$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft File: IlQptnO9Vfmh-WM1JYIlrig2FP4.mft (raw, json) Hash identifier: axpRrVX65xdA+VL0WKQi/n1+JkYhJ/JtBP6BvNLL9NA= Subject key identifier: BC:B2:B6:DB:22:F1:87:37:C6:3E:1B:5C:6C:F2:1B:5F:DB:E1:08:FE Authority key identifier: 22:54:29:B6:73:BD:55:F9:A1:F9:63:35:25:82:25:AE:28:36:14:FE Certificate issuer: /CN=A914C9DC/serialNumber=225429B673BD55F9A1F96335258225AE283614FE Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft Manifest number: 13 Signing time: Tue 25 Aug 2026 08:57:04 +0000 Manifest this update: Tue 25 Aug 2026 08:57:04 +0000 Manifest next update: Tue 01 Sep 2026 08:57:04 +0000 Files and hashes: 1: IlQptnO9Vfmh-WM1JYIlrig2FP4.crl (hash: IdqcIHvNpO9eNtWPZMA9JHHSVO35Kz26laOGDfE41u4=) 2: 08F83F5486B011F190BA97A774A30FBC.roa (hash: 5ZwP0uuzMGdPfnCK53ANk2dVgUQ0cGc0yUoY7rusTi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.crl rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C9DC, serialNumber=225429B673BD55F9A1F96335258225AE283614FE Validity Not Before: Aug 25 08:57:04 2026 GMT Not After : Sep 1 08:57:04 2026 GMT Subject: CN=6a8d58e0-7c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:77:b5:f4:ef:91:34:9b:9a:d4:82:0d:88:b6: 43:5c:26:a5:46:64:f8:1e:1e:48:32:c2:3a:e2:23: a4:c0:d5:4d:dd:0c:7f:39:e0:c2:c8:08:4d:90:74: 16:7a:14:ca:2f:f6:f4:d5:e1:55:07:56:f3:86:62: 40:c1:b2:88:47:c6:91:39:be:d9:99:fd:a2:33:89: 50:29:4d:3e:f3:f8:03:67:53:81:31:78:d5:d0:46: 79:39:e0:1f:fc:b5:02:0c:9c:8d:6b:f6:90:3e:71: d5:92:ac:09:f5:e0:92:34:c3:17:ef:da:4e:68:23: c6:6a:6e:57:57:0a:48:00:8b:4a:21:00:d5:9d:c5: 52:28:f8:40:0b:5e:93:b6:06:ea:27:54:a0:21:17: 39:2f:5e:66:c7:33:c9:87:d4:23:f6:a9:6a:ce:12: c3:e2:9b:0c:fd:07:d8:f1:97:50:0a:d6:71:d9:19: f6:55:c6:34:37:ea:bc:8f:84:f5:c7:ce:c4:64:e9: a7:60:93:51:5d:97:4f:85:a5:5a:10:7b:82:c7:86: 58:95:1e:51:2e:1c:0f:c5:33:58:4e:21:de:26:2f: f7:de:81:5c:34:09:0b:6c:78:f7:a9:c8:9b:58:1a: 79:86:7a:5b:b2:dd:1f:fe:30:8b:dc:e7:de:1b:e6: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B2:B6:DB:22:F1:87:37:C6:3E:1B:5C:6C:F2:1B:5F:DB:E1:08:FE X509v3 Authority Key Identifier: keyid:22:54:29:B6:73:BD:55:F9:A1:F9:63:35:25:82:25:AE:28:36:14:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:f1:7c:16:6d:03:aa:9f:f3:d8:d0:9a:42:40:69:7f:ff:84: cc:10:3d:db:df:08:17:9c:df:35:a4:31:e7:83:e3:ad:02:11: d9:03:91:b2:da:4e:a7:1e:04:bb:b9:a4:a3:dd:00:81:96:c2: bd:8e:95:cf:7e:21:2c:1f:88:e3:8d:a7:86:14:c5:a8:05:19: 55:bf:02:cf:99:e9:bb:16:c0:6f:85:ed:b3:17:58:0b:66:dc: 3d:a6:09:4b:e0:93:ee:57:3c:96:d0:bf:57:6a:82:9d:ba:d3: 11:c2:de:de:6b:b9:d8:8f:b9:9b:41:46:51:27:a8:af:a1:8a: 18:b5:02:3b:8e:4d:dd:cf:d2:e2:a8:a6:4c:cf:5b:e0:13:cc: d4:89:d6:02:19:46:1e:f2:34:f3:47:ef:1f:57:aa:6f:b3:cd: d2:d3:50:d9:21:5e:12:5b:4d:09:31:ad:27:3c:56:ad:87:0a: 60:d9:0e:30:9e:89:94:48:92:0d:85:bb:0c:8d:3d:cf:04:29: a2:1a:a5:c1:42:49:93:97:a5:9b:f5:cc:cb:a9:4f:db:51:a7: 4c:bb:c1:f5:38:18:a2:85:aa:7b:69:f7:19:f1:dd:b8:ea:4d: 25:24:dd:3e:03:28:28:b3:ba:9c:a4:b6:1e:d9:c1:67:7f:12: 26:4c:aa:c9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzlEQzExMC8GA1UEBRMoMjI1NDI5QjY3M0JENTVGOUExRjk2MzM1MjU4MjI1QUUy ODM2MTRGRTAeFw0yNjA4MjUwODU3MDRaFw0yNjA5MDEwODU3MDRaMBgxFjAUBgNV BAMTDTZhOGQ1OGUwLTdjMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVd7X075E0m5rUgg2ItkNcJqVGZPgeHkgywjriI6TA1U3dDH854MLICE2QdBZ6 FMov9vTV4VUHVvOGYkDBsohHxpE5vtmZ/aIziVApTT7z+ANnU4ExeNXQRnk54B/8 tQIMnI1r9pA+cdWSrAn14JI0wxfv2k5oI8ZqbldXCkgAi0ohANWdxVIo+EALXpO2 BuonVKAhFzkvXmbHM8mH1CP2qWrOEsPimwz9B9jxl1AK1nHZGfZVxjQ36ryPhPXH zsRk6adgk1Fdl0+FpVoQe4LHhliVHlEuHA/FM1hOId4mL/fegVw0CQtsePepyJtY GnmGeluy3R/+MIvc594b5hVnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvLK22yLx hzfGPhtcbPIbX9vhCP4wHwYDVR0jBBgwFoAUIlQptnO9Vfmh+WM1JYIlrig2FP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDOURDL0JERTRCMUQyODZB RjExRjE5QjI3QzQyQjc0QTMwRkJDL0lsUXB0bk85VmZtaC1XTTFKWUlscmlnMkZQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWxRcHRuTzlWZm1oLVdNMUpZSWxyaWcyRlA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD OURDL0JERTRCMUQyODZBRjExRjE5QjI3QzQyQjc0QTMwRkJDL0lsUXB0bk85VmZt aC1XTTFKWUlscmlnMkZQNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCz8XwWbQOqn/PY0JpCQGl//4TMED3b3wgXnN81pDHng+OtAhHZA5Gy2k6nHgS7 uaSj3QCBlsK9jpXPfiEsH4jjjaeGFMWoBRlVvwLPmem7FsBvhe2zF1gLZtw9pglL 4JPuVzyW0L9XaoKdutMRwt7ea7nYj7mbQUZRJ6ivoYoYtQI7jk3dz9LiqKZMz1vg E8zUidYCGUYe8jTzR+8fV6pvs83S01DZIV4SW00JMa0nPFathwpg2Q4wnomUSJIN hbsMjT3PBCmiGqXBQkmTl6Wb9czLqU/bUadMu8H1OBiihap7afcZ8d246k0lJN0+ Aygos7qcpLYe2cFnfxImTKrJ -----END CERTIFICATE-----Generated at Wed Aug 26 11:17:52 2026 by rpki-client