$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: /LKYAp50OIJYJCf5TTVSPGBq6C08ZUNypGkIPE7ZtiI= Subject key identifier: 64:4A:02:BE:14:5E:16:12:18:4B:5B:A5:41:74:78:DF:96:FC:4B:E7 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2E9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2E74 Signing time: Tue 06 Oct 2026 15:29:45 +0000 Manifest this update: Tue 06 Oct 2026 15:29:44 +0000 Manifest next update: Tue 13 Oct 2026 15:29:44 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: 2retzqjjQAJUgOHx/gepWQcrZnlRO3pubDm0X8FUpn4=) 2: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: H04QBDV26pSEqU+6Gzyw1sm5OlSGepj/HF/CM4cYOU8=) 3: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: vFnVJbm4MytKKwLhxeVpxNuD1ipukSf0zI8pzazbsp8=) 4: F2AE85D6128E11F1BA652BAD3A3D8C67.roa (hash: XFZyAVomr+D6cpEwC0fdueBEAmEYpPj3c5fCswDRg+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11932 (0x2e9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Oct 6 15:29:44 2026 GMT Not After : Oct 13 15:29:44 2026 GMT Subject: CN=6ac513e9-6ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a7:2a:ce:cf:56:bf:e2:c7:6e:14:76:99:1f: 8a:e5:f5:4d:56:e9:f7:b6:67:29:b9:b7:d8:70:ff: 4a:e6:ea:ae:38:a8:06:59:cb:3a:75:bc:48:c9:09: be:13:a2:a1:d0:69:04:bb:e2:83:ec:86:39:81:8d: 6f:dd:37:cf:82:f8:e3:b8:39:78:8c:00:5a:c7:dd: dc:0f:9f:e9:ea:be:40:26:cb:f3:18:48:f9:ce:28: c5:ec:a8:14:92:a8:62:e3:72:c5:7d:6d:83:cf:70: 39:8d:c7:f6:7e:22:41:c6:c1:38:9f:a5:9b:14:81: 21:5e:2f:32:a5:57:3f:6e:65:62:6e:86:83:bb:91: d6:be:f9:f4:d8:44:c0:c1:9f:ad:86:ff:ca:68:09: d5:4a:6a:ea:e5:5b:c5:98:8e:14:ae:65:50:54:17: 95:41:7c:6b:e3:4c:0b:0e:a4:d5:2c:b6:fc:12:e8: e1:23:84:2e:31:ad:de:eb:94:4f:e8:2e:dd:6e:64: b8:c2:ed:94:d3:0b:a5:f9:39:3a:69:64:5b:85:d1: b3:01:28:4e:9a:4f:e9:b2:e8:0c:8e:08:af:05:c9: de:67:75:ed:44:20:4b:79:47:a5:f3:6b:8a:e4:a2: 95:fa:40:d7:8b:4d:82:85:a3:05:83:1f:70:5a:d3: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4A:02:BE:14:5E:16:12:18:4B:5B:A5:41:74:78:DF:96:FC:4B:E7 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:11:89:fb:e3:88:a8:03:78:fb:22:ca:e4:0c:ab:85:9a:bd: 4a:f1:6d:05:0a:85:64:51:b9:68:d9:61:b5:41:68:c4:18:50: bf:a7:e2:d7:7e:e0:ec:aa:55:09:f3:0d:c4:33:08:d9:05:f6: b8:fc:fa:9e:e8:4b:fa:5e:41:dd:82:bd:b8:fd:ca:13:e0:1b: 72:44:e8:5e:97:42:d4:f1:90:5e:3d:4f:d7:10:d3:54:9c:4f: 65:d6:9a:79:93:3f:0a:5d:d5:00:9f:8a:79:db:ad:e1:a1:50: 3d:c4:08:84:99:2b:7e:3c:ec:4d:30:6e:18:dc:8b:dd:9b:57: 21:8f:eb:fb:81:d0:45:3c:8e:7b:22:b7:2e:ed:12:b3:c4:78: 7a:58:85:50:21:00:30:3d:6f:bb:57:08:b7:99:a3:75:61:24: 27:ad:86:68:e9:6c:cb:78:b5:b7:94:e0:32:4a:cd:d9:c0:6c: 6b:45:69:05:21:1e:9f:a8:b9:96:12:3f:81:e7:6d:a6:dc:ec: 2c:46:e6:b3:5e:2c:3b:b7:fd:9d:ed:54:a7:63:6b:75:0c:4b: 7f:bd:ab:3b:de:70:ce:b9:9e:36:07:f3:42:53:02:b2:aa:0f: e5:b4:a0:4c:cb:50:c0:24:f5:fc:34:c6:e5:18:88:f7:61:fc: cd:b5:c6:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjYxMDA2MTUyOTQ0WhcNMjYxMDEzMTUyOTQ0WjAYMRYwFAYD VQQDEw02YWM1MTNlOS02YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qcqzs9Wv+LHbhR2mR+K5fVNVun3tmcpubfYcP9K5uquOKgGWcs6dbxIyQm+ E6Kh0GkEu+KD7IY5gY1v3TfPgvjjuDl4jABax93cD5/p6r5AJsvzGEj5zijF7KgU kqhi43LFfW2Dz3A5jcf2fiJBxsE4n6WbFIEhXi8ypVc/bmViboaDu5HWvvn02ETA wZ+thv/KaAnVSmrq5VvFmI4UrmVQVBeVQXxr40wLDqTVLLb8EujhI4QuMa3e65RP 6C7dbmS4wu2U0wul+Tk6aWRbhdGzAShOmk/psugMjgivBcneZ3XtRCBLeUel82uK 5KKV+kDXi02ChaMFgx9wWtPquwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRKAr4U XhYSGEtbpUF0eN+W/EvnMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhhGJ++OIqAN4+yLK5AyrhZq9SvFtBQqFZFG5aNlhtUFoxBhQv6fi137g7KpV CfMNxDMI2QX2uPz6nuhL+l5B3YK9uP3KE+AbckToXpdC1PGQXj1P1xDTVJxPZdaa eZM/Cl3VAJ+Kedut4aFQPcQIhJkrfjzsTTBuGNyL3ZtXIY/r+4HQRTyOeyK3Lu0S s8R4eliFUCEAMD1vu1cIt5mjdWEkJ62GaOlsy3i1t5TgMkrN2cBsa0VpBSEen6i5 lhI/gedtptzsLEbms14sO7f9ne1Up2NrdQxLf72rO95wzrmeNgfzQlMCsqoP5bSg TMtQwCT1/DTG5RiI92H8zbXGgw== -----END CERTIFICATE-----Generated at Thu Oct 8 08:49:11 2026 by rpki-client