$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: QqHopG8kHhmIYoJ0tbttz+AwKJXLpmBj5+5MHe9CUPA= Subject key identifier: F3:8D:F0:B2:A3:E2:BD:F7:66:80:35:B8:6E:07:A9:AE:FB:77:D7:91 Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 0252 Signing time: Sat 03 Oct 2026 02:59:16 +0000 Manifest this update: Sat 03 Oct 2026 02:59:16 +0000 Manifest next update: Sat 10 Oct 2026 02:59:16 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: rhlz4+0QQb96IvugIxE0L/wiEAMb7aNMwzFUP8UU744=) 2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) 3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Oct 3 02:59:16 2026 GMT Not After : Oct 10 02:59:16 2026 GMT Subject: CN=6ac06f84-f029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:03:c1:48:6a:8a:8e:37:c2:2b:be:9a:78: 8f:ec:ae:84:d1:18:96:f5:3e:58:7b:7c:dd:bb:aa: 5a:c0:3a:5d:89:82:ba:af:3b:ce:e9:13:23:90:1a: 1f:10:3d:28:1d:f7:3d:bc:04:43:ec:a5:f4:ee:1c: 12:43:8d:41:e9:40:af:17:3b:85:0b:5d:97:09:be: b5:b5:0b:be:60:b3:52:6a:13:1d:23:1b:91:1a:bb: b6:ab:78:6b:ae:59:16:23:a9:03:89:2e:97:71:be: b8:61:fb:e3:39:91:67:e0:69:87:01:b4:5c:b4:ac: ad:c8:4f:35:84:09:02:df:5b:58:54:d7:11:71:82: 5e:61:57:a0:d0:87:76:0c:c5:01:d2:bd:12:57:e0: 12:02:d7:d7:d6:bf:78:29:7f:51:94:42:3b:6b:9e: 66:6a:e1:b7:f9:49:65:6e:2a:1b:ed:1a:44:a9:8f: be:ae:e6:09:84:de:b5:5e:3f:64:ea:e9:e3:54:5d: 80:c0:55:78:75:46:1a:d6:8d:f6:fd:7b:f0:4c:3f: 1a:22:49:5a:81:35:b6:c8:3c:bb:e8:30:a1:94:bb: 5f:f4:0f:73:3d:10:3a:b8:e8:ab:14:f5:af:48:ec: d3:17:ed:87:81:0c:da:14:94:d3:7a:41:69:01:b0: a0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8D:F0:B2:A3:E2:BD:F7:66:80:35:B8:6E:07:A9:AE:FB:77:D7:91 X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b0:49:bb:77:45:79:1e:8e:b3:f9:7c:00:aa:e4:d2:19:48: 42:cc:13:bf:15:fc:2e:55:be:0e:a9:26:2c:69:9a:4a:ec:06: 68:ba:1b:5e:4b:bc:d8:42:7c:09:69:6f:f2:8b:ab:2f:d9:7c: df:67:7f:60:93:47:07:19:da:1e:86:81:3b:b5:f1:60:2d:6f: 88:af:75:38:5f:58:14:49:8c:f4:f8:e2:95:c2:b7:09:64:ed: 4c:d7:0b:c6:ff:99:8f:06:5f:53:56:8e:9c:fb:20:95:4f:25: 5d:27:5d:01:84:a2:57:67:f3:3f:96:1b:8c:7e:68:4c:0e:ee: 48:06:a9:cc:cc:01:01:c1:ca:67:df:6c:a9:e0:b8:92:d9:6c: 5f:4b:ff:2b:ce:e2:df:b9:b8:5f:7d:e3:a9:bb:f0:5e:26:3c: 96:12:72:9f:3d:85:86:4b:10:2b:a8:7a:ad:2c:57:46:37:03: b7:c6:4e:d7:1c:e7:72:8f:6a:ef:9c:91:2d:6e:6f:89:33:43: dd:0f:c3:f5:5c:e5:fa:2b:34:66:22:c8:b5:2d:89:be:eb:b7: 65:63:3c:a3:1a:b8:72:e4:1d:f6:c6:a1:45:07:52:31:d4:ab: 63:9d:51:77:a8:65:0e:5a:42:ba:46:33:7c:9c:78:e2:da:2d: 5b:b4:2b:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYxMDAzMDI1OTE2WhcNMjYxMDEwMDI1OTE2WjAYMRYwFAYD VQQDEw02YWMwNmY4NC1mMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWMDwUhqio43wiu+mniP7K6E0RiW9T5Ye3zdu6pawDpdiYK6rzvO6RMjkBof ED0oHfc9vARD7KX07hwSQ41B6UCvFzuFC12XCb61tQu+YLNSahMdIxuRGru2q3hr rlkWI6kDiS6Xcb64YfvjOZFn4GmHAbRctKytyE81hAkC31tYVNcRcYJeYVeg0Id2 DMUB0r0SV+ASAtfX1r94KX9RlEI7a55mauG3+Ullbiob7RpEqY++ruYJhN61Xj9k 6unjVF2AwFV4dUYa1o32/XvwTD8aIklagTW2yDy76DChlLtf9A9zPRA6uOirFPWv SOzTF+2HgQzaFJTTekFpAbCgJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPON8LKj 4r33ZoA1uG4Hqa77d9eRMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAELBJu3dFeR6Os/l8AKrk0hlIQswTvxX8LlW+DqkmLGmaSuwGaLobXku82EJ8 CWlv8ourL9l832d/YJNHBxnaHoaBO7XxYC1viK91OF9YFEmM9PjilcK3CWTtTNcL xv+ZjwZfU1aOnPsglU8lXSddAYSiV2fzP5YbjH5oTA7uSAapzMwBAcHKZ99sqeC4 ktlsX0v/K87i37m4X33jqbvwXiY8lhJynz2FhksQK6h6rSxXRjcDt8ZO1xznco9q 75yRLW5viTND3Q/D9Vzl+is0ZiLItS2Jvuu3ZWM8oxq4cuQd9sahRQdSMdSrY51R d6hlDlpCukYzfJx44totW7QrDw== -----END CERTIFICATE-----Generated at Sun Oct 4 10:30:50 2026 by rpki-client