$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: T5vjwZ3dEqLtChnFpn3g4TqSHDjWqMu38SAGFAuLZC8= Subject key identifier: 28:D4:1B:C6:16:C0:ED:FF:9D:29:00:8C:D9:DF:1B:84:CE:26:35:CB Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: 015D Signing time: Fri 25 Sep 2026 05:08:17 +0000 Manifest this update: Fri 25 Sep 2026 05:08:16 +0000 Manifest next update: Fri 02 Oct 2026 05:08:16 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: rsnUI2xpnPiURE7sHgB/T2UeU3fI8YT1sZy+m44UoG0=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: GfKONyuGx0WaP3K9DviNb2sOjfd80Q3n9pefnjxWc/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Sep 25 05:08:16 2026 GMT Not After : Oct 2 05:08:16 2026 GMT Subject: CN=6ab601c1-ca30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:12:43:fa:db:ab:18:b2:20:03:7a:b3:7d: b4:ca:d4:5f:b8:a4:3f:57:fe:88:5b:83:bb:8b:1c: ed:7f:d9:f3:64:43:f0:b0:92:fa:38:aa:64:2e:db: be:04:0f:d4:19:5f:52:75:fd:91:61:4f:fa:fd:90: 11:6c:08:c1:b4:1a:d1:c7:08:a2:c4:ec:83:a5:af: 43:68:48:5a:e5:2f:f0:c9:f1:a6:87:15:c2:e2:74: 28:d5:5b:78:1f:a6:e4:0c:f5:fd:89:7f:94:42:00: 9e:4d:61:7a:0a:72:55:a4:03:f6:2f:c6:f8:4f:c0: af:82:fb:c8:82:2c:eb:60:fe:34:a6:04:85:51:f1: c4:5e:fa:98:83:66:43:88:60:a0:f2:96:e2:91:dc: ed:82:15:7a:7e:53:82:cf:ca:ef:0b:c2:5a:bc:3e: 9e:d6:1c:dd:68:ef:10:e0:97:c5:df:e5:85:3b:0d: 9f:b6:c1:d4:4b:0c:b4:c7:f9:42:18:6c:ce:7e:ea: 47:9e:dc:ad:30:a6:0a:23:59:e5:c1:d3:6d:6a:1c: f3:c6:4b:4a:e1:20:ce:35:91:fb:84:2a:d7:4a:3b: be:a3:2a:21:84:5b:ec:35:ba:8f:de:48:4c:25:88: 4f:91:49:9d:b2:a4:a0:e8:91:22:ea:db:8c:f5:c4: f6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D4:1B:C6:16:C0:ED:FF:9D:29:00:8C:D9:DF:1B:84:CE:26:35:CB X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:31:8c:28:29:5f:43:48:0d:53:20:e9:51:bf:39:9e:41:a3: f2:5e:8c:b0:93:fa:a2:c8:b6:b0:e7:83:90:fb:09:cf:07:0b: b1:d7:fa:28:5a:69:0a:0e:1a:b0:8e:e7:9d:70:2e:f1:2b:09: f6:59:93:ff:75:e1:57:88:40:86:d7:23:0b:83:e2:28:39:fd: c4:35:57:a6:91:76:20:42:95:63:2a:c3:2f:32:35:5b:88:dd: 5f:5c:00:4b:a7:3e:3a:03:cd:58:36:dd:eb:0e:51:4c:37:77: e3:8e:6a:f3:3e:44:94:95:41:5a:7b:e6:7f:7b:56:99:e1:a0: a2:8f:9b:fe:b6:17:35:40:46:b1:33:34:f4:b5:68:99:4f:b9: 34:7d:39:8d:c4:e9:86:a3:3d:8b:4e:1a:c1:a2:72:06:b5:30: b4:a5:75:74:35:07:c9:6c:b4:9d:fb:f6:d5:dd:db:3f:b4:de: ca:61:1c:9d:fd:87:e3:7c:35:db:fd:42:06:89:b3:9b:dd:38: 65:75:84:f2:29:73:d7:a1:6e:80:a7:ba:41:a7:62:08:dc:07: c2:c0:89:2a:aa:c8:39:cf:10:7c:65:41:d0:82:8f:d5:b3:2c: 51:f6:c2:7c:51:96:8c:84:31:b2:27:2a:b3:89:27:3d:25:5d: 0d:03:3a:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5 NjFDNDQxRTcwHhcNMjYwOTI1MDUwODE2WhcNMjYxMDAyMDUwODE2WjAYMRYwFAYD VQQDEw02YWI2MDFjMS1jYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyMSQ/rbqxiyIAN6s320ytRfuKQ/V/6IW4O7ixztf9nzZEPwsJL6OKpkLtu+ BA/UGV9Sdf2RYU/6/ZARbAjBtBrRxwiixOyDpa9DaEha5S/wyfGmhxXC4nQo1Vt4 H6bkDPX9iX+UQgCeTWF6CnJVpAP2L8b4T8CvgvvIgizrYP40pgSFUfHEXvqYg2ZD iGCg8pbikdztghV6flOCz8rvC8JavD6e1hzdaO8Q4JfF3+WFOw2ftsHUSwy0x/lC GGzOfupHntytMKYKI1nlwdNtahzzxktK4SDONZH7hCrXSju+oyohhFvsNbqP3khM JYhPkUmdsqSg6JEi6tuM9cT2rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjUG8YW wO3/nSkAjNnfG4TOJjXLMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC85RjU5MUU4RUE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFj LVBXV3JiX01OZ0dXSEVRZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbTGMKClfQ0gNUyDpUb85nkGj8l6MsJP6osi2sOeDkPsJzwcLsdf6KFppCg4a sI7nnXAu8SsJ9lmT/3XhV4hAhtcjC4PiKDn9xDVXppF2IEKVYyrDLzI1W4jdX1wA S6c+OgPNWDbd6w5RTDd3445q8z5ElJVBWnvmf3tWmeGgoo+b/rYXNUBGsTM09LVo mU+5NH05jcTphqM9i04awaJyBrUwtKV1dDUHyWy0nfv21d3bP7TeymEcnf2H43w1 2/1CBomzm904ZXWE8ilz16FugKe6QadiCNwHwsCJKqrIOc8QfGVB0IKP1bMsUfbC fFGWjIQxsicqs4knPSVdDQM6hg== -----END CERTIFICATE-----Generated at Sat Sep 26 05:23:26 2026 by rpki-client