$ rpki-client -vvvf rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft File: IYcWgl28-N8zl0SFeJ5HubEAyyk.mft (raw, json) Hash identifier: iOP0zws4yhAj2vGFnlero521RqiPJEjDMQiZJo6rmnc= Subject key identifier: 58:9B:CA:4A:52:E8:AE:C8:F0:06:F2:60:C9:BF:1E:45:3D:99:7F:E1 Authority key identifier: 21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29 Certificate issuer: /CN=A91912D9/serialNumber=218716825DBCF8DF33974485789E47B9B100CB29 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft Manifest number: 10 Signing time: Thu 03 Sep 2026 09:20:26 +0000 Manifest this update: Thu 03 Sep 2026 09:20:26 +0000 Manifest next update: Thu 10 Sep 2026 09:20:26 +0000 Files and hashes: 1: IYcWgl28-N8zl0SFeJ5HubEAyyk.crl (hash: 4nzNlCqPJk9XZ8BHuRz+oM4lHnGs7mdrwDwG9zPCXyw=) 2: 9F7A4D22950711F196EC2BEB4C11F970.roa (hash: AwDH4G/opDWWbP+27EC7Iz7uE5B2rl5jR6Bdkfs1XUA=) 3: AFADDB38960011F18583530F5711F970.roa (hash: VW3xSm0BgFMfQUKFEQTwDrUx4dmpNnzjaeetEP1dFwE=) 4: 7913A610950711F18B35F6754C11F970.roa (hash: ibCdad19OwA0KSJlYJgV57pRzJi2qp5oXOlOgz/Gt88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 09:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912D9, serialNumber=218716825DBCF8DF33974485789E47B9B100CB29 Validity Not Before: Sep 3 09:20:26 2026 GMT Not After : Sep 10 09:20:26 2026 GMT Subject: CN=6a993bda-5d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:58:44:38:01:a1:73:d9:5b:e8:7b:59:f5: 41:98:fd:4d:c9:76:53:d7:3f:c4:72:ff:f9:b4:0a: 8d:24:79:68:d5:79:46:59:0e:c9:04:5c:26:05:40: f3:97:ac:43:3d:16:c4:b3:5c:ed:eb:8f:50:47:23: 96:77:2c:da:af:f4:47:08:66:69:ca:15:5c:e3:81: 0f:bb:37:06:47:cc:19:34:2f:8c:4f:99:05:67:66: 6e:d9:0f:6b:06:f0:7f:9b:40:70:5d:86:38:31:f0: aa:ea:83:ce:af:14:87:13:3f:7d:cb:fd:35:de:35: 60:83:05:dd:d4:85:1c:4e:1c:35:af:72:7d:e1:dd: 31:4f:d1:23:3d:7f:0c:1a:4f:d7:a5:83:ec:a8:6f: 66:dc:56:3f:46:be:d7:3f:b8:41:b1:04:c2:44:3c: 05:91:3c:e1:9e:69:80:81:10:bb:10:91:21:ff:91: 15:ba:95:c6:f0:b5:bb:81:eb:30:a3:e9:9e:5b:e2: 21:c9:9e:83:9d:a4:c5:77:aa:2c:3c:9b:36:5a:88: 2c:3e:c4:c4:23:34:b9:56:10:8f:86:00:ac:73:89: 19:68:ad:de:e2:47:3f:25:23:c0:46:57:c2:a0:61: 87:21:4b:28:13:35:91:ba:49:fe:14:f1:95:e7:15: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9B:CA:4A:52:E8:AE:C8:F0:06:F2:60:C9:BF:1E:45:3D:99:7F:E1 X509v3 Authority Key Identifier: keyid:21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:e5:7c:7c:57:ce:25:db:a2:b5:82:a9:99:0e:e6:bf:8d:59: 19:ab:bb:3e:0b:b7:cb:dd:b9:f8:ec:37:19:c3:d9:ee:ff:0e: 0c:e7:1f:72:41:2e:b5:d2:b6:9d:75:5f:40:1a:76:61:ef:eb: 65:91:69:a1:2b:6e:96:6a:f7:22:0a:f3:20:6c:24:6e:ac:0a: ef:05:50:39:6c:5c:66:2d:b3:2d:6a:2e:2e:6c:b4:d5:f2:25: 4a:7c:60:a9:8b:f2:c3:c8:52:31:7d:01:a6:e2:6c:27:21:8a: 45:bb:ec:32:fb:4e:c0:7a:df:4f:2c:62:03:47:9e:d4:e2:e3: a4:cf:7c:8f:05:7f:f2:2f:f0:b5:cb:b7:26:49:10:fd:07:70: da:d3:90:10:5b:c3:ba:69:c6:a6:83:05:7c:1b:54:18:7a:53: b6:c2:1a:9a:a8:1c:8b:4b:16:93:1c:97:43:17:7f:c2:95:e8: 02:cd:d5:5e:eb:d9:ee:32:1a:9e:e1:c4:55:6c:07:70:2c:a9: 99:16:ae:e4:8f:0c:55:6c:ab:86:96:3f:1e:ca:11:ab:ff:df: 8c:94:1c:8a:cd:ee:af:e8:6c:b4:27:54:d4:f6:65:95:1e:32: f7:9a:61:90:8a:eb:bd:77:23:4a:6e:bf:70:1c:e2:9d:85:3b: b4:2e:a0:fc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTJEOTExMC8GA1UEBRMoMjE4NzE2ODI1REJDRjhERjMzOTc0NDg1Nzg5RTQ3QjlC MTAwQ0IyOTAeFw0yNjA5MDMwOTIwMjZaFw0yNjA5MTAwOTIwMjZaMBgxFjAUBgNV BAMTDTZhOTkzYmRhLTVkOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCO1lhEOAGhc9lb6HtZ9UGY/U3JdlPXP8Ry//m0Co0keWjVeUZZDskEXCYFQPOX rEM9FsSzXO3rj1BHI5Z3LNqv9EcIZmnKFVzjgQ+7NwZHzBk0L4xPmQVnZm7ZD2sG 8H+bQHBdhjgx8Krqg86vFIcTP33L/TXeNWCDBd3UhRxOHDWvcn3h3TFP0SM9fwwa T9elg+yob2bcVj9Gvtc/uEGxBMJEPAWRPOGeaYCBELsQkSH/kRW6lcbwtbuB6zCj 6Z5b4iHJnoOdpMV3qiw8mzZaiCw+xMQjNLlWEI+GAKxziRlord7iRz8lI8BGV8Kg YYchSygTNZG6Sf4U8ZXnFVb/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWJvKSlLo rsjwBvJgyb8eRT2Zf+EwHwYDVR0jBBgwFoAUIYcWgl28+N8zl0SFeJ5HubEAyykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMkQ5L0NEQjFBN0NDOTUw NjExRjFBNDZBQjczNjRDMTFGOTcwL0lZY1dnbDI4LU44emwwU0ZlSjVIdWJFQXl5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVljV2dsMjgtTjh6bDBTRmVKNUh1YkVBeXlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MkQ5L0NEQjFBN0NDOTUwNjExRjFBNDZBQjczNjRDMTFGOTcwL0lZY1dnbDI4LU44 emwwU0ZlSjVIdWJFQXl5ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAV5Xx8V84l26K1gqmZDua/jVkZq7s+C7fL3bn47DcZw9nu/w4M5x9yQS610rad dV9AGnZh7+tlkWmhK26WavciCvMgbCRurArvBVA5bFxmLbMtai4ubLTV8iVKfGCp i/LDyFIxfQGm4mwnIYpFu+wy+07Aet9PLGIDR57U4uOkz3yPBX/yL/C1y7cmSRD9 B3Da05AQW8O6acamgwV8G1QYelO2whqaqByLSxaTHJdDF3/ClegCzdVe69nuMhqe 4cRVbAdwLKmZFq7kjwxVbKuGlj8eyhGr/9+MlByKze6v6Gy0J1TU9mWVHjL3mmGQ iuu9dyNKbr9wHOKdhTu0LqD8 -----END CERTIFICATE-----Generated at Fri Sep 4 22:59:01 2026 by rpki-client