$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: llq6fyV2xlMtBn35yWqwHw7gm70bc3XoyDZNVzgqDrE= Subject key identifier: 3C:6A:92:92:BB:EA:B3:A0:CF:CD:B2:2D:1E:8A:F0:D6:1D:CA:56:40 Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: DD Signing time: Mon 05 Oct 2026 07:02:42 +0000 Manifest this update: Mon 05 Oct 2026 07:02:41 +0000 Manifest next update: Mon 12 Oct 2026 07:02:41 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: fRos4jxlS/070IDlizmAM23PG7trgq5JB4ftA6DoV2Y=) 2: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: k4KE8zC6lSjJRhlE/re99tOEHbG8sUjwvgrGoKF/M58=) 3: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: vrlI1pszTNOMrzyBgG79jCCwevKnYILu7ZDEahfp4WY=) 4: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: bJw6aITse+eniewVtF8bgjXkhRkSrrBco5fghncx6Cg=) 5: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: qpSDoTipwbn3qmlJo9kOaWOWyQWNuZBEXvzsDRT1K7I=) 6: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: DrgQ3c30s/8aRln/0QBML0s10GhufbUYZIMkX/pX6Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Oct 5 07:02:41 2026 GMT Not After : Oct 12 07:02:41 2026 GMT Subject: CN=6ac34b91-ba04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:34:09:fc:c8:a0:fc:6a:0b:49:b9:1f:8a: 17:2e:5e:79:76:78:20:a2:92:a0:1c:77:d6:47:63: 99:38:3b:a3:b1:19:73:d3:d2:fc:5a:89:41:54:27: e8:fd:8b:30:1d:5e:ad:9e:dd:3c:21:57:c8:8e:41: 7a:a9:27:3c:51:d5:38:12:72:aa:ab:9f:70:75:f0: 57:1e:e5:c1:92:6d:f5:83:77:41:d8:23:ad:68:72: 4c:71:13:4b:1c:d1:bf:a7:48:b6:82:7a:8c:e4:db: eb:5e:ef:b0:be:ef:c3:1c:9a:11:ae:67:6e:cd:c2: 4f:34:5b:17:06:5f:a3:3d:8b:fa:0c:4d:11:26:a5: 1b:de:92:f9:92:9d:1a:f8:ed:c0:84:79:2b:22:b0: 6c:0a:81:6b:4d:e4:7e:b1:2f:7d:04:16:4c:78:a9: e3:f0:da:e3:e9:47:c6:01:80:7f:b3:b8:33:59:fc: a2:e8:cc:eb:a2:93:c2:45:8f:f0:58:45:55:8d:61: 4d:68:ad:b7:d1:62:30:f4:a3:81:43:ea:29:f9:55: ab:68:c8:f7:ec:d7:9e:38:a1:c0:64:bc:a1:de:d3: 56:e1:a6:5e:39:67:d0:1e:63:b3:71:74:a6:e2:e4: 47:7d:ee:ae:c3:4e:68:b7:99:36:38:4b:a2:d3:50: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6A:92:92:BB:EA:B3:A0:CF:CD:B2:2D:1E:8A:F0:D6:1D:CA:56:40 X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:cc:1e:8a:6d:28:44:fb:fa:ee:1d:cf:0c:ae:87:85:8d:c9: 41:ab:e9:5d:a9:11:41:d6:4a:df:e7:15:fc:4d:d0:25:5c:81: a9:0a:bf:13:41:0c:29:c5:d2:6d:52:17:42:1a:fd:c2:b2:8a: 60:d8:0d:7c:98:3c:e9:4c:6e:93:6b:23:62:ed:6b:92:e5:87: 35:b0:ad:3c:38:70:45:1e:71:49:b5:63:74:a9:51:a7:a2:35: f4:03:2c:5e:9e:2d:a2:d1:9b:ac:24:3e:35:a9:72:7d:e7:00: 78:ff:42:54:01:24:c6:74:81:24:04:7f:51:88:ab:03:cd:f7: 53:fc:67:bc:b1:bd:b9:56:43:d0:1e:db:b9:bb:06:2e:5a:f3: 70:a3:ef:77:51:49:b6:6c:93:d1:b4:56:b5:c7:ed:95:5d:47: 90:0b:c7:a9:54:79:e6:04:5d:5c:48:da:a5:85:7d:bd:d0:6f: b5:5f:ef:74:15:98:8c:37:95:9a:00:c4:e8:25:d6:ed:e5:a6: 88:ab:78:20:f1:e6:ee:39:9f:af:34:aa:35:fd:80:ec:2d:b3: 28:ae:8d:52:80:f4:f9:d7:9f:45:e2:f3:aa:5c:35:22:bb:c2: 87:42:aa:87:02:0a:c9:4e:ec:09:02:23:eb:12:92:52:31:a4: 75:61:c5:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw NzVFMDlBOTgwHhcNMjYxMDA1MDcwMjQxWhcNMjYxMDEyMDcwMjQxWjAYMRYwFAYD VQQDEw02YWMzNGI5MS1iYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxQ0CfzIoPxqC0m5H4oXLl55dnggopKgHHfWR2OZODujsRlz09L8WolBVCfo /YswHV6tnt08IVfIjkF6qSc8UdU4EnKqq59wdfBXHuXBkm31g3dB2COtaHJMcRNL HNG/p0i2gnqM5NvrXu+wvu/DHJoRrmduzcJPNFsXBl+jPYv6DE0RJqUb3pL5kp0a +O3AhHkrIrBsCoFrTeR+sS99BBZMeKnj8Nrj6UfGAYB/s7gzWfyi6MzropPCRY/w WEVVjWFNaK230WIw9KOBQ+op+VWraMj37NeeOKHAZLyh3tNW4aZeOWfQHmOzcXSm 4uRHfe6uw05ot5k2OEui01Ce8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxqkpK7 6rOgz82yLR6K8NYdylZAMB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU4OC9CRjdENUU3NjdCRjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhC VngyZFRQbFQ5RjRIWGdtcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALcweim0oRPv67h3PDK6HhY3JQavpXakRQdZK3+cV/E3QJVyBqQq/E0EMKcXS bVIXQhr9wrKKYNgNfJg86Uxuk2sjYu1rkuWHNbCtPDhwRR5xSbVjdKlRp6I19AMs Xp4totGbrCQ+NalyfecAeP9CVAEkxnSBJAR/UYirA833U/xnvLG9uVZD0B7bubsG LlrzcKPvd1FJtmyT0bRWtcftlV1HkAvHqVR55gRdXEjapYV9vdBvtV/vdBWYjDeV mgDE6CXW7eWmiKt4IPHm7jmfrzSqNf2A7C2zKK6NUoD0+defReLzqlw1IrvCh0Kq hwIKyU7sCQIj6xKSUjGkdWHFOA== -----END CERTIFICATE-----Generated at Tue Oct 6 10:18:41 2026 by rpki-client