$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft File: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft (raw, json) Hash identifier: zs3sl3CaP3PIyxckZcQqWh+rtUD5pb1gUks4Ti/8XSU= Subject key identifier: 85:64:78:9A:70:E8:89:A5:FC:78:12:BC:8E:12:F0:3F:C7:75:A7:01 Authority key identifier: 23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB Certificate issuer: /CN=A9122796/serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft Manifest number: 15 Signing time: Sun 27 Sep 2026 09:38:43 +0000 Manifest this update: Sun 27 Sep 2026 09:38:42 +0000 Manifest next update: Sun 04 Oct 2026 09:38:42 +0000 Files and hashes: 1: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl (hash: pxDouq4OBYX2q6oG4PVyeOtcmgFK4LlQ+xgdUoty0+o=) 2: B6E9F4E89E0411F192F8ACA34A11F970.roa (hash: i+mz8RKuF8p3hv1YLSt70vMBBM5Cu/pBQuz04gTb5ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122796, serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB Validity Not Before: Sep 27 09:38:42 2026 GMT Not After : Oct 4 09:38:42 2026 GMT Subject: CN=6ab8e423-47ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:93:d0:02:7c:29:8a:d0:fc:c4:da:5c:c8: c4:4d:51:4b:3e:8d:86:72:12:76:83:e8:e4:24:13: 27:56:13:47:01:d2:6f:75:bb:4f:93:eb:1f:a7:b0: ef:8c:0d:6c:87:ac:76:91:5a:52:17:d6:c2:01:65: e6:85:b5:7c:bc:1d:41:2c:d9:c7:75:ed:58:3b:b9: f0:b7:e2:09:fb:02:e0:0b:c5:a4:6c:46:85:af:da: d5:59:67:cb:c0:92:94:90:83:da:f9:81:13:c1:16: 90:91:da:6c:56:ad:71:4c:7b:a1:f9:ff:07:90:3d: 13:2e:92:36:c1:d0:aa:a5:eb:55:65:9a:32:c6:9f: 1e:2c:7b:a7:d8:30:1c:39:75:1e:0e:08:fd:1a:3a: 1d:31:7a:05:a4:3a:81:06:7e:3f:3f:af:8f:2c:70: 7b:b1:dc:5c:07:24:b5:5d:a8:87:ef:22:43:7a:fc: 0b:d4:ef:87:80:44:51:1e:58:c6:de:c8:22:4d:77: d6:46:15:92:46:85:64:25:3a:6a:f0:30:54:5d:ee: 6e:8b:d3:32:22:45:13:49:15:d5:1b:5b:04:4a:97: 78:ab:48:60:09:45:6e:5e:17:aa:74:3c:69:36:65: 16:ef:e2:41:48:6b:87:92:77:fe:bf:a4:d9:86:83: 24:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:64:78:9A:70:E8:89:A5:FC:78:12:BC:8E:12:F0:3F:C7:75:A7:01 X509v3 Authority Key Identifier: keyid:23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b3:3f:c9:d6:53:e1:bb:20:c9:d0:ac:75:ba:b3:02:3d:4b: c0:bc:fc:4e:c3:22:36:92:ef:22:3a:0f:4a:73:cf:eb:33:4c: d1:b0:23:2f:14:2c:84:c5:2a:dd:f1:02:55:21:bf:3a:38:db: fd:c9:0f:82:b5:24:68:59:68:20:a5:b8:41:00:45:ae:39:29: 7d:d0:e9:35:43:b2:9f:fd:1c:0c:fc:d7:6c:a1:dd:ae:af:18: c6:2a:72:46:4c:1b:66:19:97:39:e3:6e:66:26:21:ed:3a:a2: 70:5f:18:61:3b:3c:96:c2:38:34:b5:52:f1:ee:58:2f:ef:77: 4c:24:33:0c:8f:b0:e2:40:06:90:2b:e1:80:38:8a:16:13:54: 89:1b:53:18:09:94:87:6c:85:cd:fc:54:25:81:7d:b8:32:b4: 3d:d4:c3:a4:f6:b6:11:ee:15:ff:ff:e9:48:be:4b:8d:7e:e9: 32:a5:74:80:ea:b9:69:14:97:cf:72:da:54:03:fe:52:a4:06: 3f:fd:cc:86:14:b4:b6:d2:b9:e1:a5:34:b6:a4:43:53:b9:09: d7:7d:df:8a:aa:88:76:1a:11:cd:d1:2e:66:80:3b:f0:10:fd: 23:f1:3f:89:dd:3a:40:a3:02:52:58:14:61:3c:73:44:f5:e3: 6c:0b:9e:f9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Mjc5NjExMC8GA1UEBRMoMjM5N0E5RDU5ODM2ODM2MjZCQUQyQzE0N0ZCN0QzM0M0 OUJEQzZCQjAeFw0yNjA5MjcwOTM4NDJaFw0yNjEwMDQwOTM4NDJaMBgxFjAUBgNV BAMTDTZhYjhlNDIzLTQ3ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKE5PQAnwpitD8xNpcyMRNUUs+jYZyEnaD6OQkEydWE0cB0m91u0+T6x+nsO+M DWyHrHaRWlIX1sIBZeaFtXy8HUEs2cd17Vg7ufC34gn7AuALxaRsRoWv2tVZZ8vA kpSQg9r5gRPBFpCR2mxWrXFMe6H5/weQPRMukjbB0Kql61VlmjLGnx4se6fYMBw5 dR4OCP0aOh0xegWkOoEGfj8/r48scHux3FwHJLVdqIfvIkN6/AvU74eARFEeWMbe yCJNd9ZGFZJGhWQlOmrwMFRd7m6L0zIiRRNJFdUbWwRKl3irSGAJRW5eF6p0PGk2 ZRbv4kFIa4eSd/6/pNmGgyTHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhWR4mnDo iaX8eBK8jhLwP8d1pwEwHwYDVR0jBBgwFoAUI5ep1Zg2g2JrrSwUf7fTPEm9xrsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyNzk2L0JEQUI1MTEyOUUw MTExRjFBMUM5Q0M1ODQ4MTFGOTcwL0k1ZXAxWmcyZzJKcnJTd1VmN2ZUUEVtOXhy cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTVlcDFaZzJnMkpyclN3VWY3ZlRQRW05eHJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Nzk2L0JEQUI1MTEyOUUwMTExRjFBMUM5Q0M1ODQ4MTFGOTcwL0k1ZXAxWmcyZzJK cnJTd1VmN2ZUUEVtOXhycy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCYsz/J1lPhuyDJ0Kx1urMCPUvAvPxOwyI2ku8iOg9Kc8/rM0zRsCMvFCyExSrd 8QJVIb86ONv9yQ+CtSRoWWggpbhBAEWuOSl90Ok1Q7Kf/RwM/Ndsod2urxjGKnJG TBtmGZc5425mJiHtOqJwXxhhOzyWwjg0tVLx7lgv73dMJDMMj7DiQAaQK+GAOIoW E1SJG1MYCZSHbIXN/FQlgX24MrQ91MOk9rYR7hX//+lIvkuNfukypXSA6rlpFJfP ctpUA/5SpAY//cyGFLS20rnhpTS2pENTuQnXfd+Kqoh2GhHN0S5mgDvwEP0j8T+J 3TpAowJSWBRhPHNE9eNsC575 -----END CERTIFICATE-----Generated at Mon Sep 28 21:07:11 2026 by rpki-client