$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft File: iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft (raw, json) Hash identifier: /+PuW5wyuN+2/kqWWgGing/x2bIq26fsHDhjbRfvyyY= Subject key identifier: 2B:C0:46:90:45:90:DB:F5:27:2C:FF:D5:EC:E5:27:85:14:93:18:0E Authority key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1 Certificate issuer: /CN=A91F090C/serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft Manifest number: 0BD1 Signing time: Sun 20 Sep 2026 19:05:54 +0000 Manifest this update: Sun 20 Sep 2026 19:05:53 +0000 Manifest next update: Sun 27 Sep 2026 19:05:53 +0000 Files and hashes: 1: iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl (hash: m8FlJQF+zqz1FfUG/ANW9DaoN6PC4g/V0VlhGXEHXu0=) 2: FD86FDF6707311F1B807F94B77A30FBC.roa (hash: gDZWZJSsCK5hepLcVhYuiySc2jdwfmmWoqRN6NOgOZY=) 3: 1EDAC9BA85AA11F1B700E1E55BA30FBC.roa (hash: kf1pHs/8bNvsCfkzb+oZx7Nt2agM4ptLzDTnsP5UWjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1 Validity Not Before: Sep 20 19:05:53 2026 GMT Not After : Sep 27 19:05:53 2026 GMT Subject: CN=6ab02e92-41d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:9c:1e:2f:a4:76:3a:9d:57:c8:66:4e:c5: d3:6a:77:a9:26:c6:c5:d5:2d:17:5f:8d:86:4f:c3: 6d:b1:03:be:be:b0:5c:9b:03:0c:8c:04:c2:e4:23: db:62:a4:8a:4d:d9:89:a7:27:e9:aa:df:cc:67:1e: 9f:26:64:9c:0a:57:73:2e:6d:5e:f6:24:fa:03:ed: 51:58:70:7e:61:a3:43:78:31:0d:02:95:9d:2c:be: 22:7d:91:1e:61:de:d8:a6:c5:ea:6e:62:bb:fb:cf: 15:ca:ca:de:97:f6:bc:4e:a1:a4:20:6e:67:5d:d1: 9a:d9:7c:22:87:d5:4c:40:fc:aa:35:46:d1:ac:67: 02:db:05:e9:b9:19:d6:b5:0f:59:01:f6:42:1b:1f: 90:8a:55:9d:91:ac:af:b8:0c:70:59:7f:25:07:6c: a3:08:b8:67:dc:f7:33:e1:45:2f:ae:19:60:2d:d7: 87:c2:cb:09:fd:8b:06:25:d5:19:87:b9:ad:21:03: 46:44:4b:3b:e7:bf:44:29:48:87:dd:8e:cd:15:3f: a7:0e:62:0f:8c:e0:19:33:b4:45:0c:b2:5e:58:3c: 8f:ae:fe:36:a1:ad:89:9b:df:63:30:6a:1b:b4:82: cf:84:a3:b4:e9:c8:18:3a:26:55:7e:2d:db:75:f8: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C0:46:90:45:90:DB:F5:27:2C:FF:D5:EC:E5:27:85:14:93:18:0E X509v3 Authority Key Identifier: keyid:8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c6:ac:60:ff:a6:c9:0e:af:f3:77:a2:82:24:eb:87:75:84: bd:aa:6f:29:fb:3c:48:4e:d2:41:da:8d:29:19:96:13:57:96: 5d:e8:1b:d9:36:8d:c7:1b:3b:d7:c5:fb:7e:d7:1a:e9:07:47: 42:6f:2d:1a:20:88:31:a1:15:8f:45:6b:1d:a7:b7:9a:05:45: 41:71:70:27:5f:55:60:ff:12:50:96:62:61:c6:3d:17:c2:ab: f1:e0:b4:99:6b:1d:86:58:a2:6f:15:1a:0d:a1:9f:9e:05:90: c4:30:0e:42:39:bd:4d:92:ee:77:44:88:dc:87:8d:e6:b5:b5: 65:bd:ca:26:40:79:6e:8f:ed:b9:6f:fd:a0:f5:f0:5e:e5:5a: 41:7b:d3:b3:08:ac:9a:e1:d6:a9:94:29:e4:90:45:85:ba:75: 04:c0:f3:92:b5:ac:60:1d:ed:1f:5c:60:f7:ce:bf:0e:4a:95: 10:20:71:bc:2b:f1:dd:79:e5:81:8c:29:6d:36:c3:a0:c1:1a: 96:d4:d9:d4:de:5f:fc:cd:88:09:c0:c7:96:54:5d:07:bd:7b: a3:e5:75:6b:49:b1:b4:86:3d:93:e2:f6:d4:cb:51:c2:94:22: a6:4c:7f:d1:8d:7e:69:ac:75:5b:f4:b5:7a:2f:06:82:94:47: d1:32:50:ac -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDkwQzExMC8GA1UEBRMoOEFFRTI5REIyRkU5MTQwN0ZFNDBFNEJFNzhDNDA2MjZE N0UxOEZCMTAeFw0yNjA5MjAxOTA1NTNaFw0yNjA5MjcxOTA1NTNaMBgxFjAUBgNV BAMTDTZhYjAyZTkyLTQxZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChqJweL6R2Op1XyGZOxdNqd6kmxsXVLRdfjYZPw22xA76+sFybAwyMBMLkI9ti pIpN2YmnJ+mq38xnHp8mZJwKV3MubV72JPoD7VFYcH5ho0N4MQ0ClZ0sviJ9kR5h 3timxepuYrv7zxXKyt6X9rxOoaQgbmdd0ZrZfCKH1UxA/Ko1RtGsZwLbBem5Gda1 D1kB9kIbH5CKVZ2RrK+4DHBZfyUHbKMIuGfc9zPhRS+uGWAt14fCywn9iwYl1RmH ua0hA0ZESzvnv0QpSIfdjs0VP6cOYg+M4BkztEUMsl5YPI+u/jahrYmb32Mwahu0 gs+Eo7TpyBg6JlV+Ldt1+FkBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUK8BGkEWQ 2/UnLP/V7OUnhRSTGA4wHwYDVR0jBBgwFoAUiu4p2y/pFAf+QOS+eMQGJtfhj7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOTBDL0I3QzRFOTM2NUQy OTExRUFCMDU0RkYzQkM0RjlBRTAyL2l1NHAyeV9wRkFmLVFPUy1lTVFHSnRmaGo3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXU0cDJ5X3BGQWYtUU9TLWVNUUdKdGZoajdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OTBDL0I3QzRFOTM2NUQyOTExRUFCMDU0RkYzQkM0RjlBRTAyL2l1NHAyeV9wRkFm LVFPUy1lTVFHSnRmaGo3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCaxqxg/6bJDq/zd6KCJOuHdYS9qm8p+zxITtJB2o0pGZYTV5Zd6BvZNo3HGzvX xft+1xrpB0dCby0aIIgxoRWPRWsdp7eaBUVBcXAnX1Vg/xJQlmJhxj0Xwqvx4LSZ ax2GWKJvFRoNoZ+eBZDEMA5COb1Nku53RIjch43mtbVlvcomQHluj+25b/2g9fBe 5VpBe9OzCKya4daplCnkkEWFunUEwPOStaxgHe0fXGD3zr8OSpUQIHG8K/HdeeWB jCltNsOgwRqW1NnU3l/8zYgJwMeWVF0HvXuj5XVrSbG0hj2T4vbUy1HClCKmTH/R jX5prHVb9LV6LwaClEfRMlCs -----END CERTIFICATE-----Generated at Mon Sep 21 23:28:38 2026 by rpki-client