$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: hC8mP6TUCh8ELpehXMi8xbFw7CZ+p2CTnv010AHBX1E= Subject key identifier: C2:80:BE:CC:A0:95:AE:1D:12:70:81:F6:C9:84:03:A9:24:27:71:BF Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 1A02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 19F0 Signing time: Thu 08 Oct 2026 16:25:16 +0000 Manifest this update: Thu 08 Oct 2026 16:25:16 +0000 Manifest next update: Thu 15 Oct 2026 16:25:16 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: GvAXe7Oc+Z4D+k/K944Ut+l5J2zYnDYl3Um0B8SxSe4=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: rsK3+PYcLZtB8vJaGIMnh9NDX2ChOw6Z0/4rac1bRIs=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: Yb/qxPAzJiLkKjk0COysI5j3RpY85yaJNQvUBrDuM3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6658 (0x1a02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Oct 8 16:25:16 2026 GMT Not After : Oct 15 16:25:16 2026 GMT Subject: CN=6ac7c3ec-ea16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:1a:ab:b2:56:e7:b7:d7:5b:b2:cc:b7:ff: 35:79:e1:ef:ac:1e:17:7b:04:47:4b:f9:c4:e0:9c: be:ba:de:ce:ff:a0:8b:a1:dc:3e:91:b1:da:00:44: c4:0a:13:21:f1:06:58:9c:8d:e0:f9:a5:a2:05:02: a3:e2:5d:6f:8c:d9:94:6a:0d:ca:39:bd:ca:b0:fd: 5c:53:56:50:96:d3:80:61:e7:bb:39:bd:92:26:ec: 5b:86:49:72:29:f6:d1:ff:e1:b8:8a:29:76:74:a8: ff:82:9e:3f:b1:f4:19:30:29:34:3c:2a:21:b3:6e: 97:0a:38:9c:64:1c:29:b4:18:ee:49:ec:35:92:ee: 92:91:65:80:0d:85:f2:47:04:22:0e:12:2f:2b:d8: 74:3d:ac:31:ec:4e:76:70:65:86:67:a1:b3:e8:49: 77:76:62:4d:d8:b5:a3:7e:f4:b2:22:d7:a7:95:b3: e4:84:9b:91:a4:14:27:64:f0:bb:51:df:54:fe:fb: 3d:f4:9a:46:d5:66:86:16:d1:d9:65:47:a0:6f:05: 8e:68:d6:7e:96:5c:33:26:1c:49:7b:83:7f:a3:9b: b0:60:f0:f8:3a:12:5a:8b:bb:38:8f:23:1d:4f:71: 00:d3:2c:2e:30:02:c1:4f:0c:6f:6d:5b:82:47:37: c0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:80:BE:CC:A0:95:AE:1D:12:70:81:F6:C9:84:03:A9:24:27:71:BF X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2e:80:39:08:fe:f1:70:98:25:b3:77:0e:0e:de:48:42:4b: 87:f2:9d:41:12:5d:a6:dc:56:ed:f8:50:84:0b:c6:df:e4:93: f7:86:dc:e8:36:9b:99:b8:87:d7:09:ec:e2:ee:ae:5a:e1:b1: b5:77:84:b2:03:46:de:e9:6b:c4:f3:93:84:d4:3b:95:67:cb: 1e:34:13:cf:dd:3e:33:da:fb:05:09:cd:d9:61:07:ec:cc:c4: 0e:ba:a2:2e:fd:37:f0:54:ee:40:d9:0b:4a:16:8d:96:a2:6f: 90:bc:3a:38:da:73:e2:1e:ec:b9:b6:81:71:17:d2:9a:0f:11: ee:86:94:a9:51:d6:0b:ce:e4:a9:ca:b9:39:7d:74:ac:ad:a2: 01:9c:ab:a0:12:00:0e:4c:9e:9a:3a:5f:89:38:0b:73:7d:bb: e2:ec:d9:53:e8:58:de:bb:5b:ac:32:e8:a1:e1:6c:5f:78:43: cc:5e:2b:11:08:60:09:5f:e9:81:47:c2:ae:f0:5a:93:b0:d3: 9d:7d:32:2d:37:64:4c:54:dc:b7:63:b9:0e:f5:37:8d:17:88: b9:d6:9e:49:9f:e7:a8:6a:f4:d7:f5:33:6e:69:c8:8d:4c:ae: fe:dc:c2:2b:61:cb:72:70:15:16:74:99:99:54:39:c4:45:33: 5c:c0:b0:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjYxMDA4MTYyNTE2WhcNMjYxMDE1MTYyNTE2WjAYMRYwFAYD VQQDEw02YWM3YzNlYy1lYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumgaq7JW57fXW7LMt/81eeHvrB4XewRHS/nE4Jy+ut7O/6CLodw+kbHaAETE ChMh8QZYnI3g+aWiBQKj4l1vjNmUag3KOb3KsP1cU1ZQltOAYee7Ob2SJuxbhkly KfbR/+G4iil2dKj/gp4/sfQZMCk0PCohs26XCjicZBwptBjuSew1ku6SkWWADYXy RwQiDhIvK9h0Pawx7E52cGWGZ6Gz6El3dmJN2LWjfvSyItenlbPkhJuRpBQnZPC7 Ud9U/vs99JpG1WaGFtHZZUegbwWOaNZ+llwzJhxJe4N/o5uwYPD4OhJai7s4jyMd T3EA0ywuMALBTwxvbVuCRzfAYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKAvsyg la4dEnCB9smEA6kkJ3G/MB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWy6AOQj+8XCYJbN3Dg7eSEJLh/KdQRJdptxW7fhQhAvG3+ST94bc6DabmbiH 1wns4u6uWuGxtXeEsgNG3ulrxPOThNQ7lWfLHjQTz90+M9r7BQnN2WEH7MzEDrqi Lv038FTuQNkLShaNlqJvkLw6ONpz4h7subaBcRfSmg8R7oaUqVHWC87kqcq5OX10 rK2iAZyroBIADkyemjpfiTgLc3274uzZU+hY3rtbrDLooeFsX3hDzF4rEQhgCV/p gUfCrvBak7DTnX0yLTdkTFTct2O5DvU3jReIudaeSZ/nqGr01/UzbmnIjUyu/tzC K2HLcnAVFnSZmVQ5xEUzXMCwfA== -----END CERTIFICATE-----Generated at Sat Oct 10 13:02:00 2026 by rpki-client