$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft File: IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft (raw, json) Hash identifier: G6/+hdSveplL/CDLdtqmJRIpik258eFRjba8l1sh0GI= Subject key identifier: 8D:27:F4:1D:0F:B2:87:63:F7:35:53:A8:45:E7:04:30:AF:1C:BD:24 Authority key identifier: 22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62 Certificate issuer: /CN=A9195BA9/serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62 Certificate serial: 0AB4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft Manifest number: 0AA2 Signing time: Tue 18 Aug 2026 19:48:37 +0000 Manifest this update: Tue 18 Aug 2026 19:48:37 +0000 Manifest next update: Tue 25 Aug 2026 19:48:37 +0000 Files and hashes: 1: IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl (hash: NwnMb+w68E7ceB7sZCn2crAu7k+3PLgMqlEq19xghGk=) 2: 543CDDF0839011EAB5B82263C4F9AE02.roa (hash: LPpHOK81C3pNsWyGa2Q2W3gfstRuGd26hh2KRKuaOPE=) 3: 54DD69FA839011EAB5B82263C4F9AE02.roa (hash: KvrhkQvnKnpFTYVGWnMJN98DGB3DYDNMGELyZhZWRGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62 Validity Not Before: Aug 18 19:48:37 2026 GMT Not After : Aug 25 19:48:37 2026 GMT Subject: CN=6a84b715-5877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:b8:e6:4e:f2:06:8a:01:7a:04:fd:2c:fa: 56:66:a2:4d:b1:bc:36:d9:fb:29:09:aa:39:4d:09: ef:a6:06:d3:76:dd:bd:e2:f3:f8:92:c0:5e:32:a7: fa:2d:6e:2f:77:35:06:e2:e5:45:e0:66:02:e3:26: 36:a9:39:06:f9:cb:44:d0:55:b5:8b:9c:88:9e:79: 2d:aa:79:9e:46:b9:63:8c:66:bd:7a:dc:3f:9b:4f: 1d:0d:37:fa:d0:5c:1f:4c:f9:e2:51:97:d9:3c:6c: 6a:da:4c:97:f9:77:a5:b6:d6:e1:de:0f:32:12:a4: 6e:e6:e3:f1:53:26:51:69:bb:df:5b:a3:64:b1:46: 77:d4:2f:3d:c6:e7:d5:27:4c:af:e5:51:9d:88:3b: 16:67:dd:36:c2:1c:81:9c:d2:16:81:03:82:77:81: fb:8a:05:b1:10:1f:41:47:cc:af:ac:d8:c5:11:4f: 7a:0f:11:13:23:c1:7c:0b:4f:75:98:b2:45:1c:39: fa:4a:39:1e:e7:1b:74:1c:75:2b:cb:f7:9c:16:5b: 6d:9d:a8:23:63:64:e9:68:33:20:ea:6a:2c:92:8d: c3:3f:a4:26:eb:2d:d3:e6:97:34:c9:b9:df:d4:d0: 99:5c:ce:a8:3c:29:7e:a6:38:41:c1:2c:8b:25:2e: e3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:27:F4:1D:0F:B2:87:63:F7:35:53:A8:45:E7:04:30:AF:1C:BD:24 X509v3 Authority Key Identifier: keyid:22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:7b:ac:8c:87:f7:e3:fb:56:a4:16:d1:0e:c0:1c:6a:be:88: d6:9f:31:2e:44:43:c6:0e:eb:f2:af:9b:02:16:2b:19:b1:25: b2:6d:ca:16:fd:89:22:36:fd:81:6f:d8:ba:ee:e8:38:d6:78: a1:82:d1:a0:ab:4d:1a:38:c6:b7:03:a4:bb:6c:18:ec:ab:90: 1b:12:07:88:20:53:92:7e:57:4b:7b:4f:35:48:2d:ff:f1:1f: 77:0f:f3:26:92:a6:66:0a:c0:70:5f:81:a7:0c:a3:8a:76:c1: b1:01:58:cc:e4:8c:a3:c8:27:aa:7a:03:d7:d2:bc:51:ba:15: e3:49:87:ab:65:39:de:4c:90:53:24:04:ba:cb:d5:b3:36:0c: 81:4e:75:27:99:26:48:88:a9:e3:27:57:da:9f:8e:31:94:aa: 4b:76:a2:f4:6d:88:7a:d0:39:8a:a0:f0:1c:f7:c7:3f:e0:f4: 02:a5:fa:c5:0a:75:63:2f:71:ee:4e:99:f7:c1:33:41:36:75: 55:b0:51:08:79:2a:9a:c5:45:16:ef:2a:ad:bc:59:df:7c:9d: cc:50:4d:9c:d8:9f:4a:da:53:bb:b6:f4:23:fa:86:e4:85:59: 57:b1:cb:12:1e:4c:24:c5:57:0b:bd:09:f8:1d:a1:56:a3:eb: 46:2e:77:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKDIyNDVBRDkxNTQzQUREQUQ3ODEyM0RENDE1RDY1OUJC NTJENUZCNjIwHhcNMjYwODE4MTk0ODM3WhcNMjYwODI1MTk0ODM3WjAYMRYwFAYD VQQDEw02YTg0YjcxNS01ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxi45k7yBooBegT9LPpWZqJNsbw22fspCao5TQnvpgbTdt294vP4ksBeMqf6 LW4vdzUG4uVF4GYC4yY2qTkG+ctE0FW1i5yInnktqnmeRrljjGa9etw/m08dDTf6 0FwfTPniUZfZPGxq2kyX+Xelttbh3g8yEqRu5uPxUyZRabvfW6NksUZ31C89xufV J0yv5VGdiDsWZ902whyBnNIWgQOCd4H7igWxEB9BR8yvrNjFEU96DxETI8F8C091 mLJFHDn6Sjke5xt0HHUry/ecFlttnagjY2TpaDMg6mosko3DP6Qm6y3T5pc0ybnf 1NCZXM6oPCl+pjhBwSyLJS7jWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0n9B0P sodj9zVTqEXnBDCvHL0kMB8GA1UdIwQYMBaAFCJFrZFUOt2teBI91BXWWbtS1fti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9EODkxNDc4Qzgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi9Ja1d0a1ZRNjNhMTRFajNVRmRaWnUxTFYt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrV3RrVlE2M2ExNEVqM1VGZFpadTFMVi0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9EODkxNDc4QzgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi9Ja1d0a1ZRNjNh MTRFajNVRmRaWnUxTFYtMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuXusjIf34/tWpBbRDsAcar6I1p8xLkRDxg7r8q+bAhYrGbElsm3KFv2JIjb9 gW/Yuu7oONZ4oYLRoKtNGjjGtwOku2wY7KuQGxIHiCBTkn5XS3tPNUgt//Efdw/z JpKmZgrAcF+BpwyjinbBsQFYzOSMo8gnqnoD19K8UboV40mHq2U53kyQUyQEusvV szYMgU51J5kmSIip4ydX2p+OMZSqS3ai9G2IetA5iqDwHPfHP+D0AqX6xQp1Yy9x 7k6Z98EzQTZ1VbBRCHkqmsVFFu8qrbxZ33ydzFBNnNifStpTu7b0I/qG5IVZV7HL Eh5MJMVXC70J+B2hVqPrRi53SA== -----END CERTIFICATE-----Generated at Wed Aug 19 16:04:20 2026 by rpki-client