$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json) Hash identifier: IcLXssLG/EQXwdCXUyRWAatQBHn0dcV7CIX2JcL8tlA= Subject key identifier: 3B:99:88:BE:1C:FB:D7:C4:A3:2A:3E:A9:DC:B1:D8:E3:FD:CA:26:B9 Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft Manifest number: 07CD Signing time: Tue 22 Sep 2026 21:09:45 +0000 Manifest this update: Tue 22 Sep 2026 21:09:44 +0000 Manifest next update: Tue 29 Sep 2026 21:09:44 +0000 Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: IURWubY3lRLDEslKttChz+cTjf4MHyFlXWXHUxeiuWI=) 2: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: RiHTyH8/u4E6R/xXsKR9Dt/X35Ipr5A7B/T2xRmCXs4=) 3: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: zXVV6Fq9+Ev8ZgtdPsPKQEYkkJ0zf+qFsMmrOUVqUuU=) 4: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: 2sdJJ6iJjkZc6Wd4X6PmhZwhxLJKNYxKwduCcx3eWls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Sep 22 21:09:44 2026 GMT Not After : Sep 29 21:09:44 2026 GMT Subject: CN=6ab2ee99-df61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:59:9f:35:b9:dc:04:54:20:70:3d:79:d5:cc: 1c:d5:f2:5a:d5:3d:71:94:85:38:89:93:0a:dc:d2: a1:4a:e2:c9:ea:48:0a:e9:b3:63:23:76:84:59:33: ca:70:7b:17:15:64:01:e4:ef:93:4d:d3:4c:c2:f9: 20:c8:36:ea:09:bb:b7:0e:16:5c:2c:cb:56:3b:a4: 33:61:49:aa:97:6c:d5:22:9c:de:60:71:5f:8d:63: c1:c9:ef:d7:1a:a2:6a:e1:2e:ea:21:3f:4a:38:18: 9a:48:d9:dd:83:21:71:d0:3c:c1:0a:f7:df:20:39: 6f:83:23:3b:52:52:84:0e:5c:f2:bc:57:c5:09:3e: 78:7a:fc:bd:13:95:0b:e3:dd:d3:6e:c8:c9:70:22: c4:8b:be:a9:26:2e:3d:39:82:54:f4:65:f6:e0:b9: 72:f1:82:d1:d3:e1:cf:99:16:95:ed:c1:d3:82:aa: 9a:88:93:a3:67:d5:70:fc:7d:b3:22:a6:23:eb:dc: c7:8f:03:bd:fd:50:e1:6c:26:5d:cb:2b:41:4d:4f: ac:5c:83:91:d7:4e:b3:82:d8:36:37:45:3b:d9:89: 87:62:a9:f4:00:90:08:93:2b:40:8c:46:07:f4:af: 47:a0:17:78:05:e1:8d:05:ec:c8:b7:9e:eb:6d:8f: 43:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:99:88:BE:1C:FB:D7:C4:A3:2A:3E:A9:DC:B1:D8:E3:FD:CA:26:B9 X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:00:e4:c3:81:e8:8a:ea:05:3a:00:9c:68:83:5d:8e:22:70: b9:a5:22:79:f6:01:7e:cc:cb:2f:0c:4a:06:33:6f:be:ee:7f: 33:aa:9f:3c:65:89:d8:d6:cd:c5:f0:e1:4d:04:61:a8:fb:79: 14:b8:92:07:e6:bc:4c:ab:d7:a1:7f:45:cc:e1:ff:4a:52:b1: 9f:1b:58:82:40:3c:53:25:81:e2:fc:27:8e:ea:9f:6a:51:38: 6d:93:61:67:c6:d2:4e:25:cd:7f:0c:9b:ed:2f:dd:a4:3a:69: 4c:9f:a5:30:e1:35:21:a3:cf:ff:9a:c9:b3:f5:54:ce:c2:44: 71:31:dc:eb:92:95:7d:de:c0:a8:b8:06:34:fb:2a:54:7c:e7: 9c:1f:01:15:93:8a:08:f8:d3:0d:ab:37:f7:cc:dd:d0:41:f4: 72:0a:e9:8b:ca:33:d3:9e:84:2d:46:14:16:b0:9b:8e:1f:8a: ff:92:ed:e3:0e:d7:2e:b6:3e:f1:79:2e:cb:cd:44:d2:0b:cc: 51:64:d5:6b:31:ab:07:c0:5c:b6:c7:e9:d4:66:87:69:b5:60: d0:2b:83:60:ec:81:a5:8d:de:8f:15:c5:db:4d:1f:50:c0:14: 4a:9c:78:dd:63:f7:c9:a2:87:83:c5:bf:f4:5c:68:00:c7:e1: 65:66:a3:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjYwOTIyMjEwOTQ0WhcNMjYwOTI5MjEwOTQ0WjAYMRYwFAYD VQQDEw02YWIyZWU5OS1kZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FmfNbncBFQgcD151cwc1fJa1T1xlIU4iZMK3NKhSuLJ6kgK6bNjI3aEWTPK cHsXFWQB5O+TTdNMwvkgyDbqCbu3DhZcLMtWO6QzYUmql2zVIpzeYHFfjWPBye/X GqJq4S7qIT9KOBiaSNndgyFx0DzBCvffIDlvgyM7UlKEDlzyvFfFCT54evy9E5UL 493TbsjJcCLEi76pJi49OYJU9GX24Lly8YLR0+HPmRaV7cHTgqqaiJOjZ9Vw/H2z IqYj69zHjwO9/VDhbCZdyytBTU+sXIOR106zgtg2N0U72YmHYqn0AJAIkytAjEYH 9K9HoBd4BeGNBezIt57rbY9DPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuZiL4c +9fEoyo+qdyx2OP9yia5MB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5 R0xEbUFWMGVEN29jamtQeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPwDkw4HoiuoFOgCcaINdjiJwuaUiefYBfszLLwxKBjNvvu5/M6qfPGWJ2NbN xfDhTQRhqPt5FLiSB+a8TKvXoX9FzOH/SlKxnxtYgkA8UyWB4vwnjuqfalE4bZNh Z8bSTiXNfwyb7S/dpDppTJ+lMOE1IaPP/5rJs/VUzsJEcTHc65KVfd7AqLgGNPsq VHznnB8BFZOKCPjTDas398zd0EH0cgrpi8oz056ELUYUFrCbjh+K/5Lt4w7XLrY+ 8Xkuy81E0gvMUWTVazGrB8Bctsfp1GaHabVg0CuDYOyBpY3ejxXF200fUMAUSpx4 3WP3yaKHg8W/9FxoAMfhZWajRg== -----END CERTIFICATE-----Generated at Wed Sep 23 10:00:42 2026 by rpki-client