$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: cEvPxji7g4iC8hpzpI26Qq2s/f01Oq8s2UY+cNu0bVE= Subject key identifier: 80:1C:FD:37:E3:3D:81:FE:ED:B9:63:0A:56:D4:1D:5B:52:6C:28:26 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 05BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 05A9 Signing time: Sat 26 Sep 2026 23:14:06 +0000 Manifest this update: Sat 26 Sep 2026 23:14:06 +0000 Manifest next update: Sat 03 Oct 2026 23:14:06 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: y9aIgRUR1htMSGEKeJgtL7zIFqJTyfJhQrAsR78AEyg=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: mMzlkdBS5l7zH1NqOtcSGsyrLWVpyJgkzBlaJ0LOo5U=) 3: B8462FFC6DE711F1ADF0DD3B5CA30FBC.roa (hash: wR/gV0bAGkEOc7p9Q73UcbAxejY11n0Ak+N3vWrR/o8=) 4: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: IekuGWz95qJq1RkERKwpFfkq5YP338H+OPjlC3vFHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Sep 26 23:14:06 2026 GMT Not After : Oct 3 23:14:06 2026 GMT Subject: CN=6ab851be-71f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:1b:91:a0:34:d8:e1:0d:c4:ab:b9:e4:31: 8e:cd:b4:56:42:c3:82:ed:a5:b0:a0:a4:12:03:11: 4f:8b:37:61:3e:04:a4:9d:3f:19:c3:d8:2d:41:2a: 2b:ac:4d:6a:9c:25:e7:7e:fd:9c:68:01:d0:05:60: dd:7b:1e:dd:58:47:36:e7:fc:1c:17:0d:95:3f:9a: 13:e8:33:ae:91:79:ef:7b:98:bd:b0:55:db:d0:89: 65:38:4f:36:95:4a:e9:b9:4a:e2:5e:f9:ed:d1:b0: 28:61:a0:9a:67:ec:52:cb:6e:13:9e:f1:8c:7b:bd: 00:48:36:12:c7:68:8d:21:41:22:ee:5b:ce:eb:08: a8:27:3f:af:6a:a6:9e:f5:b8:12:ac:29:80:d4:09: e6:79:ee:c8:ff:fa:fc:f2:83:fc:a4:01:1d:99:a8: ad:5b:e8:4c:76:c4:05:10:f0:96:19:66:d2:37:90: 48:f4:37:09:6f:94:72:38:ef:67:4d:d2:47:bd:42: a8:ef:52:2d:5c:e2:6d:74:70:71:af:6f:0c:df:87: ec:1c:49:9a:fe:9e:92:ed:34:08:6f:c9:c3:09:f4: 3f:9c:51:51:2e:5e:4d:d5:cf:5f:4c:bf:cc:20:3b: ab:ce:c8:6b:20:55:f9:0f:8d:3e:b5:b6:08:90:59: a3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:FD:37:E3:3D:81:FE:ED:B9:63:0A:56:D4:1D:5B:52:6C:28:26 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2a:2f:2a:12:99:80:ea:2a:34:4f:1b:cd:2a:93:c6:38:a2: 1e:2d:b9:94:6f:52:d7:b3:2f:f1:0b:37:b5:7a:e0:4a:8d:16: 80:ec:10:05:15:48:14:cb:32:31:83:d7:e0:de:c9:b5:50:45: 33:ec:7b:b2:73:92:8c:1c:9e:bf:32:ab:f4:53:07:62:0a:91: 56:f6:78:54:d6:2e:f8:ee:a8:af:04:a8:35:93:2c:33:e7:08: d1:f7:7e:b5:11:13:5b:1f:57:13:a6:c2:9e:90:32:20:39:c0: 5d:97:80:26:84:22:a7:9a:9d:77:f9:d0:80:76:62:d0:bf:a6: 24:39:0a:54:de:ca:0d:2c:13:62:0b:e7:41:0d:b9:1d:50:8a: f5:19:4f:55:87:29:e3:06:7d:33:0a:ab:bc:de:25:76:62:86: 75:ee:1c:78:d8:29:02:d8:8d:bc:ae:cd:44:66:3c:37:1b:c1: 7f:7e:44:55:0b:60:a9:b2:7e:1b:b2:35:20:4e:01:a1:50:6f: f8:ca:d1:05:fb:51:00:54:cb:02:67:ad:a0:79:db:12:29:aa: 7f:6d:dd:2a:de:e5:c9:2d:02:ae:ce:5e:d6:c1:92:ad:16:a0: 38:99:a2:e8:1d:c6:23:c8:da:e3:31:94:db:f6:14:15:ca:2e: 9f:09:cd:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjYwOTI2MjMxNDA2WhcNMjYxMDAzMjMxNDA2WjAYMRYwFAYD VQQDEw02YWI4NTFiZS03MWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21kbkaA02OENxKu55DGOzbRWQsOC7aWwoKQSAxFPizdhPgSknT8Zw9gtQSor rE1qnCXnfv2caAHQBWDdex7dWEc25/wcFw2VP5oT6DOukXnve5i9sFXb0IllOE82 lUrpuUriXvnt0bAoYaCaZ+xSy24TnvGMe70ASDYSx2iNIUEi7lvO6wioJz+vaqae 9bgSrCmA1Anmee7I//r88oP8pAEdmaitW+hMdsQFEPCWGWbSN5BI9DcJb5RyOO9n TdJHvUKo71ItXOJtdHBxr28M34fsHEma/p6S7TQIb8nDCfQ/nFFRLl5N1c9fTL/M IDurzshrIFX5D40+tbYIkFmjhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAc/Tfj PYH+7bljClbUHVtSbCgmMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWiovKhKZgOoqNE8bzSqTxjiiHi25lG9S17Mv8Qs3tXrgSo0WgOwQBRVIFMsy MYPX4N7JtVBFM+x7snOSjByevzKr9FMHYgqRVvZ4VNYu+O6orwSoNZMsM+cI0fd+ tRETWx9XE6bCnpAyIDnAXZeAJoQip5qdd/nQgHZi0L+mJDkKVN7KDSwTYgvnQQ25 HVCK9RlPVYcp4wZ9MwqrvN4ldmKGde4ceNgpAtiNvK7NRGY8NxvBf35EVQtgqbJ+ G7I1IE4BoVBv+MrRBftRAFTLAmetoHnbEimqf23dKt7lyS0Crs5e1sGSrRagOJmi 6B3GI8ja4zGU2/YUFcounwnNnQ== -----END CERTIFICATE-----Generated at Mon Sep 28 06:51:46 2026 by rpki-client