$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: 0eUTjtn1NLmvC5VFqZk4lFvh4pJPJekT0AP0vuz+R+E= Subject key identifier: 4C:89:E7:C4:D9:29:D2:1B:43:9E:04:99:9C:3E:16:73:DA:B9:50:B2 Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0D3A Signing time: Thu 24 Sep 2026 18:08:27 +0000 Manifest this update: Thu 24 Sep 2026 18:08:26 +0000 Manifest next update: Thu 01 Oct 2026 18:08:26 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: jj6EP5VLJJiL3P6/r14fWgV9CMhH69zq52aBu2t/bQ8=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: lLzLMFvq75P6s11FcUbySa49RP0prDTXCNFomk88MZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Sep 24 18:08:26 2026 GMT Not After : Oct 1 18:08:26 2026 GMT Subject: CN=6ab5671a-bda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:0f:89:7c:66:7c:3b:44:9d:fd:ee:c0:ca: 71:90:30:94:bb:8a:06:80:af:a2:04:7a:60:b7:46: 76:aa:2f:5f:f5:3f:c3:b7:d7:9a:89:00:39:ae:ae: 20:f0:26:10:d3:ed:87:3d:24:7e:3d:14:be:39:21: cf:af:07:4b:6e:e6:2e:2f:27:5b:36:55:e5:dc:9b: 63:b1:99:c7:07:a8:c1:8b:a2:ac:db:6b:7b:85:76: 6e:6f:68:e5:c3:44:7b:18:93:64:44:a4:fd:52:3d: d4:2e:eb:db:a5:45:22:a0:fc:db:e6:33:73:42:8c: 21:f9:5d:e0:35:2d:07:bb:5f:5d:fb:2a:56:63:ec: fc:e6:a7:a8:41:55:33:c6:da:7b:58:ea:1f:eb:c5: 79:d0:5c:4c:50:a2:cd:a4:fe:de:c0:1c:34:01:ad: 3f:59:e8:96:3e:d6:26:2a:6a:26:9b:47:21:57:23: a3:60:76:fd:cb:3d:4a:8a:aa:d8:89:f4:1f:ee:28: 4d:73:1b:72:6f:97:c5:09:32:71:aa:9d:52:34:c7: 0c:a6:9a:8a:22:af:fd:63:1b:25:31:af:1e:a7:b8: b2:a1:ff:61:cc:49:39:fd:8a:d5:d1:5b:e5:4a:cd: bf:00:a6:7e:f8:7e:9e:18:31:77:63:3d:c7:87:75: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:89:E7:C4:D9:29:D2:1B:43:9E:04:99:9C:3E:16:73:DA:B9:50:B2 X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:5b:85:0a:88:46:f7:69:0f:72:a9:a6:40:40:2e:4d:50:99: 49:af:ed:1b:7e:df:64:6c:49:0b:0f:3e:c2:ae:9a:a2:e6:90: d9:10:4f:bf:b9:7b:fc:75:57:e2:0f:7f:65:41:75:99:b1:fa: 2f:76:f4:b4:fa:b7:e8:90:4c:f1:65:b5:3e:2f:23:52:49:15: a4:f3:60:88:e3:87:36:49:7c:19:a3:94:bd:e7:cb:e5:ba:77: e1:ae:11:78:e3:55:29:0d:a9:1a:5c:57:9d:81:d5:d1:14:b0: 17:cb:1d:42:d0:aa:15:b4:5d:c5:3c:08:f7:fd:e2:4c:1f:f6: 92:f9:29:e0:7f:58:82:7d:91:45:8e:2e:ff:67:4c:4e:05:45: 31:80:1c:d2:8b:c6:8e:3d:a7:18:72:36:08:fe:e3:2a:b6:b2: 14:51:51:0b:63:5c:02:67:64:3c:6f:98:8f:10:0c:02:d4:1f: 0d:d3:31:29:ed:bb:67:c0:dc:26:aa:dc:cf:fa:0b:5e:e6:29: 9e:33:2e:f4:97:65:5e:30:da:93:f1:9d:ff:f7:3d:d0:cc:80: 66:b0:f4:a8:eb:7f:58:8d:87:c6:01:7c:ff:58:e4:63:7f:47: ea:c3:25:6b:6e:f8:dd:0f:e2:0d:3b:cf:7c:30:c3:b7:97:ad: 65:86:b6:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjYwOTI0MTgwODI2WhcNMjYxMDAxMTgwODI2WjAYMRYwFAYD VQQDEw02YWI1NjcxYS1iZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5kPiXxmfDtEnf3uwMpxkDCUu4oGgK+iBHpgt0Z2qi9f9T/Dt9eaiQA5rq4g 8CYQ0+2HPSR+PRS+OSHPrwdLbuYuLydbNlXl3JtjsZnHB6jBi6Ks22t7hXZub2jl w0R7GJNkRKT9Uj3ULuvbpUUioPzb5jNzQowh+V3gNS0Hu19d+ypWY+z85qeoQVUz xtp7WOof68V50FxMUKLNpP7ewBw0Aa0/WeiWPtYmKmomm0chVyOjYHb9yz1KiqrY ifQf7ihNcxtyb5fFCTJxqp1SNMcMppqKIq/9YxslMa8ep7iyof9hzEk5/YrV0Vvl Ss2/AKZ++H6eGDF3Yz3Hh3WP1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyJ58TZ KdIbQ54EmZw+FnPauVCyMB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANluFCohG92kPcqmmQEAuTVCZSa/tG37fZGxJCw8+wq6aouaQ2RBPv7l7/HVX 4g9/ZUF1mbH6L3b0tPq36JBM8WW1Pi8jUkkVpPNgiOOHNkl8GaOUvefL5bp34a4R eONVKQ2pGlxXnYHV0RSwF8sdQtCqFbRdxTwI9/3iTB/2kvkp4H9Ygn2RRY4u/2dM TgVFMYAc0ovGjj2nGHI2CP7jKrayFFFRC2NcAmdkPG+YjxAMAtQfDdMxKe27Z8Dc Jqrcz/oLXuYpnjMu9JdlXjDak/Gd//c90MyAZrD0qOt/WI2HxgF8/1jkY39H6sMl a2743Q/iDTvPfDDDt5etZYa21w== -----END CERTIFICATE-----Generated at Fri Sep 25 21:50:59 2026 by rpki-client