$ rpki-client -vvvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: noR166lP1bhqwZ2zE5ZWOztAf7o7RPixMjxAFruMYtI= Subject key identifier: 36:9E:8F:60:0B:35:AB:B9:CF:02:0A:2A:4D:A5:70:4D:57:C8:3F:1E Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 13BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 13A5 Signing time: Fri 04 Sep 2026 16:55:05 +0000 Manifest this update: Fri 04 Sep 2026 16:55:04 +0000 Manifest next update: Fri 11 Sep 2026 16:55:04 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: zi2t8y34EZmsrL8Vgo+1A4DNALr1pIy4DBWjGVF8xJs=) 2: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: k+p0xtu7l+Ym0EwSnutl9VlQ16P8ym/648o14VPC7t8=) 3: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: Y5k6Nh1K8NNS0hPh5WTEjL7DqnEuLThuhCaWRqICeaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5054 (0x13be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Sep 4 16:55:04 2026 GMT Not After : Sep 11 16:55:04 2026 GMT Subject: CN=6a9af7e9-0292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:82:ed:e1:05:cc:e2:e9:4f:da:35:20:57: d7:a5:11:38:2c:5e:50:cc:c3:c0:ed:2e:98:9b:d0: ff:94:87:91:4d:35:cb:68:dc:4b:ca:6f:0f:8e:35: 6f:10:7c:72:e9:f6:0b:51:94:91:1b:63:5a:95:67: 65:c0:72:94:7f:c1:bc:0b:0b:b2:ba:eb:ac:e4:6f: 14:c5:9e:61:d2:09:06:53:35:6b:fc:92:78:97:3d: c9:0f:26:75:f5:2f:51:42:ce:a2:f2:89:33:66:84: 06:56:45:e3:ce:91:53:c4:9d:c5:e8:a6:7b:37:06: ae:c8:da:6c:e8:bd:99:99:d0:74:81:ff:4b:a1:d2: 55:de:7c:74:f8:61:3d:59:91:dd:8b:0a:91:94:c9: c7:7a:cf:7c:25:d7:7d:88:53:4c:64:d6:6b:18:ab: 7f:26:f1:0a:2e:73:e4:20:1e:3c:e9:ce:01:99:c6: b9:07:3c:bc:58:08:a9:31:93:0c:bc:b9:ab:a9:0a: 14:ee:ec:77:ba:a3:f1:09:0b:e2:9a:75:f2:c9:46: 0b:c3:21:c7:21:3b:34:56:65:83:7a:a3:96:e1:5a: e6:18:82:94:aa:8c:38:0a:91:3e:de:ef:a8:fd:38: e1:d8:b5:4b:b0:19:65:65:fd:ba:95:d6:b9:49:32: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9E:8F:60:0B:35:AB:B9:CF:02:0A:2A:4D:A5:70:4D:57:C8:3F:1E X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e4:62:f2:31:a7:ef:df:f2:92:ad:f0:33:10:5e:68:26:8e: f2:af:bf:17:58:fb:90:cd:22:9f:2b:90:65:82:76:ae:f4:00: c8:50:a9:a1:46:35:93:e7:fa:ba:1b:14:c1:e0:85:35:75:07: 4b:25:38:09:c3:90:dd:25:fd:3c:10:fa:80:64:3f:56:78:fd: b7:ae:ec:96:82:25:f4:93:5d:04:c1:a8:58:c3:08:5b:13:72: ae:50:81:7e:80:f5:80:ae:94:5d:1f:d8:20:98:96:89:0b:27: 11:82:8b:68:19:0f:59:21:41:68:80:9f:48:89:c8:a3:d5:7a: 1c:44:b1:47:c5:38:1f:4a:6e:bc:9a:d9:11:cc:c4:fe:41:15: 45:1a:1a:90:50:d0:85:2f:dc:25:b8:57:c9:e7:b8:ff:f4:4a: 30:06:b0:af:e7:51:ac:08:a1:73:14:c7:34:a5:a1:3e:df:1f: 66:78:5b:ed:21:63:d5:e7:03:13:73:af:d3:65:c6:ba:06:c1: 57:99:3c:21:2e:82:78:63:5b:83:92:21:65:89:10:b4:13:ba: 57:5a:a9:cb:e7:00:eb:ca:60:10:fa:87:3a:38:c4:a6:fb:9e: f7:3c:fc:8f:26:7a:43:a5:09:90:38:95:3c:4b:57:5a:fb:bf: 99:93:63:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjYwOTA0MTY1NTA0WhcNMjYwOTExMTY1NTA0WjAYMRYwFAYD VQQDEw02YTlhZjdlOS0wMjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu2C7eEFzOLpT9o1IFfXpRE4LF5QzMPA7S6Ym9D/lIeRTTXLaNxLym8PjjVv EHxy6fYLUZSRG2NalWdlwHKUf8G8Cwuyuuus5G8UxZ5h0gkGUzVr/JJ4lz3JDyZ1 9S9RQs6i8okzZoQGVkXjzpFTxJ3F6KZ7NwauyNps6L2ZmdB0gf9LodJV3nx0+GE9 WZHdiwqRlMnHes98Jdd9iFNMZNZrGKt/JvEKLnPkIB486c4Bmca5Bzy8WAipMZMM vLmrqQoU7ux3uqPxCQvimnXyyUYLwyHHITs0VmWDeqOW4VrmGIKUqow4CpE+3u+o /Tjh2LVLsBllZf26lda5STI7xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDaej2AL Nau5zwIKKk2lcE1XyD8eMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgORi8jGn79/ykq3wMxBeaCaO8q+/F1j7kM0inyuQZYJ2rvQAyFCpoUY1k+f6 uhsUweCFNXUHSyU4CcOQ3SX9PBD6gGQ/Vnj9t67sloIl9JNdBMGoWMMIWxNyrlCB foD1gK6UXR/YIJiWiQsnEYKLaBkPWSFBaICfSInIo9V6HESxR8U4H0puvJrZEczE /kEVRRoakFDQhS/cJbhXyee4//RKMAawr+dRrAihcxTHNKWhPt8fZnhb7SFj1ecD E3Ov02XGugbBV5k8IS6CeGNbg5IhZYkQtBO6V1qpy+cA68pgEPqHOjjEpvue9zz8 jyZ6Q6UJkDiVPEtXWvu/mZNjFw== -----END CERTIFICATE-----Generated at Sat Sep 5 06:54:15 2026 by rpki-client