$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json) Hash identifier: mz2B7Mu2LGdwue/FwpKOE/necK+CQWrCY4Plxo53pIk= Subject key identifier: 17:7D:C1:93:53:BE:19:D6:A4:DC:A9:16:AB:3D:4B:B8:73:1A:2C:DA Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 07F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft Manifest number: 07D7 Signing time: Mon 12 Oct 2026 21:32:28 +0000 Manifest this update: Mon 12 Oct 2026 21:32:27 +0000 Manifest next update: Mon 19 Oct 2026 21:32:27 +0000 Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: af65i4fe+VOaYj+Yd3uEfRqQzL0GY9Ududz1Q6XmFhc=) 2: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: RiHTyH8/u4E6R/xXsKR9Dt/X35Ipr5A7B/T2xRmCXs4=) 3: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: zXVV6Fq9+Ev8ZgtdPsPKQEYkkJ0zf+qFsMmrOUVqUuU=) 4: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: 2sdJJ6iJjkZc6Wd4X6PmhZwhxLJKNYxKwduCcx3eWls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 21:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Oct 12 21:32:27 2026 GMT Not After : Oct 19 21:32:27 2026 GMT Subject: CN=6acd51ec-96ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bb:ab:bc:ca:bd:ea:4c:86:26:12:7b:53:46: 8e:0e:a6:76:d6:17:2f:62:22:ec:8f:01:f9:cd:c0: 4e:fe:3b:79:bb:a4:5b:4e:e9:1f:e1:48:38:0e:67: e3:97:60:f1:70:d3:f0:1a:a7:58:e1:de:93:fe:a5: 70:06:e5:f2:8e:17:0d:8c:cb:f7:aa:be:50:bc:3c: a2:da:91:2f:a9:a4:d7:48:9e:bb:cb:5e:0b:ba:68: 51:b0:1d:f8:7f:3c:a1:af:aa:e7:e1:fa:56:e3:05: 85:ef:2f:77:f5:77:7d:2a:64:f6:69:ce:5f:f9:ea: f8:16:59:a4:a1:c4:a5:1b:27:4a:6a:9b:45:78:f8: df:1c:13:5e:02:bd:db:9f:f7:67:4b:87:19:8b:20: c7:67:3b:09:0c:70:b9:80:d0:bb:18:74:be:b3:27: 18:27:73:03:ba:b7:4a:c9:96:86:46:a1:2d:92:65: 82:37:3e:fe:ea:6c:ef:02:7a:91:b2:d6:9a:c9:4b: b3:22:cd:b7:a7:38:24:fd:b1:47:ff:0b:9a:b5:e4: e2:ca:8e:5b:33:8f:d5:92:39:f4:1c:87:fd:fe:e2: 41:42:c3:ae:90:d0:d4:1c:9c:47:0d:8e:0a:a0:8c: 4a:25:5e:13:3c:90:7e:18:d9:3a:88:44:89:61:c3: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7D:C1:93:53:BE:19:D6:A4:DC:A9:16:AB:3D:4B:B8:73:1A:2C:DA X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:8e:55:3a:c2:20:1b:4b:7d:d8:5c:93:41:c0:ed:99:43:06: bb:4f:c6:0a:60:55:b6:ea:b3:1e:20:ea:62:61:1b:bc:cd:90: 98:76:71:bd:ac:23:d1:38:74:a3:f6:5b:e0:32:69:6e:d0:ed: fe:43:3d:90:5e:61:c6:d7:82:7b:00:92:ff:d7:73:db:e1:d7: 78:9a:ab:c8:99:1e:ba:35:0e:f0:77:f6:d4:3e:17:e2:70:3a: e0:00:cd:3e:10:7a:e0:44:1b:49:f1:61:d1:07:ef:56:b5:be: 3f:c0:0f:44:39:46:02:62:81:bb:a2:5e:6a:90:30:a8:13:46: 87:4c:ee:ad:94:6c:6d:a8:d2:85:b2:cb:4e:5b:9e:6f:8f:f4: b3:4f:84:d5:a3:51:41:c4:93:fd:ec:45:bb:e3:2f:f4:8e:d3: 37:0d:cc:71:2f:eb:70:a1:bc:32:23:0f:3d:55:ae:9d:63:b1: 34:dd:be:6f:56:32:93:b0:a3:fb:94:d7:22:0a:8a:b4:aa:85: fe:4e:4f:cc:b7:8c:54:52:b2:bc:7f:71:1c:87:ba:a7:1c:da: 2b:e5:12:e2:8c:4f:6d:4e:9c:6b:3c:69:26:0e:e2:86:75:dc: 5c:c4:6a:8f:c5:02:a7:bf:59:c6:76:bb:3a:71:b9:72:9f:dd: 85:14:41:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjYxMDEyMjEzMjI3WhcNMjYxMDE5MjEzMjI3WjAYMRYwFAYD VQQDEw02YWNkNTFlYy05NmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LurvMq96kyGJhJ7U0aODqZ21hcvYiLsjwH5zcBO/jt5u6RbTukf4Ug4Dmfj l2DxcNPwGqdY4d6T/qVwBuXyjhcNjMv3qr5QvDyi2pEvqaTXSJ67y14LumhRsB34 fzyhr6rn4fpW4wWF7y939Xd9KmT2ac5f+er4FlmkocSlGydKaptFePjfHBNeAr3b n/dnS4cZiyDHZzsJDHC5gNC7GHS+sycYJ3MDurdKyZaGRqEtkmWCNz7+6mzvAnqR staayUuzIs23pzgk/bFH/wuateTiyo5bM4/Vkjn0HIf9/uJBQsOukNDUHJxHDY4K oIxKJV4TPJB+GNk6iESJYcP+kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBd9wZNT vhnWpNypFqs9S7hzGizaMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5 R0xEbUFWMGVEN29jamtQeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZY5VOsIgG0t92FyTQcDtmUMGu0/GCmBVtuqzHiDqYmEbvM2QmHZxvawj0Th0 o/Zb4DJpbtDt/kM9kF5hxteCewCS/9dz2+HXeJqryJkeujUO8Hf21D4X4nA64ADN PhB64EQbSfFh0QfvVrW+P8APRDlGAmKBu6JeapAwqBNGh0zurZRsbajShbLLTlue b4/0s0+E1aNRQcST/exFu+Mv9I7TNw3McS/rcKG8MiMPPVWunWOxNN2+b1Yyk7Cj +5TXIgqKtKqF/k5PzLeMVFKyvH9xHIe6pxzaK+US4oxPbU6cazxpJg7ihnXcXMRq j8UCp79Zxna7OnG5cp/dhRRBnw== -----END CERTIFICATE-----Generated at Tue Oct 13 17:31:41 2026 by rpki-client