$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft File: IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft (raw, json) Hash identifier: K/1M/7XZwyghDdZpXJ3Gi1oOdwPfkD3hbroO1zVbcrQ= Subject key identifier: A3:EC:ED:68:3A:2E:2D:B5:B3:1E:36:B1:3A:3F:6C:B9:58:56:B2:31 Authority key identifier: 21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D Certificate issuer: /CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft Manifest number: 04FC Signing time: Tue 06 Oct 2026 23:48:24 +0000 Manifest this update: Tue 06 Oct 2026 23:48:23 +0000 Manifest next update: Tue 13 Oct 2026 23:48:23 +0000 Files and hashes: 1: IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl (hash: DC7o8GLVqYKwLUPOxtjvLLFm27OlSvYDQ3fe6SO88RA=) 2: E986DDEC979911ECB3B7CE39C4F9AE02.roa (hash: BfgbyrDUSPaDFbvmIvU+wE2M70H25WXoCbwhEXrv7bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 23:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152DE4, serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D Validity Not Before: Oct 6 23:48:23 2026 GMT Not After : Oct 13 23:48:23 2026 GMT Subject: CN=6ac588c8-50d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:74:9d:d7:4f:cc:c4:73:da:56:3f:56:00: 1a:b0:4d:11:f9:1e:5d:54:77:ee:7b:20:8b:2c:3f: d7:4d:34:31:8c:a5:4b:38:e1:65:73:c6:44:20:bf: 07:03:5f:36:a5:77:a3:0a:8b:7d:55:26:a5:cc:e1: f8:fb:7c:81:da:3e:80:c5:9b:4c:d7:eb:3a:84:3e: 7f:65:34:52:35:e6:30:22:46:3b:fb:62:8c:43:bc: f5:08:f2:d4:04:cf:90:e0:23:44:96:f2:81:48:b3: fc:83:9d:de:c3:94:65:14:e5:36:fa:fa:9c:9d:09: 02:b9:f6:ae:6f:89:85:a7:fd:06:df:8b:af:2f:3b: e6:2d:56:f4:01:25:07:d0:18:64:da:63:f4:c7:dc: ea:e0:75:e3:0d:45:56:0f:35:98:82:24:d7:e3:cd: ca:c6:e6:ff:8e:5e:d4:59:1b:b3:18:20:a1:7a:bd: 93:33:58:6c:61:65:86:6d:2a:4f:3b:bb:0a:50:19: cf:bb:f8:c4:29:67:6b:89:89:02:47:00:42:57:d9: 6f:a9:07:42:0f:9f:a1:ce:49:ef:ac:d5:df:ce:96: 27:7f:7b:2c:42:c1:a6:a9:fd:fc:65:ab:91:45:db: bf:23:fa:fe:d8:ba:4b:d5:be:28:1d:0a:c1:b1:bf: af:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EC:ED:68:3A:2E:2D:B5:B3:1E:36:B1:3A:3F:6C:B9:58:56:B2:31 X509v3 Authority Key Identifier: keyid:21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ce:eb:d9:c4:92:b0:7f:21:51:93:10:c9:a7:0c:6f:e1:ca: 98:21:fc:db:59:e8:be:4d:e1:be:71:7c:c3:52:34:88:ab:e4: 50:79:4f:c9:d7:2a:7c:f6:6b:5c:f8:91:e0:ef:07:2f:3a:45: 98:5e:e2:a4:0b:4e:38:cd:1c:bf:da:93:4c:5f:08:69:5e:38: bc:24:40:b1:90:3d:3e:73:0a:8f:df:99:dc:b5:69:77:29:1c: 94:f4:28:e0:b6:cf:f0:7f:72:94:2b:66:d0:b9:77:d4:83:9b: 3b:77:72:c9:72:60:9e:37:8b:28:71:5b:98:85:be:d1:20:b4: eb:79:b6:6c:4e:72:de:85:03:84:74:48:7a:ff:9f:d4:0e:8f: 5e:b6:8c:46:dc:35:04:4e:86:28:f4:ce:ab:c2:b5:22:ea:37: c7:53:0d:9a:c3:7b:aa:f5:79:a8:31:a0:9f:1c:8d:f5:3e:94: 4d:11:35:79:79:65:d1:97:d9:04:ed:f1:99:f0:60:48:ff:16: 0e:d0:4c:02:b7:9d:d3:d7:80:a4:30:66:87:8b:0a:b6:6e:dd: e1:74:ae:3c:3f:ac:2c:ca:f4:14:db:51:19:bf:70:49:b6:8a: b0:25:55:b5:74:e8:76:c7:ab:11:64:f5:a0:17:77:1c:aa:ee: ed:a6:9c:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJERTQxMTAvBgNVBAUTKDIxN0MzRDhCRUQwQjQwQzBGQjA4OEI1OUVFNkU2NUFF NkM2NjFGMEQwHhcNMjYxMDA2MjM0ODIzWhcNMjYxMDEzMjM0ODIzWjAYMRYwFAYD VQQDEw02YWM1ODhjOC01MGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx090nddPzMRz2lY/VgAasE0R+R5dVHfueyCLLD/XTTQxjKVLOOFlc8ZEIL8H A182pXejCot9VSalzOH4+3yB2j6AxZtM1+s6hD5/ZTRSNeYwIkY7+2KMQ7z1CPLU BM+Q4CNElvKBSLP8g53ew5RlFOU2+vqcnQkCufaub4mFp/0G34uvLzvmLVb0ASUH 0Bhk2mP0x9zq4HXjDUVWDzWYgiTX483Kxub/jl7UWRuzGCCher2TM1hsYWWGbSpP O7sKUBnPu/jEKWdriYkCRwBCV9lvqQdCD5+hzknvrNXfzpYnf3ssQsGmqf38ZauR Rdu/I/r+2LpL1b4oHQrBsb+vnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKPs7Wg6 Li21sx42sTo/bLlYVrIxMB8GA1UdIwQYMBaAFCF8PYvtC0DA+wiLWe5uZa5sZh8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkRFNC80Q0NDQzMzMjc5 MkExMUVDQjBDNTkxNjJDNEY5QUUwMi9JWHc5aS0wTFFNRDdDSXRaN201bHJteG1I dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYdzlpLTBMUU1EN0NJdFo3bTVscm14bUh3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkRFNC80Q0NDQzMzMjc5MkExMUVDQjBDNTkxNjJDNEY5QUUwMi9JWHc5aS0wTFFN RDdDSXRaN201bHJteG1IdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK87r2cSSsH8hUZMQyacMb+HKmCH821novk3hvnF8w1I0iKvkUHlPydcqfPZr XPiR4O8HLzpFmF7ipAtOOM0cv9qTTF8IaV44vCRAsZA9PnMKj9+Z3LVpdykclPQo 4LbP8H9ylCtm0Ll31IObO3dyyXJgnjeLKHFbmIW+0SC063m2bE5y3oUDhHRIev+f 1A6PXraMRtw1BE6GKPTOq8K1Iuo3x1MNmsN7qvV5qDGgnxyN9T6UTRE1eXll0ZfZ BO3xmfBgSP8WDtBMAred09eApDBmh4sKtm7d4XSuPD+sLMr0FNtRGb9wSbaKsCVV tXTodserEWT1oBd3HKru7aacYA== -----END CERTIFICATE-----Generated at Wed Oct 7 07:49:58 2026 by rpki-client