$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: D6Kg2KmwLabOMqvqFp1Qy0T2EYcCi6K/wnoCnASOZXg= Subject key identifier: 4E:F0:BE:6E:AD:B5:C3:C9:8C:1A:17:9F:0F:EF:F2:61:74:DE:B2:BA Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: 0156 Signing time: Fri 25 Sep 2026 05:16:28 +0000 Manifest this update: Fri 25 Sep 2026 05:16:28 +0000 Manifest next update: Fri 02 Oct 2026 05:16:28 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: 6toxSPCL0JsBDW8v0xz1V8WAf8qHeoOdWhQwMaDPXVo=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Sep 25 05:16:28 2026 GMT Not After : Oct 2 05:16:28 2026 GMT Subject: CN=6ab603ac-96ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:6c:bf:ae:59:85:52:b3:3c:09:2b:9a:e9: b4:eb:8f:8c:85:da:0b:e4:7a:e6:80:12:c0:72:dd: 42:69:21:91:d6:79:f2:4f:02:72:bc:59:e9:28:c7: 84:ae:ea:c0:aa:fd:1c:ea:5b:a0:a7:a4:7d:88:47: 73:c5:f1:eb:79:3f:83:df:3b:4f:23:01:87:32:22: 0e:2e:dc:01:d8:38:0f:9d:47:25:1f:be:72:c0:ce: 75:0d:ec:f2:06:e6:c4:09:05:0d:43:1a:1d:32:6d: 76:42:22:d6:94:94:e3:f8:0f:a9:50:6b:7c:65:3e: 6d:a6:d6:9a:bb:5d:d8:2c:aa:13:53:d0:73:44:77: ac:5b:17:18:b4:cd:c3:18:eb:40:e4:38:34:fd:1a: 0a:c4:fc:f2:ea:4e:12:00:9a:89:c4:26:ac:b9:f4: 7e:a1:17:c9:f4:a0:fc:d5:4a:b9:d0:e9:76:89:54: 3b:f3:26:23:8f:fd:f7:b9:e6:0e:6d:c9:60:cf:a6: f0:2a:fd:4a:93:74:c3:c5:44:da:bf:19:cd:ac:59: 8a:26:45:25:2b:fd:c8:95:37:84:98:82:de:9e:db: 97:73:ac:83:32:f1:aa:36:46:95:08:9f:62:6c:d4: 3b:67:dc:45:77:09:a0:b6:52:a3:9f:9c:5a:e9:1c: bb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F0:BE:6E:AD:B5:C3:C9:8C:1A:17:9F:0F:EF:F2:61:74:DE:B2:BA X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:a2:3d:7b:d7:0d:72:53:aa:57:cd:f2:ce:a6:f4:7b:80:f8: 1b:50:8c:d9:ee:ba:f5:b7:27:20:af:e5:56:ef:b5:6f:a7:12: a3:d3:80:54:5c:68:cf:9d:5a:19:67:74:42:01:89:a8:80:f2: 96:10:9e:a4:08:1b:76:ed:14:35:ba:21:48:f7:e7:29:a9:21: 16:cc:7a:4f:bb:ab:23:ec:4c:ff:67:7c:b3:0e:8c:19:03:57: 2d:8d:5a:41:83:9c:cb:5e:a2:9c:bc:a7:8e:53:6b:5e:47:13: 52:c9:5a:0c:c7:b0:9a:f6:0b:7a:ab:8e:a4:b3:e5:b0:72:46: 6a:c0:39:ae:2f:10:05:eb:33:89:95:4d:ec:03:b0:76:36:a4: f3:f3:eb:f6:2d:b1:7d:ea:87:f3:f5:91:c2:43:d0:d6:a2:49: 73:bc:f9:81:9f:56:65:ea:82:30:51:35:9e:97:0e:c5:0b:ab: 72:fb:ba:59:00:86:63:37:d3:10:9e:6e:22:88:78:bf:6e:3f: 8a:79:07:2a:1d:bc:b2:12:2e:52:7a:82:7a:c6:e0:44:a1:00: d9:bb:ce:3d:03:5b:d1:3b:3b:23:09:0e:0d:69:ce:ee:f5:c5: 8e:24:23:e7:82:36:9b:b8:fc:6d:31:89:d5:67:b5:e8:b2:dc: dd:19:dc:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzQzcxMTAvBgNVBAUTKDg5M0FDNTc5MDE0MTU2MTg2QUVBRjUwMzRCQTBCNDky NkY5MkUzNzQwHhcNMjYwOTI1MDUxNjI4WhcNMjYxMDAyMDUxNjI4WjAYMRYwFAYD VQQDEw02YWI2MDNhYy05NmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPhsv65ZhVKzPAkrmum064+MhdoL5HrmgBLAct1CaSGR1nnyTwJyvFnpKMeE rurAqv0c6lugp6R9iEdzxfHreT+D3ztPIwGHMiIOLtwB2DgPnUclH75ywM51Dezy BubECQUNQxodMm12QiLWlJTj+A+pUGt8ZT5tptaau13YLKoTU9BzRHesWxcYtM3D GOtA5Dg0/RoKxPzy6k4SAJqJxCasufR+oRfJ9KD81Uq50Ol2iVQ78yYjj/33ueYO bclgz6bwKv1Kk3TDxUTavxnNrFmKJkUlK/3IlTeEmILentuXc6yDMvGqNkaVCJ9i bNQ7Z9xFdwmgtlKjn5xa6Ry7vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7wvm6t tcPJjBoXnw/v8mF03rK6MB8GA1UdIwQYMBaAFIk6xXkBQVYYaur1A0ugtJJvkuN0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84NjU4ODdCNkIy NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZoaHE2dlVEUzZDMGttLVM0 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTNDNy84NjU4ODdCNkIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZo aHE2dlVEUzZDMGttLVM0M1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuqI9e9cNclOqV83yzqb0e4D4G1CM2e669bcnIK/lVu+1b6cSo9OAVFxoz51a GWd0QgGJqIDylhCepAgbdu0UNbohSPfnKakhFsx6T7urI+xM/2d8sw6MGQNXLY1a QYOcy16inLynjlNrXkcTUslaDMewmvYLequOpLPlsHJGasA5ri8QBesziZVN7AOw djak8/Pr9i2xfeqH8/WRwkPQ1qJJc7z5gZ9WZeqCMFE1npcOxQurcvu6WQCGYzfT EJ5uIoh4v24/inkHKh28shIuUnqCesbgRKEA2bvOPQNb0Ts7IwkODWnO7vXFjiQj 54I2m7j8bTGJ1We16LLc3RncAQ== -----END CERTIFICATE-----Generated at Sun Sep 27 00:53:12 2026 by rpki-client