$ rpki-client -vvvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: lgvfFqcEPojKgBTzTS2KuiA2b/l/7KkrlHfDAnby8PM= Subject key identifier: AF:52:4A:74:4E:E0:7B:6E:FC:8A:AE:59:A8:5B:C3:FF:54:C5:65:2F Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 2724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 2684 Signing time: Mon 28 Sep 2026 15:43:45 +0000 Manifest this update: Mon 28 Sep 2026 15:43:44 +0000 Manifest next update: Mon 05 Oct 2026 15:43:44 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: Etq6oZs8kEufRmzBEO9Da3BBfs9lF71wnF7djRpQ7V0=) 2: zkBikKUl3lPsbC4a0-eUJ1qbg9M.asa (hash: vXNxplU4nHUvqKIQrYZCV0NYsNxJaY3R+DekKUZs3ew=) 3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: s5t3nBsHxduiqzrsbiUZU1vBJBYLm9M4BNp5Uh+xDCI=) 4: 116C82261B9E11F1BD5D432E033D8C67.roa (hash: 7WrvXgo1QyQdsuH98rmULq0FzYzVfwR0RV0PelNSZEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 15:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10020 (0x2724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Sep 28 15:43:44 2026 GMT Not After : Oct 5 15:43:44 2026 GMT Subject: CN=6aba8b31-2d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:18:bb:07:c3:89:e4:c2:1c:1c:2f:bf:67:b1: 1c:74:d6:6a:6b:26:26:25:12:3d:19:e5:af:90:c8: e9:65:16:cb:5d:ee:0a:80:ca:8e:69:82:2e:9e:e1: c9:b8:07:95:72:b0:69:dd:71:26:89:c3:4b:13:2e: 7d:6c:65:51:1f:1d:7d:22:2b:25:28:11:18:09:1f: 05:09:56:5d:df:1e:c4:33:7c:e4:07:ae:a5:6c:7b: 63:6b:7e:f4:bf:8f:79:e1:6b:1d:5e:dc:a8:48:fb: 94:a9:cd:2b:9c:ec:51:f5:1c:92:5b:32:b9:d5:d8: 89:7a:57:1a:51:db:82:d0:04:9c:93:bf:97:59:bf: 08:5f:f6:55:1c:19:c3:a5:ad:e6:ea:b8:32:0a:0a: cc:c4:72:f8:c8:90:ef:b0:6d:41:68:b4:6e:9e:94: 13:4c:12:68:9a:aa:52:74:23:58:48:8d:62:a9:5e: 34:93:da:b5:02:0e:a9:6b:1c:bd:5b:0f:24:6a:22: 76:fd:36:d2:33:19:da:7e:1a:53:73:51:bb:6a:9b: f3:22:88:bf:1f:41:ed:aa:93:14:92:70:91:76:e8: e3:1f:5f:df:d8:8a:27:2e:b9:be:34:56:f9:67:95: e0:94:84:1f:8e:18:39:60:ba:0e:6a:bd:27:d0:4d: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:52:4A:74:4E:E0:7B:6E:FC:8A:AE:59:A8:5B:C3:FF:54:C5:65:2F X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c1:4e:40:32:43:12:5f:31:29:64:ff:8e:fd:97:e8:44:cc: 19:94:78:ee:4b:40:5f:e7:90:5c:5b:b8:56:7f:63:08:bc:be: 44:29:66:02:9b:37:5f:51:4f:13:0e:8f:46:28:36:4d:e5:2c: 11:49:a4:a6:fc:86:c9:1b:97:d7:a7:c0:1f:54:8c:94:28:07: 72:0b:ad:ff:9b:ac:13:1a:48:35:89:07:ee:ae:d4:ab:ba:a3: c1:01:89:50:d8:0a:7d:3b:0c:f2:07:fd:91:fe:82:70:20:c1: 70:72:42:32:ca:a6:88:f0:55:26:df:aa:b6:bb:db:35:c1:28: c0:3f:5f:8c:6b:f3:2f:1f:5b:b3:9e:f1:c9:11:97:2c:6f:55: df:1b:cc:3d:6f:80:f7:31:d6:ac:19:86:c3:85:80:a0:fb:5d: 40:c2:9e:69:b9:de:de:9b:d0:5a:bd:cd:72:8c:a5:7a:c1:63: fc:e6:b1:8f:14:f6:7a:b6:38:39:da:7d:b3:e6:f7:4d:f7:72: fa:ab:d2:6f:2a:b9:5a:9f:2a:a9:91:2f:9b:3d:0d:c3:85:fd: 13:fa:58:3a:79:25:b4:01:dd:58:29:34:72:1f:bb:4d:39:37: 37:aa:e8:83:17:f7:5d:cc:f2:64:f1:f8:ef:1b:10:00:0f:2e: 90:a6:86:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjYwOTI4MTU0MzQ0WhcNMjYxMDA1MTU0MzQ0WjAYMRYwFAYD VQQDEw02YWJhOGIzMS0yZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xi7B8OJ5MIcHC+/Z7EcdNZqayYmJRI9GeWvkMjpZRbLXe4KgMqOaYIunuHJ uAeVcrBp3XEmicNLEy59bGVRHx19IislKBEYCR8FCVZd3x7EM3zkB66lbHtja370 v4954WsdXtyoSPuUqc0rnOxR9RySWzK51diJelcaUduC0ASck7+XWb8IX/ZVHBnD pa3m6rgyCgrMxHL4yJDvsG1BaLRunpQTTBJomqpSdCNYSI1iqV40k9q1Ag6paxy9 Ww8kaiJ2/TbSMxnafhpTc1G7apvzIoi/H0HtqpMUknCRdujjH1/f2IonLrm+NFb5 Z5XglIQfjhg5YLoOar0n0E3hYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9SSnRO 4Htu/IquWahbw/9UxWUvMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPsFOQDJDEl8xKWT/jv2X6ETMGZR47ktAX+eQXFu4Vn9jCLy+RClmAps3X1FP Ew6PRig2TeUsEUmkpvyGyRuX16fAH1SMlCgHcgut/5usExpINYkH7q7Uq7qjwQGJ UNgKfTsM8gf9kf6CcCDBcHJCMsqmiPBVJt+qtrvbNcEowD9fjGvzLx9bs57xyRGX LG9V3xvMPW+A9zHWrBmGw4WAoPtdQMKeabne3pvQWr3NcoylesFj/OaxjxT2erY4 Odp9s+b3Tfdy+qvSbyq5Wp8qqZEvmz0Nw4X9E/pYOnkltAHdWCk0ch+7TTk3N6ro gxf3XczyZPH47xsQAA8ukKaGgw== -----END CERTIFICATE-----Generated at Mon Sep 28 22:49:34 2026 by rpki-client