$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft File: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft (raw, json) Hash identifier: 8N0tGrzik33DUUqhsD3xZp/TQKPB/kst1Tzl0nxELiM= Subject key identifier: AD:0A:56:99:9E:A1:74:08:60:4A:86:7D:EC:74:F2:70:1F:1F:B8:01 Authority key identifier: 22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39 Certificate issuer: /CN=A9197B7B/serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft Manifest number: 8D Signing time: Sun 25 Oct 2026 07:55:48 +0000 Manifest this update: Sun 25 Oct 2026 07:55:47 +0000 Manifest next update: Sun 01 Nov 2026 07:55:47 +0000 Files and hashes: 1: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl (hash: GUOrVNNYEo4x3oDg0wogETj3x7C50+wDdTSfEUP/cTE=) 2: 153BBC22FBEC11F094C0A6516D6F56BC.roa (hash: Fa+JKx4M6Yd97D4JU6xtHSXgVRciDGQpK7A4XgrvaWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 07:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197B7B, serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39 Validity Not Before: Oct 25 07:55:47 2026 GMT Not After : Nov 1 07:55:47 2026 GMT Subject: CN=6addb603-5b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:7a:20:d6:5c:71:03:7b:9a:e4:ca:56:8c: e1:ad:a3:b8:45:dc:31:6d:23:bb:ed:c4:e5:50:f5: 8d:ac:26:86:64:47:78:5e:f2:b8:5f:ca:8a:1f:44: c9:cd:fe:8d:e6:a9:e1:82:75:17:67:7e:59:da:aa: 03:10:f7:ee:c3:95:5a:12:df:f6:39:5a:d9:8b:dd: df:d9:9c:b6:b8:cb:ab:dc:36:b7:05:34:a2:2d:35: f7:34:30:ee:0a:02:d2:a9:7c:31:93:51:0d:fc:0b: 82:66:c1:a5:e2:0e:5d:41:75:20:fb:36:56:e9:ac: 7d:b1:6a:8b:34:7b:96:4a:fb:cc:16:ed:14:2f:25: 3f:83:b6:26:7d:15:14:e3:be:8c:64:69:47:84:17: be:7c:b9:a5:fa:63:ba:b9:22:e2:52:b1:7f:4d:64: 58:1c:7b:56:a4:c4:80:5d:96:fb:61:9b:12:70:09: 2a:fd:d5:21:51:b8:45:a7:63:17:6d:a1:e8:0e:77: 9b:4d:5c:f6:62:9c:71:73:1f:4b:8d:e5:8d:d7:ce: 4f:46:1c:f7:57:35:7d:3b:b7:2a:1f:09:8f:06:79: 69:25:26:4d:38:4e:fd:50:dd:ae:36:d0:09:fb:07: 7f:4e:bb:88:82:28:be:47:0b:75:b2:4b:de:3b:2e: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0A:56:99:9E:A1:74:08:60:4A:86:7D:EC:74:F2:70:1F:1F:B8:01 X509v3 Authority Key Identifier: keyid:22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f9:b1:b6:77:9c:fd:e2:b5:00:67:e7:e5:af:5b:fe:1c:79: 51:1f:d3:91:47:a4:fe:5e:62:a6:8a:f2:2b:3f:4f:78:05:14: 33:49:05:d5:14:62:30:c2:4d:ce:8a:77:bc:78:5f:be:99:07: c9:d6:06:10:f4:6f:3e:f8:2e:1e:5a:90:10:5a:02:05:09:a1: 23:7c:af:af:2e:bb:6a:d6:90:59:5f:c8:84:aa:c1:1e:50:8d: e6:d5:94:8d:8b:73:e0:ec:7c:c0:21:54:12:12:0c:8c:62:35: 55:d8:e5:e9:ba:0a:24:9b:8a:de:a6:62:6b:2f:d3:a7:0f:95: cf:23:c6:51:f4:7d:48:ff:30:9f:52:a0:32:5e:27:8d:b2:0c: e1:d8:3f:da:bc:8f:b6:e9:09:4f:dc:f2:39:c3:10:84:a3:d8: bc:b2:d1:78:c3:f8:34:2f:06:22:07:b4:a1:c0:a2:da:c2:f1: 2b:93:35:7b:48:df:a2:7a:fd:96:8b:ca:b6:f7:fc:37:ba:a5: 5d:2e:9d:91:48:71:be:c3:bd:08:4a:06:5e:04:f3:0b:cc:67: 42:98:17:4b:5d:54:62:6d:14:62:51:af:b2:26:9e:d7:38:cd: 0b:89:a4:47:b8:59:3e:ff:05:66:00:a2:e7:ec:6a:e0:e3:53: b0:df:4f:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdCN0IxMTAvBgNVBAUTKDIyNTZCODJCMEE2RURDNjI2OEEzQ0M5MEFDQzA1Qzc0 RjExNENFMzkwHhcNMjYxMDI1MDc1NTQ3WhcNMjYxMTAxMDc1NTQ3WjAYMRYwFAYD VQQDEw02YWRkYjYwMy01YjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIp6INZccQN7muTKVozhraO4RdwxbSO77cTlUPWNrCaGZEd4XvK4X8qKH0TJ zf6N5qnhgnUXZ35Z2qoDEPfuw5VaEt/2OVrZi93f2Zy2uMur3Da3BTSiLTX3NDDu CgLSqXwxk1EN/AuCZsGl4g5dQXUg+zZW6ax9sWqLNHuWSvvMFu0ULyU/g7YmfRUU 476MZGlHhBe+fLml+mO6uSLiUrF/TWRYHHtWpMSAXZb7YZsScAkq/dUhUbhFp2MX baHoDnebTVz2Ypxxcx9LjeWN185PRhz3VzV9O7cqHwmPBnlpJSZNOE79UN2uNtAJ +wd/TruIgii+Rwt1skveOy4ETQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0KVpme oXQIYEqGfex08nAfH7gBMB8GA1UdIwQYMBaAFCJWuCsKbtxiaKPMkKzAXHTxFM45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0I3Qi80Q0IzQTM4NEZC RTkxMUYwOTEyRkU2MUM2RDZGNTZCQy9JbGE0S3dwdTNHSm9vOHlRck1CY2RQRVV6 amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0lsYTRLd3B1M0dKb284eVFyTUJjZFBFVXpqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0I3Qi80Q0IzQTM4NEZCRTkxMUYwOTEyRkU2MUM2RDZGNTZCQy9JbGE0S3dwdTNH Sm9vOHlRck1CY2RQRVV6amsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnfmxtnec/eK1AGfn5a9b/hx5UR/TkUek/l5iporyKz9PeAUUM0kF1RRiMMJN zop3vHhfvpkHydYGEPRvPvguHlqQEFoCBQmhI3yvry67ataQWV/IhKrBHlCN5tWU jYtz4Ox8wCFUEhIMjGI1Vdjl6boKJJuK3qZiay/Tpw+VzyPGUfR9SP8wn1KgMl4n jbIM4dg/2ryPtukJT9zyOcMQhKPYvLLReMP4NC8GIge0ocCi2sLxK5M1e0jfonr9 lovKtvf8N7qlXS6dkUhxvsO9CEoGXgTzC8xnQpgXS11UYm0UYlGvsiae1zjNC4mk R7hZPv8FZgCi5+xq4ONTsN9PHg== -----END CERTIFICATE-----Generated at Mon Oct 26 04:51:53 2026 by rpki-client