$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json) Hash identifier: Ui3vNMmU2duLktuRqllCgOkzV3pwI2fJiGnd7QguylQ= Subject key identifier: B0:E2:A7:C7:B2:C7:D4:7F:76:CA:BB:65:6C:BB:6E:F4:A8:28:97:EE Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft Manifest number: 042B Signing time: Sat 03 Oct 2026 00:33:57 +0000 Manifest this update: Sat 03 Oct 2026 00:33:56 +0000 Manifest next update: Sat 10 Oct 2026 00:33:56 +0000 Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: FAAveC1SaO3funUgAkWXjBl0S4u9WIsTW6uq+SxN1KM=) 2: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: g/y6tyH2Gsq/YIingTE3FmjJMzDHLagvffaKtJeyX2M=) 3: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: PKziXo5JwfLo2oKzhtquW/s14RITw4Gju81cfabKo1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 00:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Oct 3 00:33:56 2026 GMT Not After : Oct 10 00:33:56 2026 GMT Subject: CN=6ac04d74-c414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:ab:ac:78:94:85:ba:22:5f:a8:38:21:72: b9:0c:78:9c:e7:11:48:84:e5:a8:ad:63:a2:9a:d9: e6:52:c6:ba:74:9c:8a:25:e4:06:34:92:d9:c6:c4: 82:89:b4:8b:84:ef:4a:82:42:38:1c:70:a2:59:f0: 54:7f:aa:c6:30:57:79:16:d4:5e:cc:3a:72:94:ca: e3:8d:c8:65:0f:d7:5f:f3:9f:c7:79:f6:bf:4a:eb: bc:a7:97:8d:e1:2b:03:10:2f:b7:25:96:65:2b:cc: c9:d1:40:17:8b:53:04:62:b4:40:db:32:79:9c:ac: c1:20:dc:f1:09:c0:1f:cd:8c:c1:d2:d3:6a:cd:bc: af:75:9d:97:24:8e:79:48:40:c9:95:82:c9:7a:18: ac:b3:79:5b:52:2b:6d:6a:f8:1d:9e:95:e7:48:87: c7:39:b9:dd:b0:cb:0e:1a:8d:0c:e3:7f:a0:3d:ce: ea:72:3c:0d:ee:90:9e:56:da:e7:9d:84:95:ff:6d: a0:7c:2a:da:93:1c:0d:9a:72:7b:d5:e9:c1:32:6c: 33:6d:09:b0:b2:9f:dc:29:e6:66:34:9d:f7:b3:04: 39:8b:93:53:ac:80:32:91:70:7f:b5:74:d0:55:81: e1:5d:6b:9b:0a:f1:47:c7:33:d9:fb:9e:ef:7c:12: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E2:A7:C7:B2:C7:D4:7F:76:CA:BB:65:6C:BB:6E:F4:A8:28:97:EE X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ac:9a:d8:92:fb:83:b0:34:0c:2d:bb:87:99:d2:bf:1c:25: a7:b4:6d:ae:6f:0c:45:91:68:3a:46:1d:89:07:23:cf:d3:d5: be:6a:e7:21:ec:64:c6:d7:9b:ca:20:3f:a7:f3:a6:8b:ed:25: 5e:dc:cc:09:1e:24:66:62:2d:39:14:26:9f:6d:3b:11:da:d4: 99:46:b7:24:3e:de:de:8e:3e:42:bb:63:a5:e9:0a:86:ac:ee: cb:8f:ba:0a:15:ea:0e:1d:8d:b6:57:a6:ed:53:2e:42:a9:60: 57:25:b8:46:ed:07:d6:10:be:53:c7:df:f2:9d:a5:e1:66:2a: 86:ed:74:ed:9d:7d:a3:1d:00:63:8b:3f:ae:5e:b0:cb:3b:b3: 91:cf:2a:45:f3:2c:cd:e1:c1:90:c0:48:37:eb:d1:7f:7a:c4: 85:f9:a2:6a:22:86:81:75:fd:8b:d6:31:ed:64:08:f2:18:55: a4:5b:93:d9:1a:59:3a:f9:be:64:54:16:b3:b2:19:0c:d2:6c: 48:7d:c4:33:6d:64:fe:8b:67:7f:94:de:ce:fb:e6:b1:6a:1e: 7d:d1:92:b9:84:1f:8e:4d:57:d8:d6:8a:e7:b7:0e:ad:82:4b: c5:0f:9f:da:b4:24:00:e3:81:7e:6e:a6:57:6b:62:f3:dc:0a: 3b:4b:10:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjYxMDAzMDAzMzU2WhcNMjYxMDEwMDAzMzU2WjAYMRYwFAYD VQQDEw02YWMwNGQ3NC1jNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjqrrHiUhboiX6g4IXK5DHic5xFIhOWorWOimtnmUsa6dJyKJeQGNJLZxsSC ibSLhO9KgkI4HHCiWfBUf6rGMFd5FtRezDpylMrjjchlD9df85/Hefa/Suu8p5eN 4SsDEC+3JZZlK8zJ0UAXi1MEYrRA2zJ5nKzBINzxCcAfzYzB0tNqzbyvdZ2XJI55 SEDJlYLJehiss3lbUittavgdnpXnSIfHObndsMsOGo0M43+gPc7qcjwN7pCeVtrn nYSV/22gfCrakxwNmnJ71enBMmwzbQmwsp/cKeZmNJ33swQ5i5NTrIAykXB/tXTQ VYHhXWubCvFHxzPZ+57vfBJn/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDip8ey x9R/dsq7ZWy7bvSoKJfuMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTM1RS9GQTkyNzc4MkM2MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVN VlY4cjlIc1ZIZS1ITkN0eWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI6ya2JL7g7A0DC27h5nSvxwlp7Rtrm8MRZFoOkYdiQcjz9PVvmrnIexkxteb yiA/p/Omi+0lXtzMCR4kZmItORQmn207EdrUmUa3JD7e3o4+QrtjpekKhqzuy4+6 ChXqDh2Ntlem7VMuQqlgVyW4Ru0H1hC+U8ff8p2l4WYqhu107Z19ox0AY4s/rl6w yzuzkc8qRfMszeHBkMBIN+vRf3rEhfmiaiKGgXX9i9Yx7WQI8hhVpFuT2RpZOvm+ ZFQWs7IZDNJsSH3EM21k/otnf5TezvvmsWoefdGSuYQfjk1X2NaK57cOrYJLxQ+f 2rQkAOOBfm6mV2ti89wKO0sQiA== -----END CERTIFICATE-----Generated at Sat Oct 3 17:55:08 2026 by rpki-client