$ rpki-client -vvvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: Gu0fSH6hUZFPH8PR3e6x+W54DIfqKuAWT+1cFa0XHi8= Subject key identifier: E4:1D:68:89:C5:5B:86:E3:83:EA:EF:BE:7B:86:F6:11:33:EB:50:E2 Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0D32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0D28 Signing time: Tue 22 Sep 2026 18:07:51 +0000 Manifest this update: Tue 22 Sep 2026 18:07:50 +0000 Manifest next update: Tue 29 Sep 2026 18:07:50 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: vhBoX1PphUpDPmpukUfUXMDwj7hDcQfO5tatddHKB7k=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: zDxsuRndlq0lJuspimIYJwOxaHSsP7u9+ZEkGQ4K8fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Sep 22 18:07:50 2026 GMT Not After : Sep 29 18:07:50 2026 GMT Subject: CN=6ab2c3f6-9ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:76:15:f6:b8:2f:1d:b8:4d:ba:52:b9:d1: 6d:64:c9:40:fb:33:3f:32:8f:c5:bd:ce:26:1b:7a: d2:e9:ee:7e:1c:62:c3:a0:a2:49:30:9f:45:af:d7: f4:ab:96:9f:fd:40:5b:bc:78:0a:98:4b:aa:9b:c2: 05:1e:5f:d8:a3:26:db:14:e3:ba:e0:ee:74:8f:4c: 7a:7e:43:0c:42:22:ae:85:8b:8b:10:4c:08:89:cc: 59:f4:ee:08:ea:74:77:2b:a8:1b:ae:d0:cd:e2:c1: 66:77:31:33:e5:ef:fa:62:2b:da:05:4c:09:a2:d0: dc:8d:ff:f0:8f:37:8c:b5:d7:7b:7a:4c:a5:c1:3c: 89:03:b9:ef:2f:66:80:95:96:97:f4:70:65:58:29: 42:a6:ba:37:b2:4a:75:5c:ae:9e:6d:94:f6:47:f1: a1:22:14:c3:eb:4b:5c:6a:1e:f5:1d:f7:10:89:4d: 12:71:e9:21:d4:07:60:69:20:f8:62:00:28:c6:b8: 9c:00:18:4a:86:5c:c2:60:90:a1:43:c9:6b:3d:c6: c7:2a:6e:0d:fc:d9:25:ca:36:5e:03:7f:99:b2:ef: f1:77:3e:d6:e1:83:75:fd:37:f9:9c:c4:28:4a:49: 0b:69:d5:09:b4:8a:c1:7b:38:e1:b4:11:aa:6a:12: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1D:68:89:C5:5B:86:E3:83:EA:EF:BE:7B:86:F6:11:33:EB:50:E2 X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a9:e2:08:51:49:34:d2:c4:84:8b:d9:6e:b9:e6:37:5d:5f: 44:da:c2:11:43:51:96:6a:f3:a1:0d:0d:3a:97:63:d8:79:23: d6:90:54:9d:35:7c:25:80:85:b6:9d:7c:01:48:27:1e:7e:f1: 05:aa:8b:2d:3b:f8:ed:9e:df:f2:fd:f0:e4:ea:b9:b6:b7:c5: 81:92:dc:d6:1d:3f:34:3f:8b:30:55:51:a7:f0:fd:3b:c5:e4: d9:1f:48:ce:06:af:7b:4f:33:ff:f6:a2:b7:5c:47:6a:47:85: 79:cd:15:62:23:42:8e:4a:ca:65:28:31:24:d3:9a:86:3f:07: 4e:54:c5:21:a3:12:21:ea:60:68:81:c0:e2:ae:59:9c:9a:d2: 3a:e2:1d:b4:15:ad:cc:20:bb:e7:34:82:dc:9f:0f:1b:42:69: 68:d3:f7:d9:98:b3:f5:f4:11:ee:20:26:d9:be:35:fa:fc:5a: 94:66:75:91:0d:15:b4:14:e4:22:bd:1e:22:11:c9:ac:c4:c8: 22:b8:9c:3b:ac:e9:5b:1f:d2:92:e6:d1:79:b2:72:2c:17:02: 98:b8:fa:d4:97:9d:46:61:4a:e5:49:05:a4:33:a0:91:c3:48: 63:fd:2c:7a:da:30:95:29:15:41:4f:78:7d:80:9e:4f:ff:9c: 02:ea:6b:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjYwOTIyMTgwNzUwWhcNMjYwOTI5MTgwNzUwWjAYMRYwFAYD VQQDEw02YWIyYzNmNi05ZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2F2Ffa4Lx24TbpSudFtZMlA+zM/Mo/Fvc4mG3rS6e5+HGLDoKJJMJ9Fr9f0 q5af/UBbvHgKmEuqm8IFHl/YoybbFOO64O50j0x6fkMMQiKuhYuLEEwIicxZ9O4I 6nR3K6gbrtDN4sFmdzEz5e/6YivaBUwJotDcjf/wjzeMtdd7ekylwTyJA7nvL2aA lZaX9HBlWClCpro3skp1XK6ebZT2R/GhIhTD60tcah71HfcQiU0Scekh1AdgaSD4 YgAoxricABhKhlzCYJChQ8lrPcbHKm4N/NklyjZeA3+Zsu/xdz7W4YN1/Tf5nMQo SkkLadUJtIrBezjhtBGqahLNhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQdaInF W4bjg+rvvnuG9hEz61DiMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ6niCFFJNNLEhIvZbrnmN11fRNrCEUNRlmrzoQ0NOpdj2Hkj1pBUnTV8JYCF tp18AUgnHn7xBaqLLTv47Z7f8v3w5Oq5trfFgZLc1h0/ND+LMFVRp/D9O8Xk2R9I zgave08z//ait1xHakeFec0VYiNCjkrKZSgxJNOahj8HTlTFIaMSIepgaIHA4q5Z nJrSOuIdtBWtzCC75zSC3J8PG0JpaNP32Ziz9fQR7iAm2b41+vxalGZ1kQ0VtBTk Ir0eIhHJrMTIIricO6zpWx/SkubRebJyLBcCmLj61JedRmFK5UkFpDOgkcNIY/0s etowlSkVQU94fYCeT/+cAuprKg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:23:13 2026 by rpki-client