$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json) Hash identifier: sYHkqxDi2jD+N2Lsnxd8rPnwd8rK92+X//K4HihMggQ= Subject key identifier: C0:59:C1:5F:E7:04:A4:2E:5A:B7:43:22:3C:4A:D3:BD:F4:CF:97:10 Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E Certificate issuer: /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft Manifest number: 89 Signing time: Fri 11 Sep 2026 07:41:29 +0000 Manifest this update: Fri 11 Sep 2026 07:41:29 +0000 Manifest next update: Fri 18 Sep 2026 07:41:29 +0000 Files and hashes: 1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: OIw/BPPXAkY5qZkWyUXLTE0YHYggcwgxd2YnBOOwcbI=) 2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: RXKHt1MxZAi094IIW7YlJh5giMLTwFT/Xi1lVrRSFcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Validity Not Before: Sep 11 07:41:29 2026 GMT Not After : Sep 18 07:41:29 2026 GMT Subject: CN=6aa3b0a9-c4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:b0:64:c7:ce:d6:c0:f7:c3:5c:d6:e6:7e: fd:0a:7a:6e:22:89:7d:1a:78:ba:db:f2:99:a6:15: b9:2f:ff:1e:7b:f0:5f:de:0d:7a:ae:80:60:38:6b: c4:84:6a:0b:f5:dc:2a:ab:f6:99:ac:c5:f4:6f:b0: 98:b4:a6:b3:22:41:7f:7d:8e:c3:79:6f:67:c3:9f: 7f:30:3f:9b:57:4d:ae:ab:e0:1b:5b:3a:1b:71:45: 06:b4:7a:ae:92:8d:51:98:61:4f:85:78:c1:4d:38: 3e:1e:b0:c0:29:71:bd:e4:61:6e:c9:84:ea:f8:b9: 61:52:63:d7:6a:65:ce:89:30:e7:c4:3c:26:53:5c: 65:2b:ab:74:bd:47:44:26:e2:4e:91:0a:87:15:0d: e9:9f:05:29:bb:7c:5f:95:c2:24:8e:2f:3d:e3:3a: c3:31:d0:9b:43:3c:f1:61:be:0a:08:15:b3:ca:12: 3d:c7:45:9f:08:55:4f:38:0d:53:a8:8a:b4:5e:04: 8d:13:4b:1a:70:10:67:d6:0c:ed:88:18:00:0c:89: d0:98:d2:57:87:9e:7b:20:d5:88:af:0b:8d:6f:1c: 92:77:c1:a1:14:c0:86:57:62:4a:85:80:71:30:87: e1:44:9f:48:39:0b:c1:91:69:ec:7e:ab:71:15:02: 68:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:59:C1:5F:E7:04:A4:2E:5A:B7:43:22:3C:4A:D3:BD:F4:CF:97:10 X509v3 Authority Key Identifier: keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:5e:6f:8c:ef:01:ef:76:14:df:a6:03:c4:26:e2:7d:04:94: 50:81:3a:9f:fb:86:df:a9:71:ec:fb:c0:86:8d:ed:fd:2f:f6: 73:22:91:07:87:3d:68:f9:8d:0a:99:97:88:f5:d2:5c:eb:f9: 19:6c:03:dd:18:31:66:5e:35:82:ef:a8:00:4c:c1:24:58:11: 9e:d1:b1:0e:5e:83:45:a8:f1:9a:b6:d5:fc:26:ce:04:c1:be: af:d8:d6:b0:3c:2b:ed:4a:9f:04:77:db:92:7d:56:4f:fa:6a: de:0d:de:a7:17:74:92:19:20:22:13:99:f6:cc:7e:69:1e:7d: 06:7a:a9:28:f0:c8:90:9e:61:f4:aa:b2:ab:5b:c2:b8:de:3b: b7:09:21:fb:30:f2:3c:2d:72:5a:37:78:65:e9:7b:f4:2d:af: bd:39:e2:d1:ef:e6:22:bb:f3:cd:f3:83:e8:98:78:dc:37:39: bc:b8:ec:b3:94:5b:ed:a9:08:6c:5f:4b:a2:e8:95:9d:7c:20: 73:5c:d2:a5:72:31:2e:0b:b2:d5:cd:c2:63:71:4b:8e:9e:c1: 4c:f7:01:e6:39:89:d3:b2:28:be:76:9f:39:aa:d8:4f:26:79: f9:8a:de:a0:64:d3:c9:58:ce:5b:32:93:d9:ed:76:f4:46:f7: d1:60:dd:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyRUIxMTAvBgNVBAUTKDIwMDNFRTQwNTIyOUQ4OEM5NDhCNzZEQzE5NUQ0MzBC QzAyMEFGMUUwHhcNMjYwOTExMDc0MTI5WhcNMjYwOTE4MDc0MTI5WjAYMRYwFAYD VQQDEw02YWEzYjBhOS1jNGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9uwZMfO1sD3w1zW5n79CnpuIol9Gni62/KZphW5L/8ee/Bf3g16roBgOGvE hGoL9dwqq/aZrMX0b7CYtKazIkF/fY7DeW9nw59/MD+bV02uq+AbWzobcUUGtHqu ko1RmGFPhXjBTTg+HrDAKXG95GFuyYTq+LlhUmPXamXOiTDnxDwmU1xlK6t0vUdE JuJOkQqHFQ3pnwUpu3xflcIkji894zrDMdCbQzzxYb4KCBWzyhI9x0WfCFVPOA1T qIq0XgSNE0sacBBn1gztiBgADInQmNJXh557INWIrwuNbxySd8GhFMCGV2JKhYBx MIfhRJ9IOQvBkWnsfqtxFQJoHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBZwV/n BKQuWrdDIjxK0730z5cQMB8GA1UdIwQYMBaAFCAD7kBSKdiMlIt23BldQwvAIK8e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzJFQi84OTk3MjUxMkU1 MzQxMUYwOTEyQ0ZENTY2RTZGNTZCQy9JQVB1UUZJcDJJeVVpM2JjR1YxREM4QWdy eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lBUHVRRklwMkl5VWkzYmNHVjFEQzhBZ3J4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzJFQi84OTk3MjUxMkU1MzQxMUYwOTEyQ0ZENTY2RTZGNTZCQy9JQVB1UUZJcDJJ eVVpM2JjR1YxREM4QWdyeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMV5vjO8B73YU36YDxCbifQSUUIE6n/uG36lx7PvAho3t/S/2cyKRB4c9aPmN CpmXiPXSXOv5GWwD3RgxZl41gu+oAEzBJFgRntGxDl6DRajxmrbV/CbOBMG+r9jW sDwr7UqfBHfbkn1WT/pq3g3epxd0khkgIhOZ9sx+aR59BnqpKPDIkJ5h9Kqyq1vC uN47twkh+zDyPC1yWjd4Zel79C2vvTni0e/mIrvzzfOD6Jh43Dc5vLjss5Rb7akI bF9LouiVnXwgc1zSpXIxLguy1c3CY3FLjp7BTPcB5jmJ07IovnafOarYTyZ5+Yre oGTTyVjOWzKT2e129Eb30WDdEg== -----END CERTIFICATE-----Generated at Fri Sep 11 11:27:15 2026 by rpki-client