$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: bEbTlBbYkhJQyAaiM87771/X+rKOdgnY32EbmLJtCUg= Subject key identifier: 81:8C:37:76:E5:A8:A3:95:24:71:FB:01:C2:00:D6:C1:0D:1B:F8:62 Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 178A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 176A Signing time: Mon 26 Oct 2026 16:35:41 +0000 Manifest this update: Mon 26 Oct 2026 16:35:40 +0000 Manifest next update: Mon 02 Nov 2026 16:35:40 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: Ftq//PWfqCFoSZaJI+tSOOUU0M/0ddL1BUZsVQXykYQ=) 2: E259315C57CA11EA8D931284C4F9AE02.roa (hash: 2IJMCnmvY6PYsFvIoiKqGJsi5W32855ijAqfD1IGSkE=) 3: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: dU1yskZMlQoOBOEUim7mpkF90uQM5P4GdS9XBXL5d6Y=) 4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: lM2+lNkRgg0+N9l8V1gAYVqmFODjgvHitRJVHesM3xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6026 (0x178a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Oct 26 16:35:40 2026 GMT Not After : Nov 2 16:35:40 2026 GMT Subject: CN=6adf815d-eb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:1e:61:54:d4:f3:f2:1e:1c:c1:f7:8e:f3: c8:74:26:2a:d8:64:89:20:62:f9:e1:a9:68:ef:75: 57:23:62:5b:7c:cb:3d:27:ca:58:7e:80:36:92:df: fb:3a:9c:7a:31:c5:0c:6e:76:8e:5c:a6:23:6b:5c: 80:34:c9:9e:3c:44:dc:b8:a6:81:8f:95:54:67:9b: da:36:3c:b6:12:19:44:7c:b3:f1:ef:86:c3:a9:19: 3d:b8:84:2e:c6:60:8c:35:dc:c8:82:fa:d0:0e:2d: 50:b3:58:c1:f0:af:53:8a:ea:0f:db:be:8c:42:92: 77:4d:77:be:9b:96:b1:7e:27:33:ac:b8:1c:1f:b4: c2:8e:84:8a:5f:a0:d2:dc:ea:a7:8c:b9:3c:53:be: 19:f9:f3:29:7c:13:ff:7d:85:4a:73:00:f5:54:35: 36:d7:1a:bb:b2:6f:b0:9b:c3:25:c4:c8:6b:1a:ce: 6b:ea:79:18:7d:36:6b:e5:42:f2:6c:d3:86:af:95: 6c:b0:f5:61:ae:b7:6e:9b:c9:aa:0d:8d:16:fc:51: 0c:ee:c8:d9:7c:b4:16:98:58:cd:f9:0b:e1:07:2f: 0a:28:b5:c0:5e:9c:1d:57:26:0d:ce:cc:3f:0b:96: d2:9b:08:ae:ae:71:c2:b6:0c:d3:88:a1:3b:26:75: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8C:37:76:E5:A8:A3:95:24:71:FB:01:C2:00:D6:C1:0D:1B:F8:62 X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c0:66:75:7b:d7:66:0a:ba:8b:7a:23:a7:ab:aa:81:74:25: 9b:f8:dd:c7:8a:8e:e9:c5:6c:81:f0:19:e8:09:47:b2:fc:56: 61:06:6d:80:30:36:a5:83:85:f2:17:30:d8:24:c5:86:70:09: e5:fe:fb:68:43:14:5f:d1:c7:40:05:24:d5:67:81:26:8e:c5: af:c5:3b:ef:a7:0a:fe:69:88:a2:eb:2f:76:4c:08:35:4a:73: 44:2f:6d:6e:47:f5:ec:37:14:a6:20:70:97:e5:98:7a:7e:85: 0a:23:d7:18:42:7b:36:bd:8b:0f:2d:cb:54:df:bc:d9:3e:a2: fc:c2:d4:d8:a2:a8:fb:34:91:e2:bf:3a:2c:02:64:8f:ce:cb: 4a:17:f9:f9:1b:7c:1b:77:b9:a9:d7:b5:fc:b9:21:00:d2:d0: 20:79:c1:7c:b7:86:85:db:d0:13:5c:68:2b:a9:06:9f:36:fe: 65:de:d1:6d:a6:e3:f2:d1:c3:72:eb:40:dd:25:84:20:46:15: 14:4a:df:ef:39:07:61:e0:43:e1:9a:d4:42:ca:e3:70:66:d3: 6e:65:d8:31:68:d5:bb:44:0e:f4:25:4f:d4:74:8c:04:ab:2d: d8:c8:d6:81:0c:94:6e:29:91:b1:bb:ae:df:74:00:c9:de:c8: 5a:21:23:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjYxMDI2MTYzNTQwWhcNMjYxMTAyMTYzNTQwWjAYMRYwFAYD VQQDEw02YWRmODE1ZC1lYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuQeYVTU8/IeHMH3jvPIdCYq2GSJIGL54alo73VXI2JbfMs9J8pYfoA2kt/7 Opx6McUMbnaOXKYja1yANMmePETcuKaBj5VUZ5vaNjy2EhlEfLPx74bDqRk9uIQu xmCMNdzIgvrQDi1Qs1jB8K9TiuoP276MQpJ3TXe+m5axficzrLgcH7TCjoSKX6DS 3OqnjLk8U74Z+fMpfBP/fYVKcwD1VDU21xq7sm+wm8MlxMhrGs5r6nkYfTZr5ULy bNOGr5VssPVhrrdum8mqDY0W/FEM7sjZfLQWmFjN+QvhBy8KKLXAXpwdVyYNzsw/ C5bSmwiurnHCtgzTiKE7JnUNfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGMN3bl qKOVJHH7AcIA1sENG/hiMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApcBmdXvXZgq6i3ojp6uqgXQlm/jdx4qO6cVsgfAZ6AlHsvxWYQZtgDA2pYOF 8hcw2CTFhnAJ5f77aEMUX9HHQAUk1WeBJo7Fr8U776cK/mmIousvdkwINUpzRC9t bkf17DcUpiBwl+WYen6FCiPXGEJ7Nr2LDy3LVN+82T6i/MLU2KKo+zSR4r86LAJk j87LShf5+Rt8G3e5qde1/LkhANLQIHnBfLeGhdvQE1xoK6kGnzb+Zd7Rbabj8tHD cutA3SWEIEYVFErf7zkHYeBD4ZrUQsrjcGbTbmXYMWjVu0QO9CVP1HSMBKst2MjW gQyUbimRsbuu33QAyd7IWiEjJw== -----END CERTIFICATE-----Generated at Tue Oct 27 15:36:37 2026 by rpki-client