$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json) Hash identifier: l7kZ+UP6kHg41zZtPWo6ujGPxKV/YtEDL12pnUrRGbE= Subject key identifier: 09:F1:6F:DD:0A:AF:23:EF:56:0B:64:13:3F:55:50:C0:A2:D5:5A:B5 Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft Manifest number: 0220 Signing time: Sat 03 Oct 2026 03:28:00 +0000 Manifest this update: Sat 03 Oct 2026 03:27:59 +0000 Manifest next update: Sat 10 Oct 2026 03:27:59 +0000 Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: iX0k7R4iD41u2okUUtWHbaCiwvpGKo2gczV+wk/GmyY=) 2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: HD0K5jglBpup2Ya1bJZyAOnbAr95k75UE1CHe344A3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Validity Not Before: Oct 3 03:27:59 2026 GMT Not After : Oct 10 03:27:59 2026 GMT Subject: CN=6ac0763f-794b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:ce:d4:1f:c3:2f:d6:5d:b5:06:a6:9f:56: 35:6c:a3:95:ed:45:95:52:d1:89:ad:3d:6d:87:7d: cd:c9:a3:1b:fc:e4:a4:24:1e:61:b0:6c:22:16:2b: 58:d5:66:a7:28:0f:3b:6c:84:5f:41:53:ab:b0:d2: e4:c7:30:6e:be:0b:48:a8:73:e8:08:4b:69:c7:97: c5:f7:03:be:a4:b5:8f:36:bd:71:1c:e2:6b:09:1b: ea:c7:27:6c:a4:63:e2:87:6f:aa:76:02:a1:4a:83: 27:bf:29:f2:5e:98:c1:2d:c2:a7:5a:d1:c2:15:b1: 15:03:9b:61:82:4c:57:c3:fe:1f:25:b2:da:49:7f: 65:e7:f8:dd:1e:2b:3b:1a:bf:2f:5a:2e:52:cf:e1: 3d:25:28:ea:6a:18:da:5a:b6:6c:24:1e:be:b5:fc: 85:80:e6:6a:f7:0b:5c:9b:84:4c:97:dd:05:c8:47: da:f7:a6:38:92:1a:1b:05:0b:d0:15:1d:a0:98:79: 42:fd:e3:36:dc:d0:42:a7:cd:25:36:d7:ed:aa:7a: 6a:c5:dd:96:fc:44:3e:84:ee:6c:02:6c:16:d9:3b: a7:ae:ff:64:87:0d:d9:dc:b2:29:14:22:d6:d4:8b: 2c:6a:90:6b:8d:0a:cb:e5:6d:23:e1:3c:63:1f:94: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F1:6F:DD:0A:AF:23:EF:56:0B:64:13:3F:55:50:C0:A2:D5:5A:B5 X509v3 Authority Key Identifier: keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0a:47:62:a0:9b:7c:30:4a:1c:f1:02:72:23:ff:b4:57:bf: 7c:69:53:ea:51:0d:3d:eb:86:32:5f:4e:cc:b0:8f:e3:d4:15: 33:5a:86:7c:ee:6f:18:b1:9f:83:3a:b6:c3:9e:ca:82:35:5a: ac:c4:6a:64:9a:41:4e:5b:cd:1e:5c:3e:c6:28:51:d8:c0:e0: 11:07:90:2a:01:e5:73:28:ab:8c:a0:8f:07:0e:0e:c1:bd:3b: 44:27:59:60:eb:43:82:a3:b2:a0:1b:0b:a9:1d:40:fc:67:09: a0:2d:5d:46:e8:b2:89:13:a8:78:62:30:89:3b:9d:21:b7:26: ef:b7:43:41:cd:af:c2:5d:2e:58:96:ac:8c:5c:26:1b:00:90: 40:ba:dc:71:67:9a:b1:8b:ec:7e:1a:ed:50:c7:25:01:dd:3a: d0:1a:00:9c:c1:7b:f8:72:d6:c4:e9:13:6f:80:1f:34:12:db: f7:9d:63:91:39:ad:4f:bc:64:65:a1:f8:66:69:fa:fc:63:43: 8f:d6:aa:23:a8:65:bf:c4:77:5b:19:70:61:14:58:0b:88:fb: 1c:ea:9d:a1:f4:0a:db:e2:8f:08:31:6a:f5:7c:81:38:95:5b: 69:8c:2e:f8:d9:47:ea:d5:49:bf:b4:69:26:e8:d6:7a:99:54: 30:39:2e:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0RjcxMTAvBgNVBAUTKDIyRDNFOTc0NERBRDQ5NzUwMzZDQzQyMkFDMTFDNDA0 NzIwRTY2RUEwHhcNMjYxMDAzMDMyNzU5WhcNMjYxMDEwMDMyNzU5WjAYMRYwFAYD VQQDEw02YWMwNzYzZi03OTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNHO1B/DL9ZdtQamn1Y1bKOV7UWVUtGJrT1th33NyaMb/OSkJB5hsGwiFitY 1WanKA87bIRfQVOrsNLkxzBuvgtIqHPoCEtpx5fF9wO+pLWPNr1xHOJrCRvqxyds pGPih2+qdgKhSoMnvynyXpjBLcKnWtHCFbEVA5thgkxXw/4fJbLaSX9l5/jdHis7 Gr8vWi5Sz+E9JSjqahjaWrZsJB6+tfyFgOZq9wtcm4RMl90FyEfa96Y4khobBQvQ FR2gmHlC/eM23NBCp80lNtftqnpqxd2W/EQ+hO5sAmwW2Tunrv9khw3Z3LIpFCLW 1IssapBrjQrL5W0j4TxjH5QNVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnxb90K ryPvVgtkEz9VUMCi1Vq1MB8GA1UdIwQYMBaAFCLT6XRNrUl1A2zEIqwRxARyDmbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRGNy8yQTQ4OTM4NjdF ODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNYVURiTVFpckJIRUJISU9a dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0UHBkRTJ0U1hVRGJNUWlyQkhFQkhJT1p1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTRGNy8yQTQ4OTM4NjdFODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNY VURiTVFpckJIRUJISU9adW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAogpHYqCbfDBKHPECciP/tFe/fGlT6lENPeuGMl9OzLCP49QVM1qGfO5vGLGf gzq2w57KgjVarMRqZJpBTlvNHlw+xihR2MDgEQeQKgHlcyirjKCPBw4Owb07RCdZ YOtDgqOyoBsLqR1A/GcJoC1dRuiyiROoeGIwiTudIbcm77dDQc2vwl0uWJasjFwm GwCQQLrccWeasYvsfhrtUMclAd060BoAnMF7+HLWxOkTb4AfNBLb951jkTmtT7xk ZaH4Zmn6/GNDj9aqI6hlv8R3WxlwYRRYC4j7HOqdofQK2+KPCDFq9XyBOJVbaYwu +NlH6tVJv7RpJujWeplUMDkuBA== -----END CERTIFICATE-----Generated at Sun Oct 4 07:17:51 2026 by rpki-client