$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft File: iFALo678aJSTbs3IGvHXp7JyaPE.mft (raw, json) Hash identifier: vi3J3h0lDnHx3yx64ccoGovalbJPYwp8fIbSefBbNQY= Subject key identifier: 1C:FA:67:DA:34:79:84:AA:BA:92:8C:BB:C7:A2:D7:20:C9:7F:F6:9C Authority key identifier: 88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1 Certificate issuer: /CN=A9198560/serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft Manifest number: 34 Signing time: Wed 21 Oct 2026 09:13:25 +0000 Manifest this update: Wed 21 Oct 2026 09:13:25 +0000 Manifest next update: Wed 28 Oct 2026 09:13:25 +0000 Files and hashes: 1: iFALo678aJSTbs3IGvHXp7JyaPE.crl (hash: LMZRw1x1TYhnomuEfPz/1tcwAwtT/arU73fFBvPcoIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.crl rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198560, serialNumber=88500BA3AEFC6894936ECDC81AF1D7A7B27268F1 Validity Not Before: Oct 21 09:13:25 2026 GMT Not After : Oct 28 09:13:25 2026 GMT Subject: CN=6ad88235-3117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a1:63:ec:22:63:e1:52:01:78:7c:5a:e7:5d: 84:59:75:c7:c8:f2:b8:98:3d:c3:f7:b9:d7:0e:37: b8:0a:af:c0:20:9b:2c:66:37:2c:b8:68:6d:e8:2a: bd:a8:9a:d7:c6:55:c4:55:e4:9e:b1:c7:70:51:7d: 5d:7e:e6:5f:e6:14:56:6b:3f:45:11:aa:58:ce:d6: e8:b8:d2:e5:ab:65:ad:ec:2e:c5:d5:cf:65:26:79: e1:8d:5b:bc:25:09:71:0c:73:db:bc:5f:3d:27:d1: f6:d5:ed:4f:61:80:d8:69:17:84:e9:79:15:c5:fa: 39:19:56:ec:b9:40:7f:5b:09:38:d2:ff:75:a5:35: c1:5a:56:70:a0:49:a9:62:3c:3d:d0:48:54:3c:36: d7:46:5e:03:2a:46:1b:1b:ae:24:59:19:7c:5c:11: bf:e0:f4:50:de:4b:bc:f2:d9:e9:9b:e6:d8:70:3a: 02:a1:ad:84:3a:90:ee:6b:f7:82:9b:c6:85:6e:47: a5:01:15:5a:8f:3e:6b:d9:0a:7f:42:6f:fa:13:b4: 4c:6a:9f:07:cc:8c:64:d8:7e:f2:45:a6:03:01:32: ee:07:d9:d3:65:4e:f6:94:ba:a5:66:70:ee:17:46: b4:17:07:bc:2b:fc:b2:40:ea:2d:c6:42:67:23:2f: 3a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FA:67:DA:34:79:84:AA:BA:92:8C:BB:C7:A2:D7:20:C9:7F:F6:9C X509v3 Authority Key Identifier: keyid:88:50:0B:A3:AE:FC:68:94:93:6E:CD:C8:1A:F1:D7:A7:B2:72:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iFALo678aJSTbs3IGvHXp7JyaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198560/38E0251880E511F1BBF333E360A30FBC/iFALo678aJSTbs3IGvHXp7JyaPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:2c:3e:9b:d6:17:29:91:bb:77:82:08:99:a9:77:a6:5f:44: b3:13:72:ba:eb:ca:93:dc:b3:17:92:7a:c1:0e:2b:c0:a0:e8: 84:73:c6:70:0a:b7:e6:92:4f:79:b9:34:36:ce:c4:44:7d:67: e6:f3:49:fd:da:45:05:c3:9d:e4:79:e8:b2:ef:31:c5:9b:47: c6:75:d6:a3:57:1f:b7:f8:47:4b:53:e9:be:8c:53:9d:cc:be: 7d:1f:18:43:ba:ee:c9:62:e2:bf:2d:95:d1:62:c9:34:61:f2: 2d:33:85:c2:e7:92:27:1f:ca:e0:55:ea:fe:ee:9c:5d:4f:ad: 39:94:77:5c:18:5e:1f:2a:99:b9:8a:f4:98:6c:26:87:16:10: 6f:14:5c:05:a4:0a:45:83:99:9b:c6:33:09:d2:fd:1c:6c:55: df:9f:20:26:fa:1a:61:bd:22:f1:50:0a:be:e9:a2:23:b7:63: 46:31:b5:e8:9b:15:b6:10:a9:65:17:0e:5e:ab:44:2d:52:4b: 0b:99:30:79:ca:1b:49:72:ce:6d:a7:68:49:ea:39:da:56:3d: e3:f6:b2:98:02:01:92:9c:d9:8d:2f:c9:1b:bd:8a:d0:15:19: 1c:5e:e6:9f:a0:13:b5:dc:36:d7:3f:89:17:55:eb:bf:cc:c1: 8a:9e:98:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODU2MDExMC8GA1UEBRMoODg1MDBCQTNBRUZDNjg5NDkzNkVDREM4MUFGMUQ3QTdC MjcyNjhGMTAeFw0yNjEwMjEwOTEzMjVaFw0yNjEwMjgwOTEzMjVaMBgxFjAUBgNV BAMTDTZhZDg4MjM1LTMxMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcoWPsImPhUgF4fFrnXYRZdcfI8riYPcP3udcON7gKr8AgmyxmNyy4aG3oKr2o mtfGVcRV5J6xx3BRfV1+5l/mFFZrP0URqljO1ui40uWrZa3sLsXVz2UmeeGNW7wl CXEMc9u8Xz0n0fbV7U9hgNhpF4TpeRXF+jkZVuy5QH9bCTjS/3WlNcFaVnCgSali PD3QSFQ8NtdGXgMqRhsbriRZGXxcEb/g9FDeS7zy2emb5thwOgKhrYQ6kO5r94Kb xoVuR6UBFVqPPmvZCn9Cb/oTtExqnwfMjGTYfvJFpgMBMu4H2dNlTvaUuqVmcO4X RrQXB7wr/LJA6i3GQmcjLzofAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHPpn2jR5 hKq6koy7x6LXIMl/9pwwHwYDVR0jBBgwFoAUiFALo678aJSTbs3IGvHXp7JyaPEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NTYwLzM4RTAyNTE4ODBF NTExRjFCQkYzMzNFMzYwQTMwRkJDL2lGQUxvNjc4YUpTVGJzM0lHdkhYcDdKeWFQ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaUZBTG82NzhhSlNUYnMzSUd2SFhwN0p5YVBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NTYwLzM4RTAyNTE4ODBFNTExRjFCQkYzMzNFMzYwQTMwRkJDL2lGQUxvNjc4YUpT VGJzM0lHdkhYcDdKeWFQRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBWLD6b1hcpkbt3ggiZqXemX0SzE3K668qT3LMXknrBDivAoOiEc8ZwCrfmkk95 uTQ2zsREfWfm80n92kUFw53keeiy7zHFm0fGddajVx+3+EdLU+m+jFOdzL59HxhD uu7JYuK/LZXRYsk0YfItM4XC55InH8rgVer+7pxdT605lHdcGF4fKpm5ivSYbCaH FhBvFFwFpApFg5mbxjMJ0v0cbFXfnyAm+hphvSLxUAq+6aIjt2NGMbXomxW2EKll Fw5eq0QtUksLmTB5yhtJcs5tp2hJ6jnaVj3j9rKYAgGSnNmNL8kbvYrQFRkcXuaf oBO13DbXP4kXVeu/zMGKnpjV -----END CERTIFICATE-----Generated at Thu Oct 22 03:18:24 2026 by rpki-client