$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json) Hash identifier: VDamK2rp4n3ngvrPuzWkhpxAHwBkQIhH6HOVo/WYMB8= Subject key identifier: 61:A2:7A:2D:79:F6:67:0F:BF:EC:67:80:DA:3C:B9:35:48:EA:E6:A4 Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft Manifest number: 04AE Signing time: Fri 04 Sep 2026 23:40:13 +0000 Manifest this update: Fri 04 Sep 2026 23:40:12 +0000 Manifest next update: Fri 11 Sep 2026 23:40:12 +0000 Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: j3e+xTsbMguYYb/QGWAFMsATtGULh8vqhzZO3iXxUx0=) 2: 58C00854905211EC90E6100FC4F9AE02.roa (hash: HavGxilFCXPwJZ5ysPf3ohVQv79l6ZGEb7A58aULo/M=) 3: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: OS+MMRRjQluFNuI+98G/Gv/Ff4t99hp6Izi7LUhaJJQ=) 4: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: JVO8JZCfYqp3N9h+hRdEkwlagsjOuD7MM+G3/8q05pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Validity Not Before: Sep 4 23:40:12 2026 GMT Not After : Sep 11 23:40:12 2026 GMT Subject: CN=6a9b56dd-5437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:27:61:85:cd:e8:1e:50:3b:a7:7b:fd:93: c1:f7:1f:fd:0b:18:62:ba:15:2c:3c:6e:4b:f0:28: 7f:84:ee:89:c7:bf:ed:21:aa:37:5a:3e:13:f9:d4: d2:25:e1:43:3f:a8:19:a4:7f:38:dc:30:4d:64:6f: f3:11:80:8a:5a:61:e1:f1:81:e4:d0:8f:f8:63:5a: 45:e0:cc:2e:06:3d:fd:a5:16:53:27:59:c7:5a:53: 82:fc:e5:3f:01:34:ff:90:46:81:4d:c7:da:a9:44: fa:83:f1:bf:74:69:a9:f5:ab:91:08:e1:dc:a7:da: f4:4e:a5:66:6b:0a:3f:14:5b:6d:f3:0e:4d:12:5e: 78:93:87:a0:6e:c6:9a:5f:22:cd:6c:2b:86:1f:7c: 63:5e:3c:85:7e:23:9d:b2:75:26:65:08:cc:82:a7: 20:aa:e1:0c:25:e6:2f:73:06:61:a2:c3:33:47:9f: 15:67:25:be:6e:55:46:9a:d0:1f:22:c8:4d:7f:0c: 76:c2:40:eb:de:fc:53:20:f8:cf:05:53:1a:f6:ef: 31:01:3f:70:43:62:14:2f:e2:b6:10:00:68:25:c7: b7:77:98:d9:e9:d7:8d:f8:de:59:bd:b0:57:c3:95: b8:ba:e3:02:eb:a3:6e:2c:59:2e:17:e2:94:f0:7e: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A2:7A:2D:79:F6:67:0F:BF:EC:67:80:DA:3C:B9:35:48:EA:E6:A4 X509v3 Authority Key Identifier: keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1a:c2:63:52:ba:0d:a1:21:7a:06:f4:14:57:52:05:87:d0: dd:bf:18:05:17:46:71:d6:a6:85:a8:43:0e:29:8f:70:13:0b: 15:7b:31:25:60:d9:51:75:30:c0:3a:c2:29:8a:fc:90:92:ce: 22:99:08:80:c1:e4:30:0d:8c:b5:75:ac:54:9c:38:66:b8:4a: 9d:41:a2:1e:31:71:23:b0:d0:1b:06:a2:c5:50:d7:f9:97:d1: 49:71:d8:2e:25:f1:a1:da:14:3e:29:ab:34:06:a2:5f:23:e7: 32:59:5d:68:33:4e:8b:f0:6c:ff:93:35:05:fc:d0:90:2d:db: 80:2c:01:cd:db:d9:3c:78:6e:1a:8b:b6:5d:fc:f8:23:4e:ea: 3e:10:58:3c:0a:11:3b:fb:e0:72:25:ff:6c:d5:22:8a:6b:14: 0e:c4:c9:f2:17:01:0a:66:ea:c1:57:3a:b4:e2:3f:6d:37:1c: e1:52:43:a3:18:d8:9a:ce:7c:32:86:61:7a:25:23:58:70:52: f4:af:19:49:df:09:fe:64:e7:8d:cb:82:49:80:0b:95:77:53: 5c:c1:6c:a9:70:b5:58:2d:d9:95:af:8c:85:6b:71:56:5e:03: 75:41:04:7e:a8:25:8c:f9:07:e9:d7:3a:17:24:36:34:d0:a1: ee:0b:9b:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1 MUZGRkExQTQwHhcNMjYwOTA0MjM0MDEyWhcNMjYwOTExMjM0MDEyWjAYMRYwFAYD VQQDEw02YTliNTZkZC01NDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSInYYXN6B5QO6d7/ZPB9x/9CxhiuhUsPG5L8Ch/hO6Jx7/tIao3Wj4T+dTS JeFDP6gZpH843DBNZG/zEYCKWmHh8YHk0I/4Y1pF4MwuBj39pRZTJ1nHWlOC/OU/ ATT/kEaBTcfaqUT6g/G/dGmp9auRCOHcp9r0TqVmawo/FFtt8w5NEl54k4egbsaa XyLNbCuGH3xjXjyFfiOdsnUmZQjMgqcgquEMJeYvcwZhosMzR58VZyW+blVGmtAf IshNfwx2wkDr3vxTIPjPBVMa9u8xAT9wQ2IUL+K2EABoJce3d5jZ6deN+N5ZvbBX w5W4uuMC66NuLFkuF+KU8H68mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGiei15 9mcPv+xngNo8uTVI6uakMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6 NE1DVXR0cHFPTHRSX19vYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPhrCY1K6DaEhegb0FFdSBYfQ3b8YBRdGcdamhahDDimPcBMLFXsxJWDZUXUw wDrCKYr8kJLOIpkIgMHkMA2MtXWsVJw4ZrhKnUGiHjFxI7DQGwaixVDX+ZfRSXHY LiXxodoUPimrNAaiXyPnMlldaDNOi/Bs/5M1BfzQkC3bgCwBzdvZPHhuGou2Xfz4 I07qPhBYPAoRO/vgciX/bNUiimsUDsTJ8hcBCmbqwVc6tOI/bTcc4VJDoxjYms58 MoZheiUjWHBS9K8ZSd8J/mTnjcuCSYALlXdTXMFsqXC1WC3Zla+MhWtxVl4DdUEE fqgljPkH6dc6FyQ2NNCh7gubXw== -----END CERTIFICATE-----Generated at Sat Sep 5 06:32:46 2026 by rpki-client