$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft File: iWOqihtflIfiJtJG8ORMlgyPKpg.mft (raw, json) Hash identifier: s3rx7IXfQSbnTc1IIHjYP0BRSEokJfEmmSjg4NuGqeo= Subject key identifier: 93:C9:3E:8E:6F:77:7F:1F:F8:23:44:26:D8:C8:96:FD:1C:CA:CA:51 Authority key identifier: 89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98 Certificate issuer: /CN=A9145CAB/serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft Manifest number: 76 Signing time: Sun 25 Oct 2026 08:17:10 +0000 Manifest this update: Sun 25 Oct 2026 08:17:09 +0000 Manifest next update: Sun 01 Nov 2026 08:17:09 +0000 Files and hashes: 1: iWOqihtflIfiJtJG8ORMlgyPKpg.crl (hash: IRuc2TeQ90UFPer0eUaIbIlCDZyTtmJ22B/Zm4vjfio=) 2: F5FB1528251811F19BF603D3C0833773.roa (hash: TLG1k3Q91kNnW2jkhy++pzacaj+shkC+zTdEO1lOQC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 08:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145CAB, serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98 Validity Not Before: Oct 25 08:17:09 2026 GMT Not After : Nov 1 08:17:09 2026 GMT Subject: CN=6addbb06-9bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:1b:05:9c:48:89:67:2b:21:48:83:4c:71: a4:6b:de:47:fb:97:17:b1:77:56:e0:6c:94:a0:3f: 58:44:23:ab:fd:7d:6c:8d:be:69:0f:04:43:57:be: c6:74:10:41:3a:1a:64:e4:24:fb:9e:c3:63:6f:7e: 20:82:81:12:23:74:12:e9:4f:b8:7c:fe:d4:db:9d: 67:95:6c:55:79:be:54:2c:3d:cb:65:cb:a6:14:df: 9f:b3:66:48:5d:98:25:aa:c4:ee:79:fb:fd:61:eb: f9:c7:40:1b:3d:ab:bc:ea:de:c6:cd:f4:11:32:01: 8b:5e:80:3b:fe:cc:f1:9e:1f:f8:4f:79:25:6a:ed: 8b:4d:6f:f5:16:ef:ff:13:bc:42:23:92:e6:a5:be: 3f:c3:f1:29:18:eb:5a:fe:a0:86:d1:d7:5f:d9:4a: f3:20:5e:52:b4:93:7f:bd:f5:6b:8b:10:3a:73:7a: d7:a7:83:12:b5:df:fa:83:5d:79:82:41:94:d0:83: 53:6b:14:1f:e0:2c:30:bf:a4:15:9e:77:25:fb:62: d6:2f:50:d8:b9:34:e8:04:3f:8b:d6:51:45:dc:cc: ca:d5:f6:db:0b:4c:5e:1f:a9:17:92:4f:79:68:5d: c5:79:ad:77:36:2d:bc:85:99:bb:7a:55:cc:c2:4d: a4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C9:3E:8E:6F:77:7F:1F:F8:23:44:26:D8:C8:96:FD:1C:CA:CA:51 X509v3 Authority Key Identifier: keyid:89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:40:a7:d1:79:0b:b3:7b:ca:d6:4b:39:16:d6:54:01:d4:de: 49:83:9a:6f:20:f5:32:fc:39:16:1a:82:69:31:ab:3c:b3:2e: a5:ea:26:8e:2e:c8:d9:7f:9f:78:88:5f:0e:67:6d:89:81:44: f1:e7:41:6f:6e:09:d4:b5:8b:53:a7:f4:83:cd:d2:c5:aa:80: 0e:90:4a:03:e4:40:c5:08:92:c9:70:4e:ca:b4:bb:7d:bc:67: a6:6d:8d:21:86:17:9b:fc:bb:8a:eb:77:b2:71:cd:66:7d:95: f7:4a:d3:e6:d7:a9:71:70:e9:25:4a:6e:43:21:e3:fc:88:65: 46:dd:d2:6b:0d:25:e4:7e:43:19:8d:3c:89:c0:08:15:64:37: 65:c8:df:74:53:35:75:d2:e5:c5:e7:6a:39:bf:3b:bd:32:32: 9e:34:a1:c0:e0:18:b8:24:78:b9:a0:05:a1:8a:74:90:02:10: 37:ee:f3:34:bb:7a:7e:ea:cc:a9:b4:42:7e:24:4a:fd:6b:81: dc:73:b4:13:4b:0c:31:33:29:a0:a3:60:63:32:f7:86:50:02: 62:3e:95:1d:13:3b:9a:74:da:72:04:21:e7:a9:a3:02:7b:1d: 8b:37:4e:08:27:18:94:37:d6:a3:a1:d5:08:63:d0:b8:98:18: 52:da:1b:ee -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUNBQjExMC8GA1UEBRMoODk2M0FBOEExQjVGOTQ4N0UyMjZEMjQ2RjBFNDRDOTYw QzhGMkE5ODAeFw0yNjEwMjUwODE3MDlaFw0yNjExMDEwODE3MDlaMBgxFjAUBgNV BAMTDTZhZGRiYjA2LTliY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCfRsFnEiJZyshSINMcaRr3kf7lxexd1bgbJSgP1hEI6v9fWyNvmkPBENXvsZ0 EEE6GmTkJPuew2NvfiCCgRIjdBLpT7h8/tTbnWeVbFV5vlQsPctly6YU35+zZkhd mCWqxO55+/1h6/nHQBs9q7zq3sbN9BEyAYtegDv+zPGeH/hPeSVq7YtNb/UW7/8T vEIjkualvj/D8SkY61r+oIbR11/ZSvMgXlK0k3+99WuLEDpzetengxK13/qDXXmC QZTQg1NrFB/gLDC/pBWedyX7YtYvUNi5NOgEP4vWUUXczMrV9tsLTF4fqReST3lo XcV5rXc2LbyFmbt6VczCTaTfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUk8k+jm93 fx/4I0Qm2MiW/RzKylEwHwYDVR0jBBgwFoAUiWOqihtflIfiJtJG8ORMlgyPKpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1Q0FCLzJFNUM0NUM0MjRD QzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElmaUp0Skc4T1JNbGd5UEtw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVdPcWlodGZsSWZpSnRKRzhPUk1sZ3lQS3BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 Q0FCLzJFNUM0NUM0MjRDQzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElm aUp0Skc4T1JNbGd5UEtwZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQATQKfReQuze8rWSzkW1lQB1N5Jg5pvIPUy/DkWGoJpMas8sy6l6iaOLsjZf594 iF8OZ22JgUTx50FvbgnUtYtTp/SDzdLFqoAOkEoD5EDFCJLJcE7KtLt9vGembY0h hheb/LuK63eycc1mfZX3StPm16lxcOklSm5DIeP8iGVG3dJrDSXkfkMZjTyJwAgV ZDdlyN90UzV10uXF52o5vzu9MjKeNKHA4Bi4JHi5oAWhinSQAhA37vM0u3p+6syp tEJ+JEr9a4Hcc7QTSwwxMymgo2BjMveGUAJiPpUdEzuadNpyBCHnqaMCex2LN04I JxiUN9ajodUIY9C4mBhS2hvu -----END CERTIFICATE-----Generated at Sun Oct 25 19:52:40 2026 by rpki-client