$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: rcriZxhdKomMcuunreTfSr0KxM2lZnv0cGTRpjZD0TU= Subject key identifier: BB:CE:FF:B3:FF:0D:4F:24:F3:C6:E2:C5:E6:46:32:C8:D7:D5:A0:62 Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0D3E Signing time: Fri 02 Oct 2026 18:23:51 +0000 Manifest this update: Fri 02 Oct 2026 18:23:50 +0000 Manifest next update: Fri 09 Oct 2026 18:23:50 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: GPou3xr1wl2o0lcXOYytjQh+HNgGxIr5h2jK0kUnv70=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: lLzLMFvq75P6s11FcUbySa49RP0prDTXCNFomk88MZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Oct 2 18:23:50 2026 GMT Not After : Oct 9 18:23:50 2026 GMT Subject: CN=6abff6b6-25c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:00:19:95:22:46:18:d2:64:10:ef:41:29: 02:39:00:6d:1e:b4:a1:fb:3b:5f:0b:38:55:a8:34: ab:36:03:e9:2f:dc:a1:d6:44:03:74:36:78:49:56: 44:45:d0:c4:9e:f1:0e:06:13:95:0c:17:32:d3:d6: f8:da:7c:a0:83:b2:7e:53:88:a0:46:e0:23:57:5e: da:07:3b:44:02:fd:ca:9f:b4:f5:d7:64:dd:2e:24: 1f:a0:ff:5a:74:e1:cd:df:e1:ca:50:22:c3:1c:7e: 44:b8:f4:a3:66:d9:8c:f5:d4:44:87:65:f4:27:f1: 7d:5a:91:f4:a4:54:35:b3:fb:1d:84:95:c6:52:e7: df:41:e4:de:55:f2:f4:54:21:1d:13:98:f6:a5:27: 31:ba:c5:91:b4:cb:1c:b9:34:57:ef:b5:ea:24:06: 96:55:24:a6:d4:9f:63:63:42:40:28:f2:9f:26:fb: 6e:4a:09:a5:9d:61:55:ba:df:ae:c6:e9:52:34:f5: 7f:ea:ce:51:8e:95:65:21:0f:99:9c:9a:56:f2:56: eb:8b:8a:91:10:dd:00:02:a6:6a:86:e3:71:80:f4: f6:7e:da:32:a0:bf:14:d9:d4:8d:45:f0:eb:4d:76: 5d:cb:43:4e:56:53:63:9d:e1:a6:78:33:74:df:9c: 83:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CE:FF:B3:FF:0D:4F:24:F3:C6:E2:C5:E6:46:32:C8:D7:D5:A0:62 X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:0d:af:eb:d4:09:95:7e:10:29:83:95:c3:c0:39:45:16:9a: 72:2b:e3:6e:37:3d:ec:ac:1a:91:13:2c:23:8d:20:ab:1f:8b: ad:96:e2:30:3e:1f:11:47:4b:14:aa:19:51:7f:31:dd:68:d9: 4d:3b:e0:21:b3:6f:9b:a1:e1:cf:36:d5:d9:13:1c:2c:a2:07: dd:95:d0:dd:dd:a4:5c:4e:19:4f:c4:0b:de:2b:d3:68:e6:7f: 12:5f:54:d0:16:c3:89:4a:f8:00:9f:ca:51:86:ad:be:7c:06: 89:12:be:c4:2e:d5:fc:9c:e8:8b:40:d6:13:0d:f4:18:b0:69: 00:ec:f1:eb:d6:78:d1:24:dc:df:4b:b2:62:0c:7f:9e:a6:57: f2:28:83:eb:91:6d:04:40:0f:83:8d:45:9f:cf:f5:a9:55:d4: d9:a6:ec:2e:1b:6a:39:35:97:f9:60:2c:ed:3d:ef:5f:ea:62: fb:6e:f1:fa:22:6f:57:21:3b:16:13:a0:1e:4b:e8:ff:f7:e9: c0:dc:93:4b:69:f8:c8:a2:94:92:cf:41:c4:34:c4:76:f2:46: bb:38:4f:6f:c6:ca:62:72:32:99:8c:ff:40:24:f5:5a:7d:23: 1f:17:a9:0d:ad:88:ff:ab:a6:95:3a:bf:72:ad:6d:65:88:3c: 65:8f:af:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjYxMDAyMTgyMzUwWhcNMjYxMDA5MTgyMzUwWjAYMRYwFAYD VQQDEw02YWJmZjZiNi0yNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtoAGZUiRhjSZBDvQSkCOQBtHrSh+ztfCzhVqDSrNgPpL9yh1kQDdDZ4SVZE RdDEnvEOBhOVDBcy09b42nygg7J+U4igRuAjV17aBztEAv3Kn7T112TdLiQfoP9a dOHN3+HKUCLDHH5EuPSjZtmM9dREh2X0J/F9WpH0pFQ1s/sdhJXGUuffQeTeVfL0 VCEdE5j2pScxusWRtMscuTRX77XqJAaWVSSm1J9jY0JAKPKfJvtuSgmlnWFVut+u xulSNPV/6s5RjpVlIQ+ZnJpW8lbri4qREN0AAqZqhuNxgPT2ftoyoL8U2dSNRfDr TXZdy0NOVlNjneGmeDN035yDWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvO/7P/ DU8k88bixeZGMsjX1aBiMB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsw2v69QJlX4QKYOVw8A5RRaacivjbjc97KwakRMsI40gqx+LrZbiMD4fEUdL FKoZUX8x3WjZTTvgIbNvm6HhzzbV2RMcLKIH3ZXQ3d2kXE4ZT8QL3ivTaOZ/El9U 0BbDiUr4AJ/KUYatvnwGiRK+xC7V/Jzoi0DWEw30GLBpAOzx69Z40STc30uyYgx/ nqZX8iiD65FtBEAPg41Fn8/1qVXU2absLhtqOTWX+WAs7T3vX+pi+27x+iJvVyE7 FhOgHkvo//fpwNyTS2n4yKKUks9BxDTEdvJGuzhPb8bKYnIymYz/QCT1Wn0jHxep Da2I/6umlTq/cq1tZYg8ZY+vfA== -----END CERTIFICATE-----Generated at Sun Oct 4 07:19:04 2026 by rpki-client