$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft File: IRoCHoq99NvyBwgibMgyj9JBMd8.mft (raw, json) Hash identifier: ZVuiA1hDzfE2EAPa/Xvzg3jcvR8bqZDz5VQ9MZd50WE= Subject key identifier: 96:EF:85:B7:39:4E:9C:91:73:81:8B:79:6D:A9:E4:FD:26:D0:90:08 Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF Certificate issuer: /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft Manifest number: 0165 Signing time: Fri 11 Sep 2026 05:07:04 +0000 Manifest this update: Fri 11 Sep 2026 05:07:04 +0000 Manifest next update: Fri 18 Sep 2026 05:07:04 +0000 Files and hashes: 1: IRoCHoq99NvyBwgibMgyj9JBMd8.crl (hash: IuRa7jOU67bgafjCa9naj6h8DZnYboM/vbAbyC4uzmE=) 2: 0029F6EAD41F11F0B1A47183C4F9AE02.roa (hash: F5fxp0etukBOn3CKrqqukvD42srMqVoYQvkoxd9V4Hk=) 3: 00926CA2D41F11F092947183C4F9AE02.roa (hash: wqkUfeM+QKVS8qmAEVsiC5c7QZ1bu80LeTA1QCGTnpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Validity Not Before: Sep 11 05:07:04 2026 GMT Not After : Sep 18 05:07:04 2026 GMT Subject: CN=6aa38c78-f455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:f5:ef:cd:71:7c:69:fe:82:3d:12:0e:09: b3:98:eb:45:39:6b:ed:ec:cb:22:a0:54:b2:99:11: f1:81:60:f7:1b:d4:93:2c:46:8c:82:f1:7c:d2:ab: 8f:14:78:43:ae:d5:7b:77:2e:89:b7:e7:c6:d7:03: 95:44:08:17:b5:a4:2a:d5:71:a7:d5:ef:34:c5:82: 1c:50:08:20:2e:67:1b:78:66:a3:e7:8a:15:1a:85: 24:64:ae:83:23:20:7c:71:5c:f2:cd:45:73:f4:5c: 50:79:67:fd:e1:d8:ce:8b:95:2c:6d:9e:11:86:df: d6:a5:62:8d:fc:37:30:3d:ef:1b:a3:23:76:63:35: c3:4a:9a:ba:a0:3d:c8:17:6c:71:73:d1:26:ec:90: 37:d7:fc:35:d8:39:fc:48:8b:3c:40:ae:1d:bf:72: 07:8e:ed:84:be:d9:e5:df:2d:ba:2c:6b:17:fa:e3: ac:dd:31:2f:f1:4c:95:cb:17:c6:b5:56:95:48:01: d2:90:e8:a9:28:22:ea:ff:34:23:67:dc:1e:9c:05: e2:4e:39:0f:12:f8:75:44:9d:66:bd:c2:e4:c7:f1: e1:7d:70:f9:e0:7a:6d:e5:d4:94:f5:66:db:01:b0: 89:1a:a5:25:82:a1:7b:19:04:29:0a:f6:17:5f:a8: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EF:85:B7:39:4E:9C:91:73:81:8B:79:6D:A9:E4:FD:26:D0:90:08 X509v3 Authority Key Identifier: keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:ba:12:84:8c:47:59:36:d4:e4:95:d4:43:a2:5b:cf:ad:b4: 36:82:18:83:b1:5f:51:5a:fb:77:2b:94:f7:cd:aa:49:63:b9: 8f:62:af:ae:8e:86:02:eb:41:75:ee:4a:13:d4:53:0e:ba:9f: 68:3e:c3:f9:cf:d4:62:0e:1f:28:2c:fc:01:3e:89:c9:5f:de: 29:6c:52:86:b6:aa:63:18:80:90:4f:9e:e7:4c:9f:9a:89:20: d8:0e:80:5f:d0:a0:e4:37:3d:ad:47:f8:c8:43:00:c7:b4:20: 3a:80:c0:07:3a:5a:6b:1d:4d:44:36:c5:e1:cf:c1:22:0a:b8: 1e:bc:76:64:82:3d:a4:5c:88:27:f3:c4:4d:c5:7b:d4:ac:b0: aa:90:bd:7d:25:ba:11:66:19:f4:ef:e9:7b:b6:ec:1e:f3:4b: 9b:64:80:56:53:1f:fd:1e:f0:96:82:48:1a:3f:04:a7:67:b9: e4:f3:36:58:83:97:9b:4b:f7:a3:7b:80:d7:76:a7:f2:b8:3e: bf:ee:a0:5b:dd:fa:7e:7e:56:a4:38:37:55:18:c0:82:59:58: 3a:f8:6c:e5:10:c5:68:40:2d:f9:43:6f:95:88:8f:d8:50:51: 96:1d:e1:be:82:f5:e3:1e:b5:13:5d:73:cc:bf:30:46:cd:db: bd:4f:f0:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKDIxMUEwMjFFOEFCREY0REJGMjA3MDgyMjZDQzgzMjhG RDI0MTMxREYwHhcNMjYwOTExMDUwNzA0WhcNMjYwOTE4MDUwNzA0WjAYMRYwFAYD VQQDEw02YWEzOGM3OC1mNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmz1781xfGn+gj0SDgmzmOtFOWvt7MsioFSymRHxgWD3G9STLEaMgvF80quP FHhDrtV7dy6Jt+fG1wOVRAgXtaQq1XGn1e80xYIcUAggLmcbeGaj54oVGoUkZK6D IyB8cVzyzUVz9FxQeWf94djOi5UsbZ4Rht/WpWKN/DcwPe8boyN2YzXDSpq6oD3I F2xxc9Em7JA31/w12Dn8SIs8QK4dv3IHju2Evtnl3y26LGsX+uOs3TEv8UyVyxfG tVaVSAHSkOipKCLq/zQjZ9wenAXiTjkPEvh1RJ1mvcLkx/HhfXD54Hpt5dSU9Wbb AbCJGqUlgqF7GQQpCvYXX6jpwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbvhbc5 TpyRc4GLeW2p5P0m0JAIMB8GA1UdIwQYMBaAFCEaAh6KvfTb8gcIImzIMo/SQTHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FMTYzODkxMDlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9JUm9DSG9xOTlOdnlCd2dpYk1neWo5SkJN ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lSb0NIb3E5OU52eUJ3Z2liTWd5ajlKQk1kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEYxMS9FMTYzODkxMDlBN0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9JUm9DSG9xOTlO dnlCd2dpYk1neWo5SkJNZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwroShIxHWTbU5JXUQ6Jbz620NoIYg7FfUVr7dyuU982qSWO5j2Kvro6GAutB de5KE9RTDrqfaD7D+c/UYg4fKCz8AT6JyV/eKWxShraqYxiAkE+e50yfmokg2A6A X9Cg5Dc9rUf4yEMAx7QgOoDABzpaax1NRDbF4c/BIgq4Hrx2ZII9pFyIJ/PETcV7 1KywqpC9fSW6EWYZ9O/pe7bsHvNLm2SAVlMf/R7wloJIGj8Ep2e55PM2WIOXm0v3 o3uA13an8rg+v+6gW936fn5WpDg3VRjAgllYOvhs5RDFaEAt+UNvlYiP2FBRlh3h voL14x61E11zzL8wRs3bvU/wjw== -----END CERTIFICATE-----Generated at Fri Sep 11 10:11:19 2026 by rpki-client