$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: Zqhj1IrCoreX0bk5YRuN6N06WEL/Lpi+6GcPjscAqCw= Subject key identifier: D3:3E:80:FA:AD:19:74:8E:0F:C0:E4:2F:7B:04:CE:E9:EE:EB:85:CD Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2E97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2E6F Signing time: Sat 26 Sep 2026 15:30:30 +0000 Manifest this update: Sat 26 Sep 2026 15:30:30 +0000 Manifest next update: Sat 03 Oct 2026 15:30:30 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: ewgRHR+sA+RsTC7oWWDRr3seOfKA0R+b+TpSWY+m+Ho=) 2: F2AE85D6128E11F1BA652BAD3A3D8C67.roa (hash: XFZyAVomr+D6cpEwC0fdueBEAmEYpPj3c5fCswDRg+E=) 3: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: H04QBDV26pSEqU+6Gzyw1sm5OlSGepj/HF/CM4cYOU8=) 4: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: vFnVJbm4MytKKwLhxeVpxNuD1ipukSf0zI8pzazbsp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11927 (0x2e97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Sep 26 15:30:30 2026 GMT Not After : Oct 3 15:30:30 2026 GMT Subject: CN=6ab7e516-dc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:e8:98:33:e4:9e:e6:7d:74:ab:91:32:de: 64:0f:b1:c8:50:2c:43:e9:8e:43:19:6b:89:7a:f5: b5:a1:aa:6e:f7:71:cc:b2:7a:30:ea:c2:b1:af:9c: dd:5b:4c:fe:ec:17:9f:e3:6e:28:2a:f8:35:eb:04: ee:91:0e:38:b6:cd:eb:47:2b:30:7a:e3:02:25:5c: 02:f8:a1:9e:f1:ff:c3:ff:35:e5:dc:f3:f5:7c:8f: 24:45:4b:05:de:e1:22:b8:a6:eb:6c:0d:81:27:b5: 2d:dc:30:6b:85:7e:b7:4c:66:d6:18:26:f0:66:6d: a0:a5:ee:2d:cc:ea:ec:e5:b5:65:91:ef:60:14:29: 45:48:15:1b:0a:89:36:d6:f6:cd:5d:23:f5:78:a5: e1:81:3e:65:8f:b9:a0:ea:d6:e8:8c:e3:cc:43:d1: 72:b4:77:22:2c:a1:9b:d1:f6:fc:4a:12:04:d0:2c: 57:4a:de:46:ea:b9:00:4a:aa:89:3d:5b:e8:ec:3b: 99:bf:bb:9a:fb:85:c6:39:11:39:65:56:96:53:92: 1c:d9:77:76:47:6d:ec:fe:0f:7e:81:fc:94:9b:ed: 7a:89:6f:74:69:dc:39:c9:b0:71:05:c2:97:91:4e: 09:24:c2:4a:4c:16:c4:4e:4c:e2:bc:55:ec:4c:14: d8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3E:80:FA:AD:19:74:8E:0F:C0:E4:2F:7B:04:CE:E9:EE:EB:85:CD X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:9b:ac:65:b0:51:73:b5:b1:0c:91:86:7f:e8:45:4e:7d:df: 13:53:73:17:63:49:5f:7e:bb:9f:63:47:70:c4:4e:c8:3c:84: c4:c7:2f:f6:66:8c:d4:4c:65:d1:49:6c:b4:ca:05:87:58:94: 5f:80:12:68:30:4c:67:15:91:1e:8d:6e:d5:51:aa:6b:e0:f3: 62:aa:ae:e4:59:e0:9e:22:00:6a:01:26:10:94:8e:15:6d:22: 7e:72:b1:ae:66:72:7a:b4:25:3b:2e:2c:b5:36:48:15:9f:59: b7:31:8d:da:e0:26:67:28:a4:bd:ed:1d:84:e3:53:7b:fe:45: 68:fc:31:d6:71:19:a4:6d:6b:67:17:32:9e:09:d1:7e:d7:66: d1:53:3c:c5:5f:d6:cc:dd:5f:a3:a5:c3:d6:b7:a0:ca:33:b5: 43:d1:2c:71:36:d7:32:54:e4:17:0e:b3:4a:25:ae:62:eb:f4: 7f:23:8b:e7:e4:00:94:f0:bd:36:f9:d9:17:61:ae:5b:7f:1a: 26:a0:77:39:b6:a3:09:7c:7a:dd:f0:7e:a3:d2:4a:ac:30:76: 60:85:27:a2:22:2e:95:f7:aa:33:27:bf:7d:c5:81:f2:50:61: af:ae:0e:5c:5c:b6:6b:af:93:01:a4:dc:c2:46:c5:f2:d4:de: 38:af:90:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjYwOTI2MTUzMDMwWhcNMjYxMDAzMTUzMDMwWjAYMRYwFAYD VQQDEw02YWI3ZTUxNi1kYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5PomDPknuZ9dKuRMt5kD7HIUCxD6Y5DGWuJevW1oapu93HMsnow6sKxr5zd W0z+7Bef424oKvg16wTukQ44ts3rRysweuMCJVwC+KGe8f/D/zXl3PP1fI8kRUsF 3uEiuKbrbA2BJ7Ut3DBrhX63TGbWGCbwZm2gpe4tzOrs5bVlke9gFClFSBUbCok2 1vbNXSP1eKXhgT5lj7mg6tbojOPMQ9FytHciLKGb0fb8ShIE0CxXSt5G6rkASqqJ PVvo7DuZv7ua+4XGORE5ZVaWU5Ic2Xd2R23s/g9+gfyUm+16iW90adw5ybBxBcKX kU4JJMJKTBbETkzivFXsTBTYKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNM+gPqt GXSOD8DkL3sEzunu64XNMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArpusZbBRc7WxDJGGf+hFTn3fE1NzF2NJX367n2NHcMROyDyExMcv9maM1Exl 0UlstMoFh1iUX4ASaDBMZxWRHo1u1VGqa+DzYqqu5FngniIAagEmEJSOFW0ifnKx rmZyerQlOy4stTZIFZ9ZtzGN2uAmZyikve0dhONTe/5FaPwx1nEZpG1rZxcyngnR ftdm0VM8xV/WzN1fo6XD1regyjO1Q9EscTbXMlTkFw6zSiWuYuv0fyOL5+QAlPC9 NvnZF2GuW38aJqB3ObajCXx63fB+o9JKrDB2YIUnoiIulfeqMye/fcWB8lBhr64O XFy2a6+TAaTcwkbF8tTeOK+QYg== -----END CERTIFICATE-----Generated at Sat Sep 26 18:31:51 2026 by rpki-client