$ rpki-client -vvvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: f+GfgQ6uFE47P9f3GMI9wbzLfpB+dwg640t/+2XseXw= Subject key identifier: 3D:3F:24:F6:71:3B:D2:57:4E:68:84:24:F1:CF:65:40:31:63:A2:DE Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0D38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0D2E Signing time: Sun 04 Oct 2026 18:17:41 +0000 Manifest this update: Sun 04 Oct 2026 18:17:40 +0000 Manifest next update: Sun 11 Oct 2026 18:17:40 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: bPO23CT+sBqS9Mh578L1mpLDdsbQ8bQ6jvWsE0sO9BY=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: zDxsuRndlq0lJuspimIYJwOxaHSsP7u9+ZEkGQ4K8fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3384 (0xd38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Oct 4 18:17:40 2026 GMT Not After : Oct 11 18:17:40 2026 GMT Subject: CN=6ac29845-f156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:00:3f:92:08:82:ed:28:60:57:9e:16:42:9a: a3:1a:32:5f:fb:48:56:c1:9e:a0:3e:8c:e8:da:fa: 06:ff:33:c5:62:5f:95:76:a0:24:98:53:19:41:d8: 79:04:23:62:d0:63:c2:3b:a7:2f:ac:1f:e4:ca:9a: 10:85:d3:e0:6f:92:5f:50:97:8e:e9:06:08:31:82: 90:e5:2f:b5:e5:3a:3e:3b:38:10:a4:5f:4c:c9:b5: 93:5c:f8:0e:2b:2a:b3:a9:a1:6d:8c:bb:94:df:ad: 4d:fa:1d:eb:7f:43:72:e7:a3:90:64:d3:97:ab:48: 69:1f:6a:8c:7a:12:1b:5e:76:11:37:e3:4e:ed:b0: be:7b:60:a4:d3:9a:82:51:f9:86:ef:3a:01:ad:1f: ce:03:02:19:ef:3b:b6:09:98:bf:c0:33:21:b6:15: b8:9e:99:e3:54:2a:a1:34:ab:9d:08:76:1f:f2:af: dc:3a:00:88:14:99:3c:46:24:8c:31:e7:74:7a:d8: 5a:76:e2:2e:c4:87:65:ff:7c:60:58:23:f7:03:c6: 15:5c:31:19:81:70:fc:7d:ad:84:6b:7e:cf:c0:c4: 9b:be:b5:25:88:9f:af:f3:ec:62:b6:20:b5:9c:69: f6:bc:a9:d0:32:95:40:61:46:33:4a:b6:66:79:1b: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3F:24:F6:71:3B:D2:57:4E:68:84:24:F1:CF:65:40:31:63:A2:DE X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:21:3c:99:a1:e1:ae:7d:5c:9b:5f:2b:48:de:5d:90:53:b7: 10:15:ff:95:ea:a0:9d:08:8a:bf:0c:12:0d:52:56:d2:2f:2d: 92:d1:7a:ad:af:cb:0a:3a:1d:6d:46:aa:39:f3:f7:1f:93:86: 43:d9:8b:af:ea:b2:7d:3c:f6:f6:95:e4:3e:b8:49:42:ec:ee: 2f:3e:9c:08:24:14:ef:7b:74:31:52:ed:92:81:4a:63:03:2c: 43:a7:f2:e5:a2:1a:f6:ae:36:9b:5c:89:11:50:14:d0:7c:68: ed:e0:d6:0d:5e:ce:fc:2e:e4:a6:c7:0a:e0:f7:2b:e8:50:69: 4c:13:19:4e:d0:9d:3d:06:12:ef:1c:a3:3e:87:eb:c5:fb:d7: ae:49:55:bc:c3:2a:bb:c0:06:aa:b7:9e:6e:cf:46:25:fd:e2: f0:78:d0:a8:6c:68:27:8e:8f:96:e2:68:e8:e1:41:8c:58:1e: ec:8b:6d:c9:19:16:e4:71:80:c4:80:eb:c8:08:17:c1:7f:d1: 12:a2:fc:8a:f0:e0:db:22:03:9e:75:34:a3:a5:87:48:6b:3b: 16:87:d4:50:59:bd:de:d1:09:ae:b6:bb:2e:c0:03:96:97:45: c7:ae:e3:a5:c0:69:6f:9d:78:f4:eb:56:87:ea:38:3d:73:29: e3:40:06:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjYxMDA0MTgxNzQwWhcNMjYxMDExMTgxNzQwWjAYMRYwFAYD VQQDEw02YWMyOTg0NS1mMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gA/kgiC7ShgV54WQpqjGjJf+0hWwZ6gPozo2voG/zPFYl+VdqAkmFMZQdh5 BCNi0GPCO6cvrB/kypoQhdPgb5JfUJeO6QYIMYKQ5S+15To+OzgQpF9MybWTXPgO KyqzqaFtjLuU361N+h3rf0Ny56OQZNOXq0hpH2qMehIbXnYRN+NO7bC+e2Ck05qC UfmG7zoBrR/OAwIZ7zu2CZi/wDMhthW4npnjVCqhNKudCHYf8q/cOgCIFJk8RiSM Med0ethaduIuxIdl/3xgWCP3A8YVXDEZgXD8fa2Ea37PwMSbvrUliJ+v8+xitiC1 nGn2vKnQMpVAYUYzSrZmeRsiJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0/JPZx O9JXTmiEJPHPZUAxY6LeMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYSE8maHhrn1cm18rSN5dkFO3EBX/leqgnQiKvwwSDVJW0i8tktF6ra/LCjod bUaqOfP3H5OGQ9mLr+qyfTz29pXkPrhJQuzuLz6cCCQU73t0MVLtkoFKYwMsQ6fy 5aIa9q42m1yJEVAU0Hxo7eDWDV7O/C7kpscK4Pcr6FBpTBMZTtCdPQYS7xyjPofr xfvXrklVvMMqu8AGqreebs9GJf3i8HjQqGxoJ46PluJo6OFBjFge7IttyRkW5HGA xIDryAgXwX/REqL8ivDg2yIDnnU0o6WHSGs7FofUUFm93tEJrra7LsADlpdFx67j pcBpb5149OtWh+o4PXMp40AG8w== -----END CERTIFICATE-----Generated at Tue Oct 6 03:16:26 2026 by rpki-client