$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: HI/xHPMCPWP5LzRT9Wfo4lnlbjmxnUVqyJ28ElneHLs= Subject key identifier: DB:8A:D8:C7:C7:03:1A:ED:B9:A3:6F:A4:C7:16:ED:C1:F4:57:0A:23 Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 05E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 05CC Signing time: Mon 31 Aug 2026 22:58:48 +0000 Manifest this update: Mon 31 Aug 2026 22:58:48 +0000 Manifest next update: Mon 07 Sep 2026 22:58:48 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: 7ew4XWHx8crZf/exnReHsCE7Ki3k7IeYfsdys0awEv8=) 2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: +WJvFTxAonY5wxNQGiwRI3ZI8HmyeaPv5VFRCqzMfWE=) 3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: Axsa0uyuPTjbrC5wnPZ4BHAIMgaPThG3uMiLY0ziBzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 22:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1504 (0x5e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Aug 31 22:58:48 2026 GMT Not After : Sep 7 22:58:48 2026 GMT Subject: CN=6a960728-208d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e4:f8:dd:28:0f:97:f4:c0:e0:f6:d0:da:27: 32:52:d0:b6:b1:28:e3:23:b3:2f:cf:09:e9:60:b7: 4b:63:0f:66:fb:6c:f0:a3:a6:4c:62:6c:a4:7a:80: bf:1f:4f:a6:f5:5c:70:b8:4a:e8:82:82:0f:00:9b: 17:a2:bf:0a:ca:70:01:66:2e:12:e9:51:7d:c6:90: f5:cc:a9:67:ab:fd:c7:a2:11:b2:56:40:25:1c:10: 74:64:e0:66:17:d6:96:b7:79:b9:87:b8:6b:b1:36: 30:c0:ee:d9:e3:dc:78:7b:a0:04:db:04:e6:f1:9d: 8a:6e:b0:44:43:40:44:34:ad:5b:d0:fc:5c:ec:fb: 57:70:13:ec:e7:3d:88:3e:d3:1c:fe:4e:51:57:26: 28:86:0f:96:3b:54:74:67:b2:04:a3:52:6c:c0:00: 2d:8e:59:47:94:43:a3:78:c1:41:15:d6:40:a6:0e: 85:e0:47:4b:d1:9f:5f:0c:cb:01:77:e6:fb:aa:c0: 4a:d6:13:8e:f1:bb:7c:d8:fa:01:38:40:ab:03:e1: 09:10:3e:06:98:c6:78:6f:e9:8f:0a:d5:6f:e6:5c: 25:a0:df:65:83:dc:0f:f7:e5:cb:11:a3:01:e9:92: 9a:30:88:f5:99:e4:30:e3:ed:6e:52:b7:0d:6c:1d: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8A:D8:C7:C7:03:1A:ED:B9:A3:6F:A4:C7:16:ED:C1:F4:57:0A:23 X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6b:f7:80:1e:bd:4f:2f:8a:06:4d:5d:1b:17:c9:97:1e:49: 48:f3:51:f4:15:dc:05:b3:a9:e1:e3:f1:c9:e3:bb:76:7f:4b: a7:09:48:a8:7c:75:24:f9:2a:10:19:db:44:ff:a9:29:12:f8: ef:08:f1:8c:e6:9f:e3:fa:58:74:54:b9:cf:12:41:13:09:92: 01:6f:a1:0a:57:60:49:44:ef:77:fb:02:08:5f:00:4f:4b:e2: b1:44:5e:5b:20:0f:33:5f:90:44:8f:db:c0:68:08:55:91:80: 71:54:5e:45:5b:c3:7e:57:4c:fe:f0:fd:cc:03:bc:7e:c3:1d: 13:0b:26:ba:ef:14:50:28:bf:1d:9c:98:c8:57:98:9c:78:c7: a6:6d:16:84:46:ca:36:db:87:84:fc:1a:89:82:ab:15:75:9a: 1c:6f:4a:86:73:be:d9:ff:77:1b:d2:e4:17:58:9c:c2:bf:11: fa:60:36:57:02:8b:20:a2:84:49:d7:99:c1:c7:eb:a2:06:27: a7:59:37:c7:2a:53:2a:e4:66:7a:c4:a9:1f:a2:cb:a0:a0:dd: b8:f3:23:d4:bf:b5:46:81:3f:3b:c3:01:29:fa:56:ba:57:87: 25:d1:bd:d5:a9:60:f7:46:e9:f3:3f:c1:ae:5c:ad:f4:b5:cc: 49:94:ac:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjYwODMxMjI1ODQ4WhcNMjYwOTA3MjI1ODQ4WjAYMRYwFAYD VQQDEw02YTk2MDcyOC0yMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjeT43SgPl/TA4PbQ2icyUtC2sSjjI7MvzwnpYLdLYw9m+2zwo6ZMYmykeoC/ H0+m9VxwuErogoIPAJsXor8KynABZi4S6VF9xpD1zKlnq/3HohGyVkAlHBB0ZOBm F9aWt3m5h7hrsTYwwO7Z49x4e6AE2wTm8Z2KbrBEQ0BENK1b0Pxc7PtXcBPs5z2I PtMc/k5RVyYohg+WO1R0Z7IEo1JswAAtjllHlEOjeMFBFdZApg6F4EdL0Z9fDMsB d+b7qsBK1hOO8bt82PoBOECrA+EJED4GmMZ4b+mPCtVv5lwloN9lg9wP9+XLEaMB 6ZKaMIj1meQw4+1uUrcNbB0n6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuK2MfH AxrtuaNvpMcW7cH0VwojMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH2v3gB69Ty+KBk1dGxfJlx5JSPNR9BXcBbOp4ePxyeO7dn9LpwlIqHx1JPkq EBnbRP+pKRL47wjxjOaf4/pYdFS5zxJBEwmSAW+hCldgSUTvd/sCCF8AT0visURe WyAPM1+QRI/bwGgIVZGAcVReRVvDfldM/vD9zAO8fsMdEwsmuu8UUCi/HZyYyFeY nHjHpm0WhEbKNtuHhPwaiYKrFXWaHG9KhnO+2f93G9LkF1icwr8R+mA2VwKLIKKE SdeZwcfrogYnp1k3xypTKuRmesSpH6LLoKDduPMj1L+1RoE/O8MBKfpWuleHJdG9 1alg90bp8z/Brlyt9LXMSZSsew== -----END CERTIFICATE-----Generated at Tue Sep 1 04:06:49 2026 by rpki-client