$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft File: ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft (raw, json) Hash identifier: aovtBg8/o6Eb7NdWnREUif2vk6YkftvlYu3Z1wy6r3Q= Subject key identifier: 1D:80:92:66:BC:FD:F0:75:6F:21:1E:DD:03:51:9F:98:35:4A:D5:33 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1E83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft Manifest number: 1DE4 Signing time: Mon 26 Oct 2026 16:06:46 +0000 Manifest this update: Mon 26 Oct 2026 16:06:46 +0000 Manifest next update: Mon 02 Nov 2026 16:06:46 +0000 Files and hashes: 1: ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl (hash: 9gGH1uRBrZXN6syeC3h4pqnCETrV4OtU4GuVHS+mfLU=) 2: D3C8593E905E11EFAF2C185CC4F9AE02.roa (hash: sG26G8qHYMMzh17mNYMuAm0V9eeijb0KZEgCJYdZKrw=) 3: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (hash: 2aGWREz+AirmMwNcbN+0zSznkywGZnXXWbm48O+A6+M=) 4: D1A879DA769011F18B30BBE765A30FBC.roa (hash: AEjEGUAd8HQF6+xrYe18l229BDI320wRRWmXghvKdq4=) 5: 2F9A7A1648FC11EBBAE0991CC4F9AE02.roa (hash: bDt0ybX7b32EEMgrvoHkBV84wkYw06FWp8ZimzP2hMM=) 6: CCD092AE4E6411EF92C0EC3AC4F9AE02.roa (hash: m2M7v9JzK+VuA7dal99eROb6I6k/WQGZ2eu5QS3r8tA=) 7: 87F433B2234C11EBA94AE637C4F9AE02.roa (hash: fW423i9YptB2vQQls6Zf/9LAq4LJaE6Jc7QTZg/DwVU=) 8: 3322FCF6B8B611F09EE22E11C4F9AE02.roa (hash: mC0DCdvZCnz0rKqRK7dcrFl++T2I3lhH6ewdubSnJCY=) 9: 089DB16C769111F1BA451BEF65A30FBC.roa (hash: YnVwsY9P0yxeDFkxaSWuBD4BbfVBBuPKP1V9I0C0XiI=) 10: 84064494E48F11EF8386EA50C4F9AE02.roa (hash: LR7RWtzCSkjjwTR1g42dH9tJ5gPluG4/ve6uLIriaRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7811 (0x1e83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Oct 26 16:06:46 2026 GMT Not After : Nov 2 16:06:46 2026 GMT Subject: CN=6adf7a96-d9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:93:51:6b:95:a1:bd:6e:55:4e:92:8c:90: 4e:49:89:38:ee:c2:4f:7a:c9:8a:cb:2b:b3:6b:c4: c8:c8:40:9e:fa:b3:4a:02:5a:14:41:59:f2:84:02: 38:b7:13:c0:79:c5:4c:c7:ac:1f:cf:8b:34:b9:f5: 50:27:cb:9b:40:72:f2:e9:f3:f2:92:1c:8e:09:35: bf:11:d0:2c:13:7b:fd:7a:3f:5e:b3:62:c7:40:23: c2:ba:2f:88:63:6e:b5:5e:88:4c:dc:47:93:f7:65: d0:a0:f6:c3:dd:fc:f8:6e:87:c3:9c:6e:39:94:8b: 78:2d:10:b1:0a:36:ff:e7:45:dc:c8:c9:1f:85:e6: dc:65:9d:cc:93:82:8b:de:21:40:e0:2a:b7:4c:d5: 7e:f5:4e:0e:0d:e1:1f:7e:2b:de:3a:0d:43:02:7e: 94:b9:30:73:85:9a:b6:11:9b:c7:e0:69:0f:17:7e: df:ed:25:61:52:15:3b:23:9c:0a:fb:f1:8a:e6:ff: 37:9d:9c:64:b9:fc:7b:62:ce:f5:bc:22:45:d7:bc: ed:11:6b:0d:8f:90:b1:df:ed:a8:da:42:73:4e:0c: 48:e4:08:e9:18:14:94:c7:64:08:38:80:0c:11:4d: 7c:76:72:24:c4:7d:88:f9:8f:66:c7:ff:bd:71:bd: b4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:80:92:66:BC:FD:F0:75:6F:21:1E:DD:03:51:9F:98:35:4A:D5:33 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:3c:a4:4a:f2:88:7b:05:07:2d:1a:9a:4d:06:70:af:3f:75: f3:08:da:67:da:83:58:cf:de:cf:dc:9b:05:d7:61:55:a7:92: 10:1f:ed:fa:60:a5:ed:7d:83:0c:91:70:6b:3a:86:39:a5:96: 62:29:72:4f:9f:39:0a:6b:80:2d:00:ca:e5:87:b3:55:82:1c: 50:47:d4:ab:2f:56:c2:c6:ac:3e:7d:28:76:9d:52:7e:27:ee: fc:e8:b2:b2:27:07:07:f4:99:27:8c:7a:51:89:b9:85:2d:e9: a5:e5:86:37:67:08:0d:7b:96:db:c3:b5:94:f3:ef:45:ee:c0: fe:d7:b6:8f:16:9a:d7:4a:93:c2:ac:bd:16:24:17:35:ae:7a: fd:2d:7b:d8:2b:6e:f3:f7:a7:45:43:63:60:1e:1a:66:92:58: 2d:0b:15:7f:f9:2f:99:fe:4b:86:1a:05:7e:b9:d0:eb:5c:7b: 5c:6d:6c:f1:10:95:7c:6f:bf:e8:3d:85:d1:a2:53:8c:6e:bc: f5:99:48:61:08:7c:2d:63:72:03:c8:b2:f8:ca:54:bb:25:ab: 7d:36:1b:d4:76:10:53:2b:0c:64:42:56:91:f6:a6:81:e6:03: f6:68:46:d5:ff:19:fd:bd:fe:f1:37:f2:63:0b:76:0b:d3:89: ad:4a:23:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjYxMDI2MTYwNjQ2WhcNMjYxMTAyMTYwNjQ2WjAYMRYwFAYD VQQDEw02YWRmN2E5Ni1kOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7uTUWuVob1uVU6SjJBOSYk47sJPesmKyyuza8TIyECe+rNKAloUQVnyhAI4 txPAecVMx6wfz4s0ufVQJ8ubQHLy6fPykhyOCTW/EdAsE3v9ej9es2LHQCPCui+I Y261XohM3EeT92XQoPbD3fz4bofDnG45lIt4LRCxCjb/50XcyMkfhebcZZ3Mk4KL 3iFA4Cq3TNV+9U4ODeEffiveOg1DAn6UuTBzhZq2EZvH4GkPF37f7SVhUhU7I5wK +/GK5v83nZxkufx7Ys71vCJF17ztEWsNj5Cx3+2o2kJzTgxI5AjpGBSUx2QIOIAM EU18dnIkxH2I+Y9mx/+9cb20pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2Akma8 /fB1byEe3QNRn5g1StUzMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTg0QS8xODA1MTkxQUUxRUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJj SVZMS2lWYjBNdm1vRTVZRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoTykSvKIewUHLRqaTQZwrz918wjaZ9qDWM/ez9ybBddhVaeSEB/t+mCl7X2D DJFwazqGOaWWYilyT585CmuALQDK5YezVYIcUEfUqy9WwsasPn0odp1Sfifu/Oiy sicHB/SZJ4x6UYm5hS3ppeWGN2cIDXuW28O1lPPvRe7A/te2jxaa10qTwqy9FiQX Na56/S172Ctu8/enRUNjYB4aZpJYLQsVf/kvmf5LhhoFfrnQ61x7XG1s8RCVfG+/ 6D2F0aJTjG689ZlIYQh8LWNyA8iy+MpUuyWrfTYb1HYQUysMZEJWkfamgeYD9mhG 1f8Z/b3+8TfyYwt2C9OJrUojGQ== -----END CERTIFICATE-----Generated at Wed Oct 28 07:21:16 2026 by rpki-client