$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft File: iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft (raw, json) Hash identifier: J3bUpgZ7BVhjzx3IpzhvITVGerKEmkE7hPOZySgBaeQ= Subject key identifier: C5:5D:0C:1B:6A:8A:83:5E:93:8A:FB:F4:6C:01:09:F1:50:A5:44:51 Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Certificate serial: 35A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft Manifest number: 3585 Signing time: Tue 18 Aug 2026 14:37:50 +0000 Manifest this update: Tue 18 Aug 2026 14:37:50 +0000 Manifest next update: Tue 25 Aug 2026 14:37:50 +0000 Files and hashes: 1: iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl (hash: HpEg+MDXBeRIfXY7gpnj3A3UMnwmaDc6exyPC6eTkLk=) 2: E4BA3CE8DFCE11EFBC4CD631C4F9AE02.roa (hash: gaWU+X+/mNK/B9cZjLPSBTco2OY87BQH5ky7affM8lQ=) 3: 075152B253CB11F09DA22358C4F9AE02.roa (hash: VxzUodkd5BwCYwN/SAUBovVstnmyYoCGYsD/9kzzeCs=) 4: A5A8DBE2865111F18C986E6391A30FBC.roa (hash: 96vGy7bp1vNNLVl0lRAFljn5SIt5ui19VMtj1FMFzNE=) 5: A997FC56865111F18C986E6391A30FBC.roa (hash: tkr9QszuSPa+E62pcGkCyeoDv7+eIjaCRBenHSUaRkA=) 6: E52708AADFCE11EFBC4CD631C4F9AE02.roa (hash: 7mdn7K/pFTz7Pj5x+lPuobQnpXFUmB94xMoVdDvQnh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 14:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13735 (0x35a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DA0, serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Validity Not Before: Aug 18 14:37:50 2026 GMT Not After : Aug 25 14:37:50 2026 GMT Subject: CN=6a846e3e-4907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:da:9e:47:2a:1b:85:7f:8b:10:da:a6:24:7e: a3:4e:fb:fb:c1:7c:95:ef:c7:6c:4f:84:1a:4a:a8: e4:2f:ba:53:ba:6d:38:9b:b5:a4:97:a2:88:b4:ba: 3b:21:5b:db:05:b6:fe:06:35:c2:e8:26:f1:2b:77: da:24:c2:e5:73:54:b1:00:19:f1:01:33:00:cd:cf: c0:25:83:4a:30:61:cc:07:c6:e0:07:4e:22:fa:1c: c9:9e:65:d6:c6:3a:1d:ff:85:3b:4c:39:0e:0a:05: 84:99:17:de:03:a0:52:52:e1:4b:02:7c:b1:95:14: 99:90:45:91:a8:ea:f2:48:83:29:a9:ec:dd:43:e5: fd:d5:2c:dc:74:c1:8b:08:1f:3b:d1:2f:44:43:62: 15:85:00:43:75:a3:e4:91:ce:ed:bc:0a:27:13:a5: 8d:f0:c8:65:f2:2a:c0:aa:8e:da:46:06:ec:8c:87: 3c:8c:04:3d:d3:9a:13:2c:d6:78:59:6e:eb:43:85: d0:ff:e0:91:70:8d:1a:a9:d2:f5:68:d3:83:bf:97: 8b:89:73:e6:32:c7:f6:a8:1a:d9:72:65:c5:f0:90: fc:9c:3f:24:43:c3:dc:7d:a6:b6:a9:ad:f5:2c:70: f6:9a:49:76:93:65:29:89:51:be:13:39:d9:55:22: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5D:0C:1B:6A:8A:83:5E:93:8A:FB:F4:6C:01:09:F1:50:A5:44:51 X509v3 Authority Key Identifier: keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:be:ea:d3:3c:1c:f6:c4:b4:60:d6:98:cb:42:84:e6:66:b2: 2f:93:5e:0f:07:e5:68:57:40:dd:18:c2:8f:ab:74:f5:97:13: 8a:eb:0f:16:c0:e5:e5:18:b7:9d:83:18:10:a4:a4:06:16:f4: a9:93:cc:03:76:b7:fa:03:67:c7:8c:0b:3c:45:b3:68:6e:c4: 65:16:fd:a3:c2:77:5c:0a:0a:a5:c5:aa:20:8a:71:7c:b7:a4: 93:24:b2:72:ba:4b:4f:13:3e:f9:89:4f:18:05:3c:a8:ca:10: 48:eb:d3:b1:f6:22:0b:b3:6b:d1:e4:8e:54:84:57:cb:7c:73: 68:71:2b:26:3b:fe:80:14:da:74:f2:95:1c:23:76:7b:25:e2: 1f:b2:2e:1e:48:71:8f:99:c5:74:6c:39:21:ec:69:94:b7:4d: d7:b2:de:59:9a:2b:0f:2f:2d:71:fd:8d:10:0c:fe:67:23:6e: 8a:82:b7:2a:81:5e:69:70:ec:85:92:6f:fa:b7:c3:9b:12:fa: 91:02:34:bf:9b:e8:c0:41:2e:13:90:da:5c:f4:78:32:60:8b: a8:14:bd:b8:91:06:30:39:ec:d5:e4:1a:f5:be:c4:3c:85:59: 36:83:b2:d6:52:e6:d9:a6:b8:24:c3:b4:f6:09:15:2e:7d:46: e1:89:6b:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQTAxMTAvBgNVBAUTKDg4ODdDRjZDRjUxMDJGMEZCNzEzRjRDNEExQkRFMzg5 NDgxRjFDNDQwHhcNMjYwODE4MTQzNzUwWhcNMjYwODI1MTQzNzUwWjAYMRYwFAYD VQQDEw02YTg0NmUzZS00OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NqeRyobhX+LENqmJH6jTvv7wXyV78dsT4QaSqjkL7pTum04m7Wkl6KItLo7 IVvbBbb+BjXC6CbxK3faJMLlc1SxABnxATMAzc/AJYNKMGHMB8bgB04i+hzJnmXW xjod/4U7TDkOCgWEmRfeA6BSUuFLAnyxlRSZkEWRqOrySIMpqezdQ+X91SzcdMGL CB870S9EQ2IVhQBDdaPkkc7tvAonE6WN8Mhl8irAqo7aRgbsjIc8jAQ905oTLNZ4 WW7rQ4XQ/+CRcI0aqdL1aNODv5eLiXPmMsf2qBrZcmXF8JD8nD8kQ8Pcfaa2qa31 LHD2mkl2k2UpiVG+EznZVSJanwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVdDBtq ioNek4r79GwBCfFQpURRMB8GA1UdIwQYMBaAFIiHz2z1EC8PtxP0xKG944lIHxxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBMC8zQTBEOTMxMDFE OEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3LTNFX1RFb2IzamlVZ2ZI RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lJZlBiUFVRTHctM0VfVEVvYjNqaVVnZkhFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBMC8zQTBEOTMxMDFEOEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3 LTNFX1RFb2IzamlVZ2ZIRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiL7q0zwc9sS0YNaYy0KE5mayL5NeDwflaFdA3RjCj6t09ZcTiusPFsDl5Ri3 nYMYEKSkBhb0qZPMA3a3+gNnx4wLPEWzaG7EZRb9o8J3XAoKpcWqIIpxfLekkySy crpLTxM++YlPGAU8qMoQSOvTsfYiC7Nr0eSOVIRXy3xzaHErJjv+gBTadPKVHCN2 eyXiH7IuHkhxj5nFdGw5IexplLdN17LeWZorDy8tcf2NEAz+ZyNuioK3KoFeaXDs hZJv+rfDmxL6kQI0v5vowEEuE5DaXPR4MmCLqBS9uJEGMDns1eQa9b7EPIVZNoOy 1lLm2aa4JMO09gkVLn1G4YlrQw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:51:13 2026 by rpki-client