$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft File: ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json) Hash identifier: dQQ5yp/S8UX8xl9v+Qa7TVVrcZ2BK+xLxxDUrHz4BIY= Subject key identifier: CC:1B:1F:66:4E:96:DE:1F:31:C5:5D:C1:D8:90:22:32:C5:C6:AE:0A Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft Manifest number: 0605 Signing time: Tue 22 Sep 2026 22:38:14 +0000 Manifest this update: Tue 22 Sep 2026 22:38:13 +0000 Manifest next update: Tue 29 Sep 2026 22:38:13 +0000 Files and hashes: 1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: MsfUlCgC45ofSEGllRwrwD87bq5Ix7aTYehYmqoK8/o=) 2: 3A549A1EB00211F0A3A86535C4F9AE02.roa (hash: qarwsQJsRpCWHG6vFh1YjS9Lj8uPb2xBWzU12A9C+KA=) 3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: FQawum2eNxdcpBq3F26HS+tVhfZE9PWendAn/iVAyx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Validity Not Before: Sep 22 22:38:13 2026 GMT Not After : Sep 29 22:38:13 2026 GMT Subject: CN=6ab30355-44fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:3d:c8:60:22:a6:86:59:4c:6e:2e:d1:c9: 70:99:fe:a2:ab:72:25:dd:94:7b:dc:70:7a:27:ad: 58:2f:15:00:58:58:ee:48:46:60:fc:34:dc:d8:1b: c3:59:53:72:e8:dc:d7:77:ee:48:8e:68:79:a6:6f: cd:80:da:44:81:f5:e2:1c:e0:c1:bd:d3:2c:84:96: 9d:1b:c8:c5:f2:a6:85:c6:8b:f9:97:ec:47:4e:5b: 8c:1a:7b:35:56:54:bd:53:42:25:77:ce:5f:63:31: 1d:4b:ea:2c:03:eb:7c:22:a1:6f:cb:79:93:35:b8: de:1a:bb:41:71:a7:97:e8:4c:dc:58:fc:14:74:cf: 79:4b:1c:51:8d:80:8d:b1:42:34:be:82:57:aa:25: ba:60:c8:16:38:d5:3b:1a:5f:a8:d9:62:eb:0f:a2: 61:1b:22:84:b9:70:6c:ad:cc:56:7e:95:a3:7c:fd: 2f:5c:b2:e4:ee:eb:8c:35:89:e9:9b:05:62:42:6b: 5e:c0:f8:e9:54:36:7d:8e:fb:0c:06:cc:eb:b3:8e: 51:d4:b2:3c:44:27:ec:79:b9:9d:79:e4:91:1b:98: af:bb:df:fd:13:59:67:9c:4c:fd:f4:05:80:3c:21: ab:b9:ac:0d:ea:27:10:b9:bf:0f:26:0b:e0:87:4e: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1B:1F:66:4E:96:DE:1F:31:C5:5D:C1:D8:90:22:32:C5:C6:AE:0A X509v3 Authority Key Identifier: keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:5e:b8:fd:5d:ae:66:75:ea:29:40:72:d5:c2:99:69:42:c5: 97:fe:79:57:c4:35:a1:69:bf:be:48:33:7e:68:59:37:27:16: 6c:b6:e7:ab:c5:5b:5d:76:74:df:11:03:83:95:9e:2f:76:b4: f3:87:5a:90:9d:fd:da:a2:0d:91:9c:0a:c8:bb:01:fb:7e:5a: 15:eb:b5:79:1b:0d:4c:ad:6d:b4:d3:ea:64:5f:a3:e4:be:0c: e0:79:53:e7:b3:cb:b3:5a:d3:51:39:cb:60:a1:a3:f5:96:11: b5:7d:fd:22:9d:a8:98:b2:44:7a:02:52:2f:81:62:87:d1:31: e9:4b:48:e3:db:81:79:fd:b7:2c:39:11:18:c3:9d:c6:4f:41: 7c:32:27:6d:02:43:eb:7d:5d:10:6d:a2:9c:8a:8b:1b:24:91: 1f:d3:6b:dc:88:fd:eb:cd:3d:f1:30:f1:49:6d:99:70:2f:da: 95:cc:f1:01:4a:6f:42:bc:f5:1b:79:1c:b9:d9:ed:9f:f8:ee: dd:76:8d:83:ea:2c:30:b9:d7:d7:0e:12:cb:83:98:ea:01:62: 00:03:f1:c5:8d:b3:e9:e3:5e:be:75:a7:e5:c8:d0:43:61:65: 2a:d2:b2:be:55:95:da:16:b3:b4:20:67:55:36:ca:13:8d:11: f7:dd:12:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5 QTUzOUFDRTEwHhcNMjYwOTIyMjIzODEzWhcNMjYwOTI5MjIzODEzWjAYMRYwFAYD VQQDEw02YWIzMDM1NS00NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJg9yGAipoZZTG4u0clwmf6iq3Il3ZR73HB6J61YLxUAWFjuSEZg/DTc2BvD WVNy6NzXd+5Ijmh5pm/NgNpEgfXiHODBvdMshJadG8jF8qaFxov5l+xHTluMGns1 VlS9U0Ild85fYzEdS+osA+t8IqFvy3mTNbjeGrtBcaeX6EzcWPwUdM95SxxRjYCN sUI0voJXqiW6YMgWONU7Gl+o2WLrD6JhGyKEuXBsrcxWfpWjfP0vXLLk7uuMNYnp mwViQmtewPjpVDZ9jvsMBszrs45R1LI8RCfsebmdeeSRG5ivu9/9E1lnnEz99AWA PCGruawN6icQub8PJgvgh05tAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwbH2ZO lt4fMcVdwdiQIjLFxq4KMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9I QWh2ZlNzaEJpdzJhVTVyT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiV64/V2uZnXqKUBy1cKZaULFl/55V8Q1oWm/vkgzfmhZNycWbLbnq8VbXXZ0 3xEDg5WeL3a084dakJ392qINkZwKyLsB+35aFeu1eRsNTK1ttNPqZF+j5L4M4HlT 57PLs1rTUTnLYKGj9ZYRtX39Ip2omLJEegJSL4Fih9Ex6UtI49uBef23LDkRGMOd xk9BfDInbQJD631dEG2inIqLGySRH9Nr3Ij968098TDxSW2ZcC/alczxAUpvQrz1 G3kcudntn/ju3XaNg+osMLnX1w4Sy4OY6gFiAAPxxY2z6eNevnWn5cjQQ2FlKtKy vlWV2haztCBnVTbKE40R990SPg== -----END CERTIFICATE-----Generated at Wed Sep 23 15:43:45 2026 by rpki-client