$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: aBDc5SONcGV86PutVEWTssUeTDSwo64XWe4CJyf4NL4= Subject key identifier: 9F:BE:2A:38:E5:C0:F9:62:1F:16:6A:A5:99:A5:61:F1:C5:2D:0A:83 Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: E7 Signing time: Tue 22 Sep 2026 21:53:54 +0000 Manifest this update: Tue 22 Sep 2026 21:53:53 +0000 Manifest next update: Tue 29 Sep 2026 21:53:53 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: NTeQkcYeRQf/ZorG8VUSeIn9rdcIDktrfyA5Lz4U/nc=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: TR3KMntthAwVhbNksuMzt3WXfXIJDm+0sJy4E3HFO4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: Sep 22 21:53:53 2026 GMT Not After : Sep 29 21:53:53 2026 GMT Subject: CN=6ab2f8f2-04cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:78:95:10:6b:d4:df:1e:52:cc:0e:7a:f1: 37:54:ef:98:ce:34:d2:97:ec:7d:53:84:85:4c:01: fb:a3:04:d0:af:2d:ff:ae:9b:73:e7:8a:75:09:d7: 61:67:d2:0d:e0:07:eb:75:af:05:e5:44:c0:94:83: cb:6a:22:6e:77:e4:89:a7:57:00:04:51:3a:eb:d5: 2f:e3:13:f9:b4:7a:ff:83:01:6f:00:6f:e3:9d:37: 6b:3b:50:99:f7:14:d5:56:de:60:9c:d6:c6:69:e4: 78:da:d9:ff:5b:55:f5:6c:32:f9:53:98:2c:de:44: f3:7d:e8:e2:b8:b8:51:3e:32:63:03:5f:0e:e9:00: 44:29:57:92:09:1a:10:8c:ac:d0:e8:3c:23:43:91: b9:76:d1:a6:17:27:53:e3:5d:2a:04:8a:54:9e:6a: b4:a3:14:23:fc:f1:4f:f6:aa:cd:0a:cc:bb:5e:70: ba:95:78:a3:78:c0:33:a1:c0:76:d9:88:78:d1:8b: f0:bf:fa:49:0c:7f:c0:c4:95:5d:18:09:4d:41:c7: 5f:63:1e:80:b6:4c:13:b7:d8:fa:a2:0a:f9:2d:99: 68:68:63:02:0d:b4:23:e9:97:9e:2c:3c:67:de:94: 71:c0:24:3e:c4:65:b9:e3:87:84:5d:0d:9b:2f:6b: 95:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BE:2A:38:E5:C0:F9:62:1F:16:6A:A5:99:A5:61:F1:C5:2D:0A:83 X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:19:04:73:17:4d:fd:4c:94:cd:95:81:16:eb:46:75:fb:3a: 2f:a0:18:b4:79:76:36:f6:9b:5b:e3:57:e0:95:3f:33:05:1f: b3:4d:78:d2:ba:6f:7c:cb:7d:32:0e:56:a5:19:83:8c:94:e8: 27:c5:0f:95:0e:4f:e3:39:b8:a3:0d:c7:3a:de:2f:9d:16:26: 37:75:68:80:9e:52:f3:b0:71:05:be:35:2f:cc:cc:90:1d:5d: ce:c7:d5:9d:b2:10:85:ee:92:43:44:48:89:b9:31:4d:da:13: a3:d5:97:76:80:50:9b:87:bd:ff:e1:36:bd:7b:18:2e:e9:dd: 43:af:31:f0:c2:31:3a:84:d9:8a:64:80:4b:c6:97:a7:9e:80: a7:d5:2e:08:3d:c1:2c:a1:8e:02:1f:fc:bc:bb:79:4f:9c:55: e6:39:44:cc:c0:e3:d7:54:c6:04:31:b4:fe:8d:43:05:b5:6b: bd:5d:41:3d:ce:6a:c5:5c:33:65:e3:56:50:5c:92:08:8c:91: 71:de:3e:f5:4b:49:81:08:bd:df:8d:93:78:73:d5:2c:a9:55: 58:2b:e4:08:f7:d3:97:be:db:98:9a:62:44:49:21:a9:ae:1e: 02:dc:2b:84:0b:fe:97:46:1f:9a:88:e5:fc:c0:bd:d5:22:5e: a7:10:9c:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDIxNDI5MzNGQkU2RTdDNUZCNzY3QTg2QTVFMjFERDYw MTc4RUEzOUQwHhcNMjYwOTIyMjE1MzUzWhcNMjYwOTI5MjE1MzUzWjAYMRYwFAYD VQQDEw02YWIyZjhmMi0wNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q94lRBr1N8eUswOevE3VO+YzjTSl+x9U4SFTAH7owTQry3/rptz54p1Cddh Z9IN4Afrda8F5UTAlIPLaiJud+SJp1cABFE669Uv4xP5tHr/gwFvAG/jnTdrO1CZ 9xTVVt5gnNbGaeR42tn/W1X1bDL5U5gs3kTzfejiuLhRPjJjA18O6QBEKVeSCRoQ jKzQ6DwjQ5G5dtGmFydT410qBIpUnmq0oxQj/PFP9qrNCsy7XnC6lXijeMAzocB2 2Yh40Yvwv/pJDH/AxJVdGAlNQcdfYx6AtkwTt9j6ogr5LZloaGMCDbQj6ZeeLDxn 3pRxwCQ+xGW544eEXQ2bL2uVnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ++Kjjl wPliHxZqpZmlYfHFLQqDMB8GA1UdIwQYMBaAFCFCkz++bnxft2eoal4h3WAXjqOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GMUFGMTA1MjYx REYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZGLTNaNmhxWGlIZFlCZU9v NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GMUFGMTA1MjYxREYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZG LTNaNmhxWGlIZFlCZU9vNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwxkEcxdN/UyUzZWBFutGdfs6L6AYtHl2NvabW+NX4JU/MwUfs0140rpvfMt9 Mg5WpRmDjJToJ8UPlQ5P4zm4ow3HOt4vnRYmN3VogJ5S87BxBb41L8zMkB1dzsfV nbIQhe6SQ0RIibkxTdoTo9WXdoBQm4e9/+E2vXsYLundQ68x8MIxOoTZimSAS8aX p56Ap9UuCD3BLKGOAh/8vLt5T5xV5jlEzMDj11TGBDG0/o1DBbVrvV1BPc5qxVwz ZeNWUFySCIyRcd4+9UtJgQi9342TeHPVLKlVWCvkCPfTl77bmJpiREkhqa4eAtwr hAv+l0Yfmojl/MC91SJepxCccg== -----END CERTIFICATE-----Generated at Thu Sep 24 00:06:42 2026 by rpki-client