$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json) Hash identifier: X6T7NfuZwS3oR1qkiR0HlMbzMm/XiFw2LQNHP85BBWM= Subject key identifier: 8D:AE:A6:9B:9D:F7:07:0A:42:82:B1:6A:53:AA:92:BC:03:4C:B3:C9 Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft Manifest number: 074D Signing time: Sun 20 Sep 2026 23:42:13 +0000 Manifest this update: Sun 20 Sep 2026 23:42:12 +0000 Manifest next update: Sun 27 Sep 2026 23:42:12 +0000 Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: yUbmMFd/FLhSqe16xpznD6CHYczIZDgmZR23X9wft+A=) 2: D9FDBEA0FB5D11F0A7F971C0496F56BC.roa (hash: Wx61e/Tv8ZK5H7v83kwm5JdbJjGGNDdnnszpCWgUdM8=) 3: 65121B70A69511F1971C28813211F970.roa (hash: 3Opr5JSqsOwr6wivXPiUX4wG7/e2QgnlOHHv5rplwqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Validity Not Before: Sep 20 23:42:12 2026 GMT Not After : Sep 27 23:42:12 2026 GMT Subject: CN=6ab06f55-c094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:cb:3e:93:80:7a:cd:fa:e7:33:43:c8:9e: 41:16:13:76:4b:77:ad:af:06:a3:9d:ab:87:23:60: 7c:af:e5:8d:d9:94:f7:2f:15:a7:ad:36:f8:3c:42: 66:c6:80:9c:52:1d:94:98:fa:d7:9d:ed:87:10:ea: 90:d4:61:52:b7:b8:75:dc:a3:2d:28:c1:f2:34:bd: 39:96:38:7e:0b:cc:ad:a1:af:3e:67:91:25:88:db: 52:73:3d:8d:fc:0d:0a:5b:94:a0:e2:89:0f:ba:2b: 83:10:64:10:e8:1e:71:0f:8d:0b:69:72:46:b2:6c: 46:38:5b:7a:bc:cd:d0:a1:c2:ab:a5:8f:33:a0:70: 7e:94:49:74:34:e1:d3:89:4f:49:e5:3f:5a:8c:4a: ad:97:2f:aa:3f:0c:c2:5b:21:50:58:b0:5c:aa:6b: e4:51:a0:c6:dc:dd:cf:0b:45:d7:fe:e8:7e:74:1d: c6:b4:78:cf:4e:68:de:54:41:d7:4a:95:29:20:45: 20:7c:89:f9:82:f0:d9:c3:13:f2:7b:61:d0:2b:f6: b1:97:85:2e:f2:5a:98:f5:a0:07:32:57:2f:b5:ec: 6e:2d:c0:5b:c0:fd:bf:6c:9a:1c:6a:72:90:6e:88: a1:1b:2b:2d:73:09:9f:79:e4:c8:72:06:2f:74:74: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:A6:9B:9D:F7:07:0A:42:82:B1:6A:53:AA:92:BC:03:4C:B3:C9 X509v3 Authority Key Identifier: keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:91:5c:69:dc:ee:cd:d1:02:76:b1:e0:5d:86:00:9c:af:5e: e6:11:74:d1:d2:42:9d:99:f1:75:78:00:ba:12:bd:52:f9:8d: 5f:eb:c8:46:7f:be:f1:6a:c9:aa:31:b9:ff:e5:14:94:8e:50: 6b:62:37:4d:60:82:76:08:e9:5c:58:74:22:41:96:5e:22:69: a0:4a:65:1b:04:df:d5:10:5b:36:b2:59:5d:14:5e:fc:25:bb: 15:d9:c4:d5:ed:f2:15:8b:01:ca:08:a0:cd:a0:a0:64:63:cc: 6b:2b:40:f9:b0:df:94:8b:32:d7:15:0d:31:08:bf:0f:75:d1: dc:09:4f:e1:44:42:1a:82:cd:28:3d:40:a2:8a:78:95:3d:3b: e2:a7:1f:72:1b:08:2c:c5:17:c1:84:41:9c:cb:91:e4:66:12: 69:de:ec:80:24:ad:ec:f1:62:c6:b8:49:a5:5a:1e:d2:f4:1f: c0:7e:95:a0:0c:0e:ab:a8:5f:90:f4:49:03:c3:ed:5b:4b:82: 28:71:29:9c:e1:95:c4:c5:c9:e1:67:a0:12:7c:ad:81:0e:6f: e5:07:81:e6:79:2c:1b:dd:c2:ce:0e:b7:a1:44:db:c1:19:e5: 1c:cd:56:03:2e:b0:b9:f0:79:9e:6c:fe:a0:6c:86:58:46:35: f4:34:d3:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKDIwRUQwQUFCMjA3NTBCOEIyN0E4NkRGOTg5QTc1NEJG NTcyNkREN0UwHhcNMjYwOTIwMjM0MjEyWhcNMjYwOTI3MjM0MjEyWjAYMRYwFAYD VQQDEw02YWIwNmY1NS1jMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNzLPpOAes365zNDyJ5BFhN2S3etrwajnauHI2B8r+WN2ZT3LxWnrTb4PEJm xoCcUh2UmPrXne2HEOqQ1GFSt7h13KMtKMHyNL05ljh+C8ytoa8+Z5EliNtScz2N /A0KW5Sg4okPuiuDEGQQ6B5xD40LaXJGsmxGOFt6vM3QocKrpY8zoHB+lEl0NOHT iU9J5T9ajEqtly+qPwzCWyFQWLBcqmvkUaDG3N3PC0XX/uh+dB3GtHjPTmjeVEHX SpUpIEUgfIn5gvDZwxPye2HQK/axl4Uu8lqY9aAHMlcvtexuLcBbwP2/bJocanKQ boihGystcwmfeeTIcgYvdHTXfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2uppud 9wcKQoKxalOqkrwDTLPJMB8GA1UdIwQYMBaAFCDtCqsgdQuLJ6ht+YmnVL9XJt1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0c25xRzM1aWFkVXYxY20z WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lPMEtxeUIxQzRzbnFHMzVpYWRVdjFjbTNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0 c25xRzM1aWFkVXYxY20zWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT5FcadzuzdECdrHgXYYAnK9e5hF00dJCnZnxdXgAuhK9UvmNX+vIRn++8WrJ qjG5/+UUlI5Qa2I3TWCCdgjpXFh0IkGWXiJpoEplGwTf1RBbNrJZXRRe/CW7FdnE 1e3yFYsBygigzaCgZGPMaytA+bDflIsy1xUNMQi/D3XR3AlP4URCGoLNKD1Aoop4 lT074qcfchsILMUXwYRBnMuR5GYSad7sgCSt7PFixrhJpVoe0vQfwH6VoAwOq6hf kPRJA8PtW0uCKHEpnOGVxMXJ4WegEnytgQ5v5QeB5nksG93Czg63oUTbwRnlHM1W Ay6wufB5nmz+oGyGWEY19DTT6g== -----END CERTIFICATE-----Generated at Tue Sep 22 02:37:59 2026 by rpki-client