$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: zh3mfPOO3b/ARIv7Sms8/Zbq6+RTEITqHl/4B8/ZMQA= Subject key identifier: A2:2A:23:E9:C1:F4:EE:B4:5C:2B:E6:F6:03:60:35:61:58:D7:D5:28 Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 021C Signing time: Thu 03 Sep 2026 03:14:58 +0000 Manifest this update: Thu 03 Sep 2026 03:14:57 +0000 Manifest next update: Thu 10 Sep 2026 03:14:57 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: pnkFsxW5ufu6SXZMjmDdNbQNJJvm6utO4Tp1G5rpbuU=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: Ex6856vtPlckr5FuK0PcSYmdaB3fVcZv426LeJ8/9Ks=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: gBKnDCCLWxnGlGgKbKhx7Kuw4fUvutFlS6nnCXgPjME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 03:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Sep 3 03:14:57 2026 GMT Not After : Sep 10 03:14:57 2026 GMT Subject: CN=6a98e632-7575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:ac:2d:a5:8a:47:04:76:31:89:1b:04:b8: 1e:3b:f9:dc:55:e4:2d:6e:9c:35:c3:cc:d1:cd:64: e9:d6:54:53:99:99:d2:8d:87:41:49:2e:b5:83:e5: 5a:69:1a:a8:9e:83:d6:37:39:60:a4:13:96:69:a2: db:93:b9:f4:43:18:39:be:d8:24:2e:ae:2a:df:9b: f3:07:39:ab:41:86:08:1b:eb:52:b6:ec:d9:ff:42: 80:1b:0d:83:55:58:70:49:e0:e3:ac:41:bc:f9:fd: 95:97:d6:27:86:cd:c6:1a:96:4c:13:07:53:0e:77: 15:42:88:3d:e3:ed:fc:1c:13:cb:09:1b:ab:2f:61: 1a:ba:48:5f:9a:a9:38:61:72:d0:10:68:5a:5e:26: a9:4f:9c:ec:54:e2:ad:f9:65:18:3a:3e:fd:56:b8: e6:34:2e:c7:d4:27:03:6d:4d:70:35:f7:59:a4:7e: 64:1e:f8:41:f2:9d:00:3c:30:75:70:56:bd:00:74: ab:3e:8e:c5:69:57:78:b1:09:6a:d0:48:f0:6f:11: 10:34:dc:73:09:43:3d:39:3e:41:61:6d:b1:03:5e: a4:66:ea:a5:c2:02:94:2a:07:8e:de:74:10:90:5d: 97:26:6d:9b:e8:a5:25:6f:39:d8:fe:02:25:ff:89: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2A:23:E9:C1:F4:EE:B4:5C:2B:E6:F6:03:60:35:61:58:D7:D5:28 X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a7:4e:3d:d5:ae:5e:8c:9d:64:e8:b4:66:aa:75:f6:27:04: e7:65:99:20:4f:a6:18:4c:c1:31:82:e0:68:a8:41:5c:95:68: de:7d:06:c7:ad:a5:e7:97:66:a4:28:7d:80:d9:e0:bc:3f:9e: b5:6a:1e:91:24:c4:6e:ba:3e:56:6a:60:0d:08:47:eb:14:18: eb:1a:e2:18:13:e6:03:2a:05:77:f9:01:d9:3e:e1:a6:74:20: 41:b5:a4:2e:c6:69:6d:ba:d8:05:a0:ba:26:fb:7b:f6:e1:75: 70:d8:f3:e9:79:cb:6d:68:1d:ed:f6:2c:ba:8f:3e:45:c2:2b: 96:7c:b9:2b:cf:44:6c:de:e0:06:a8:ea:74:ec:34:14:8a:02: 9e:e7:d0:81:e4:e0:55:97:72:52:32:10:b3:79:bf:e9:fc:fa: 3e:1a:42:0a:e2:a5:8d:ac:cf:74:ff:a1:60:ed:d3:e3:ae:2d: dd:9d:df:1e:27:83:8b:f1:78:f6:ea:da:b5:3a:8e:94:c1:88: 6d:69:9c:a0:fc:63:c2:fb:08:c3:4b:d8:4a:af:95:f3:00:af: 2d:e1:b4:d6:91:91:df:3b:4c:4b:f4:8e:fe:d8:d5:58:d8:e0: 8f:ef:cb:01:9e:41:fa:29:fa:a7:40:54:01:e7:d0:12:7c:89: d8:96:a6:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjYwOTAzMDMxNDU3WhcNMjYwOTEwMDMxNDU3WjAYMRYwFAYD VQQDEw02YTk4ZTYzMi03NTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvE6sLaWKRwR2MYkbBLgeO/ncVeQtbpw1w8zRzWTp1lRTmZnSjYdBSS61g+Va aRqonoPWNzlgpBOWaaLbk7n0Qxg5vtgkLq4q35vzBzmrQYYIG+tStuzZ/0KAGw2D VVhwSeDjrEG8+f2Vl9Ynhs3GGpZMEwdTDncVQog94+38HBPLCRurL2Eaukhfmqk4 YXLQEGhaXiapT5zsVOKt+WUYOj79VrjmNC7H1CcDbU1wNfdZpH5kHvhB8p0APDB1 cFa9AHSrPo7FaVd4sQlq0EjwbxEQNNxzCUM9OT5BYW2xA16kZuqlwgKUKgeO3nQQ kF2XJm2b6KUlbznY/gIl/4nDDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIqI+nB 9O60XCvm9gNgNWFY19UoMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbKdOPdWuXoydZOi0Zqp19icE52WZIE+mGEzBMYLgaKhBXJVo3n0Gx62l55dm pCh9gNngvD+etWoekSTEbro+VmpgDQhH6xQY6xriGBPmAyoFd/kB2T7hpnQgQbWk LsZpbbrYBaC6Jvt79uF1cNjz6XnLbWgd7fYsuo8+RcIrlny5K89EbN7gBqjqdOw0 FIoCnufQgeTgVZdyUjIQs3m/6fz6PhpCCuKljazPdP+hYO3T464t3Z3fHieDi/F4 9uratTqOlMGIbWmcoPxjwvsIw0vYSq+V8wCvLeG01pGR3ztMS/SO/tjVWNjgj+/L AZ5B+in6p0BUAefQEnyJ2Jam0A== -----END CERTIFICATE-----Generated at Fri Sep 4 21:20:16 2026 by rpki-client