$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft File: ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft (raw, json) Hash identifier: Md1JPJouXNuBSyLKf/eRBjHgsv23rJdbFrLBLMJxHDQ= Subject key identifier: EA:49:72:0A:99:C5:0B:CA:81:C7:C2:9C:4E:38:1F:68:4A:8D:35:27 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1E61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft Manifest number: 1DCB Signing time: Thu 10 Sep 2026 16:05:55 +0000 Manifest this update: Thu 10 Sep 2026 16:05:54 +0000 Manifest next update: Thu 17 Sep 2026 16:05:54 +0000 Files and hashes: 1: ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl (hash: nxqkmv7qewlCSTmaj/solyT/LFngfwQKJebafPUFvjQ=) 2: D3C8593E905E11EFAF2C185CC4F9AE02.roa (hash: Ruxh9vs1IEEY8sUgeoqbiAjkOA3NIO1oE49c/aSiPyo=) 3: CCD092AE4E6411EF92C0EC3AC4F9AE02.roa (hash: /vJS5mvYoaeQ7e5TPVVBx64c5yOqiYznmnqStY9GYWY=) 4: 84064494E48F11EF8386EA50C4F9AE02.roa (hash: e2z23i28QBdo2imUKS15DY31HQcf+q8FZJ7ZqEZMi64=) 5: 3322FCF6B8B611F09EE22E11C4F9AE02.roa (hash: vPw7xATzv0O2yNoJH3ofUOV61xAOAH8pdJ0rodOC4Lw=) 6: 87F433B2234C11EBA94AE637C4F9AE02.roa (hash: FZUA9ujh5y+qedLhZYHjBMCqwCiia7dWK5HBk6r/R3A=) 7: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (hash: syfI5VBGCCOaxinq66/rQy0KiVO/nQZm82G8XJ0s/uQ=) 8: D1A879DA769011F18B30BBE765A30FBC.roa (hash: MWgXgLvg84RJCX9V3qs+7dPPh/hqmJ2OanGVl5DYgwY=) 9: 089DB16C769111F1BA451BEF65A30FBC.roa (hash: 8p6Re7pqOXecnmQu/NSydvCbJad68BH9Gn7yDp3+bDg=) 10: 2F9A7A1648FC11EBBAE0991CC4F9AE02.roa (hash: OyJ386kUL4gGWlM9zenD8Or9GBx/nawzJcbJiadjXEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7777 (0x1e61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Sep 10 16:05:54 2026 GMT Not After : Sep 17 16:05:54 2026 GMT Subject: CN=6aa2d562-d2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:f8:fc:91:a0:ee:1f:2f:74:29:67:2a:73: 95:b5:4b:92:13:a1:c4:9d:4c:da:90:a7:37:23:a2: 46:77:54:72:b4:a2:34:b9:13:da:bf:22:f8:d2:06: 5c:7d:f9:73:95:88:81:f5:64:9e:6e:4f:e1:e3:a8: d9:39:87:92:54:d0:69:55:3d:18:d7:c6:2a:f5:a7: 3c:75:04:8b:47:24:08:fd:19:a1:40:10:f6:ce:b2: 0b:1f:08:3a:fc:4e:40:dd:35:e7:12:63:a7:a0:83: 9b:67:d4:90:68:9f:83:e0:2d:c1:0a:94:05:a2:a0: 60:46:e4:dc:81:e3:0d:98:89:02:21:7f:f0:c9:58: 8b:c1:f8:ea:c1:9d:27:53:6c:18:59:45:bd:09:00: 63:13:37:23:53:13:1c:47:63:9a:b8:be:be:3a:64: 34:35:d0:84:bc:22:f4:31:84:47:b7:b6:63:6d:7b: 3b:f3:dd:50:db:eb:7d:67:c9:66:d5:b1:c3:ad:5c: e6:7b:cc:65:31:34:52:9a:9b:36:29:aa:dd:82:cc: 51:89:14:1d:f0:26:78:f5:43:be:4a:41:c0:df:09: 99:ec:e7:e3:af:5a:d3:c2:85:90:a2:bd:e1:78:72: 26:27:36:32:14:2b:a1:07:1b:6a:20:85:b9:a0:a4: ea:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:49:72:0A:99:C5:0B:CA:81:C7:C2:9C:4E:38:1F:68:4A:8D:35:27 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:1f:6e:8a:81:97:86:7c:22:b6:28:a8:e3:a7:29:b8:72:a2: b7:8d:f8:b1:bd:d1:ed:7f:45:e4:7a:c5:04:17:6e:a8:46:3d: 88:15:f2:3a:5e:dd:2a:23:47:86:db:22:fa:e3:36:d8:39:fb: e6:90:ea:91:ff:fd:8f:a7:7e:87:0c:19:48:4c:85:d6:7f:c1: 5f:66:a1:0c:ae:4e:6e:7e:a7:95:6b:fa:ef:46:5a:d6:d1:2d: 9e:a9:cb:8a:63:7d:51:b3:1f:54:1d:9d:01:1d:09:b9:59:95: 58:7e:f1:e4:62:3e:d0:e7:f3:f0:42:a7:4f:0e:a6:55:1f:8f: 71:38:5f:66:35:d8:0d:28:86:a4:b1:a5:95:11:b6:2b:77:f7: 27:df:6a:f1:8a:ce:35:e0:bb:d2:51:1a:00:2f:8d:ff:49:33: b2:9c:89:0a:67:9e:14:ce:1a:c2:33:2d:e9:c1:ca:3d:77:33: aa:1b:90:9a:6e:6c:a5:78:29:30:d0:e0:67:b6:4d:c4:77:a5: 2f:87:03:ce:ce:fb:b5:30:72:df:01:37:f6:e6:ce:13:bf:44: 65:ea:f7:a7:78:e6:df:7b:d2:a3:c8:93:7d:ae:93:27:d2:0f: 3d:c6:32:82:eb:c0:3a:38:36:96:ef:34:6c:16:46:bc:6c:f7: 32:2b:27:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjYwOTEwMTYwNTU0WhcNMjYwOTE3MTYwNTU0WjAYMRYwFAYD VQQDEw02YWEyZDU2Mi1kMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyv4/JGg7h8vdClnKnOVtUuSE6HEnUzakKc3I6JGd1RytKI0uRPavyL40gZc fflzlYiB9WSebk/h46jZOYeSVNBpVT0Y18Yq9ac8dQSLRyQI/RmhQBD2zrILHwg6 /E5A3TXnEmOnoIObZ9SQaJ+D4C3BCpQFoqBgRuTcgeMNmIkCIX/wyViLwfjqwZ0n U2wYWUW9CQBjEzcjUxMcR2OauL6+OmQ0NdCEvCL0MYRHt7ZjbXs7891Q2+t9Z8lm 1bHDrVzme8xlMTRSmps2KardgsxRiRQd8CZ49UO+SkHA3wmZ7Ofjr1rTwoWQor3h eHImJzYyFCuhBxtqIIW5oKTqwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpJcgqZ xQvKgcfCnE44H2hKjTUnMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTg0QS8xODA1MTkxQUUxRUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJj SVZMS2lWYjBNdm1vRTVZRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzx9uioGXhnwitiio46cpuHKit434sb3R7X9F5HrFBBduqEY9iBXyOl7dKiNH htsi+uM22Dn75pDqkf/9j6d+hwwZSEyF1n/BX2ahDK5Obn6nlWv670Za1tEtnqnL imN9UbMfVB2dAR0JuVmVWH7x5GI+0Ofz8EKnTw6mVR+PcThfZjXYDSiGpLGllRG2 K3f3J99q8YrONeC70lEaAC+N/0kzspyJCmeeFM4awjMt6cHKPXczqhuQmm5spXgp MNDgZ7ZNxHelL4cDzs77tTBy3wE39ubOE79EZer3p3jm33vSo8iTfa6TJ9IPPcYy guvAOjg2lu80bBZGvGz3MisnHw== -----END CERTIFICATE-----Generated at Fri Sep 11 11:08:36 2026 by rpki-client