$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: gdKv9v/HeRR4WrEBlDXeX0BWVzLzuFFyWJGt4dsGjzQ= Subject key identifier: 2E:5B:69:6C:61:0A:5C:35:62:F7:F8:99:95:E9:FF:65:2D:F1:48:8E Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 05C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 05B7 Signing time: Sat 24 Oct 2026 23:05:46 +0000 Manifest this update: Sat 24 Oct 2026 23:05:45 +0000 Manifest next update: Sat 31 Oct 2026 23:05:45 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: LjwFQSDGfFT0Dd5o6dhZcPEIeK/fnAwyaTeE+3aL+/U=) 2: B8462FFC6DE711F1ADF0DD3B5CA30FBC.roa (hash: wR/gV0bAGkEOc7p9Q73UcbAxejY11n0Ak+N3vWrR/o8=) 3: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: IekuGWz95qJq1RkERKwpFfkq5YP338H+OPjlC3vFHYE=) 4: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: mMzlkdBS5l7zH1NqOtcSGsyrLWVpyJgkzBlaJ0LOo5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Oct 24 23:05:45 2026 GMT Not After : Oct 31 23:05:45 2026 GMT Subject: CN=6add39ca-0b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:39:ad:f4:48:2a:b5:87:a4:84:aa:f1:26: 30:47:f3:0c:11:3e:50:7d:59:96:10:3d:16:b9:86: 0e:7e:b7:2d:5b:93:e5:1e:2a:c0:fe:e4:13:08:53: 51:df:3e:a9:dc:1b:6e:3c:b9:de:7b:f7:93:a0:9b: 36:82:be:b4:05:52:cc:3c:25:df:e7:3f:a9:63:1e: fe:8b:36:59:f6:0e:ac:b4:75:8d:0b:14:d7:38:c6: 1e:0b:a7:81:33:84:2b:ff:35:5a:6e:98:5f:45:b4: 01:04:76:cd:69:92:1d:a7:d4:6b:b3:d9:a0:32:c9: 7b:d6:fe:f5:45:72:09:86:d0:26:51:0c:f7:4b:85: 22:ed:6f:64:47:63:37:75:05:a5:3d:46:5c:85:53: 8e:84:bc:5b:bb:fc:80:58:49:68:01:32:06:eb:b0: da:9e:27:bd:fc:53:88:6d:24:1b:57:df:ba:f3:12: b4:5f:09:16:2d:af:22:3b:39:31:5a:cf:d2:ff:7e: 7e:29:1a:9f:17:46:b0:e6:f5:aa:ae:7b:ca:a3:11: ee:53:d8:19:9a:7d:b2:9b:75:d4:a7:7b:1f:db:06: 78:f3:7e:3b:30:48:c1:36:cf:29:13:5d:07:63:18: 4d:f9:1f:ad:7d:20:76:f7:59:80:1a:27:f3:00:a3: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5B:69:6C:61:0A:5C:35:62:F7:F8:99:95:E9:FF:65:2D:F1:48:8E X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:7b:79:59:aa:63:b0:6b:45:bf:8a:73:3b:a8:a6:5a:4e:bf: 37:e9:be:2b:a0:fa:3f:c0:92:98:be:65:d7:7d:0c:70:8b:6c: a3:27:e0:c8:05:3c:1e:9b:61:4b:df:8a:fe:44:c8:de:d2:f2: 40:ff:78:91:ca:38:70:96:84:64:28:c1:54:d9:be:aa:fc:4d: aa:ad:72:3e:9c:bc:d1:03:ed:77:22:fb:8e:4a:83:bf:1c:63: 64:46:f3:d9:aa:36:1c:df:dc:d4:ea:55:e3:df:92:6c:46:33: e3:0d:20:bd:19:52:f7:39:f1:0a:50:68:4b:b6:a4:3b:7d:5b: 25:d3:15:cc:72:11:58:26:eb:23:a7:1c:66:5e:a4:56:54:f1: 58:6b:e2:74:20:a1:2e:07:fd:15:68:a4:d8:cf:53:e8:f9:85: ad:30:16:e4:69:fe:5e:f5:b3:e7:35:1d:d7:f1:d9:d4:a8:ec: 97:d8:74:ec:36:4c:52:1e:a5:35:81:b4:c8:1b:eb:6c:3f:45: 53:34:84:ea:b9:96:e1:dc:53:47:b8:0c:b0:b5:f6:d0:3f:6f: 3e:1b:ff:27:f0:c9:ed:f6:7f:9e:0f:1d:06:57:38:bf:0f:db: 13:a7:78:c9:85:86:3f:86:6d:af:50:d7:50:da:6b:d4:cd:b6: d5:5e:31:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjYxMDI0MjMwNTQ1WhcNMjYxMDMxMjMwNTQ1WjAYMRYwFAYD VQQDEw02YWRkMzljYS0wYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudI5rfRIKrWHpISq8SYwR/MMET5QfVmWED0WuYYOfrctW5PlHirA/uQTCFNR 3z6p3BtuPLnee/eToJs2gr60BVLMPCXf5z+pYx7+izZZ9g6stHWNCxTXOMYeC6eB M4Qr/zVabphfRbQBBHbNaZIdp9Rrs9mgMsl71v71RXIJhtAmUQz3S4Ui7W9kR2M3 dQWlPUZchVOOhLxbu/yAWEloATIG67Danie9/FOIbSQbV9+68xK0XwkWLa8iOzkx Ws/S/35+KRqfF0aw5vWqrnvKoxHuU9gZmn2ym3XUp3sf2wZ48347MEjBNs8pE10H YxhN+R+tfSB291mAGifzAKPB5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5baWxh Clw1Yvf4mZXp/2Ut8UiOMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFHt5WapjsGtFv4pzO6imWk6/N+m+K6D6P8CSmL5l130McItsoyfgyAU8Hpth S9+K/kTI3tLyQP94kco4cJaEZCjBVNm+qvxNqq1yPpy80QPtdyL7jkqDvxxjZEbz 2ao2HN/c1OpV49+SbEYz4w0gvRlS9znxClBoS7akO31bJdMVzHIRWCbrI6ccZl6k VlTxWGvidCChLgf9FWik2M9T6PmFrTAW5Gn+XvWz5zUd1/HZ1Kjsl9h07DZMUh6l NYG0yBvrbD9FUzSE6rmW4dxTR7gMsLX20D9vPhv/J/DJ7fZ/ng8dBlc4vw/bE6d4 yYWGP4Ztr1DXUNpr1M221V4xig== -----END CERTIFICATE-----Generated at Mon Oct 26 23:20:54 2026 by rpki-client