$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: QjgfS1qEuCM+RItMvZZi0Xyu7Yn2G2UK3p1ZhQv5JXM= Subject key identifier: E5:65:7F:80:D2:C5:9B:99:42:3E:DE:B5:F8:F3:68:BE:3C:25:39:26 Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: 014C Signing time: Sat 05 Sep 2026 05:07:03 +0000 Manifest this update: Sat 05 Sep 2026 05:07:02 +0000 Manifest next update: Sat 12 Sep 2026 05:07:02 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: YUucYqAP+kflxXzjD1MMVGBU6WGTk+07K0aJuX64TNY=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 04:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Sep 5 05:07:02 2026 GMT Not After : Sep 12 05:07:02 2026 GMT Subject: CN=6a9ba376-8d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:aa:6b:a3:9d:ba:4d:89:d7:0e:95:d6:50:38: e1:19:69:dc:52:f6:01:90:13:5f:6c:ad:71:13:d2: 8d:fa:ac:47:41:d1:ef:dc:61:e0:95:21:0f:55:96: 89:62:06:7e:5a:e9:48:ad:47:df:e4:8f:d4:d0:72: 12:1e:95:5b:50:bd:fa:be:92:33:9a:b9:b3:31:c4: 28:c1:a5:81:bd:61:2f:0d:8a:76:1c:50:7c:e0:0d: 8a:65:dd:44:37:82:b4:0a:d4:6d:40:8f:ee:19:05: de:6d:84:3e:6e:68:3e:5a:6d:95:f8:c7:d0:78:66: 95:85:e6:2d:40:f6:48:97:6e:1c:6d:df:19:76:3f: be:82:0e:3c:14:e1:18:05:51:e6:22:e3:1b:bd:f1: aa:11:e2:2e:46:3a:3d:4c:5e:36:a7:61:f1:19:72: cc:f0:5b:1e:e8:58:7c:3b:7e:c0:b2:48:09:13:70: e1:c5:6e:41:a7:ec:30:da:25:ae:d2:f1:73:a0:b9: 69:66:da:42:f6:04:3d:33:a0:df:d2:bd:3f:16:7e: 42:1d:93:b4:91:e8:94:12:d3:b9:62:7c:b2:b0:35: 97:e5:74:b2:a1:27:2c:9c:88:9d:3d:f8:c1:f3:56: 7a:c5:17:d4:1b:bf:21:f0:92:31:e7:d8:4b:cb:44: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:65:7F:80:D2:C5:9B:99:42:3E:DE:B5:F8:F3:68:BE:3C:25:39:26 X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3c:09:71:f8:87:85:95:9a:9d:09:b5:1d:3f:0a:2b:3c:d3: 97:a5:bd:69:2b:e2:69:07:f3:cb:02:10:37:b8:1c:bb:21:76: 1c:c4:97:06:ec:91:ed:5e:cb:e5:33:75:bf:69:fa:5f:51:a0: 23:c4:cd:c4:9d:1b:be:3c:fd:b7:01:8b:d8:5c:74:52:d5:6b: ce:94:30:07:82:4c:73:b0:61:f6:9b:50:81:85:d5:d5:7f:12: 2d:36:2e:52:4c:41:3f:cf:b4:08:3f:2c:7f:c4:c1:71:3c:09: 88:0c:f3:8c:4d:14:c2:b4:7f:e4:fa:ea:53:57:71:02:90:65: e6:23:c6:72:87:65:e9:39:a2:67:e6:aa:f4:c7:fe:35:e4:af: bf:9d:9b:43:a0:b3:40:46:19:27:3c:22:ac:73:5e:d0:b0:b3: 3f:84:5b:7b:99:e9:31:c7:d8:3f:90:fa:d2:29:50:94:24:99: 91:60:56:bb:6a:0a:bd:e0:0f:54:61:58:31:94:1d:58:d6:32: ad:37:ba:31:bb:7f:5a:b7:7f:36:7f:4d:59:78:32:61:86:62: bf:83:6a:65:95:01:be:fd:ce:8f:90:72:dc:f5:a0:31:d0:86: 1b:79:17:29:84:a0:b5:e8:5c:ed:86:64:86:b5:86:ed:fc:5f: f9:7c:61:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzQzcxMTAvBgNVBAUTKDg5M0FDNTc5MDE0MTU2MTg2QUVBRjUwMzRCQTBCNDky NkY5MkUzNzQwHhcNMjYwOTA1MDUwNzAyWhcNMjYwOTEyMDUwNzAyWjAYMRYwFAYD VQQDEw02YTliYTM3Ni04ZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Kpro526TYnXDpXWUDjhGWncUvYBkBNfbK1xE9KN+qxHQdHv3GHglSEPVZaJ YgZ+WulIrUff5I/U0HISHpVbUL36vpIzmrmzMcQowaWBvWEvDYp2HFB84A2KZd1E N4K0CtRtQI/uGQXebYQ+bmg+Wm2V+MfQeGaVheYtQPZIl24cbd8Zdj++gg48FOEY BVHmIuMbvfGqEeIuRjo9TF42p2HxGXLM8Fse6Fh8O37AskgJE3DhxW5Bp+ww2iWu 0vFzoLlpZtpC9gQ9M6Df0r0/Fn5CHZO0keiUEtO5YnyysDWX5XSyoScsnIidPfjB 81Z6xRfUG78h8JIx59hLy0QVjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVlf4DS xZuZQj7etfjzaL48JTkmMB8GA1UdIwQYMBaAFIk6xXkBQVYYaur1A0ugtJJvkuN0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84NjU4ODdCNkIy NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZoaHE2dlVEUzZDMGttLVM0 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTNDNy84NjU4ODdCNkIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZo aHE2dlVEUzZDMGttLVM0M1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqTwJcfiHhZWanQm1HT8KKzzTl6W9aSviaQfzywIQN7gcuyF2HMSXBuyR7V7L 5TN1v2n6X1GgI8TNxJ0bvjz9twGL2Fx0UtVrzpQwB4JMc7Bh9ptQgYXV1X8SLTYu UkxBP8+0CD8sf8TBcTwJiAzzjE0UwrR/5PrqU1dxApBl5iPGcodl6TmiZ+aq9Mf+ NeSvv52bQ6CzQEYZJzwirHNe0LCzP4Rbe5npMcfYP5D60ilQlCSZkWBWu2oKveAP VGFYMZQdWNYyrTe6Mbt/Wrd/Nn9NWXgyYYZiv4NqZZUBvv3Oj5By3PWgMdCGG3kX KYSgtehc7YZkhrWG7fxf+XxhiA== -----END CERTIFICATE-----Generated at Sat Sep 5 07:05:06 2026 by rpki-client