$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json) Hash identifier: 3/hRnm7qHjs9q2iYrC466QJ7oPpfUUH7SECYmP7LahE= Subject key identifier: F9:54:B7:10:04:F0:F2:E9:46:F6:FC:4F:F9:84:12:9F:E2:3D:0F:11 Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Certificate serial: 35CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft Manifest number: 3598 Signing time: Fri 18 Sep 2026 14:19:35 +0000 Manifest this update: Fri 18 Sep 2026 14:19:34 +0000 Manifest next update: Fri 25 Sep 2026 14:19:34 +0000 Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: mRO0sumDO1ERaTb/+3fVzuy4EY9DFkhiKdkD/6CB35U=) 2: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: htjWNsJYRCHi02awtSfLaI7Ni5BaFwbvL87PQ+0VPg4=) 3: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: 2V0xaBVMH3qwSFGGeVHjMLvkAdaeXJP/NN3OOPBpG2A=) 4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: t1FUONQlvo1z1vAcNEflgs9l4NJNKngDzGvyUzZvKfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13771 (0x35cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Validity Not Before: Sep 18 14:19:34 2026 GMT Not After : Sep 25 14:19:34 2026 GMT Subject: CN=6aad4877-82e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:b3:ac:d1:72:9e:36:09:d7:00:88:4b:c5: 8c:e6:f7:cf:46:97:af:6c:cc:ea:b9:e7:1c:d4:3d: 61:aa:97:6e:b9:d5:b5:7b:b5:9c:68:23:14:f0:d5: b8:be:9f:92:c9:03:b6:4b:0e:92:56:13:be:9e:d4: f7:bb:14:ac:8d:0d:5f:05:d6:de:67:2b:d8:13:6c: a7:8a:3b:ca:e2:f8:26:02:ca:97:4b:df:d8:91:b1: 05:ff:d5:be:76:88:d1:65:2c:63:be:eb:52:fa:6e: 1c:28:55:e8:99:55:d0:ce:43:06:4a:41:4e:2c:f5: 77:e7:39:ed:07:b5:37:86:cc:32:0b:07:b3:60:58: a4:1d:a9:a4:e0:d1:8c:c5:e6:84:4b:b8:2e:56:25: 67:f0:a5:71:7e:85:28:67:a9:43:cd:dd:b6:52:fa: b8:22:4f:ca:9a:96:79:d1:40:fa:d0:75:ee:b7:91: ec:cb:03:4b:b2:a9:d3:d5:43:c5:0b:01:95:13:b4: ac:fc:85:36:8b:d9:c2:7a:e1:46:56:66:91:96:c0: 09:a0:d5:0d:ce:69:ee:ee:9f:68:27:79:53:37:80: a3:63:43:d0:00:09:a5:c2:37:52:44:57:db:11:b6: 9f:0f:70:49:5f:71:b3:c0:54:66:c7:94:61:43:f8: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:54:B7:10:04:F0:F2:E9:46:F6:FC:4F:F9:84:12:9F:E2:3D:0F:11 X509v3 Authority Key Identifier: keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:06:2d:fe:53:21:09:68:3b:73:13:94:f0:8b:34:47:80:42: 03:be:1e:fe:ba:5e:e0:72:51:5c:73:d7:bb:e9:f5:a9:7c:54: db:c8:6e:a6:29:74:49:b8:ee:36:ca:21:67:bc:89:f2:58:3d: 8c:1c:20:c7:c6:99:8d:a0:46:92:82:1d:39:54:e2:bf:31:0f: 30:bf:10:4a:f7:11:c8:a3:aa:a0:a2:d4:45:77:0b:3d:3e:60: 77:78:f4:c8:8c:45:0b:9e:ca:1a:89:ea:73:25:b0:81:29:ce: fb:9e:80:dc:25:ec:70:16:30:f8:30:f6:b0:52:35:43:fd:59: c9:4e:b3:92:d2:69:36:8c:ab:e7:24:c7:34:bf:47:78:83:9c: bd:1b:4c:24:80:da:ef:0a:30:74:e6:13:83:b5:97:43:86:b5: 8e:5d:0d:46:5c:85:f6:f8:eb:56:cb:20:69:0a:8f:a4:64:be: fa:c2:dd:4d:1d:d9:a2:f6:69:07:ac:36:89:3f:d1:54:f6:3d: 44:5e:fd:d8:dc:cb:f1:f3:7f:8a:9b:81:a9:bf:d7:b0:b2:ed: 0a:70:48:8d:54:b6:06:65:a1:d4:d7:55:d4:a3:13:a0:7b:50: fc:3e:1f:67:1f:b9:97:cb:0b:fb:01:8b:de:78:b9:f6:17:87: 75:48:75:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0 NkY0NDRENzIwHhcNMjYwOTE4MTQxOTM0WhcNMjYwOTI1MTQxOTM0WjAYMRYwFAYD VQQDEw02YWFkNDg3Ny04MmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGKzrNFynjYJ1wCIS8WM5vfPRpevbMzquecc1D1hqpduudW1e7WcaCMU8NW4 vp+SyQO2Sw6SVhO+ntT3uxSsjQ1fBdbeZyvYE2ynijvK4vgmAsqXS9/YkbEF/9W+ dojRZSxjvutS+m4cKFXomVXQzkMGSkFOLPV35zntB7U3hswyCwezYFikHamk4NGM xeaES7guViVn8KVxfoUoZ6lDzd22Uvq4Ik/KmpZ50UD60HXut5HsywNLsqnT1UPF CwGVE7Ss/IU2i9nCeuFGVmaRlsAJoNUNzmnu7p9oJ3lTN4CjY0PQAAmlwjdSRFfb EbafD3BJX3GzwFRmx5RhQ/hs/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlUtxAE 8PLpRvb8T/mEEp/iPQ8RMB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNN d05IRi04bzljbEZHOUVUWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtwYt/lMhCWg7cxOU8Is0R4BCA74e/rpe4HJRXHPXu+n1qXxU28hupil0Sbju NsohZ7yJ8lg9jBwgx8aZjaBGkoIdOVTivzEPML8QSvcRyKOqoKLURXcLPT5gd3j0 yIxFC57KGonqcyWwgSnO+56A3CXscBYw+DD2sFI1Q/1ZyU6zktJpNoyr5yTHNL9H eIOcvRtMJIDa7wowdOYTg7WXQ4a1jl0NRlyF9vjrVssgaQqPpGS++sLdTR3ZovZp B6w2iT/RVPY9RF792NzL8fN/ipuBqb/XsLLtCnBIjVS2BmWh1NdV1KMToHtQ/D4f Zx+5l8sL+wGL3ni59heHdUh1sw== -----END CERTIFICATE-----Generated at Sat Sep 19 15:08:41 2026 by rpki-client