$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: IeFzf/e1P1zxSEvaTEce4IWu98bYo6DjhKWrhYFbSkQ= Subject key identifier: 24:DF:57:47:33:9E:57:71:AA:F9:B6:6E:A6:E9:24:95:A8:C8:40:02 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 097D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 0920 Signing time: Sun 20 Sep 2026 20:16:43 +0000 Manifest this update: Sun 20 Sep 2026 20:16:43 +0000 Manifest next update: Sun 27 Sep 2026 20:16:43 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: Pn4X1n8C0S/Sgb4Dyp9BVvgrzby4vhtEaHRsGpu4kus=) 2: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=) 3: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=) 4: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=) 5: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=) 6: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=) 7: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=) 8: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2429 (0x97d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Sep 20 20:16:43 2026 GMT Not After : Sep 27 20:16:43 2026 GMT Subject: CN=6ab03f2b-6e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:fd:4b:f9:ba:51:3d:10:91:b2:89:21:d1: 5c:5a:e4:c5:67:96:a1:7f:89:01:26:5d:0c:c5:bb: e1:f6:68:0f:ca:7b:c3:8d:e4:0b:f5:3e:3f:b0:68: f1:46:fb:52:7b:98:c4:23:9b:66:4e:d4:97:39:f6: 0b:c2:28:62:88:05:2c:bd:de:55:3c:6b:57:56:b2: d0:6e:38:48:df:b4:9b:6c:2d:8e:c1:8f:cb:59:4b: 92:e5:1c:3c:66:08:40:54:f4:e5:75:05:5d:52:19: 7f:63:40:5a:2e:40:4a:e3:e6:88:ec:40:96:39:12: 06:dd:f4:b0:7d:0c:f3:58:99:a7:95:2d:fb:38:6b: 85:1c:b4:17:c4:19:9d:19:36:89:71:72:66:82:8c: 03:7e:7d:87:e7:8d:ec:78:7f:f8:44:42:b8:99:2e: f5:0c:2f:c1:62:c2:36:2c:37:7e:ea:b1:ad:85:83: e5:5d:4f:da:95:12:50:85:18:1f:06:b7:c2:28:3e: fd:25:c8:1f:b2:e4:30:d0:e4:91:39:df:a9:6f:4f: 06:1c:e9:eb:88:cc:16:fa:7a:5f:ed:11:a1:7a:61: 98:67:9c:c2:28:48:85:f4:ef:4a:b1:dd:e8:72:49: 3b:f8:99:fd:19:88:9c:8c:b3:5d:45:ea:29:8b:3a: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DF:57:47:33:9E:57:71:AA:F9:B6:6E:A6:E9:24:95:A8:C8:40:02 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:92:41:9f:80:bf:4c:6f:d9:b6:a5:7b:6b:b2:e3:b4:ff:4d: 4c:31:a2:26:9b:fc:ce:ee:c7:24:2e:74:28:42:2c:0b:7a:86: 81:95:a0:44:5a:15:2d:64:6f:27:43:26:0d:96:c8:a6:c8:5e: 46:83:b4:3e:e9:0a:75:41:e3:99:7a:e3:e2:65:fc:27:fd:f7: 49:f1:f3:0b:ed:c2:39:5b:49:d4:6c:43:2d:26:84:af:f7:07: f5:1e:91:63:6d:48:3d:c8:d6:8c:f9:42:89:54:30:23:f1:bb: 4c:c6:94:96:a2:41:82:e2:d0:44:51:c2:18:44:8c:ac:89:2c: c5:1d:fe:8d:a3:a7:fb:e1:34:64:c5:82:66:98:1b:f9:40:0d: 5b:ae:83:22:c6:97:9c:16:dc:7f:28:59:aa:d8:e4:61:e0:a5: 2e:cf:82:e8:cc:bc:2d:ca:d3:81:f9:84:57:99:f9:e2:6c:ac: ca:94:bc:f4:bc:67:04:44:95:bb:67:34:44:87:57:59:7a:30: 87:79:d1:68:ee:74:5e:bf:bc:18:a0:95:29:ab:47:de:15:ad: 36:26:31:2d:90:f0:9a:ec:92:65:5a:e1:78:26:34:3d:96:f1: 06:88:89:fa:dd:98:63:e0:0d:63:72:b3:4b:28:31:52:de:ef: bf:ab:7a:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjYwOTIwMjAxNjQzWhcNMjYwOTI3MjAxNjQzWjAYMRYwFAYD VQQDEw02YWIwM2YyYi02ZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTf9S/m6UT0QkbKJIdFcWuTFZ5ahf4kBJl0Mxbvh9mgPynvDjeQL9T4/sGjx RvtSe5jEI5tmTtSXOfYLwihiiAUsvd5VPGtXVrLQbjhI37SbbC2OwY/LWUuS5Rw8 ZghAVPTldQVdUhl/Y0BaLkBK4+aI7ECWORIG3fSwfQzzWJmnlS37OGuFHLQXxBmd GTaJcXJmgowDfn2H543seH/4REK4mS71DC/BYsI2LDd+6rGthYPlXU/alRJQhRgf BrfCKD79JcgfsuQw0OSROd+pb08GHOnriMwW+npf7RGhemGYZ5zCKEiF9O9Ksd3o ckk7+Jn9GYicjLNdReopizrANQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTfV0cz nldxqvm2bqbpJJWoyEACMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF5JBn4C/TG/ZtqV7a7LjtP9NTDGiJpv8zu7HJC50KEIsC3qGgZWgRFoVLWRv J0MmDZbIpsheRoO0PukKdUHjmXrj4mX8J/33SfHzC+3COVtJ1GxDLSaEr/cH9R6R Y21IPcjWjPlCiVQwI/G7TMaUlqJBguLQRFHCGESMrIksxR3+jaOn++E0ZMWCZpgb +UANW66DIsaXnBbcfyhZqtjkYeClLs+C6My8LcrTgfmEV5n54mysypS89LxnBESV u2c0RIdXWXowh3nRaO50Xr+8GKCVKatH3hWtNiYxLZDwmuySZVrheCY0PZbxBoiJ +t2YY+ANY3KzSygxUt7vv6t67Q== -----END CERTIFICATE-----Generated at Mon Sep 21 19:05:28 2026 by rpki-client