$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft File: 5igiDz_QD0F7mXLh1KD2QWlueZk.mft (raw, json) Hash identifier: 2KRh+ueCPmWeDfkp6m7cpQGdftLLHEXxyRgyh+JRFbg= Subject key identifier: D0:84:03:9E:C0:44:2E:15:E8:7B:25:05:7A:32:2B:FE:48:7D:AA:E2 Authority key identifier: E6:28:22:0F:3F:D0:0F:41:7B:99:72:E1:D4:A0:F6:41:69:6E:79:99 Certificate issuer: /CN=A912E31D/serialNumber=E628220F3FD00F417B9972E1D4A0F641696E7999 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft Manifest number: 012C Signing time: Sun 27 Sep 2026 06:14:42 +0000 Manifest this update: Sun 27 Sep 2026 06:14:42 +0000 Manifest next update: Sun 04 Oct 2026 06:14:42 +0000 Files and hashes: 1: 5igiDz_QD0F7mXLh1KD2QWlueZk.crl (hash: NxxIdebprJK/nFbV2lQulKllL9PzIgArxngP4jp/kuo=) 2: 9CDF0C0CFA4311EFAEC6A81AC4F9AE02.roa (hash: E47slZkZUSxL3blqpxWmejtiKRk74l+RdUUIQ3bo/bo=) 3: n-JZBt8Ozbo9HKqn0cDNCS4o-Gg.asa (hash: C7SCxJ3LGZxnzdWb/VHNS9wmQrMU9lruni2YUaaewx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.crl rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E31D, serialNumber=E628220F3FD00F417B9972E1D4A0F641696E7999 Validity Not Before: Sep 27 06:14:42 2026 GMT Not After : Oct 4 06:14:42 2026 GMT Subject: CN=6ab8b452-1de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:3d:56:df:c2:67:eb:37:18:4e:10:9d:d0: b0:69:76:c8:5b:5a:4e:3b:d1:72:b4:1e:2b:76:d5: f7:19:86:96:f4:ef:e0:6f:f5:22:b3:32:aa:a8:46: d7:ac:9e:43:54:dc:19:22:41:4e:1a:8c:e7:5a:fd: 9d:8b:80:1a:71:f8:35:c8:95:c5:fc:6c:5e:41:94: c2:51:78:11:d6:95:51:83:f2:02:7f:fb:6f:c2:37: 44:4f:34:b4:9d:b2:da:c0:c8:1b:d8:a8:13:37:be: c7:af:21:d1:bf:f5:de:14:b0:00:0e:5a:f4:4d:ac: bc:64:4c:f1:c0:fd:e5:07:86:22:48:1d:d6:84:fe: 33:31:84:f6:e5:1a:ba:01:35:f5:f4:13:84:61:af: 2b:22:d1:78:7c:b6:4c:dd:4c:60:a7:cb:35:24:42: c4:15:55:5e:af:5e:4e:39:c3:8a:f4:19:ca:ed:2b: 68:2d:2a:6e:1a:3a:fd:1c:6b:05:da:1a:21:33:b5: 91:a3:c4:ad:93:01:da:c4:fa:a5:74:a7:8e:8e:cd: 3d:0d:ba:78:1d:97:56:c7:ff:78:2e:2d:8f:4c:09: 9b:b9:3a:a0:37:02:00:b5:b4:6b:10:56:b5:ea:8d: b3:91:7d:79:91:71:b2:37:6d:6c:86:38:89:df:fa: 97:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:84:03:9E:C0:44:2E:15:E8:7B:25:05:7A:32:2B:FE:48:7D:AA:E2 X509v3 Authority Key Identifier: keyid:E6:28:22:0F:3F:D0:0F:41:7B:99:72:E1:D4:A0:F6:41:69:6E:79:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:b6:93:29:f1:fc:75:3a:cd:2a:fb:60:b8:5f:de:a3:7f:01: 37:51:e6:43:b0:e6:b7:51:0e:e9:9d:1c:39:8d:56:25:7f:da: d8:0b:a1:db:97:7f:7f:b5:e5:ac:4c:b2:e0:f3:7f:a4:8f:94: d7:c1:8d:73:08:29:7c:7d:7a:0f:ec:d7:d9:a0:35:3b:da:17: ca:5e:cd:13:a4:3e:d3:ca:70:24:a0:b9:92:2b:29:96:f8:cd: 8c:48:7c:ad:4c:82:82:f5:c6:d6:68:3b:e0:5a:5b:a5:01:53: 52:64:8d:4c:8c:c9:df:b2:4b:34:55:df:8d:e2:db:be:1f:d1: 16:b1:88:20:8d:24:ab:a9:70:a6:e0:d8:45:c1:ad:26:f0:d6: 74:9a:f4:83:a6:72:4f:18:f1:0a:e2:ce:9a:2c:6e:10:8d:6f: 47:31:2e:72:99:e5:f5:d6:7e:6f:98:68:00:c7:77:ac:d8:ec: 70:b1:6c:bf:f2:10:20:e1:21:d3:06:4a:f1:f1:06:bf:3d:aa: e0:d9:e1:b4:80:cf:0e:f1:f2:cd:b5:97:7a:92:40:d1:eb:5c: 4e:73:26:02:5c:83:f8:79:be:10:2b:17:93:28:ae:b0:16:ba: 7c:d6:ac:3e:12:7a:f5:59:31:72:ea:ff:63:1b:90:a4:ad:7f: bb:e3:83:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzMUQxMTAvBgNVBAUTKEU2MjgyMjBGM0ZEMDBGNDE3Qjk5NzJFMUQ0QTBGNjQx Njk2RTc5OTkwHhcNMjYwOTI3MDYxNDQyWhcNMjYxMDA0MDYxNDQyWjAYMRYwFAYD VQQDEw02YWI4YjQ1Mi0xZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttk9Vt/CZ+s3GE4QndCwaXbIW1pOO9FytB4rdtX3GYaW9O/gb/UiszKqqEbX rJ5DVNwZIkFOGoznWv2di4Aacfg1yJXF/GxeQZTCUXgR1pVRg/ICf/tvwjdETzS0 nbLawMgb2KgTN77HryHRv/XeFLAADlr0Tay8ZEzxwP3lB4YiSB3WhP4zMYT25Rq6 ATX19BOEYa8rItF4fLZM3Uxgp8s1JELEFVVer15OOcOK9BnK7StoLSpuGjr9HGsF 2hohM7WRo8StkwHaxPqldKeOjs09Dbp4HZdWx/94Li2PTAmbuTqgNwIAtbRrEFa1 6o2zkX15kXGyN21shjiJ3/qXQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCEA57A RC4V6HslBXoyK/5IfariMB8GA1UdIwQYMBaAFOYoIg8/0A9Be5ly4dSg9kFpbnmZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTMxRC8yQ0Y2QjhCMEY5 QzkxMUVGQTU0Rjc2MkFDNEY5QUUwMi81aWdpRHpfUUQwRjdtWExoMUtEMlFXbHVl WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpZ2lEel9RRDBGN21YTGgxS0QyUVdsdWVaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTMxRC8yQ0Y2QjhCMEY5QzkxMUVGQTU0Rjc2MkFDNEY5QUUwMi81aWdpRHpfUUQw RjdtWExoMUtEMlFXbHVlWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACbaTKfH8dTrNKvtguF/eo38BN1HmQ7Dmt1EO6Z0cOY1WJX/a2Auh25d/f7Xl rEyy4PN/pI+U18GNcwgpfH16D+zX2aA1O9oXyl7NE6Q+08pwJKC5kisplvjNjEh8 rUyCgvXG1mg74FpbpQFTUmSNTIzJ37JLNFXfjeLbvh/RFrGIII0kq6lwpuDYRcGt JvDWdJr0g6ZyTxjxCuLOmixuEI1vRzEucpnl9dZ+b5hoAMd3rNjscLFsv/IQIOEh 0wZK8fEGvz2q4NnhtIDPDvHyzbWXepJA0etcTnMmAlyD+Hm+ECsXkyiusBa6fNas PhJ69Vkxcur/YxuQpK1/u+OD2w== -----END CERTIFICATE-----Generated at Sun Sep 27 10:52:40 2026 by rpki-client