$ rpki-client -vvvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: Xv9V8zGXsbjOuHL0SsOZcdU9FRt30RMVtZgRavoqfko= Subject key identifier: 2D:F6:98:47:6C:FB:7D:62:1B:C5:B2:87:40:24:96:6C:8D:BC:E9:9E Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 13CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 13B1 Signing time: Thu 24 Sep 2026 16:55:13 +0000 Manifest this update: Thu 24 Sep 2026 16:55:12 +0000 Manifest next update: Thu 01 Oct 2026 16:55:12 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: AsB8xjtRPNTxKvwU9YJ2GcF79LQltGJhqtt3WEMAwLk=) 2: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: kTVtJf0sXNv/myeQcbWLzlKqwsk/htvDmO2Qa4BwMyU=) 3: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: LjoDddRIHfdyvbMdkYPATybnnKwBZMxY+IE0OlrkYcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5068 (0x13cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Sep 24 16:55:12 2026 GMT Not After : Oct 1 16:55:12 2026 GMT Subject: CN=6ab555f1-8a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:4e:06:8e:e9:43:8d:34:48:cf:c2:7a:fb: 65:2c:d3:df:71:4d:b4:c1:3b:de:ed:1a:73:59:4c: c5:f1:35:a1:4e:e1:f8:8c:b2:55:2e:b8:10:ef:19: db:9a:47:04:fd:ce:07:11:7b:3b:3b:5e:d5:a5:7e: 9e:4b:af:69:c3:33:5d:d3:05:b1:f2:c1:e7:db:93: de:d3:8c:b3:11:16:ff:88:8b:40:14:c6:a4:7e:11: d2:00:84:ea:8d:00:6c:bd:23:5d:81:10:82:bc:98: 9b:4a:5c:e5:e2:76:75:72:cb:fd:c3:1c:ef:72:54: 2b:f7:7b:90:19:ca:b9:fb:78:51:7e:70:ed:aa:86: 54:55:fd:a8:f1:59:c7:e5:82:e6:94:53:35:e6:fa: 2a:a0:73:e6:6e:29:da:5c:d4:3f:ff:11:83:de:66: d8:bd:f8:fc:c6:c9:c9:b6:94:35:f0:85:5f:74:5c: 22:06:6b:60:d7:5c:b2:f8:af:6e:48:1d:39:dd:08: c0:24:78:20:7a:4d:fd:d5:6e:58:9d:b3:da:57:d8: 08:75:c1:54:09:d3:96:c3:f8:4d:9c:d8:56:28:28: 7b:98:e8:ed:7b:e1:f4:9c:03:14:85:96:00:e4:5d: bd:a8:3f:b4:53:01:e4:4f:9e:ce:25:0f:96:d1:40: 56:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F6:98:47:6C:FB:7D:62:1B:C5:B2:87:40:24:96:6C:8D:BC:E9:9E X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:96:f6:c6:4b:1c:e8:da:90:f6:c5:f9:5d:d6:af:92:dd:7b: d5:2c:fe:62:b6:da:d1:9f:e3:2f:38:82:a7:4e:af:86:d3:bf: ab:08:f2:5e:b4:1b:01:20:62:d9:fe:32:7c:7d:4a:42:0a:df: 05:21:1c:11:df:a1:60:e2:3b:4b:d9:28:10:36:29:7a:2a:c1: ea:23:b9:41:8e:a5:d7:7d:c2:c8:e2:6f:78:84:34:cd:30:58: 65:25:6a:c6:90:e0:b7:7a:80:77:d1:09:2e:f1:db:c4:6b:96: 53:6a:fe:db:5a:dd:63:c4:94:08:ae:95:1f:d4:60:1b:7a:e3: 98:18:de:6a:61:c0:8f:e4:08:ef:f3:5c:f9:79:ae:46:a7:19: 7e:5b:da:f1:91:d1:af:59:d8:ca:52:e2:8f:55:05:46:e7:7d: f1:ee:b8:90:f4:15:b4:8f:56:af:d8:d2:95:e0:e7:80:ce:fc: d5:3e:21:5a:a6:98:98:7d:d1:de:83:5d:ec:ba:8a:28:01:ef: 24:cc:0d:66:98:85:e3:37:f3:66:48:54:5a:bf:49:fa:62:55: 18:b6:bb:de:62:d9:a2:db:7d:94:9a:27:73:62:cf:90:7a:40: 05:41:ee:57:ab:66:bb:60:50:4a:78:1d:d5:38:54:96:44:59: 38:76:f9:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjYwOTI0MTY1NTEyWhcNMjYxMDAxMTY1NTEyWjAYMRYwFAYD VQQDEw02YWI1NTVmMS04YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjoJOBo7pQ400SM/CevtlLNPfcU20wTve7RpzWUzF8TWhTuH4jLJVLrgQ7xnb mkcE/c4HEXs7O17VpX6eS69pwzNd0wWx8sHn25Pe04yzERb/iItAFMakfhHSAITq jQBsvSNdgRCCvJibSlzl4nZ1csv9wxzvclQr93uQGcq5+3hRfnDtqoZUVf2o8VnH 5YLmlFM15voqoHPmbinaXNQ//xGD3mbYvfj8xsnJtpQ18IVfdFwiBmtg11yy+K9u SB053QjAJHggek391W5YnbPaV9gIdcFUCdOWw/hNnNhWKCh7mOjte+H0nAMUhZYA 5F29qD+0UwHkT57OJQ+W0UBWNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC32mEds +31iG8Wyh0AklmyNvOmeMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJb2xksc6NqQ9sX5Xdavkt171Sz+Yrba0Z/jLziCp06vhtO/qwjyXrQbASBi 2f4yfH1KQgrfBSEcEd+hYOI7S9koEDYpeirB6iO5QY6l133CyOJveIQ0zTBYZSVq xpDgt3qAd9EJLvHbxGuWU2r+21rdY8SUCK6VH9RgG3rjmBjeamHAj+QI7/Nc+Xmu RqcZflva8ZHRr1nYylLij1UFRud98e64kPQVtI9Wr9jSleDngM781T4hWqaYmH3R 3oNd7LqKKAHvJMwNZpiF4zfzZkhUWr9J+mJVGLa73mLZott9lJonc2LPkHpABUHu V6tmu2BQSngd1ThUlkRZOHb5OA== -----END CERTIFICATE-----Generated at Thu Sep 24 23:33:32 2026 by rpki-client