$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft File: ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft (raw, json) Hash identifier: 3G/R7l28gHtd+koJtVjPjs449dMRKU6tzrfPBE0LVtM= Subject key identifier: FB:BB:DA:7A:14:AB:4C:AF:AB:D7:1C:FD:98:75:E3:B1:72:A9:A3:49 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1E67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft Manifest number: 1DD1 Signing time: Tue 22 Sep 2026 16:04:10 +0000 Manifest this update: Tue 22 Sep 2026 16:04:09 +0000 Manifest next update: Tue 29 Sep 2026 16:04:09 +0000 Files and hashes: 1: ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl (hash: BJQm0tte7bQzNipF7leY46edlgguHZ/Bpu3eCAKGw/Y=) 2: 87F433B2234C11EBA94AE637C4F9AE02.roa (hash: FZUA9ujh5y+qedLhZYHjBMCqwCiia7dWK5HBk6r/R3A=) 3: CCD092AE4E6411EF92C0EC3AC4F9AE02.roa (hash: /vJS5mvYoaeQ7e5TPVVBx64c5yOqiYznmnqStY9GYWY=) 4: 3322FCF6B8B611F09EE22E11C4F9AE02.roa (hash: vPw7xATzv0O2yNoJH3ofUOV61xAOAH8pdJ0rodOC4Lw=) 5: D3C8593E905E11EFAF2C185CC4F9AE02.roa (hash: Ruxh9vs1IEEY8sUgeoqbiAjkOA3NIO1oE49c/aSiPyo=) 6: 2F9A7A1648FC11EBBAE0991CC4F9AE02.roa (hash: OyJ386kUL4gGWlM9zenD8Or9GBx/nawzJcbJiadjXEs=) 7: D1A879DA769011F18B30BBE765A30FBC.roa (hash: MWgXgLvg84RJCX9V3qs+7dPPh/hqmJ2OanGVl5DYgwY=) 8: 089DB16C769111F1BA451BEF65A30FBC.roa (hash: 8p6Re7pqOXecnmQu/NSydvCbJad68BH9Gn7yDp3+bDg=) 9: 84064494E48F11EF8386EA50C4F9AE02.roa (hash: e2z23i28QBdo2imUKS15DY31HQcf+q8FZJ7ZqEZMi64=) 10: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (hash: syfI5VBGCCOaxinq66/rQy0KiVO/nQZm82G8XJ0s/uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7783 (0x1e67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Sep 22 16:04:09 2026 GMT Not After : Sep 29 16:04:09 2026 GMT Subject: CN=6ab2a6f9-8091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c5:ab:77:69:60:a8:05:ee:5a:b9:11:59:ca: fe:aa:1f:84:48:4f:fe:18:22:bb:11:6d:f5:a2:cd: f5:15:04:27:74:fa:f8:b5:74:94:05:42:9b:4d:68: e6:b0:3a:c1:04:ba:08:cd:39:30:0e:75:6c:98:a4: c9:28:72:14:3d:a2:41:70:f8:bb:52:7c:30:d9:ca: 8e:a9:3e:af:0a:88:20:de:68:6c:e3:9c:49:81:16: f3:5b:8c:c3:69:29:f0:1a:2d:f4:98:f9:cd:c8:37: 4a:97:2c:68:7c:1c:15:e9:f1:6e:5d:c1:18:10:a5: 4b:42:95:15:e0:32:f9:32:6d:ea:27:63:d6:03:3c: 14:1a:09:ce:fb:bc:79:cb:66:3b:78:5c:a9:71:f3: c6:8a:14:34:6c:73:76:10:5b:3f:6d:8b:f1:cc:81: 2d:12:03:7e:0c:5c:db:47:44:53:53:c1:95:07:5c: 95:13:da:9a:ae:42:0d:2b:33:40:a2:0f:74:ed:b0: d4:24:22:5b:8a:0c:d9:c6:8c:ec:92:95:5b:34:32: d4:d2:dd:6a:2a:ed:8f:fc:f5:9d:d3:37:16:d9:36: e2:4d:90:d0:47:fc:24:f8:6d:50:7b:41:38:c1:58: d0:f4:1a:40:57:25:81:6d:8e:e6:65:aa:1e:0d:e3: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BB:DA:7A:14:AB:4C:AF:AB:D7:1C:FD:98:75:E3:B1:72:A9:A3:49 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:85:95:b1:d2:7d:3f:72:1f:7a:c5:04:73:0a:7d:1b:d1:43: c3:5b:60:85:fe:11:f6:7e:1e:ce:84:30:05:71:51:61:4a:13: 2c:0f:df:cf:53:2d:94:56:d6:ca:52:8e:f3:8c:fe:72:3d:a3: 5d:ab:9c:71:2a:c6:f0:8a:ad:73:1c:3d:0b:f4:dd:66:da:ba: 70:a6:f8:d1:19:48:61:43:d3:25:a6:e7:48:ba:31:43:b7:54: 47:9d:df:de:a4:19:e8:1f:fa:38:19:3c:9a:79:c5:ba:73:59: 13:54:36:40:c0:19:aa:6a:0b:b6:9d:73:4a:58:d4:d9:c8:40: fc:5f:c8:fd:03:55:77:44:4d:51:78:cd:ea:ce:65:e2:83:5b: e9:ca:b0:d7:98:d1:f0:8d:5c:87:dc:f5:34:b2:82:66:43:b7: 30:ee:e1:0f:4c:74:ad:6d:4c:0e:27:8a:17:1c:4f:db:2c:26: a3:9e:a4:88:4c:16:45:16:5e:34:5e:5a:24:54:50:58:d0:77: d6:24:53:ce:54:9e:d9:de:3b:a6:29:9c:f5:7b:c4:e5:e0:09: 0a:9c:05:b1:93:28:05:12:b2:15:1f:5d:fa:e0:f9:4e:a4:d0: 91:da:f3:24:8a:96:ae:2f:50:b2:7e:f1:95:2d:13:6f:a5:63: 88:f3:f9:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjYwOTIyMTYwNDA5WhcNMjYwOTI5MTYwNDA5WjAYMRYwFAYD VQQDEw02YWIyYTZmOS04MDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MWrd2lgqAXuWrkRWcr+qh+ESE/+GCK7EW31os31FQQndPr4tXSUBUKbTWjm sDrBBLoIzTkwDnVsmKTJKHIUPaJBcPi7Unww2cqOqT6vCogg3mhs45xJgRbzW4zD aSnwGi30mPnNyDdKlyxofBwV6fFuXcEYEKVLQpUV4DL5Mm3qJ2PWAzwUGgnO+7x5 y2Y7eFypcfPGihQ0bHN2EFs/bYvxzIEtEgN+DFzbR0RTU8GVB1yVE9qarkINKzNA og907bDUJCJbigzZxozskpVbNDLU0t1qKu2P/PWd0zcW2TbiTZDQR/wk+G1Qe0E4 wVjQ9BpAVyWBbY7mZaoeDeMLIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPu72noU q0yvq9cc/Zh147FyqaNJMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTg0QS8xODA1MTkxQUUxRUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJj SVZMS2lWYjBNdm1vRTVZRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnYWVsdJ9P3IfesUEcwp9G9FDw1tghf4R9n4ezoQwBXFRYUoTLA/fz1MtlFbW ylKO84z+cj2jXauccSrG8Iqtcxw9C/TdZtq6cKb40RlIYUPTJabnSLoxQ7dUR53f 3qQZ6B/6OBk8mnnFunNZE1Q2QMAZqmoLtp1zSljU2chA/F/I/QNVd0RNUXjN6s5l 4oNb6cqw15jR8I1ch9z1NLKCZkO3MO7hD0x0rW1MDieKFxxP2ywmo56kiEwWRRZe NF5aJFRQWNB31iRTzlSe2d47pimc9XvE5eAJCpwFsZMoBRKyFR9d+uD5TqTQkdrz JIqWri9Qsn7xlS0Tb6VjiPP5Hg== -----END CERTIFICATE-----Generated at Thu Sep 24 01:30:10 2026 by rpki-client