$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: Vk82OoQbq4BPV2wYmQCiJbfCChBzx+yt5wMTJfCQrwI= Subject key identifier: AF:6C:CA:F1:6B:F4:30:8C:AF:4B:3D:50:FF:CA:B3:1B:2A:B0:44:E9 Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 08F7 Signing time: Fri 02 Oct 2026 20:36:23 +0000 Manifest this update: Fri 02 Oct 2026 20:36:22 +0000 Manifest next update: Fri 09 Oct 2026 20:36:22 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: oMsumR/O7GP7qM463gmst0U48MR7/7PGKjIL2l0cq1c=) 2: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: mf6qln82PscHDH0xPIvnUcgowJvdgyrORzlGrhrol0w=) 3: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: GhHf45/vb5I/X0MIOpzOvwX20CEWTC0IaH/0NH4EfF4=) 4: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: +xbbDGKjJ6DqQpBrbDd8JJCmqdHxccmvBDGEJY8Y1eA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Oct 2 20:36:22 2026 GMT Not After : Oct 9 20:36:22 2026 GMT Subject: CN=6ac015c6-d7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:3a:0a:7c:a4:09:4d:f2:7d:bf:00:16:60: 47:72:27:cf:4c:b7:65:01:66:a3:4f:69:8c:a5:5d: d6:ca:d0:29:5b:91:93:f1:63:8e:e3:8c:ab:d9:b1: fc:5e:cc:69:97:7b:6d:ea:ea:e5:8b:11:0d:f0:1b: 40:1e:e9:04:96:d6:0a:f6:33:e0:49:ba:f1:6c:4c: d8:b2:d4:e1:40:04:48:86:56:3f:d0:b0:e2:08:b2: 7b:80:7a:22:1d:bc:14:33:a2:2b:98:33:58:f8:3c: ed:7d:5a:11:f4:55:5a:e7:3a:67:a1:bb:92:98:58: e7:6a:07:b2:9d:b0:05:26:46:66:6d:2b:7a:56:0c: 8e:47:a5:f9:f6:9d:06:fd:c0:d1:3a:48:95:25:c8: 27:39:1f:6e:34:d1:f3:73:fa:98:46:de:5e:04:e9: 93:3c:e9:d0:36:ad:e7:4b:1f:8a:8f:e0:ef:18:68: 4d:0e:67:f1:14:d1:76:26:89:34:9b:95:ec:f9:5f: 79:6d:5e:43:e8:f9:6b:b7:88:ab:c7:98:bf:df:43: 12:2b:4c:82:76:dd:b7:65:d8:47:5e:ce:14:66:8d: 9d:bb:b6:ff:38:09:49:e8:66:2a:75:70:06:0a:7f: f9:53:36:0e:83:71:0d:86:cb:94:a6:17:3b:85:cf: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6C:CA:F1:6B:F4:30:8C:AF:4B:3D:50:FF:CA:B3:1B:2A:B0:44:E9 X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:55:f0:f2:cb:65:69:b5:b5:01:35:51:33:b9:de:4a:73:ee: 4e:f1:3b:75:5e:11:30:16:16:b2:6b:d3:2c:5b:cd:3a:3a:f7: 02:74:6d:66:14:a5:d2:a4:9e:ba:19:83:3b:7b:16:ca:06:a1: bc:86:9f:80:de:fb:d8:4f:6f:34:ce:55:39:c7:ae:be:29:d2: 78:7d:56:17:c2:ac:b0:f6:3e:1c:7f:37:08:b7:d7:b0:22:03: e5:6c:e5:c9:1f:1f:4f:d3:3c:67:0b:b4:33:50:e6:b5:e3:9a: d7:74:da:f3:ed:a6:bc:ac:76:8b:fa:bc:51:5b:6a:4a:ab:e9: cf:18:32:93:52:27:30:2f:bc:05:c4:aa:93:26:65:4d:1c:f1: e3:84:96:bf:35:2d:30:b9:32:79:98:45:26:1e:d6:67:16:48: 13:71:be:2a:1a:69:a7:cf:c0:e7:a7:87:a5:96:8f:2e:00:9f: f2:95:b1:8d:b8:c1:07:35:4d:2f:6d:e9:44:c5:fa:91:29:e5: 23:a6:e6:26:f1:ef:42:e7:71:1b:c9:6f:63:b6:46:c6:74:60: 32:a4:cb:2f:d0:6a:5c:80:d0:b3:c0:e7:33:44:f3:35:18:ec: fa:c0:c8:cd:40:c5:1b:ce:36:9e:37:22:b0:2b:36:48:d1:9b: 8b:51:f1:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjYxMDAyMjAzNjIyWhcNMjYxMDA5MjAzNjIyWjAYMRYwFAYD VQQDEw02YWMwMTVjNi1kN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmA6CnykCU3yfb8AFmBHcifPTLdlAWajT2mMpV3WytApW5GT8WOO44yr2bH8 Xsxpl3tt6urlixEN8BtAHukEltYK9jPgSbrxbEzYstThQARIhlY/0LDiCLJ7gHoi HbwUM6IrmDNY+DztfVoR9FVa5zpnobuSmFjnageynbAFJkZmbSt6VgyOR6X59p0G /cDROkiVJcgnOR9uNNHzc/qYRt5eBOmTPOnQNq3nSx+Kj+DvGGhNDmfxFNF2Jok0 m5Xs+V95bV5D6Plrt4irx5i/30MSK0yCdt23ZdhHXs4UZo2du7b/OAlJ6GYqdXAG Cn/5UzYOg3ENhsuUphc7hc+t0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9syvFr 9DCMr0s9UP/KsxsqsETpMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApVXw8stlabW1ATVRM7neSnPuTvE7dV4RMBYWsmvTLFvNOjr3AnRtZhSl0qSe uhmDO3sWygahvIafgN772E9vNM5VOceuvinSeH1WF8KssPY+HH83CLfXsCID5Wzl yR8fT9M8Zwu0M1DmteOa13Ta8+2mvKx2i/q8UVtqSqvpzxgyk1InMC+8BcSqkyZl TRzx44SWvzUtMLkyeZhFJh7WZxZIE3G+Khppp8/A56eHpZaPLgCf8pWxjbjBBzVN L23pRMX6kSnlI6bmJvHvQudxG8lvY7ZGxnRgMqTLL9BqXIDQs8DnM0TzNRjs+sDI zUDFG842njcisCs2SNGbi1HxSw== -----END CERTIFICATE-----Generated at Sun Oct 4 20:00:06 2026 by rpki-client