$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft File: 0Iw24m8k-51RTztAqON6mgS1gCU.mft (raw, json) Hash identifier: iw29iCLUfnLsZTOTJbMIYjEwuS1d8lGAGqdQ+lvlP5k= Subject key identifier: CA:B3:E9:5B:5F:E8:E6:19:37:A1:0F:9C:8E:1D:E0:22:76:A5:36:8D Authority key identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 Certificate issuer: /CN=A913E03C/serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025 Certificate serial: 358A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft Manifest number: 3586 Signing time: Sat 10 Oct 2026 14:54:54 +0000 Manifest this update: Sat 10 Oct 2026 14:54:53 +0000 Manifest next update: Sat 17 Oct 2026 14:54:53 +0000 Files and hashes: 1: 0Iw24m8k-51RTztAqON6mgS1gCU.crl (hash: gV3j+8Cr3ooK8bUfGd9cMUbpMvxOVZKP/1HE74+Iqgs=) 2: 1D790596F25D11EF8C5D7036C4F9AE02.roa (hash: Gh4dWKNdndeicyj44PS+6jAlqe5RF8zt7lygUMqJnnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13706 (0x358a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E03C, serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025 Validity Not Before: Oct 10 14:54:53 2026 GMT Not After : Oct 17 14:54:53 2026 GMT Subject: CN=6aca51bd-6cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:2f:ad:72:20:6c:2e:60:2c:ba:33:38:05: 86:07:6c:2d:71:a1:61:e6:18:15:0a:2d:cf:d5:67: 34:41:88:d9:7b:a8:fe:27:17:2f:aa:b3:b0:10:2a: 89:81:0f:ca:80:37:24:fb:7d:30:f3:e0:3e:67:97: e9:eb:5f:63:cb:f8:33:ce:8e:87:dd:11:a6:35:c3: cc:29:37:1f:90:b8:14:dd:ed:4e:bb:0f:13:7e:d3: 23:eb:9c:02:d3:ae:0d:ce:92:ea:fc:1d:e6:d3:68: 06:e1:20:f2:50:6c:47:1d:d6:7c:1f:57:52:d9:4b: 63:19:71:16:f2:74:78:4f:b3:8d:8a:95:85:84:3a: 29:53:fc:bb:9e:db:73:df:b6:63:27:98:dd:76:7c: 7f:b1:24:18:cc:49:60:c6:1a:a4:34:e6:30:2c:c5: 74:d7:40:74:c3:ce:34:af:80:97:63:fe:59:1d:c8: 74:a1:8f:5b:3e:72:4b:c3:ee:51:29:f9:41:03:33: be:4e:2a:64:6a:78:3d:a9:e4:95:75:b9:fa:b7:44: 50:6d:ec:df:22:56:da:41:1a:f8:5e:e6:c2:1d:f9: 6f:f5:14:5e:58:08:f3:57:31:76:54:0b:4d:da:91: ba:b0:3e:15:c1:9a:4a:ee:ca:76:6f:7e:d0:84:60: 39:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B3:E9:5B:5F:E8:E6:19:37:A1:0F:9C:8E:1D:E0:22:76:A5:36:8D X509v3 Authority Key Identifier: keyid:D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:08:6f:63:0e:28:26:51:85:d0:2b:68:cf:a2:81:f4:36:e6: ab:02:f0:fa:8e:15:59:19:f0:be:1f:2d:88:27:cb:5f:fa:bc: 45:04:fb:94:2b:1b:90:6a:e3:28:12:c6:ae:8d:d0:b4:ea:ec: 20:fb:2a:53:28:a8:ce:8b:4d:65:bf:32:c4:93:88:2e:a8:ac: 36:5e:f2:cf:ff:6b:0c:df:6d:1f:ec:bf:21:7f:a4:0a:e5:48: f4:4b:db:6f:50:95:cc:30:de:6f:1b:a4:2f:30:ad:dc:b1:7a: 46:d0:3e:9f:b5:31:c2:3a:83:9b:bd:8c:5d:9e:4a:d9:ad:fa: d3:a9:b7:02:d9:41:1e:82:cd:a1:79:b1:3f:71:0f:e3:de:2d: fa:93:51:e5:7b:84:f7:f6:84:1e:62:06:d5:16:d9:a7:94:2e: fe:6d:7a:db:6f:39:a2:2f:7a:ef:35:fd:1e:c3:af:5f:f0:13: 5a:b6:1c:2a:70:cc:71:1a:80:89:c0:3a:69:1f:4d:85:94:37: 6c:2b:36:c7:11:79:ee:3b:a4:73:75:04:24:77:4c:0a:ee:8b: 89:60:00:b1:60:6b:95:32:13:85:87:65:f8:46:40:9a:60:98: c8:b2:08:48:d3:d5:f6:b6:6e:7f:8e:34:f2:38:80:18:e3:73: 05:c1:a4:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwM0MxMTAvBgNVBAUTKEQwOEMzNkUyNkYyNEZCOUQ1MTRGM0I0MEE4RTM3QTlB MDRCNTgwMjUwHhcNMjYxMDEwMTQ1NDUzWhcNMjYxMDE3MTQ1NDUzWjAYMRYwFAYD VQQDEw02YWNhNTFiZC02Y2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HMvrXIgbC5gLLozOAWGB2wtcaFh5hgVCi3P1Wc0QYjZe6j+JxcvqrOwECqJ gQ/KgDck+30w8+A+Z5fp619jy/gzzo6H3RGmNcPMKTcfkLgU3e1Ouw8TftMj65wC 064NzpLq/B3m02gG4SDyUGxHHdZ8H1dS2UtjGXEW8nR4T7ONipWFhDopU/y7nttz 37ZjJ5jddnx/sSQYzElgxhqkNOYwLMV010B0w840r4CXY/5ZHch0oY9bPnJLw+5R KflBAzO+Tipkang9qeSVdbn6t0RQbezfIlbaQRr4XubCHflv9RReWAjzVzF2VAtN 2pG6sD4VwZpK7sp2b37QhGA5nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqz6Vtf 6OYZN6EPnI4d4CJ2pTaNMB8GA1UdIwQYMBaAFNCMNuJvJPudUU87QKjjepoEtYAl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTAzQy9CNkUwRjRBQTFE OUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04ay01MVJUenRBcU9ONm1nUzFn Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBJdzI0bThrLTUxUlR6dEFxT042bWdTMWdDVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTAzQy9CNkUwRjRBQTFEOUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04ay01 MVJUenRBcU9ONm1nUzFnQ1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMwhvYw4oJlGF0Ctoz6KB9DbmqwLw+o4VWRnwvh8tiCfLX/q8RQT7lCsbkGrj KBLGro3QtOrsIPsqUyiozotNZb8yxJOILqisNl7yz/9rDN9tH+y/IX+kCuVI9Evb b1CVzDDebxukLzCt3LF6RtA+n7UxwjqDm72MXZ5K2a3606m3AtlBHoLNoXmxP3EP 494t+pNR5XuE9/aEHmIG1RbZp5Qu/m162285oi967zX9HsOvX/ATWrYcKnDMcRqA icA6aR9NhZQ3bCs2xxF57jukc3UEJHdMCu6LiWAAsWBrlTIThYdl+EZAmmCYyLII SNPV9rZuf4408jiAGONzBcGk8A== -----END CERTIFICATE-----Generated at Mon Oct 12 15:25:25 2026 by rpki-client