$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft File: ie3CdDRVzlmv66wxSG3f6_fNB1E.mft (raw, json) Hash identifier: 01/eKBCVJGoqy7jcko6Q35jHyxUkZpyooAlEzDoW2Bw= Subject key identifier: 88:45:38:E6:67:10:B1:3F:78:DF:D9:4C:BD:6C:0B:48:5A:50:FD:28 Authority key identifier: 89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51 Certificate issuer: /CN=A9158A3E/serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft Manifest number: 1D Signing time: Sun 27 Sep 2026 09:31:47 +0000 Manifest this update: Sun 27 Sep 2026 09:31:47 +0000 Manifest next update: Sun 04 Oct 2026 09:31:47 +0000 Files and hashes: 1: ie3CdDRVzlmv66wxSG3f6_fNB1E.crl (hash: zVaqVVqPleW/Sfx+acbfwGQhM9ufbGpuknQcUcJgQXQ=) 2: 1C162B1892FF11F1ADF87C276D11F970.roa (hash: QNsu5mDAlK5ceLi1SvnsBhnHeCKn6PMBuIedIEG5/+o=) 3: HakCQQo3z8v2-5Gs_uA3Bayj2sA.asa (hash: TqF7VDLUvGn6swrLSWdyVb07AQkMUSMT51u5VOQs9aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158A3E, serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751 Validity Not Before: Sep 27 09:31:47 2026 GMT Not After : Oct 4 09:31:47 2026 GMT Subject: CN=6ab8e283-8a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:8b:13:7f:1a:81:84:13:41:6a:e4:42:6f: 3f:bc:c2:9f:fb:0f:dc:29:6a:4c:94:79:be:fd:8d: 47:72:96:16:39:ce:59:56:7c:a4:49:04:ff:a6:64: e8:0c:7d:8c:7d:e8:31:f4:52:a2:03:e0:06:21:36: 1d:29:01:01:ce:f1:0c:b2:77:08:fe:c9:65:64:f9: 44:0b:99:83:57:e1:e0:6b:8e:61:d1:ec:41:33:27: bf:6f:9f:ef:e1:84:8e:00:e6:84:37:d7:ce:fd:18: 3a:52:b4:cf:a8:7f:14:1b:37:6c:3e:42:7c:e8:a6: 9a:be:cb:a8:0b:ca:7e:a0:0f:72:1c:59:d0:9e:90: 66:66:e9:24:50:6f:4f:4a:dc:32:b7:56:ae:fb:93: ff:50:bd:70:63:a4:ac:11:9d:0f:33:f2:40:32:79: 8b:44:94:40:ef:95:1f:e8:26:06:bf:70:42:25:39: cb:2e:bd:ea:d9:04:b0:de:92:6e:7f:90:4d:85:56: 05:71:53:57:6c:e3:03:e7:a5:71:62:93:e4:2e:7e: 3b:d7:ce:b5:68:a1:98:ff:31:e8:75:4f:25:1f:ed: 9f:20:98:d8:d0:95:fd:7c:c0:be:d3:a8:21:9e:39: aa:31:33:8e:da:8d:84:fc:f1:74:ef:9e:39:53:01: 02:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:45:38:E6:67:10:B1:3F:78:DF:D9:4C:BD:6C:0B:48:5A:50:FD:28 X509v3 Authority Key Identifier: keyid:89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f3:4f:4a:e7:af:97:77:4b:45:c3:65:47:a3:7d:90:14:a5: 53:93:39:4b:19:9f:ea:0c:c9:b1:1d:77:25:e6:85:25:19:59: 40:dc:83:d1:a7:c0:d0:99:1c:ad:8c:a2:68:ac:83:00:de:50: e4:32:3d:0b:cf:7e:b0:09:5f:f6:74:b1:60:83:c8:7e:22:a5: fc:25:38:60:39:86:cb:89:fe:c7:8a:c5:0f:c6:0e:a2:44:6b: 06:86:b2:fe:5d:f2:ef:11:37:a7:55:b5:8d:39:0c:ca:28:d3: 60:bc:01:63:42:34:cc:63:e4:1d:1c:1f:79:a3:49:96:28:98: 54:e0:a4:f3:ce:f4:31:26:cc:73:39:e2:44:66:e2:1e:c0:fe: 41:ba:d4:d1:4e:d6:98:23:c1:a4:c1:85:8e:87:8d:d6:2e:5c: d9:43:90:e9:70:7b:f9:82:b3:fd:ed:09:a0:7c:be:f2:d5:4c: 75:11:6b:b3:85:dc:9f:e3:77:f9:2d:25:ca:6f:8f:c2:ce:1f: 3e:7c:50:fa:42:59:13:15:c4:43:a5:40:ea:e8:8b:4a:59:1d: 74:86:d5:d0:9c:39:c9:4e:d7:f4:cf:bf:81:c3:3d:de:5b:93: 5c:b5:0f:c6:e0:c2:0b:63:1e:d2:bf:13:af:9c:d2:be:ac:c0: c4:32:39:e9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEEzRTExMC8GA1UEBRMoODlFREMyNzQzNDU1Q0U1OUFGRUJBQzMxNDg2RERGRUJG N0NEMDc1MTAeFw0yNjA5MjcwOTMxNDdaFw0yNjEwMDQwOTMxNDdaMBgxFjAUBgNV BAMTDTZhYjhlMjgzLThhNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAZYsTfxqBhBNBauRCbz+8wp/7D9wpakyUeb79jUdylhY5zllWfKRJBP+mZOgM fYx96DH0UqID4AYhNh0pAQHO8Qyydwj+yWVk+UQLmYNX4eBrjmHR7EEzJ79vn+/h hI4A5oQ31879GDpStM+ofxQbN2w+Qnzoppq+y6gLyn6gD3IcWdCekGZm6SRQb09K 3DK3Vq77k/9QvXBjpKwRnQ8z8kAyeYtElEDvlR/oJga/cEIlOcsuverZBLDekm5/ kE2FVgVxU1ds4wPnpXFik+QufjvXzrVooZj/Meh1TyUf7Z8gmNjQlf18wL7TqCGe OaoxM47ajYT88XTvnjlTAQIjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiEU45mcQ sT9439lMvWwLSFpQ/SgwHwYDVR0jBBgwFoAUie3CdDRVzlmv66wxSG3f6/fNB1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4QTNFL0VENDg2ODkyOTJG RDExRjFCNzRFQjVFNzZDMTFGOTcwL2llM0NkRFJWemxtdjY2d3hTRzNmNl9mTkIx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWUzQ2REUlZ6bG12NjZ3eFNHM2Y2X2ZOQjFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 QTNFL0VENDg2ODkyOTJGRDExRjFCNzRFQjVFNzZDMTFGOTcwL2llM0NkRFJWemxt djY2d3hTRzNmNl9mTkIxRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+809K56+Xd0tFw2VHo32QFKVTkzlLGZ/qDMmxHXcl5oUlGVlA3IPRp8DQmRyt jKJorIMA3lDkMj0Lz36wCV/2dLFgg8h+IqX8JThgOYbLif7HisUPxg6iRGsGhrL+ XfLvETenVbWNOQzKKNNgvAFjQjTMY+QdHB95o0mWKJhU4KTzzvQxJsxzOeJEZuIe wP5ButTRTtaYI8GkwYWOh43WLlzZQ5DpcHv5grP97QmgfL7y1Ux1EWuzhdyf43f5 LSXKb4/Czh8+fFD6QlkTFcRDpUDq6ItKWR10htXQnDnJTtf0z7+Bwz3eW5NctQ/G 4MILYx7SvxOvnNK+rMDEMjnp -----END CERTIFICATE-----Generated at Mon Sep 28 00:11:22 2026 by rpki-client