$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft File: iWOqihtflIfiJtJG8ORMlgyPKpg.mft (raw, json) Hash identifier: ksvpLS3tyyhCefJcmIOdkOXCXmId/SVGZpbvAwKmomQ= Subject key identifier: B2:FB:61:9C:20:5E:B0:59:11:A9:A0:B0:29:59:07:3A:B3:44:0A:94 Authority key identifier: 89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98 Certificate issuer: /CN=A9145CAB/serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft Manifest number: 67 Signing time: Fri 25 Sep 2026 08:11:48 +0000 Manifest this update: Fri 25 Sep 2026 08:11:48 +0000 Manifest next update: Fri 02 Oct 2026 08:11:48 +0000 Files and hashes: 1: iWOqihtflIfiJtJG8ORMlgyPKpg.crl (hash: b0cOKlAkrWupPDmk8WKrOwk5YW1ZSjdkXletkQEaCtA=) 2: F5FB1528251811F19BF603D3C0833773.roa (hash: TLG1k3Q91kNnW2jkhy++pzacaj+shkC+zTdEO1lOQC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145CAB, serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98 Validity Not Before: Sep 25 08:11:48 2026 GMT Not After : Oct 2 08:11:48 2026 GMT Subject: CN=6ab62cc4-13cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:cb:54:d1:25:76:27:95:ea:3a:48:b8:8e: 1c:6b:8c:12:5b:f8:ac:21:5f:f3:a1:d6:81:70:6c: a0:22:46:f9:43:0a:f4:84:2b:04:06:8c:5f:c4:d9: 67:af:ae:89:36:1c:85:9d:a2:c2:3a:e7:fb:64:bc: 6c:21:b2:c8:03:e7:c3:d9:52:94:5d:1c:2a:9c:63: ab:72:6f:b9:b5:a9:99:04:7e:e6:88:ab:de:16:d2: 5d:67:a0:ab:85:44:67:30:32:8d:a8:28:90:35:ca: 06:1a:ef:ce:7a:28:99:4a:2a:6f:02:5d:aa:76:1c: d8:87:2a:79:3d:60:c0:24:47:bf:7a:b1:d1:03:b6: a5:d4:4b:0b:30:17:8c:7f:f5:e2:27:9b:8c:cc:3a: 85:ea:cf:6c:66:63:de:50:ef:d8:e4:91:c1:0b:2d: 90:44:74:db:50:ea:60:80:01:eb:19:68:63:8a:fb: 4d:90:26:4d:86:07:e9:e6:ff:6d:c7:29:51:86:41: a3:dc:77:09:f3:ae:80:63:ec:11:e1:72:7f:36:3b: 33:c5:78:28:8f:ce:af:ab:21:d5:f7:d7:0c:ba:16: dc:12:d7:3a:c7:d6:ee:ce:7d:1c:68:58:af:9f:89: 57:54:b6:2e:78:ea:6b:34:aa:7a:b2:b7:31:1a:ab: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FB:61:9C:20:5E:B0:59:11:A9:A0:B0:29:59:07:3A:B3:44:0A:94 X509v3 Authority Key Identifier: keyid:89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:64:6b:5a:56:2c:12:c8:a4:03:f7:33:b9:71:a7:bd:23:25: 76:af:ec:ec:dc:be:66:e3:10:c6:fd:75:cb:eb:42:3e:fb:2d: 99:71:e5:1a:6d:59:63:5e:7b:a1:d2:58:dd:d1:05:43:04:6c: 8b:ba:0f:e1:70:10:1a:fa:cb:77:ec:3b:43:bc:35:f7:bf:f7: 02:d6:68:09:1f:4a:a4:11:c8:3e:fd:d0:87:37:b6:71:9d:86: 68:fc:6d:4b:f9:2b:fa:29:ae:81:cf:f8:ba:7f:49:37:04:a2: 2f:94:3a:1f:5a:56:89:c2:53:b6:28:20:a5:c0:2a:41:90:15: d3:0f:91:ae:45:f8:ab:1e:df:c6:2b:2e:9c:e0:c5:19:71:e1: 3c:2e:57:c6:64:4d:2a:ac:b5:cd:58:c2:fd:3c:c6:2b:3f:ce: ad:f9:b5:31:7b:0d:06:e9:c4:2a:9b:6e:75:8a:49:dc:0a:25: c8:ce:cd:b4:64:b1:a9:65:8e:61:e4:f0:c8:e8:78:c5:4d:35: b4:2a:cf:58:c6:d6:27:5e:d3:52:25:91:af:67:ad:71:b5:a1: 9e:86:09:74:d6:d2:40:82:43:db:cd:60:fd:6f:ca:62:89:a5: cb:8d:cd:a5:d2:a0:9a:1a:fc:58:a4:ec:93:cc:53:cd:6c:7b: ec:2e:d6:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUNBQjExMC8GA1UEBRMoODk2M0FBOEExQjVGOTQ4N0UyMjZEMjQ2RjBFNDRDOTYw QzhGMkE5ODAeFw0yNjA5MjUwODExNDhaFw0yNjEwMDIwODExNDhaMBgxFjAUBgNV BAMTDTZhYjYyY2M0LTEzY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbNctU0SV2J5XqOki4jhxrjBJb+KwhX/Oh1oFwbKAiRvlDCvSEKwQGjF/E2Wev rok2HIWdosI65/tkvGwhssgD58PZUpRdHCqcY6tyb7m1qZkEfuaIq94W0l1noKuF RGcwMo2oKJA1ygYa7856KJlKKm8CXap2HNiHKnk9YMAkR796sdEDtqXUSwswF4x/ 9eInm4zMOoXqz2xmY95Q79jkkcELLZBEdNtQ6mCAAesZaGOK+02QJk2GB+nm/23H KVGGQaPcdwnzroBj7BHhcn82OzPFeCiPzq+rIdX31wy6FtwS1zrH1u7OfRxoWK+f iVdUti546ms0qnqytzEaq561AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsvthnCBe sFkRqaCwKVkHOrNECpQwHwYDVR0jBBgwFoAUiWOqihtflIfiJtJG8ORMlgyPKpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1Q0FCLzJFNUM0NUM0MjRD QzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElmaUp0Skc4T1JNbGd5UEtw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVdPcWlodGZsSWZpSnRKRzhPUk1sZ3lQS3BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 Q0FCLzJFNUM0NUM0MjRDQzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElm aUp0Skc4T1JNbGd5UEtwZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgZGtaViwSyKQD9zO5cae9IyV2r+zs3L5m4xDG/XXL60I++y2ZceUabVljXnuh 0ljd0QVDBGyLug/hcBAa+st37DtDvDX3v/cC1mgJH0qkEcg+/dCHN7ZxnYZo/G1L +Sv6Ka6Bz/i6f0k3BKIvlDofWlaJwlO2KCClwCpBkBXTD5GuRfirHt/GKy6c4MUZ ceE8LlfGZE0qrLXNWML9PMYrP86t+bUxew0G6cQqm251ikncCiXIzs20ZLGpZY5h 5PDI6HjFTTW0Ks9YxtYnXtNSJZGvZ61xtaGehgl01tJAgkPbzWD9b8piiaXLjc2l 0qCaGvxYpOyTzFPNbHvsLtbo -----END CERTIFICATE-----Generated at Sun Sep 27 00:34:19 2026 by rpki-client