$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: 98NjFQ+ShNwi70puMb2656pruEJS+CJbsxJH9DGnCIc= Subject key identifier: C8:E9:48:C2:19:A8:F9:A3:13:18:E6:7B:3A:E4:62:0C:BF:F6:F4:3B Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 089A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 088B Signing time: Tue 22 Sep 2026 20:33:38 +0000 Manifest this update: Tue 22 Sep 2026 20:33:38 +0000 Manifest next update: Tue 29 Sep 2026 20:33:38 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: +ta6lbZosbFklNZUkbOWrm6mZyBLHxn1ZtTHvRr/lVk=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: FELlTiK0zkTPaIvuZPqjSFuesBh1m/szylRmww5rrlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202 (0x89a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Sep 22 20:33:38 2026 GMT Not After : Sep 29 20:33:38 2026 GMT Subject: CN=6ab2e622-96ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:54:c0:a7:c3:e0:30:70:db:8f:bb:56:b1: f4:a9:92:e2:e4:d0:0f:87:7d:ff:f6:8f:ca:d2:14: ca:fa:49:59:4c:dd:4c:8c:2f:45:af:60:4c:39:00: 32:60:bc:4b:2e:c7:65:73:68:5f:fe:bb:53:93:e3: 6d:e8:a1:dc:98:da:32:f9:07:94:3e:31:4c:b1:ed: 8d:4c:6b:8b:8a:f1:75:02:bc:48:40:44:99:ae:51: ac:cf:0f:ca:71:9b:7c:d9:ce:cf:1c:08:d9:92:c7: 4a:8d:26:0f:c7:be:43:11:14:ff:c8:4a:c8:bb:90: b4:ef:91:4f:2e:f0:44:db:49:5d:ec:6e:9a:c6:e8: ba:b6:59:97:6b:4c:85:02:87:ec:64:bb:d1:d9:07: 67:d5:39:5c:01:08:82:35:50:53:ff:b8:49:4c:da: 40:74:a6:5a:b5:cf:9b:10:0d:45:6e:63:64:5e:d2: b1:5a:51:25:ee:90:9d:2a:fd:f8:05:36:f6:9d:e5: 9c:10:86:fe:9d:22:8d:97:be:f9:5d:2f:de:8c:33: 54:b4:e4:47:18:c0:65:3b:ed:4c:60:cc:39:07:48: bf:96:bc:55:99:25:12:3b:07:c0:c9:e0:31:60:ca: dd:d2:df:5c:8f:8a:88:91:ff:a1:9d:52:a5:20:18: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:48:C2:19:A8:F9:A3:13:18:E6:7B:3A:E4:62:0C:BF:F6:F4:3B X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:56:aa:e5:bf:18:ef:61:45:3e:e6:d6:8e:86:5c:0d:2f:7e: b4:c0:08:f9:ea:b8:31:a0:16:4c:cd:78:2b:da:93:fd:83:58: d7:03:de:6c:3b:22:0f:a2:0a:35:ae:d1:61:c1:d6:48:3e:02: c7:a1:ef:b0:d2:9a:53:4a:58:0c:e2:db:70:9d:0c:6a:f8:49: 49:ab:cf:37:db:4e:c7:85:a1:5d:1f:e6:87:12:04:f9:7e:63: e7:66:dd:54:a5:08:d0:e6:e0:ce:55:53:15:73:e5:75:6f:2f: 06:4d:ac:5c:fc:37:ba:ed:e0:1e:15:d3:ae:a8:f1:bc:12:f8: 5c:48:57:25:6a:63:99:67:22:d5:44:1f:20:1c:69:23:c3:0f: 8f:bf:69:1a:12:bc:9c:07:e4:86:b9:bc:5a:e4:9b:5c:f6:20: 89:3e:a7:f4:9e:ea:57:7f:3f:01:6c:d2:a5:55:b5:57:e9:e4: 41:29:1b:de:2e:52:1f:2f:e4:1d:f2:bb:01:1a:bc:e9:d4:5c: 88:d8:c0:fd:c8:6e:c0:75:60:69:6b:88:9c:15:0b:76:ba:40: c2:6f:bf:10:6d:2c:7b:87:69:d0:f7:e1:e6:48:f8:3c:43:8e: 91:d8:7f:1b:53:f4:96:49:14:fd:80:7e:10:3a:04:7e:d9:a9: 3c:64:bb:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjYwOTIyMjAzMzM4WhcNMjYwOTI5MjAzMzM4WjAYMRYwFAYD VQQDEw02YWIyZTYyMi05NmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTRUwKfD4DBw24+7VrH0qZLi5NAPh33/9o/K0hTK+klZTN1MjC9Fr2BMOQAy YLxLLsdlc2hf/rtTk+Nt6KHcmNoy+QeUPjFMse2NTGuLivF1ArxIQESZrlGszw/K cZt82c7PHAjZksdKjSYPx75DERT/yErIu5C075FPLvBE20ld7G6axui6tlmXa0yF AofsZLvR2Qdn1TlcAQiCNVBT/7hJTNpAdKZatc+bEA1FbmNkXtKxWlEl7pCdKv34 BTb2neWcEIb+nSKNl775XS/ejDNUtORHGMBlO+1MYMw5B0i/lrxVmSUSOwfAyeAx YMrd0t9cj4qIkf+hnVKlIBgS4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjpSMIZ qPmjExjmezrkYgy/9vQ7MB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJFaq5b8Y72FFPubWjoZcDS9+tMAI+eq4MaAWTM14K9qT/YNY1wPebDsiD6IK Na7RYcHWSD4Cx6HvsNKaU0pYDOLbcJ0MavhJSavPN9tOx4WhXR/mhxIE+X5j52bd VKUI0ObgzlVTFXPldW8vBk2sXPw3uu3gHhXTrqjxvBL4XEhXJWpjmWci1UQfIBxp I8MPj79pGhK8nAfkhrm8WuSbXPYgiT6n9J7qV38/AWzSpVW1V+nkQSkb3i5SHy/k HfK7ARq86dRciNjA/chuwHVgaWuInBULdrpAwm+/EG0se4dp0Pfh5kj4PEOOkdh/ G1P0lkkU/YB+EDoEftmpPGS78A== -----END CERTIFICATE-----Generated at Thu Sep 24 14:18:57 2026 by rpki-client