$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json) Hash identifier: K6qbzfZN46UChwE1+o3uQ2yX8+uMqUk1umsxeShtuh4= Subject key identifier: 52:01:AE:47:E6:8C:8F:23:87:7D:AE:22:7D:66:63:0B:3D:AF:1F:66 Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft Manifest number: E6 Signing time: Mon 05 Oct 2026 07:03:39 +0000 Manifest this update: Mon 05 Oct 2026 07:03:38 +0000 Manifest next update: Mon 12 Oct 2026 07:03:38 +0000 Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: YDV+nb3Fh59p9+VBRGgngXBVQvoA9Yy8vZ2flAHlvtU=) 2: C8E215DA72BD11F1A5B8119C6EA30FBC.roa (hash: 42F8H8tLM7SW8VbxSmhfljA+OlaX9YJW6w/yvaOHuEM=) 3: 48C2333271D011F18649332165A30FBC.roa (hash: LDP5Esly8VYRBXjaigIiSwQbm+Rq9+J2C6Fns5Nz1AU=) 4: 7E782718940B11F1AE7863F93E11F970.roa (hash: XTTBwDL+3ZX31Mb6Vk3dZi/vUMZFs0rfR5N64dJPp9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Oct 5 07:03:38 2026 GMT Not After : Oct 12 07:03:38 2026 GMT Subject: CN=6ac34bcb-763e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:bd:c7:e8:f6:07:b7:6d:94:ff:2b:d7:63: 2d:b0:d2:c4:83:bd:b9:62:60:11:a3:9a:29:ec:d3: d2:33:50:bd:24:63:5e:7e:de:7e:2b:ea:c7:6c:96: a7:9c:20:4e:73:57:8a:b4:5f:0e:1b:1e:a2:09:e4: 3e:7b:d1:36:d9:40:55:c1:d7:cf:09:07:eb:26:94: 0c:df:be:94:3d:0d:a2:12:8f:72:49:5a:1d:07:d7: 85:c8:f6:ae:04:6b:ce:fb:d1:39:bb:f2:fa:ae:8d: 2c:bf:ef:32:65:d6:65:18:27:55:59:59:40:9b:5f: 40:f8:ac:7d:b3:66:e5:cc:69:e6:71:5e:11:ad:08: d6:89:e1:c0:16:37:bb:7a:bb:50:de:8b:2c:ec:a5: 9d:70:3e:60:56:34:95:a4:83:30:26:fe:b7:ef:e4: 12:7a:92:17:e4:76:1c:d2:dd:a2:53:39:88:88:c3: 80:96:21:25:7b:1d:2d:c5:72:29:57:81:7c:8e:97: 50:2b:db:8f:f9:71:47:ae:68:08:f2:9a:6e:01:05: 64:06:cf:3e:4c:99:e9:f7:c6:93:aa:92:50:97:b1: 91:05:07:1e:f3:ee:fc:f5:1c:64:c0:ff:14:d2:e9: 77:40:6a:2c:57:f9:6f:d4:11:1e:4e:bb:fc:c8:90: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:01:AE:47:E6:8C:8F:23:87:7D:AE:22:7D:66:63:0B:3D:AF:1F:66 X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:3f:09:15:3d:c7:93:75:ca:67:9e:a4:35:b8:58:b4:66:2b: 67:6a:cc:5f:7e:76:2e:ac:16:93:d4:c4:64:fc:0a:ee:88:06: ef:9b:27:dc:57:04:e1:91:8e:1b:41:d3:70:4f:56:99:7c:c5: 92:e7:7c:a9:eb:3b:20:02:9f:52:68:68:b5:79:58:cf:26:5e: 50:db:2a:0b:fa:f3:df:13:db:4e:da:e9:08:f0:ed:ce:77:b9: 47:c0:b4:ae:13:4c:9e:14:e4:c7:9f:1c:bd:9c:88:59:80:ed: d7:19:d0:a8:aa:15:8c:17:ec:89:55:1b:1b:4c:fd:2a:07:63: ac:66:c7:9c:e0:3d:5f:00:69:11:1a:f0:bc:d6:0b:d5:a1:67: b2:6b:9d:e8:98:a6:64:dc:d1:06:1c:10:9a:b5:69:1d:f1:fc: 08:e3:26:dd:c2:62:b4:45:0c:02:c3:1f:95:7b:9f:63:a4:e3: bc:52:fe:f9:a8:bd:77:e0:1f:8c:32:0f:56:21:8e:5d:c9:f9: 42:ce:21:b1:94:f6:eb:48:9a:ff:3e:e4:93:0f:2c:fe:85:4f: ad:46:d6:2b:6b:d6:c2:28:55:c3:32:47:24:3f:1a:12:89:e9: 77:ed:75:fa:a3:53:19:e6:90:ba:f9:cf:4d:53:df:c0:2a:fa: a6:3b:e7:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwRTAxMTAvBgNVBAUTKDg5NzA3N0I3MUYyQzVBRURERTZDMURENDk1NDdEQ0M5 OTUyQ0RBQkUwHhcNMjYxMDA1MDcwMzM4WhcNMjYxMDEyMDcwMzM4WjAYMRYwFAYD VQQDEw02YWMzNGJjYi03NjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ29x+j2B7dtlP8r12MtsNLEg725YmARo5op7NPSM1C9JGNeft5+K+rHbJan nCBOc1eKtF8OGx6iCeQ+e9E22UBVwdfPCQfrJpQM376UPQ2iEo9ySVodB9eFyPau BGvO+9E5u/L6ro0sv+8yZdZlGCdVWVlAm19A+Kx9s2blzGnmcV4RrQjWieHAFje7 ertQ3oss7KWdcD5gVjSVpIMwJv637+QSepIX5HYc0t2iUzmIiMOAliElex0txXIp V4F8jpdQK9uP+XFHrmgI8ppuAQVkBs8+TJnp98aTqpJQl7GRBQce8+789RxkwP8U 0ul3QGosV/lv1BEeTrv8yJCQfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIBrkfm jI8jh32uIn1mYws9rx9mMB8GA1UdIwQYMBaAFIlwd7cfLFrt3mwd1JVH3MmVLNq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDBFMC8zRkJCNUUwNDdC NTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1M2ViQjNVbFVmY3laVXMy cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDBFMC8zRkJCNUUwNDdCNTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1 M2ViQjNVbFVmY3laVXMycjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVD8JFT3Hk3XKZ56kNbhYtGYrZ2rMX352LqwWk9TEZPwK7ogG75sn3FcE4ZGO G0HTcE9WmXzFkud8qes7IAKfUmhotXlYzyZeUNsqC/rz3xPbTtrpCPDtzne5R8C0 rhNMnhTkx58cvZyIWYDt1xnQqKoVjBfsiVUbG0z9KgdjrGbHnOA9XwBpERrwvNYL 1aFnsmud6JimZNzRBhwQmrVpHfH8COMm3cJitEUMAsMflXufY6TjvFL++ai9d+Af jDIPViGOXcn5Qs4hsZT260ia/z7kkw8s/oVPrUbWK2vWwihVwzJHJD8aEonpd+11 +qNTGeaQuvnPTVPfwCr6pjvnjA== -----END CERTIFICATE-----Generated at Tue Oct 6 15:49:26 2026 by rpki-client