$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json) Hash identifier: U5SmTi3sOodQhsZ/b58TM+wuf/NyjmpoPsc2npeJiVU= Subject key identifier: D6:51:E2:5B:23:69:D4:97:7A:E5:1A:24:50:ED:0A:8F:50:DD:AA:26 Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft Manifest number: 04C6 Signing time: Thu 22 Oct 2026 23:56:15 +0000 Manifest this update: Thu 22 Oct 2026 23:56:15 +0000 Manifest next update: Thu 29 Oct 2026 23:56:15 +0000 Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: xGZVmFCtkqy+aSlr7aeT48hMgmBkgAGQbSk9b5hKcuQ=) 2: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: OS+MMRRjQluFNuI+98G/Gv/Ff4t99hp6Izi7LUhaJJQ=) 3: 58C00854905211EC90E6100FC4F9AE02.roa (hash: HavGxilFCXPwJZ5ysPf3ohVQv79l6ZGEb7A58aULo/M=) 4: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: JVO8JZCfYqp3N9h+hRdEkwlagsjOuD7MM+G3/8q05pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 23:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Validity Not Before: Oct 22 23:56:15 2026 GMT Not After : Oct 29 23:56:15 2026 GMT Subject: CN=6adaa29f-d78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b3:83:aa:68:a9:8e:47:70:21:8f:69:59:2e: 9d:cf:4a:22:ad:ad:d6:82:08:11:09:12:57:7a:77: e1:56:79:a9:fa:76:07:88:3f:1d:18:df:ab:24:06: f2:a3:18:45:12:be:45:03:4d:0a:d6:c6:4c:54:93: cd:91:a7:66:90:60:c5:39:52:13:b8:02:6d:61:72: 61:16:1c:71:4d:bd:70:81:0c:df:62:23:f0:1f:2c: 34:7d:ba:1c:d0:83:2d:e7:d9:86:3d:12:21:a0:98: 1c:1b:3b:38:1c:2c:4c:b2:98:98:79:66:3c:03:1f: d1:a7:44:5d:77:8e:05:00:84:6b:0d:f0:82:60:d5: e0:14:7b:5a:27:6c:62:e0:e2:b3:96:97:72:11:49: 1d:f9:29:3a:85:c1:cc:52:cd:13:e4:4b:6c:24:74: c6:ee:6e:6c:75:29:48:1b:89:6b:ea:e2:c0:30:3e: 66:cb:18:97:34:7e:fb:71:b4:ca:6f:21:ce:7b:61: f5:58:63:6a:a3:61:be:8f:15:9a:85:01:f0:fe:30: 3f:57:ac:63:83:02:a9:1a:0c:72:4b:f7:42:36:88: d3:08:73:f7:1b:1f:d7:ec:d0:c9:c0:3f:89:7d:c8: 13:91:d3:fe:83:7c:b1:b3:4b:a1:bc:27:5c:65:cb: ea:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:51:E2:5B:23:69:D4:97:7A:E5:1A:24:50:ED:0A:8F:50:DD:AA:26 X509v3 Authority Key Identifier: keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:ea:a9:3a:12:a4:2b:1b:9a:c1:37:f3:75:03:22:0a:36:45: a0:ef:7d:8e:00:dd:b8:6d:64:a8:e3:c8:66:d9:eb:80:67:21: 41:66:c9:d2:80:f8:28:85:46:f3:29:c2:58:05:53:47:3c:39: 51:8a:36:94:64:19:7b:a0:da:77:7f:c7:0e:28:f4:b8:af:2e: cb:f4:42:84:06:bf:e3:35:fd:87:66:d7:bf:15:90:80:12:b8: 20:a3:c5:cf:22:eb:7d:dd:76:3f:47:08:c4:2b:3a:d7:f8:af: 66:2f:bf:0d:df:f3:59:6b:59:d2:57:68:b6:59:81:9d:2c:4a: 45:81:d1:95:38:0c:57:7c:42:07:31:35:a1:58:66:8d:76:49: be:e9:e8:8f:10:8a:11:63:af:75:8c:b8:b7:2f:b3:89:3b:e6: 72:3a:3f:ca:ce:2c:e2:6e:61:54:a3:8a:31:b6:6e:ab:85:ed: 17:9b:55:09:51:ac:8d:23:ab:6f:5f:7e:b1:92:e8:e2:9f:e1: 81:c6:cf:cb:09:aa:5a:33:b4:bf:88:80:4f:4e:50:d5:d4:a3: 1a:4a:7b:33:ea:2c:f8:df:a7:0a:be:a1:7e:0e:53:8f:a0:f5: 8f:45:d1:b8:e7:ef:d5:ae:7e:ea:30:13:1c:82:06:ed:85:14: d8:74:04:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1 MUZGRkExQTQwHhcNMjYxMDIyMjM1NjE1WhcNMjYxMDI5MjM1NjE1WjAYMRYwFAYD VQQDEw02YWRhYTI5Zi1kNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbODqmipjkdwIY9pWS6dz0oira3WgggRCRJXenfhVnmp+nYHiD8dGN+rJAby oxhFEr5FA00K1sZMVJPNkadmkGDFOVITuAJtYXJhFhxxTb1wgQzfYiPwHyw0fboc 0IMt59mGPRIhoJgcGzs4HCxMspiYeWY8Ax/Rp0Rdd44FAIRrDfCCYNXgFHtaJ2xi 4OKzlpdyEUkd+Sk6hcHMUs0T5EtsJHTG7m5sdSlIG4lr6uLAMD5myxiXNH77cbTK byHOe2H1WGNqo2G+jxWahQHw/jA/V6xjgwKpGgxyS/dCNojTCHP3Gx/X7NDJwD+J fcgTkdP+g3yxs0uhvCdcZcvqRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZR4lsj adSXeuUaJFDtCo9Q3aomMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6 NE1DVXR0cHFPTHRSX19vYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACeqpOhKkKxuawTfzdQMiCjZFoO99jgDduG1kqOPIZtnrgGchQWbJ0oD4KIVG 8ynCWAVTRzw5UYo2lGQZe6Dad3/HDij0uK8uy/RChAa/4zX9h2bXvxWQgBK4IKPF zyLrfd12P0cIxCs61/ivZi+/Dd/zWWtZ0ldotlmBnSxKRYHRlTgMV3xCBzE1oVhm jXZJvunojxCKEWOvdYy4ty+ziTvmcjo/ys4s4m5hVKOKMbZuq4XtF5tVCVGsjSOr b19+sZLo4p/hgcbPywmqWjO0v4iAT05Q1dSjGkp7M+os+N+nCr6hfg5Tj6D1j0XR uOfv1a5+6jATHIIG7YUU2HQEgA== -----END CERTIFICATE-----Generated at Fri Oct 23 07:20:42 2026 by rpki-client