$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: lBgEoZ/xP5KKEkUTlzJAN6/rGUJkma3KaYbPxG7KXLE= Subject key identifier: C8:98:34:CA:41:36:F7:F6:36:ED:AB:5C:48:DE:34:86:6E:4D:EF:89 Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: 0217 Signing time: Thu 29 Oct 2026 03:44:31 +0000 Manifest this update: Thu 29 Oct 2026 03:44:31 +0000 Manifest next update: Thu 05 Nov 2026 03:44:31 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: 32jjThGKEOtsL1Q1udcOj1MLG2Dcrjr/XR/25MyLJB4=) 2: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: e+A9R6047fz/CtRSSMnfQGJqOvNAoPOsGN6eczRG5bA=) 3: 87662556555511EF88D9F680C4F9AE02.roa (hash: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4=) 4: 69EBCB546BAE11F196CCF4747547A888.roa (hash: 1Gdi4BISZtZus3v8EQtLjaJq5e484jVmiTvugjuhr5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 03:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Oct 29 03:44:31 2026 GMT Not After : Nov 5 03:44:31 2026 GMT Subject: CN=6ae2c11f-3daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3f:b1:df:07:b4:00:2f:4d:34:6a:78:b0:19: 83:58:cc:7e:a7:9f:36:cd:0c:3c:68:1a:3f:c7:14: ba:d8:cf:dd:42:da:7a:5a:d9:75:fc:1f:ae:2c:d9: 14:cb:bb:8b:ab:b2:bb:80:82:bf:7e:16:7e:97:e7: 1d:52:5e:18:b4:88:b5:37:ca:9d:5c:d1:40:15:ac: 53:70:83:40:8d:58:04:93:5a:a1:f4:18:51:6f:7f: 53:a9:ee:6c:13:18:ec:34:c7:97:08:3c:ce:76:59: 28:8f:68:fd:f7:01:0b:6e:de:fa:ee:eb:d0:6b:eb: fe:50:0d:53:bd:5b:ce:ee:22:c4:24:c6:e7:af:0b: 3b:45:69:d6:18:88:ee:f4:21:08:06:60:92:8b:90: e2:63:05:17:c7:52:97:0a:bf:67:d9:5c:4c:e9:b0: 7b:57:5d:b9:da:03:db:be:58:47:96:d5:ce:3a:a6: b1:a3:01:0d:8d:3c:55:df:bf:b1:52:ac:e5:e2:2b: 85:85:89:84:4b:f9:f4:f0:05:47:38:2f:39:48:2c: 29:52:63:27:36:65:c4:09:be:4e:87:03:08:17:a4: 40:f5:41:59:67:b3:45:ea:36:c0:34:a2:32:2e:ea: 1f:ef:11:a4:41:2d:48:f4:80:b2:48:84:e9:58:17: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:98:34:CA:41:36:F7:F6:36:ED:AB:5C:48:DE:34:86:6E:4D:EF:89 X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:6f:96:db:bc:a3:d1:17:81:ca:8c:e5:da:39:4d:a4:b6:7e: 1f:e5:35:48:25:01:c1:15:58:5e:58:7c:de:83:35:2f:c7:89: c6:3f:d2:91:95:8d:0e:73:75:81:76:5e:b6:ae:22:26:39:0b: a9:46:e7:e6:0f:64:26:ae:9b:fe:5a:c1:d7:6b:2c:e8:d5:4b: 2f:78:f5:13:6f:42:11:75:4c:9f:1d:f4:09:bd:ff:3b:a3:ca: 86:06:38:33:d8:38:b8:25:b6:c3:8f:ba:a7:ab:40:ef:2d:ca: f6:6d:cf:2b:28:04:3e:cd:24:d6:0c:3e:4e:b8:37:8b:52:ce: d6:71:0c:a8:db:40:b1:8e:12:6b:09:93:9b:72:ae:a9:be:4f: a2:37:ba:62:13:af:63:92:01:83:66:a0:a1:7b:c9:fb:08:23: d6:45:e2:d0:43:e5:7e:4c:c0:fa:45:42:ae:e5:c1:90:f6:56: 04:9c:2e:cc:c8:f8:ae:ee:e6:bd:84:c4:81:23:2e:8d:31:bd: ad:d1:2a:1d:7e:11:b6:a0:f6:74:a6:de:a1:07:08:62:25:8a: d2:fa:0d:a7:f4:44:c1:3f:0e:1c:00:5b:76:16:68:e8:1a:60: bc:b8:89:10:5d:1a:d0:19:0b:c5:50:53:6f:3d:2c:0e:0e:46: dc:1f:f4:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYxMDI5MDM0NDMxWhcNMjYxMTA1MDM0NDMxWjAYMRYwFAYD VQQDEw02YWUyYzExZi0zZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5z+x3we0AC9NNGp4sBmDWMx+p582zQw8aBo/xxS62M/dQtp6Wtl1/B+uLNkU y7uLq7K7gIK/fhZ+l+cdUl4YtIi1N8qdXNFAFaxTcINAjVgEk1qh9BhRb39Tqe5s ExjsNMeXCDzOdlkoj2j99wELbt767uvQa+v+UA1TvVvO7iLEJMbnrws7RWnWGIju 9CEIBmCSi5DiYwUXx1KXCr9n2VxM6bB7V1252gPbvlhHltXOOqaxowENjTxV37+x Uqzl4iuFhYmES/n08AVHOC85SCwpUmMnNmXECb5OhwMIF6RA9UFZZ7NF6jbANKIy Luof7xGkQS1I9ICySITpWBfOSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMiYNMpB Nvf2Nu2rXEjeNIZuTe+JMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAG+W27yj0ReByozl2jlNpLZ+H+U1SCUBwRVYXlh83oM1L8eJxj/SkZWNDnN1 gXZetq4iJjkLqUbn5g9kJq6b/lrB12ss6NVLL3j1E29CEXVMnx30Cb3/O6PKhgY4 M9g4uCW2w4+6p6tA7y3K9m3PKygEPs0k1gw+Trg3i1LO1nEMqNtAsY4SawmTm3Ku qb5Poje6YhOvY5IBg2agoXvJ+wgj1kXi0EPlfkzA+kVCruXBkPZWBJwuzMj4ru7m vYTEgSMujTG9rdEqHX4RtqD2dKbeoQcIYiWK0voNp/REwT8OHABbdhZo6BpgvLiJ EF0a0BkLxVBTbz0sDg5G3B/0cw== -----END CERTIFICATE-----Generated at Thu Oct 29 18:33:53 2026 by rpki-client