$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: QgS0uwAa5eFQYAqvJgpFos4UlxQyysqGBJz42UJnBlg= Subject key identifier: 3E:F1:B0:99:87:78:77:F8:B6:CB:B2:60:4C:E8:EA:5E:E3:BD:E8:A6 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 059E Signing time: Fri 04 Sep 2026 22:58:41 +0000 Manifest this update: Fri 04 Sep 2026 22:58:40 +0000 Manifest next update: Fri 11 Sep 2026 22:58:40 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: +IdVj+d5gdUpMpPgrZ+r3PhQHKYSsAD0ncYVu8zfyzo=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: mMzlkdBS5l7zH1NqOtcSGsyrLWVpyJgkzBlaJ0LOo5U=) 3: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: IekuGWz95qJq1RkERKwpFfkq5YP338H+OPjlC3vFHYE=) 4: B8462FFC6DE711F1ADF0DD3B5CA30FBC.roa (hash: wR/gV0bAGkEOc7p9Q73UcbAxejY11n0Ak+N3vWrR/o8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Sep 4 22:58:40 2026 GMT Not After : Sep 11 22:58:40 2026 GMT Subject: CN=6a9b4d20-212b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:96:c3:af:fd:08:8a:36:13:79:48:cc:24: 7d:2e:f4:5e:93:48:be:0d:80:7b:bf:d2:73:9a:00: d1:7a:63:ac:fc:82:46:b0:ff:b2:8c:df:d2:fc:d8: 4a:08:bd:63:c0:55:ff:3a:12:9a:d0:13:da:ee:aa: 8e:52:17:c0:07:b5:d9:c1:3a:ee:f7:86:11:7e:f6: 7a:66:7d:04:ae:31:49:20:d8:18:30:ca:47:c1:15: 07:b1:7f:8a:f4:f4:e6:ec:39:55:71:22:99:cb:62: 9a:5a:2d:e5:c5:7b:08:bf:d8:7f:cd:74:d5:96:21: 29:b6:75:b3:f4:ac:14:c5:93:a6:58:c3:0b:18:d6: b8:93:a4:04:8c:f8:31:c1:5b:1d:51:9a:42:cc:da: ad:57:58:23:74:a8:3e:b5:86:c6:63:33:ad:77:14: 05:c8:f6:ed:2c:51:4d:de:8f:d3:ff:26:a5:85:f1: a5:ec:98:68:26:24:46:00:ca:79:93:a1:1b:6e:5c: 63:55:66:77:a7:75:37:eb:7f:53:9a:8a:f7:2d:32: 2f:bd:a5:a7:7d:90:4a:96:b4:3b:db:11:97:f4:58: b9:57:33:d0:b6:5d:18:a5:38:c3:1d:81:00:39:2f: 3d:ce:e5:73:97:21:08:5b:f4:c0:75:69:25:b4:30: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F1:B0:99:87:78:77:F8:B6:CB:B2:60:4C:E8:EA:5E:E3:BD:E8:A6 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:38:3f:b2:e6:f1:0d:d4:0d:c6:a6:cf:12:6a:0f:13:26:9a: 68:bd:e0:9b:57:8f:86:df:2a:76:6a:d1:a3:4a:2b:b0:08:26: 45:c0:e5:fc:88:a3:69:fe:f7:c3:aa:51:fa:65:eb:53:09:63: 30:63:43:eb:62:18:32:d2:db:0d:5a:7b:11:25:a6:54:4f:75: 1f:66:a3:a0:f4:06:75:ba:3c:31:ee:ed:f4:94:79:e7:aa:e7: 6b:8b:1e:cf:1e:fe:06:b5:cf:62:62:8d:67:1c:15:d3:92:2e: cd:79:95:a2:06:c7:80:15:ec:af:38:60:a0:58:4a:c0:ac:3a: 2a:6f:bf:c6:a7:9b:eb:fe:67:16:4d:79:ff:c5:96:24:30:94: 7a:14:d1:a1:a0:fd:9a:f9:b7:fb:61:aa:fa:0a:1f:a2:f7:ee: 73:ec:2a:59:3d:93:95:ae:dd:ee:ef:e7:89:6f:69:09:b8:fe: 4b:32:11:3b:e6:e9:46:9b:16:b1:04:d1:bf:7a:7b:76:9d:8d: f6:ec:31:ec:45:df:32:1f:ad:69:c2:c7:79:3f:fc:d8:17:1a: a2:ab:d2:45:cf:1f:c5:15:52:ed:d4:8e:81:03:14:3e:5b:f4: f6:13:f7:be:ff:b2:c8:53:35:95:19:28:a9:3f:1b:eb:ca:83: 48:28:79:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjYwOTA0MjI1ODQwWhcNMjYwOTExMjI1ODQwWjAYMRYwFAYD VQQDEw02YTliNGQyMC0yMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0heWw6/9CIo2E3lIzCR9LvRek0i+DYB7v9JzmgDRemOs/IJGsP+yjN/S/NhK CL1jwFX/OhKa0BPa7qqOUhfAB7XZwTru94YRfvZ6Zn0ErjFJINgYMMpHwRUHsX+K 9PTm7DlVcSKZy2KaWi3lxXsIv9h/zXTVliEptnWz9KwUxZOmWMMLGNa4k6QEjPgx wVsdUZpCzNqtV1gjdKg+tYbGYzOtdxQFyPbtLFFN3o/T/yalhfGl7JhoJiRGAMp5 k6EbblxjVWZ3p3U3639Tmor3LTIvvaWnfZBKlrQ72xGX9Fi5VzPQtl0YpTjDHYEA OS89zuVzlyEIW/TAdWkltDA2owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7xsJmH eHf4tsuyYEzo6l7jveimMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWzg/subxDdQNxqbPEmoPEyaaaL3gm1ePht8qdmrRo0orsAgmRcDl/Iijaf73 w6pR+mXrUwljMGND62IYMtLbDVp7ESWmVE91H2ajoPQGdbo8Me7t9JR556rna4se zx7+BrXPYmKNZxwV05IuzXmVogbHgBXsrzhgoFhKwKw6Km+/xqeb6/5nFk15/8WW JDCUehTRoaD9mvm3+2Gq+gofovfuc+wqWT2Tla7d7u/niW9pCbj+SzIRO+bpRpsW sQTRv3p7dp2N9uwx7EXfMh+tacLHeT/82BcaoqvSRc8fxRVS7dSOgQMUPlv09hP3 vv+yyFM1lRkoqT8b68qDSCh53g== -----END CERTIFICATE-----Generated at Sat Sep 5 02:05:14 2026 by rpki-client