$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft File: IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json) Hash identifier: aprvxLowKk8rOne2NJNF2K2hAOxxjcXHDdeKhykDeZY= Subject key identifier: 55:51:37:8F:C6:72:E0:97:2A:F5:3A:E0:97:3D:8A:EB:BC:F6:28:23 Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 Certificate issuer: /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Certificate serial: 112B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft Manifest number: 111B Signing time: Wed 28 Oct 2026 17:20:36 +0000 Manifest this update: Wed 28 Oct 2026 17:20:36 +0000 Manifest next update: Wed 04 Nov 2026 17:20:36 +0000 Files and hashes: 1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: wll8E1AHOztXHOaA7SSIDaORMo69KseNAeCtymUXg2o=) 2: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: a8kvW6Orzqu3ANz5V7LVYSu6qTioAnb21VQHXAb65ds=) 3: 608836D046B111E98B793856C4F9AE02.roa (hash: CkPn2ZJIX2L7WrIqMPI/SIicfwibPMx/ZU7x2GuJAkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 17:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4395 (0x112b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Validity Not Before: Oct 28 17:20:36 2026 GMT Not After : Nov 4 17:20:36 2026 GMT Subject: CN=6ae22ee4-b7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:35:4a:03:f6:d5:bc:1c:d3:22:66:69:f4: 25:62:f0:b4:80:11:43:ef:5a:ff:6f:11:b0:7c:0a: f5:ba:90:fb:fb:bc:ba:01:c0:4c:3c:83:e0:07:e7: 2e:9b:d7:4e:e6:0a:86:ab:f8:9b:63:85:60:81:4c: bd:d9:2a:40:45:00:4e:a7:7e:00:d0:57:21:66:cc: c1:06:1f:7d:87:f3:a1:df:86:19:54:0c:64:47:fc: e6:ce:1a:cc:63:dc:5c:9a:ac:42:02:97:63:dc:75: dd:65:32:41:35:50:95:08:5e:5a:e6:0f:0f:33:17: 24:78:d9:bc:a6:ee:c6:66:38:e8:11:20:ae:d4:d9: eb:7b:d9:96:96:ad:3f:99:6d:fb:c7:31:95:d3:73: b9:9a:93:d8:d6:36:ee:c0:b9:9a:c2:54:10:92:3b: 48:dc:0e:5f:bf:dc:a8:ff:c4:c1:d9:a3:ff:70:99: 3c:04:29:0d:b2:e1:dc:46:d5:f8:e4:e7:8b:41:6c: 95:84:39:99:9d:78:76:5d:2d:60:55:5f:88:b5:49: 93:f6:d0:70:46:f4:ba:db:ca:f3:c8:db:fe:a3:3b: c2:d3:6b:69:1d:97:b2:c6:bb:35:84:9e:67:62:5b: 97:aa:01:d0:fc:51:a9:19:05:9b:d8:c6:3e:fd:8d: ab:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:51:37:8F:C6:72:E0:97:2A:F5:3A:E0:97:3D:8A:EB:BC:F6:28:23 X509v3 Authority Key Identifier: keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8e:30:9b:04:9d:ac:7f:a8:39:9a:8e:ac:76:b1:3a:44:ce: 62:1c:d5:35:38:7d:fe:6b:2c:58:8b:3a:dc:a7:e3:d7:70:7c: ff:3b:c6:cb:22:07:45:cf:47:dd:a5:e5:44:d7:14:c8:e4:9c: 5d:64:09:97:a7:b0:32:0e:df:3e:eb:24:a9:b8:d4:90:4e:ce: 6b:f5:2f:d9:8a:c6:fe:09:91:01:4b:ed:1c:73:58:33:75:90: 4a:e3:ac:fe:9a:1b:b0:93:b6:eb:f9:28:17:3c:8c:3d:da:36: 09:0f:2c:1a:d2:62:61:2b:b1:6c:66:90:6f:e8:cf:84:65:76: 92:01:3d:80:56:37:91:53:38:a3:c4:f9:f2:f1:4c:34:13:57: b1:d5:fc:5d:2c:00:f5:94:b2:76:18:bf:0a:84:1d:53:be:16: 03:42:7d:55:35:1b:68:58:78:f7:5b:e5:7c:4f:78:98:61:4c: 7a:ea:e1:7d:68:25:1d:c7:9c:0c:4f:17:7e:80:2f:cc:6d:2d: 5b:be:37:20:e2:78:a7:9e:fc:d2:ec:a3:d4:b9:a2:15:02:d2: 7d:00:53:f5:bc:d9:81:7d:a5:b1:00:50:04:b2:a0:68:f3:73: ed:ec:34:4b:d0:06:cf:a7:e8:3a:81:d2:5b:22:af:9b:68:36: 84:ba:72:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICESswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKDIyM0JFMTk4OTJFNkU2Q0I0MDZFNUZBOTk1NkREQkNF QTk1Q0JCNDYwHhcNMjYxMDI4MTcyMDM2WhcNMjYxMTA0MTcyMDM2WjAYMRYwFAYD VQQDEw02YWUyMmVlNC1iN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVQ1SgP21bwc0yJmafQlYvC0gBFD71r/bxGwfAr1upD7+7y6AcBMPIPgB+cu m9dO5gqGq/ibY4VggUy92SpARQBOp34A0FchZszBBh99h/Oh34YZVAxkR/zmzhrM Y9xcmqxCApdj3HXdZTJBNVCVCF5a5g8PMxckeNm8pu7GZjjoESCu1Nnre9mWlq0/ mW37xzGV03O5mpPY1jbuwLmawlQQkjtI3A5fv9yo/8TB2aP/cJk8BCkNsuHcRtX4 5OeLQWyVhDmZnXh2XS1gVV+ItUmT9tBwRvS628rzyNv+ozvC02tpHZeyxrs1hJ5n YluXqgHQ/FGpGQWb2MY+/Y2rnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVRN4/G cuCXKvU64Jc9iuu89igjMB8GA1UdIwQYMBaAFCI74ZiS5ubLQG5fqZVt286pXLtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9CNkE5RjI2MDQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVzdEFibC1wbFczYnpxbGN1 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lqdmhtSkxtNXN0QWJsLXBsVzNienFsY3UwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9CNkE5RjI2MDQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVz dEFibC1wbFczYnpxbGN1MFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbo4wmwSdrH+oOZqOrHaxOkTOYhzVNTh9/mssWIs63Kfj13B8/zvGyyIHRc9H 3aXlRNcUyOScXWQJl6ewMg7fPuskqbjUkE7Oa/Uv2YrG/gmRAUvtHHNYM3WQSuOs /pobsJO26/koFzyMPdo2CQ8sGtJiYSuxbGaQb+jPhGV2kgE9gFY3kVM4o8T58vFM NBNXsdX8XSwA9ZSydhi/CoQdU74WA0J9VTUbaFh491vlfE94mGFMeurhfWglHcec DE8XfoAvzG0tW743IOJ4p5780uyj1LmiFQLSfQBT9bzZgX2lsQBQBLKgaPNz7ew0 S9AGz6foOoHSWyKvm2g2hLpyPw== -----END CERTIFICATE-----Generated at Wed Oct 28 23:36:09 2026 by rpki-client