$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: atsJ5IpgeLRlMeNfhJvphyiw0Ld59BSn5TcDceRV09c= Subject key identifier: 09:71:A9:1C:50:AB:A8:9D:93:F0:FB:C7:15:6A:A8:DF:5A:F5:5F:9B Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: 01FE Signing time: Wed 09 Sep 2026 03:40:02 +0000 Manifest this update: Wed 09 Sep 2026 03:40:01 +0000 Manifest next update: Wed 16 Sep 2026 03:40:01 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: S9Gme/mpZ9x7N5qG84VPXMF+qIorQLItlImYufC9mH4=) 2: 87662556555511EF88D9F680C4F9AE02.roa (hash: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4=) 3: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: e+A9R6047fz/CtRSSMnfQGJqOvNAoPOsGN6eczRG5bA=) 4: 69EBCB546BAE11F196CCF4747547A888.roa (hash: 1Gdi4BISZtZus3v8EQtLjaJq5e484jVmiTvugjuhr5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 03:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Sep 9 03:40:01 2026 GMT Not After : Sep 16 03:40:01 2026 GMT Subject: CN=6aa0d511-ff27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:9a:e0:e3:15:6c:1f:99:47:03:21:9b:52: 2b:35:3c:9b:d2:aa:f0:34:f4:fb:bf:82:cf:42:b1: f8:a2:db:dd:72:59:bf:00:8c:32:92:66:c9:9f:8d: 06:a6:03:41:6c:09:72:c6:d0:63:30:6d:cd:bc:6b: 1d:31:3b:87:44:ec:39:ee:44:87:df:33:89:1d:96: 4b:d8:c7:12:a3:b3:8b:df:c1:04:ef:b7:4b:11:aa: 7f:d9:70:db:7a:6e:37:28:5d:f6:ee:f4:63:ee:ef: ee:2c:72:ee:8b:78:f2:bf:d1:69:b0:0b:79:76:79: 46:9e:1a:1a:b3:fa:9e:5f:b8:49:b5:b7:0e:1e:93: b3:88:e1:7d:91:24:50:34:2c:cf:a1:a7:1e:62:85: e9:07:4c:22:54:92:b9:73:76:93:86:7e:c4:51:e9: c3:7c:66:c6:a8:6d:65:b3:96:ee:b9:a6:8d:8f:5c: 33:6e:3a:e5:15:78:bb:30:7d:db:fd:7b:fa:d9:de: cc:44:e7:16:37:c7:d4:08:89:d1:79:a9:fc:08:d4: 5d:4e:fe:ca:17:fc:43:3d:11:2b:02:a6:95:69:01: 30:54:82:5c:d5:aa:27:0d:01:9d:16:16:58:ae:02: d8:73:d8:72:16:54:4c:46:f8:a7:0e:b9:51:66:6f: ca:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:71:A9:1C:50:AB:A8:9D:93:F0:FB:C7:15:6A:A8:DF:5A:F5:5F:9B X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:3a:ce:49:c6:11:5b:aa:74:bc:8c:ad:4c:cf:92:17:ab:42: 47:0d:05:40:f5:23:e9:9b:bd:40:57:b0:b4:67:3e:d7:87:72: 8b:9e:3c:3a:7d:8d:ee:28:1f:a6:58:8f:83:30:11:12:80:88: e1:1b:0e:ca:63:38:fb:06:f3:20:0e:79:4e:70:d4:15:86:2d: 46:f4:05:c4:5c:b2:34:5c:5f:e3:1f:7c:e4:05:e0:59:f8:ae: 89:7e:9c:0f:59:ce:b6:70:fb:c1:a8:30:e2:85:e8:b2:29:ca: aa:fa:15:a1:c0:83:61:8e:f9:8b:cf:fe:bf:13:3d:a8:47:29: c6:ef:bc:70:e0:df:92:8c:2d:bc:68:7f:86:82:8a:3d:4b:9a: 74:c7:b7:f1:17:67:88:1a:e2:0e:19:6b:c2:90:27:bd:7a:92: b8:98:8c:3a:0f:84:e0:9a:cb:35:bc:63:95:3e:18:ac:fd:c2: 99:d8:29:b2:7b:40:b8:98:8b:45:4f:fa:c1:25:2a:25:a0:9c: 76:ac:8c:90:bf:9d:f7:a3:89:1c:ff:54:90:73:56:b4:0b:50: 78:89:75:36:7f:43:a0:f3:c7:ae:e4:1e:0f:fa:ea:96:70:a3: f1:3d:29:9c:9e:c6:05:d2:99:b9:1b:1a:3e:8c:4f:13:d5:b0: 4b:da:af:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYwOTA5MDM0MDAxWhcNMjYwOTE2MDM0MDAxWjAYMRYwFAYD VQQDEw02YWEwZDUxMS1mZjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGOa4OMVbB+ZRwMhm1IrNTyb0qrwNPT7v4LPQrH4otvdclm/AIwykmbJn40G pgNBbAlyxtBjMG3NvGsdMTuHROw57kSH3zOJHZZL2McSo7OL38EE77dLEap/2XDb em43KF327vRj7u/uLHLui3jyv9FpsAt5dnlGnhoas/qeX7hJtbcOHpOziOF9kSRQ NCzPoaceYoXpB0wiVJK5c3aThn7EUenDfGbGqG1ls5buuaaNj1wzbjrlFXi7MH3b /Xv62d7MROcWN8fUCInRean8CNRdTv7KF/xDPRErAqaVaQEwVIJc1aonDQGdFhZY rgLYc9hyFlRMRvinDrlRZm/KGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlxqRxQ q6idk/D7xxVqqN9a9V+bMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVTrOScYRW6p0vIytTM+SF6tCRw0FQPUj6Zu9QFewtGc+14dyi548On2N7igf pliPgzAREoCI4RsOymM4+wbzIA55TnDUFYYtRvQFxFyyNFxf4x985AXgWfiuiX6c D1nOtnD7wagw4oXosinKqvoVocCDYY75i8/+vxM9qEcpxu+8cODfkowtvGh/hoKK PUuadMe38RdniBriDhlrwpAnvXqSuJiMOg+E4JrLNbxjlT4YrP3CmdgpsntAuJiL RU/6wSUqJaCcdqyMkL+d96OJHP9UkHNWtAtQeIl1Nn9DoPPHruQeD/rqlnCj8T0p nJ7GBdKZuRsaPoxPE9WwS9qv7A== -----END CERTIFICATE-----Generated at Thu Sep 10 14:53:41 2026 by rpki-client