$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.mft File: iOemwKqT5ZpcPWtVXDTIaM0UlEM.mft (raw, json) Hash identifier: QkA9ecqTDuqCoA7QGfMfAao3qP9CeF4hgZcz1Ee7WyA= Subject key identifier: 0B:D2:17:E2:99:C8:4D:8A:6D:2A:79:18:D9:88:90:3E:00:0C:AB:D8 Authority key identifier: 88:E7:A6:C0:AA:93:E5:9A:5C:3D:6B:55:5C:34:C8:68:CD:14:94:43 Certificate issuer: /CN=A9153A9D/serialNumber=88E7A6C0AA93E59A5C3D6B555C34C868CD149443 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOemwKqT5ZpcPWtVXDTIaM0UlEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.mft Manifest number: 17 Signing time: Mon 21 Sep 2026 08:58:46 +0000 Manifest this update: Mon 21 Sep 2026 08:58:45 +0000 Manifest next update: Mon 28 Sep 2026 08:58:45 +0000 Files and hashes: 1: iOemwKqT5ZpcPWtVXDTIaM0UlEM.crl (hash: JnnNZTbtp+FBsT95IDo8X8e6iDy4K9UP1dy1paiOvmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.crl rsync://rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOemwKqT5ZpcPWtVXDTIaM0UlEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153A9D, serialNumber=88E7A6C0AA93E59A5C3D6B555C34C868CD149443 Validity Not Before: Sep 21 08:58:45 2026 GMT Not After : Sep 28 08:58:45 2026 GMT Subject: CN=6ab0f1c6-16f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:e2:f7:5a:99:67:b3:0b:3a:e8:14:31:8d: 09:44:84:3f:f8:27:1c:a4:44:44:af:bb:a3:9e:07: 72:c8:51:f8:bd:36:6b:a7:bd:e1:ee:a1:ce:95:b7: e8:4b:23:03:9f:07:18:e1:7e:90:27:17:4b:aa:19: bd:f2:cf:d8:b8:80:49:ad:e4:6e:f1:cc:76:57:19: 74:99:66:a6:b1:ee:19:86:ca:d8:56:59:76:09:46: d1:a8:8e:d2:71:51:4d:ff:f9:ee:d2:70:a4:4b:c0: 8f:80:18:1c:0c:94:94:94:56:4d:10:56:18:9f:94: 09:ea:7f:2f:85:71:04:e3:71:ba:ef:63:94:55:46: e1:32:42:b5:05:2a:14:b6:5d:f4:d6:56:11:ab:96: cc:fe:c5:1f:9d:a6:b8:06:4b:b0:de:b1:86:ea:51: 55:82:b5:9d:28:11:ab:7c:cb:4f:54:57:ae:37:b2: f2:64:03:0f:81:c9:53:b7:1b:dc:3b:5e:88:da:58: 6d:b1:a3:c2:89:d8:34:3d:7c:c3:2d:9e:56:ae:0a: a0:bd:45:0a:16:6a:d1:87:d8:2f:03:e8:16:e5:04: 04:ab:5e:2f:b4:a0:01:df:56:8f:17:0f:71:64:79: fa:5f:ea:e0:da:f7:cf:f0:d9:29:7a:fd:39:88:2b: c8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D2:17:E2:99:C8:4D:8A:6D:2A:79:18:D9:88:90:3E:00:0C:AB:D8 X509v3 Authority Key Identifier: keyid:88:E7:A6:C0:AA:93:E5:9A:5C:3D:6B:55:5C:34:C8:68:CD:14:94:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOemwKqT5ZpcPWtVXDTIaM0UlEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A9D/0226ED02954B11F1B75B8B506111F970/iOemwKqT5ZpcPWtVXDTIaM0UlEM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:10:5f:06:31:8b:21:0c:68:38:cc:85:30:08:5c:28:bf:1e: b1:81:27:23:f5:db:dd:fc:56:66:f8:7c:c2:51:8a:f0:40:05: a9:d8:dd:28:c3:bf:32:a8:91:08:35:a0:51:df:7c:c7:49:69: 04:91:3b:f1:02:f0:57:25:68:51:00:b3:4f:4f:72:ad:15:56: 4d:b8:cd:fa:7a:51:2d:c0:c8:e9:8c:57:56:4c:94:76:64:d8: 74:06:82:98:aa:78:45:35:a9:d0:ed:b8:fc:6f:2e:31:12:12: 74:88:42:93:bd:a1:d0:88:f6:16:7b:ec:7e:40:4e:0a:54:97: f2:cd:0e:45:bf:46:61:7d:4a:dc:49:28:1a:43:e3:6e:4a:18: 2e:e1:eb:22:38:1b:43:c1:6f:48:df:23:6d:42:bf:b2:3f:12: ef:11:62:1d:02:b5:07:e8:57:67:b7:6c:cf:50:d5:b7:35:a2: 6c:bc:ce:2f:c6:cb:bb:bf:67:f9:09:3d:0e:89:89:78:09:dc: 3f:45:8b:aa:3f:76:7e:4b:a5:32:30:b6:24:21:5c:a7:aa:60: d1:59:c4:a5:59:b0:55:48:8a:12:8e:92:12:1d:55:59:8c:c7: cc:ca:d4:c9:60:fd:cc:43:44:80:4f:de:88:e2:a9:28:83:f0: c5:80:cd:8d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0E5RDExMC8GA1UEBRMoODhFN0E2QzBBQTkzRTU5QTVDM0Q2QjU1NUMzNEM4NjhD RDE0OTQ0MzAeFw0yNjA5MjEwODU4NDVaFw0yNjA5MjgwODU4NDVaMBgxFjAUBgNV BAMTDTZhYjBmMWM2LTE2ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFr+L3Wplnsws66BQxjQlEhD/4JxykRESvu6OeB3LIUfi9NmunveHuoc6Vt+hL IwOfBxjhfpAnF0uqGb3yz9i4gEmt5G7xzHZXGXSZZqax7hmGythWWXYJRtGojtJx UU3/+e7ScKRLwI+AGBwMlJSUVk0QVhiflAnqfy+FcQTjcbrvY5RVRuEyQrUFKhS2 XfTWVhGrlsz+xR+dprgGS7DesYbqUVWCtZ0oEat8y09UV643svJkAw+ByVO3G9w7 XojaWG2xo8KJ2DQ9fMMtnlauCqC9RQoWatGH2C8D6BblBASrXi+0oAHfVo8XD3Fk efpf6uDa98/w2Sl6/TmIK8jTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC9IX4pnI TYptKnkY2YiQPgAMq9gwHwYDVR0jBBgwFoAUiOemwKqT5ZpcPWtVXDTIaM0UlEMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzQTlELzAyMjZFRDAyOTU0 QjExRjFCNzVCOEI1MDYxMTFGOTcwL2lPZW13S3FUNVpwY1BXdFZYRFRJYU0wVWxF TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaU9lbXdLcVQ1WnBjUFd0VlhEVElhTTBVbEVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz QTlELzAyMjZFRDAyOTU0QjExRjFCNzVCOEI1MDYxMTFGOTcwL2lPZW13S3FUNVpw Y1BXdFZYRFRJYU0wVWxFTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC4EF8GMYshDGg4zIUwCFwovx6xgScj9dvd/FZm+HzCUYrwQAWp2N0ow78yqJEI NaBR33zHSWkEkTvxAvBXJWhRALNPT3KtFVZNuM36elEtwMjpjFdWTJR2ZNh0BoKY qnhFNanQ7bj8by4xEhJ0iEKTvaHQiPYWe+x+QE4KVJfyzQ5Fv0ZhfUrcSSgaQ+Nu Shgu4esiOBtDwW9I3yNtQr+yPxLvEWIdArUH6Fdnt2zPUNW3NaJsvM4vxsu7v2f5 CT0OiYl4Cdw/RYuqP3Z+S6UyMLYkIVynqmDRWcSlWbBVSIoSjpISHVVZjMfMytTJ YP3MQ0SAT96I4qkog/DFgM2N -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:44 2026 by rpki-client