:8a:b9:00:a0:c6:1b:fd:06:81:8e: 62:e7:9a:98:1a:a1:03:d9:da:2a:c0:4b:e0:1b:90: 68:00:32:06:10:95:75:bf:d2:33:5c:77:61:5b:d6: ac:0f:ea:a6:79:7a:a2:51:f0:ff:a1:0c:4d:af:a1: 32:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:87:7D:15:BF:2D:2F:A6:C9:F8:06:AB:4E:96:FD:EA:91:7F:D5:5B X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:64:b1:21:67:70:bc:d7:41:fe:7f:31:3f:84:c8:7b:47:8c: fb:40:1d:7d:73:5c:69:e5:75:c3:8f:75:97:d5:a3:26:08:72: 97:52:a4:8d:03:15:a0:4b:84:6e:10:fa:d4:d2:7c:84:4d:94: 6e:e4:38:bf:bc:77:67:90:60:76:3e:f9:e4:f3:0e:f5:9e:ce: 22:01:dd:cc:a2:76:8b:41:43:cd:2c:b1:7c:f9:54:2f:e6:01: 58:d0:4b:4d:50:8f:2c:40:0c:07:6c:5b:0f:2c:e6:0b:39:78: 11:e8:ae:da:35:f5:55:98:4a:ee:21:78:07:13:85:bd:68:e9: aa:fb:aa:46:e9:38:4a:cb:98:6d:00:fb:5d:e2:02:35:25:ae: be:42:f5:40:e6:b6:9b:99:5a:a5:6b:82:35:42:b6:45:95:c4: 0e:73:33:63:17:51:4c:74:aa:96:01:d4:e3:20:d9:49:30:fd: 5e:1d:2c:1a:d1:93:a1:98:a5:b8:73:34:25:34:21:f5:84:ec: 5d:ed:c6:5d:59:6f:ba:1e:ec:4f:35:a4:c4:1a:ae:40:fd:4f: fa:6e:82:24:a8:0c:e4:81:66:0a:78:35:15:f2:21:34:5c:35: 3d:ac:a7:32:17:9f:14:8a:3a:74:56:3c:32:b7:34:32:56:9a: 29:c8:3a:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjYwOTIxMDEwMzM2WhcNMjYwOTI4MDEwMzM2WjAYMRYwFAYD VQQDEw02YWIwODI2OC03MTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsHYXMP4vBLr1lR2uwj/3y7uruXS4kJ7XBjhmzmZ7uSsb5Y0T8KBWnCrWP1+ rzPYZIKEOKqBMvlNvrv7fosKuKy68CYUj0xNVvYvZtZxDQ8qjDi4J4iqVooT34ky lhfxO0eh4j+zh6XUnS9vW9H5to6AComro5ddIXypbFtKZCn5uWGlVHyJra8KldsM o8PNcR6yTtip+36NDbIlShqRLdCIESDe1cirTT0jVENCWiZdDT4edhwRnSqB+/Vn trawWRrl4xMNJ4q5AKDGG/0GgY5i55qYGqED2doqwEvgG5BoADIGEJV1v9IzXHdh W9asD+qmeXqiUfD/oQxNr6Ey7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaHfRW/ LS+myfgGq06W/eqRf9VbMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgmSxIWdwvNdB/n8xP4TIe0eM+0AdfXNcaeV1w491l9WjJghyl1KkjQMVoEuE bhD61NJ8hE2UbuQ4v7x3Z5Bgdj755PMO9Z7OIgHdzKJ2i0FDzSyxfPlUL+YBWNBL TVCPLEAMB2xbDyzmCzl4Eeiu2jX1VZhK7iF4BxOFvWjpqvuqRuk4SsuYbQD7XeIC NSWuvkL1QOa2m5lapWuCNUK2RZXEDnMzYxdRTHSqlgHU4yDZSTD9Xh0sGtGToZil uHM0JTQh9YTsXe3GXVlvuh7sTzWkxBquQP1P+m6CJKgM5IFmCng1FfIhNFw1Payn MhefFIo6dFY8Mrc0MlaaKcg6iQ== -----END CERTIFICATE-----Generated at Tue Sep 22 20:59:23 2026 by rpki-client