$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft File: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft (raw, json) Hash identifier: R2uVTU3Nk+6cwScKXmJqik6MNr8WZdFcQ5PgzyEMLJI= Subject key identifier: C7:9E:80:B6:33:AA:66:9A:BC:21:4D:03:14:FE:1C:4F:40:0B:0B:75 Authority key identifier: 23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB Certificate issuer: /CN=A9122796/serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft Manifest number: 23 Signing time: Sun 25 Oct 2026 09:14:50 +0000 Manifest this update: Sun 25 Oct 2026 09:14:49 +0000 Manifest next update: Sun 01 Nov 2026 09:14:49 +0000 Files and hashes: 1: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl (hash: wYuo9Jjy2aTzgxcTIntemtaJMisgXKHdjijqCPFJ7iM=) 2: B6E9F4E89E0411F192F8ACA34A11F970.roa (hash: i+mz8RKuF8p3hv1YLSt70vMBBM5Cu/pBQuz04gTb5ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122796, serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB Validity Not Before: Oct 25 09:14:49 2026 GMT Not After : Nov 1 09:14:49 2026 GMT Subject: CN=6addc889-24f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:03:f4:7a:c4:47:12:67:e9:3c:30:39:97: e1:e2:ea:ae:42:ce:7b:d4:bc:bd:49:c0:ef:7d:c2: aa:bc:83:0f:9c:0d:13:a4:be:79:f5:11:a5:b6:f2: 05:b4:1c:3a:ea:de:34:a0:f8:bc:b0:8b:7f:d5:88: f1:36:9b:12:fa:a4:2f:d9:95:1c:b8:e9:08:71:de: c1:bd:65:7f:6b:22:ce:6d:77:a5:3a:0f:3f:ca:5a: 6c:27:67:1e:47:de:7f:8b:c9:13:26:be:9f:12:92: 59:4d:90:42:eb:c2:0f:ed:a8:c5:a3:b0:74:59:3a: fe:52:69:c5:73:f8:7e:85:9d:b4:f8:76:17:7a:ea: 5f:18:df:43:38:45:e0:23:7a:e9:cd:e8:34:6e:0f: d9:74:bd:e2:24:83:e2:6a:7c:69:3f:e2:f7:b0:2b: e7:7c:e1:6a:74:e9:36:fd:42:b3:33:92:4c:3c:5e: 96:bd:6a:ab:1e:27:8d:a4:8e:72:b8:2f:c9:79:59: 2e:5c:81:6d:2e:fd:8f:1c:e5:76:ad:f8:fc:9a:3a: 92:bb:00:a8:53:35:23:b3:89:db:d5:37:37:1f:db: 74:33:0a:4b:c8:93:d0:00:78:77:e2:36:70:4b:ea: 76:34:2f:df:74:5b:a1:1c:87:ea:87:61:f3:f9:09: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9E:80:B6:33:AA:66:9A:BC:21:4D:03:14:FE:1C:4F:40:0B:0B:75 X509v3 Authority Key Identifier: keyid:23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:4d:18:5a:81:60:b2:20:6c:06:ff:98:48:be:a1:da:c1:f1: 4b:ef:f8:f4:fb:18:45:a2:07:83:8b:85:64:db:2f:72:21:a9: 1b:13:ef:30:b7:94:30:82:42:75:1c:bb:8e:0a:24:8b:49:b5: 4e:8b:b8:f4:6f:72:97:be:70:3a:25:91:d9:5e:6d:e7:e0:16: 62:49:4b:16:8f:3f:85:87:3d:b2:a1:cb:c1:92:e0:21:43:29: f7:6d:d8:c6:03:82:3e:a4:0d:d5:50:d7:c9:37:89:0b:e2:fc: 43:89:a9:7f:dc:61:76:95:cf:d8:c3:77:46:e0:1c:e5:55:76: 69:e9:9d:71:2c:bb:64:7e:37:2b:1c:02:e0:cf:b7:76:7d:71: 7d:c6:9f:40:df:e5:50:30:ea:61:c8:cf:e6:13:0b:7a:3d:93: 38:2b:78:ac:e0:3d:2e:76:1d:8e:63:71:77:fd:71:b0:45:a3: cb:89:73:f8:e8:bb:12:fd:08:98:4e:b9:8e:53:87:dd:03:08: fd:ee:1a:7d:38:13:75:46:5c:fa:37:04:39:69:12:bb:cb:54: 49:c0:5e:9d:1c:15:fa:53:74:6a:df:8a:e7:07:ed:c9:99:79: 1f:c3:c7:98:59:ab:4f:08:7a:9c:b7:21:e4:8b:35:e2:93:42: 0d:a1:88:7b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Mjc5NjExMC8GA1UEBRMoMjM5N0E5RDU5ODM2ODM2MjZCQUQyQzE0N0ZCN0QzM0M0 OUJEQzZCQjAeFw0yNjEwMjUwOTE0NDlaFw0yNjExMDEwOTE0NDlaMBgxFjAUBgNV BAMTDTZhZGRjODg5LTI0ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMTAP0esRHEmfpPDA5l+Hi6q5CznvUvL1JwO99wqq8gw+cDROkvnn1EaW28gW0 HDrq3jSg+Lywi3/ViPE2mxL6pC/ZlRy46Qhx3sG9ZX9rIs5td6U6Dz/KWmwnZx5H 3n+LyRMmvp8SkllNkELrwg/tqMWjsHRZOv5SacVz+H6FnbT4dhd66l8Y30M4ReAj eunN6DRuD9l0veIkg+JqfGk/4vewK+d84Wp06Tb9QrMzkkw8Xpa9aqseJ42kjnK4 L8l5WS5cgW0u/Y8c5Xat+PyaOpK7AKhTNSOzidvVNzcf23QzCkvIk9AAeHfiNnBL 6nY0L990W6Ech+qHYfP5CbdnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx56AtjOq Zpq8IU0DFP4cT0ALC3UwHwYDVR0jBBgwFoAUI5ep1Zg2g2JrrSwUf7fTPEm9xrsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyNzk2L0JEQUI1MTEyOUUw MTExRjFBMUM5Q0M1ODQ4MTFGOTcwL0k1ZXAxWmcyZzJKcnJTd1VmN2ZUUEVtOXhy cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTVlcDFaZzJnMkpyclN3VWY3ZlRQRW05eHJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Nzk2L0JEQUI1MTEyOUUwMTExRjFBMUM5Q0M1ODQ4MTFGOTcwL0k1ZXAxWmcyZzJK cnJTd1VmN2ZUUEVtOXhycy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCTTRhagWCyIGwG/5hIvqHawfFL7/j0+xhFogeDi4Vk2y9yIakbE+8wt5QwgkJ1 HLuOCiSLSbVOi7j0b3KXvnA6JZHZXm3n4BZiSUsWjz+Fhz2yocvBkuAhQyn3bdjG A4I+pA3VUNfJN4kL4vxDial/3GF2lc/Yw3dG4BzlVXZp6Z1xLLtkfjcrHALgz7d2 fXF9xp9A3+VQMOphyM/mEwt6PZM4K3is4D0udh2OY3F3/XGwRaPLiXP46LsS/QiY TrmOU4fdAwj97hp9OBN1Rlz6NwQ5aRK7y1RJwF6dHBX6U3Rq34rnB+3JmXkfw8eY WatPCHqctyHkizXik0INoYh7 -----END CERTIFICATE-----Generated at Sun Oct 25 16:15:07 2026 by rpki-client