$ rpki-client -vvvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: H8QMUORKyExHJgqZvb1w/Qt1E2w5/MtkPw0UdZCMdTA= Subject key identifier: F7:8F:8A:0C:E9:F3:1E:19:43:89:DE:43:A4:4C:5F:CC:F6:C4:38:3F Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 2723 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 2683 Signing time: Sat 26 Sep 2026 15:44:01 +0000 Manifest this update: Sat 26 Sep 2026 15:44:01 +0000 Manifest next update: Sat 03 Oct 2026 15:44:01 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: Dgjyf0crxb1rO2CO0fwuhMHk4doYmHBSglWquMPNNeI=) 2: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: s5t3nBsHxduiqzrsbiUZU1vBJBYLm9M4BNp5Uh+xDCI=) 3: 116C82261B9E11F1BD5D432E033D8C67.roa (hash: 7WrvXgo1QyQdsuH98rmULq0FzYzVfwR0RV0PelNSZEY=) 4: zkBikKUl3lPsbC4a0-eUJ1qbg9M.asa (hash: vXNxplU4nHUvqKIQrYZCV0NYsNxJaY3R+DekKUZs3ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 15:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10019 (0x2723) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Sep 26 15:44:01 2026 GMT Not After : Oct 3 15:44:01 2026 GMT Subject: CN=6ab7e841-aa6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:11:18:02:23:b0:60:a6:46:85:bb:87:a3: 0e:29:5a:a5:7a:40:29:cb:77:4d:d8:82:d2:22:46: 6c:50:f0:6e:68:ec:24:2b:a3:32:cd:ec:cf:58:67: bc:7c:9e:4e:10:8f:23:91:80:b6:78:8a:3e:1f:fe: 69:ba:b4:66:d0:53:d8:0c:21:79:03:4e:91:c6:b0: 6d:34:20:ea:e5:3a:36:58:e7:20:52:03:dc:82:9c: 4f:5f:9a:9d:68:88:5d:8b:8a:20:64:66:1f:ce:44: 88:33:4a:e8:34:c2:de:f2:39:ec:92:96:6e:10:7b: 60:56:d7:5a:c2:6e:6b:a1:b8:4e:31:b9:8a:19:59: e0:71:f7:91:49:3f:b9:29:8d:90:7f:5b:b4:49:fe: 84:20:79:e6:18:a8:a5:d7:f3:2c:5b:04:9c:99:31: 73:38:9c:90:91:23:ae:01:60:d0:36:d4:ab:6a:98: 6b:7d:36:5a:2a:9c:71:a8:fc:1d:f9:ca:05:d4:28: c9:97:40:9e:74:b9:c6:92:3b:1c:95:bc:f2:44:81: 4b:ea:e3:7d:af:f9:12:8a:d7:7f:6a:aa:b7:23:4f: f6:66:e2:cf:af:39:0a:2a:45:03:f5:a5:da:fa:bf: 99:9d:f6:f0:e1:0e:c4:1f:4a:b8:57:f0:94:0b:92: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8F:8A:0C:E9:F3:1E:19:43:89:DE:43:A4:4C:5F:CC:F6:C4:38:3F X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:21:0c:f0:66:1f:45:fb:f4:a2:70:d1:34:68:05:1b:75:ac: b1:fd:e3:db:13:e9:58:d3:c2:52:8a:f7:29:78:ea:84:3d:b1: ef:03:e7:7b:fa:49:33:11:c8:37:fd:1f:07:97:ba:16:74:30: 21:c8:8d:0c:92:6a:ad:50:a5:25:37:95:c7:3e:41:fb:cd:dc: 79:2c:9c:86:72:52:32:30:fc:7c:3d:7e:dd:87:70:02:c2:00: a2:fa:2d:c9:e2:6e:34:6d:5d:c9:1c:dd:20:2a:04:c8:24:08: 64:8c:7b:90:07:5d:aa:6f:48:98:e7:27:e5:84:bf:a9:ee:ee: 2b:3a:08:c0:a7:74:62:c1:46:da:3f:05:31:a4:5d:6f:93:cf: b7:c9:ca:07:1e:8b:29:4f:21:7f:a5:2b:fb:49:fa:ab:a5:e4: 07:6d:51:18:f5:6a:18:1e:67:c3:6e:f4:b9:7d:f4:83:95:bc: 4d:fe:0f:85:60:b1:b0:9b:9f:b6:85:19:9b:b1:ef:5a:d6:c6: ee:e7:0c:18:42:41:a5:75:46:ce:33:03:84:7c:89:45:df:4d: ae:63:be:a7:ef:96:33:01:17:b2:d5:61:ca:ba:63:0d:32:41: bf:49:e8:5d:fa:1d:38:95:e1:03:a5:e9:4d:66:d0:c6:6f:f2: b5:19:62:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjYwOTI2MTU0NDAxWhcNMjYxMDAzMTU0NDAxWjAYMRYwFAYD VQQDEw02YWI3ZTg0MS1hYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtigRGAIjsGCmRoW7h6MOKVqlekApy3dN2ILSIkZsUPBuaOwkK6MyzezPWGe8 fJ5OEI8jkYC2eIo+H/5purRm0FPYDCF5A06RxrBtNCDq5To2WOcgUgPcgpxPX5qd aIhdi4ogZGYfzkSIM0roNMLe8jnskpZuEHtgVtdawm5robhOMbmKGVngcfeRST+5 KY2Qf1u0Sf6EIHnmGKil1/MsWwScmTFzOJyQkSOuAWDQNtSraphrfTZaKpxxqPwd +coF1CjJl0CedLnGkjsclbzyRIFL6uN9r/kSitd/aqq3I0/2ZuLPrzkKKkUD9aXa +r+Znfbw4Q7EH0q4V/CUC5LmawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPePigzp 8x4ZQ4neQ6RMX8z2xDg/MB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARyEM8GYfRfv0onDRNGgFG3Wssf3j2xPpWNPCUor3KXjqhD2x7wPne/pJMxHI N/0fB5e6FnQwIciNDJJqrVClJTeVxz5B+83ceSychnJSMjD8fD1+3YdwAsIAovot yeJuNG1dyRzdICoEyCQIZIx7kAddqm9ImOcn5YS/qe7uKzoIwKd0YsFG2j8FMaRd b5PPt8nKBx6LKU8hf6Ur+0n6q6XkB21RGPVqGB5nw270uX30g5W8Tf4PhWCxsJuf toUZm7HvWtbG7ucMGEJBpXVGzjMDhHyJRd9NrmO+p++WMwEXstVhyrpjDTJBv0no XfodOJXhA6XpTWbQxm/ytRlipw== -----END CERTIFICATE-----Generated at Mon Sep 28 03:58:59 2026 by rpki-client