$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: +sXq36o6lhpKoioXyukSE+hCi0np54nNbciV0vdcW2o= Subject key identifier: A9:AC:A7:48:25:D4:AF:E1:29:CF:D4:FC:4A:70:CB:17:D6:30:7E:E6 Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: 01AB Signing time: Sat 05 Sep 2026 03:55:31 +0000 Manifest this update: Sat 05 Sep 2026 03:55:31 +0000 Manifest next update: Sat 12 Sep 2026 03:55:31 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: CB58ktHJFcjG+RjpDpygXosKytDLoOzpoyzPsdKCsRc=) 2: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: uE9BZOQRvrYyitomF6RoiQleo5uOBCO+TRSMtaSljks=) 3: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: PBjbgLkLmMBj/F7PFO+ds4NYTRx+qR9D6LQ6bjgmDuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 03:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Sep 5 03:55:31 2026 GMT Not After : Sep 12 03:55:31 2026 GMT Subject: CN=6a9b92b3-0b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:56:52:9d:97:dd:58:87:72:be:0f:4e:25: bc:bf:ad:0c:c0:15:12:0c:bf:95:c4:ba:db:78:13: 68:63:27:24:61:65:83:3a:7e:ba:a0:ee:2b:93:90: bd:87:79:f3:cb:6b:72:55:3b:dd:3e:9c:e6:03:8f: a1:35:d1:0c:a3:9f:87:e9:07:ab:13:90:8d:4f:1a: dd:9e:fa:f0:30:a6:81:16:3c:aa:a1:a5:b4:f2:00: 8a:77:0c:e8:91:74:04:ea:9b:e8:8f:c3:20:24:38: 94:13:b2:2a:88:99:4b:c3:05:d7:d3:e8:b1:e1:1a: 0c:ac:bb:2a:19:71:f1:6e:37:2f:f4:f4:f8:5f:41: 93:57:fa:60:1f:7a:d1:94:0f:15:0d:2b:15:23:73: 3b:ca:a4:19:a9:e5:85:e5:7e:59:f0:79:77:ae:a0: 7d:7a:22:c3:40:46:03:60:b2:be:b9:96:52:d5:2b: 44:57:79:0b:d3:8d:eb:97:64:75:53:c5:b0:65:77: f8:18:31:ed:62:be:41:38:f7:ef:53:93:9b:ab:24: 7f:19:a6:91:6b:83:fe:5d:ca:be:4b:3e:33:ff:1e: cf:58:44:29:42:b8:ee:66:d1:2e:58:12:d4:e6:34: 73:cb:26:69:c4:b5:17:7a:b9:7e:1b:85:bc:b0:eb: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AC:A7:48:25:D4:AF:E1:29:CF:D4:FC:4A:70:CB:17:D6:30:7E:E6 X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:3a:f6:81:9b:11:29:27:22:44:bb:db:18:c4:bf:e9:1a:7f: b2:10:d9:fc:7d:7e:94:f5:4c:31:b0:01:44:8b:1f:66:4a:2f: 21:bf:b9:ef:92:44:48:87:65:6b:43:be:23:c2:b3:fb:8e:51: 37:25:99:50:d9:ad:ea:04:4d:6b:f9:a0:a3:61:cc:a9:61:75: df:7e:b5:74:ac:3e:70:0d:98:ef:44:d2:cf:12:ac:03:c6:88: de:bb:b6:e5:1d:c6:69:c8:de:11:c6:56:14:3a:6f:aa:fd:93: 44:78:28:1e:10:99:af:3e:cb:c0:8f:ce:9c:69:0f:45:91:88: ea:3b:9f:41:56:5b:c8:40:78:17:cc:7d:e4:23:ac:8a:4c:9d: 41:b3:1f:a7:6b:60:d9:d5:69:52:d8:19:df:c1:7e:4d:0d:ea: d2:57:61:12:b7:ae:d3:d3:cd:3a:c0:6c:44:dc:3b:65:2a:c6: c2:fa:9a:e5:3a:f6:db:de:4c:5c:3f:4c:72:48:bc:2a:fa:68: 88:6c:46:0a:f2:6f:c9:a9:90:fd:72:7e:3a:3a:01:e5:1c:bb: 0e:3b:8b:56:d9:c9:89:dd:8c:e1:7b:ea:a8:fb:4c:37:06:88: 03:9e:a1:a0:9c:e6:78:99:3a:5b:b4:29:44:08:b4:3e:a4:97: 31:d4:09:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjYwOTA1MDM1NTMxWhcNMjYwOTEyMDM1NTMxWjAYMRYwFAYD VQQDEw02YTliOTJiMy0wYjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmJWUp2X3ViHcr4PTiW8v60MwBUSDL+VxLrbeBNoYyckYWWDOn66oO4rk5C9 h3nzy2tyVTvdPpzmA4+hNdEMo5+H6QerE5CNTxrdnvrwMKaBFjyqoaW08gCKdwzo kXQE6pvoj8MgJDiUE7IqiJlLwwXX0+ix4RoMrLsqGXHxbjcv9PT4X0GTV/pgH3rR lA8VDSsVI3M7yqQZqeWF5X5Z8Hl3rqB9eiLDQEYDYLK+uZZS1StEV3kL043rl2R1 U8WwZXf4GDHtYr5BOPfvU5ObqyR/GaaRa4P+Xcq+Sz4z/x7PWEQpQrjuZtEuWBLU 5jRzyyZpxLUXerl+G4W8sOuFAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmsp0gl 1K/hKc/U/EpwyxfWMH7mMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoDr2gZsRKSciRLvbGMS/6Rp/shDZ/H1+lPVMMbABRIsfZkovIb+575JESIdl a0O+I8Kz+45RNyWZUNmt6gRNa/mgo2HMqWF13361dKw+cA2Y70TSzxKsA8aI3ru2 5R3GacjeEcZWFDpvqv2TRHgoHhCZrz7LwI/OnGkPRZGI6jufQVZbyEB4F8x95COs ikydQbMfp2tg2dVpUtgZ38F+TQ3q0ldhEreu09PNOsBsRNw7ZSrGwvqa5Tr2295M XD9Mcki8KvpoiGxGCvJvyamQ/XJ+OjoB5Ry7DjuLVtnJid2M4XvqqPtMNwaIA56h oJzmeJk6W7QpRAi0PqSXMdQJSA== -----END CERTIFICATE-----Generated at Sat Sep 5 09:25:59 2026 by rpki-client