$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: 1TW3lk3fMPzTsXbtU70coaOoG0G23ycLVAYF0PDocvs= Subject key identifier: 5F:04:77:AF:6E:97:AD:67:2C:AD:0B:49:A3:9C:01:E4:E7:7F:8B:AC Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 176E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 1751 Signing time: Thu 10 Sep 2026 16:34:53 +0000 Manifest this update: Thu 10 Sep 2026 16:34:53 +0000 Manifest next update: Thu 17 Sep 2026 16:34:53 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: xJlMbV20CdfHGzUVd/ckOfLj/KDOb9XuHiQBpl6q6Wk=) 2: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: sk2XL2BNft3Qb5DlW0IYmAxdXBhZMlrkB9WLp+WKc50=) 3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: bxgVx+Ckcae/iQQ31WregWFbQ2YBNnnGGH36C1uq1eE=) 4: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5998 (0x176e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Sep 10 16:34:53 2026 GMT Not After : Sep 17 16:34:53 2026 GMT Subject: CN=6aa2dc2d-2e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:87:86:fa:73:36:a2:d9:36:c6:46:6f:22: 72:63:62:2d:80:9d:87:07:63:4e:4f:22:0a:17:eb: ca:d0:a3:c9:31:f4:56:35:ed:ee:fb:dd:14:2b:e2: 5e:70:e4:ed:f7:b7:88:f3:40:61:05:7c:f2:2b:7b: 67:36:d2:a5:e5:7f:8a:aa:39:67:6a:c4:84:f9:c5: 1d:aa:c9:c3:17:7a:de:9c:2f:49:01:83:19:36:34: c5:42:2e:36:a3:30:2a:d1:98:d6:6d:a5:4d:e1:45: fc:48:a0:d8:a6:50:f1:a9:a1:a0:20:2c:71:18:ff: a8:2b:1e:99:8c:b2:1d:c2:6e:fa:38:44:12:e5:f3: 0a:e3:1a:e0:bb:cc:60:ea:f1:54:f1:3d:4f:29:ea: ec:17:b1:3e:91:eb:a0:95:d3:ce:55:8e:b8:6b:56: 9d:17:49:1d:bb:15:44:60:c6:48:5e:27:2b:03:12: 58:88:df:17:f9:28:cb:ef:53:44:98:d4:d5:05:2d: bd:4c:4d:d4:7e:af:3e:ea:46:00:25:65:1c:d0:7a: 1f:12:fd:44:dc:22:fd:d8:b0:11:dc:f3:d5:8b:e1: ea:7f:20:94:fc:31:a0:3a:92:b5:be:d1:ec:eb:e6: 9d:78:08:01:89:81:79:ea:b5:54:7e:4f:8f:da:79: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:04:77:AF:6E:97:AD:67:2C:AD:0B:49:A3:9C:01:E4:E7:7F:8B:AC X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:3a:d0:ed:e2:e6:22:04:a7:d1:d5:07:b4:b5:2e:60:be:74: 50:38:18:46:cd:69:91:d1:10:46:07:8f:cd:43:34:a5:67:40: 1a:d4:52:17:4d:93:dd:b4:ba:91:06:04:28:b1:8c:a2:19:cb: e1:2c:e7:33:9b:b3:04:fb:d9:9f:bc:b1:aa:1c:66:2b:44:98: 2f:89:94:f1:8d:2c:4e:57:30:57:0f:3a:87:2a:61:d6:fa:83: 45:4c:9d:c2:85:7b:9f:e0:b3:42:25:79:6e:5b:e6:1e:ff:fb: ac:87:3b:5a:fa:cb:14:17:f5:2c:9d:8d:1f:17:90:7b:d5:6e: 6f:b3:d6:26:78:9b:af:63:5d:98:4f:5d:0a:97:4d:85:6c:30: 2b:0a:ee:fa:93:56:44:0e:4b:60:b2:bc:8c:81:15:65:b8:7c: 4a:25:c9:ad:b4:eb:0f:07:b1:e8:d1:2c:d2:79:68:ec:ba:2d: 44:f9:eb:5d:29:87:78:bd:67:e1:b8:6c:1b:4d:4d:43:14:16: de:09:55:3f:cf:6e:93:94:50:22:14:e5:6a:69:77:56:24:95: c4:9f:30:e0:7c:65:fc:80:35:c9:6e:a1:f2:ad:94:ba:2f:34: f2:e8:6f:c5:2a:33:08:4f:5d:9e:85:c0:e5:c1:3b:1a:4f:b0: 8c:4e:3c:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjYwOTEwMTYzNDUzWhcNMjYwOTE3MTYzNDUzWjAYMRYwFAYD VQQDEw02YWEyZGMyZC0yZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/eHhvpzNqLZNsZGbyJyY2ItgJ2HB2NOTyIKF+vK0KPJMfRWNe3u+90UK+Je cOTt97eI80BhBXzyK3tnNtKl5X+KqjlnasSE+cUdqsnDF3renC9JAYMZNjTFQi42 ozAq0ZjWbaVN4UX8SKDYplDxqaGgICxxGP+oKx6ZjLIdwm76OEQS5fMK4xrgu8xg 6vFU8T1PKersF7E+keugldPOVY64a1adF0kduxVEYMZIXicrAxJYiN8X+SjL71NE mNTVBS29TE3Ufq8+6kYAJWUc0HofEv1E3CL92LAR3PPVi+HqfyCU/DGgOpK1vtHs 6+adeAgBiYF56rVUfk+P2nmQjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8Ed69u l61nLK0LSaOcAeTnf4usMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQzrQ7eLmIgSn0dUHtLUuYL50UDgYRs1pkdEQRgePzUM0pWdAGtRSF02T3bS6 kQYEKLGMohnL4SznM5uzBPvZn7yxqhxmK0SYL4mU8Y0sTlcwVw86hyph1vqDRUyd woV7n+CzQiV5blvmHv/7rIc7WvrLFBf1LJ2NHxeQe9Vub7PWJnibr2NdmE9dCpdN hWwwKwru+pNWRA5LYLK8jIEVZbh8SiXJrbTrDwex6NEs0nlo7LotRPnrXSmHeL1n 4bhsG01NQxQW3glVP89uk5RQIhTlaml3ViSVxJ8w4Hxl/IA1yW6h8q2Uui808uhv xSozCE9dnoXA5cE7Gk+wjE48QA== -----END CERTIFICATE-----Generated at Fri Sep 11 05:06:33 2026 by rpki-client