$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json) Hash identifier: cAbgbhSKpoLbSE8UhW4eFAUcBhnbkBogbzqeDjnZPV0= Subject key identifier: 5C:A1:AB:07:36:34:36:8C:B4:BF:8B:E3:20:83:03:3B:9A:C8:D3:51 Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Certificate serial: 147C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft Manifest number: 143E Signing time: Fri 18 Sep 2026 16:54:04 +0000 Manifest this update: Fri 18 Sep 2026 16:54:03 +0000 Manifest next update: Fri 25 Sep 2026 16:54:03 +0000 Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: RmBmyTxNJmIpnWe1WYPux+TkoCwnx4kZMfp0Sv5uqEw=) 2: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: Ip5tGE+xBmZzGbuYsKhlox7o+yVLz36sUIXrRO8cJe8=) 3: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: WY85OZSDqgP3JecVrbLGH7yASGCrRmcqJRott+5khbE=) 4: zSE0GmBxc2vuy2NqhgpEC2PZSVM.asa (hash: S0SNtYzstV/TE3XHy8x7+BvtycgWeW73p6rfD0JzYgg=) 5: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 388AG09rRUDKvKhyNmxbF15VLGsqHkKaZsreBoM4fr8=) 6: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=) 7: qyLwIBj-Wx6AmSM1hxcj9vJ-hvc.asa (hash: 5ab75aSGsxcPedNr8xBXYZisce1dTfJNawoGkCK2fWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5244 (0x147c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Validity Not Before: Sep 18 16:54:03 2026 GMT Not After : Sep 25 16:54:03 2026 GMT Subject: CN=6aad6cab-b9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0f:98:c9:a2:8f:e9:19:db:a7:0e:14:97:b3: ee:24:05:a9:62:a7:36:b1:8d:e5:cd:a9:86:07:a1: 51:c2:d1:84:6e:ab:63:0f:02:aa:e2:66:d7:7e:09: e2:34:e8:10:4a:ca:52:bb:2c:d2:be:e3:39:2c:2f: 64:63:6a:06:ea:2a:09:60:f8:7a:30:40:70:6b:d1: d2:5f:05:33:e3:b5:18:8f:aa:36:c0:01:4c:19:38: 12:07:4a:76:d0:4f:a6:7e:0b:c0:8d:a3:e8:39:cb: 20:b7:9e:42:44:55:3f:7e:c7:30:b0:ce:a3:6d:a3: 85:e1:1f:90:f8:ed:b4:7b:75:c2:c1:ea:94:b0:b7: e1:cb:f0:72:f1:86:f5:7e:90:26:97:a5:2b:81:dd: ac:97:6d:30:53:14:53:a4:63:72:55:d2:59:52:45: 0e:11:94:5c:9f:b2:c1:5c:16:5c:67:c7:e2:8d:d3: 82:ff:b2:84:ac:35:96:45:f3:19:16:16:1b:fd:bd: d8:b5:bd:c2:63:3c:44:b1:6d:1d:94:d3:b2:10:3d: 61:c7:82:b8:e9:23:9c:5b:1a:ca:30:1a:88:2f:01: 71:2a:25:0c:36:13:11:dc:6d:25:b4:a1:11:99:63: 4a:2d:17:cf:e9:c3:c1:ea:61:43:5f:db:b4:25:2b: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A1:AB:07:36:34:36:8C:B4:BF:8B:E3:20:83:03:3B:9A:C8:D3:51 X509v3 Authority Key Identifier: keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:23:b5:87:6b:ae:8f:cc:18:31:17:f0:5a:b5:27:a7:ef:3e: a9:02:86:d0:7f:57:a9:3d:2f:da:ac:a8:12:70:ce:21:04:db: a8:df:6b:9f:f4:a8:fb:f9:3b:1c:8f:c9:bb:30:bc:5e:63:95: b3:a2:e4:f6:7d:58:0b:35:27:91:ad:96:53:a7:68:8f:18:90: fb:5f:05:61:65:6e:4a:80:e7:09:2c:b6:ea:54:a9:58:18:28: cc:b3:8a:e3:e9:d8:f9:e0:fc:03:b4:ee:42:27:08:a1:cb:56: 3d:4e:d8:4b:fe:84:fc:76:dc:27:c2:e6:20:9c:7a:5a:19:9e: 89:77:c0:fb:89:69:16:df:61:71:8f:cb:30:70:4f:9d:09:e5: ba:35:e8:18:96:48:1d:a7:9f:f3:8e:70:64:8d:99:e4:b2:d4: 06:76:f3:48:59:af:a7:c4:50:f5:cd:01:a2:4b:00:fd:94:12: 1c:39:5d:b4:a8:c3:9f:ca:11:e7:cb:be:e5:c4:4d:8f:d5:6c: 88:ae:2a:af:d9:f1:95:c9:1d:b8:9f:4c:ba:e5:2e:18:12:94: 78:89:b6:f6:4b:92:71:7c:1e:d2:d2:e5:68:ef:63:19:79:8e: a1:91:2d:68:49:2e:d7:6b:18:a5:5f:e5:2f:71:ae:55:46:a8: 03:84:71:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKDg5NEZFMTEzOThCNjc5QUVCMUIxMThCMUJERTY3M0Ux OENGNkU5MzQwHhcNMjYwOTE4MTY1NDAzWhcNMjYwOTI1MTY1NDAzWjAYMRYwFAYD VQQDEw02YWFkNmNhYi1iOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyA+YyaKP6Rnbpw4Ul7PuJAWpYqc2sY3lzamGB6FRwtGEbqtjDwKq4mbXfgni NOgQSspSuyzSvuM5LC9kY2oG6ioJYPh6MEBwa9HSXwUz47UYj6o2wAFMGTgSB0p2 0E+mfgvAjaPoOcsgt55CRFU/fscwsM6jbaOF4R+Q+O20e3XCweqUsLfhy/By8Yb1 fpAml6Urgd2sl20wUxRTpGNyVdJZUkUOEZRcn7LBXBZcZ8fijdOC/7KErDWWRfMZ FhYb/b3Ytb3CYzxEsW0dlNOyED1hx4K46SOcWxrKMBqILwFxKiUMNhMR3G0ltKER mWNKLRfP6cPB6mFDX9u0JStA6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyhqwc2 NDaMtL+L4yCDAzuayNNRMB8GA1UdIwQYMBaAFIlP4ROYtnmusbEYsb3mc+GM9uk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS9CQ0VERjQ0MkIw QkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVhNnhzUml4dmVaejRZejI2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVX2hFNWkyZWE2eHNSaXh2ZVp6NFl6MjZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS9CQ0VERjQ0MkIwQkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVh NnhzUml4dmVaejRZejI2VFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALCO1h2uuj8wYMRfwWrUnp+8+qQKG0H9XqT0v2qyoEnDOIQTbqN9rn/So+/k7 HI/JuzC8XmOVs6Lk9n1YCzUnka2WU6dojxiQ+18FYWVuSoDnCSy26lSpWBgozLOK 4+nY+eD8A7TuQicIoctWPU7YS/6E/HbcJ8LmIJx6WhmeiXfA+4lpFt9hcY/LMHBP nQnlujXoGJZIHaef845wZI2Z5LLUBnbzSFmvp8RQ9c0BoksA/ZQSHDldtKjDn8oR 58u+5cRNj9VsiK4qr9nxlckduJ9MuuUuGBKUeIm29kuScXwe0tLlaO9jGXmOoZEt aEku12sYpV/lL3GuVUaoA4Rxhg== -----END CERTIFICATE-----Generated at Sat Sep 19 17:19:19 2026 by rpki-client