$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json) Hash identifier: y2kApa7HGjmA+y0zAEoqVNYKAvvnElsK/7nHeX+eKBs= Subject key identifier: 41:9F:55:0D:2D:EE:12:CB:C6:13:BF:BA:AC:48:18:C8:48:D0:F1:92 Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft Manifest number: 0BBA Signing time: Sat 26 Sep 2026 19:07:38 +0000 Manifest this update: Sat 26 Sep 2026 19:07:38 +0000 Manifest next update: Sat 03 Oct 2026 19:07:38 +0000 Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: H/QtGEmoSCQ96jEkaGvyBDPbm0F5RnRbBUYUYAJpDZo=) 2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: ShVKBDsZHucxua11jITqEB/zC8bAit+Mc5m8VG1vvj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3014 (0xbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Validity Not Before: Sep 26 19:07:38 2026 GMT Not After : Oct 3 19:07:38 2026 GMT Subject: CN=6ab817fa-7011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:90:5c:00:70:9c:09:06:ba:85:dc:b8:87: 17:70:23:93:69:bc:e4:e2:27:88:d9:64:2a:32:60: da:34:fe:25:86:73:b8:7a:93:00:02:a3:9c:1e:3e: 2b:07:03:26:a4:f4:4e:3e:e4:8b:79:5e:8a:37:d3: 27:34:46:91:78:b5:da:66:fb:65:58:66:83:13:0f: dc:7a:f7:fc:dd:c2:66:9e:ab:41:ae:34:d3:a5:77: cf:a2:c6:eb:f4:af:da:de:92:bc:07:70:9b:6b:b0: 68:b1:4a:1a:6f:91:8c:3a:0e:31:93:b6:4b:10:b0: 35:90:02:1d:4d:f3:d5:3d:78:f4:38:62:5d:6c:7b: ba:47:79:5a:e9:eb:0c:df:5a:06:42:82:e5:54:47: d0:f4:e8:e2:77:91:20:f3:56:3b:a7:e2:9d:3c:2b: 75:8c:28:7b:ae:8c:8f:83:d1:2e:6d:8e:6e:95:32: e8:26:d2:fa:50:b0:31:ef:4c:9c:d7:fe:4c:20:c1: b1:c1:64:01:44:ca:c5:b4:ca:bf:0b:8e:51:85:74: fd:bf:84:40:e1:7a:74:a2:2a:c8:41:5e:18:0f:58: f0:fd:59:fc:2e:de:25:43:b7:c6:a6:c6:ea:22:a8: 09:a0:b3:ee:52:a3:dc:49:0c:15:5c:50:5d:af:a1: 79:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9F:55:0D:2D:EE:12:CB:C6:13:BF:BA:AC:48:18:C8:48:D0:F1:92 X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a9:10:99:ba:7f:2f:ca:86:57:d3:12:5b:e9:a1:dd:ae:83: 77:71:aa:8f:11:a8:88:db:cc:61:93:08:b3:9e:ca:50:65:2d: ff:a3:21:b8:1b:93:7e:ee:b1:02:f3:2b:60:0d:d5:4d:f5:21: 5e:c3:57:8c:2d:a4:5a:28:e1:70:68:4c:64:c9:ed:6c:74:7d: 0e:47:14:2d:3b:67:69:10:b7:58:c3:e7:ec:62:31:de:b8:58: 9d:42:23:8b:7d:5f:24:c1:be:5d:f1:6c:aa:0f:b2:34:82:44: 1f:b9:6e:53:3f:1b:b8:e8:6b:ca:f1:73:b4:e0:97:ab:49:bf: b8:e2:30:73:ae:9f:c1:47:49:cd:1f:2a:b9:49:d5:b6:c0:31: 74:ce:ee:4f:6e:5e:33:6f:42:ac:02:78:14:1f:69:55:a9:6a: ee:8c:0f:8b:6c:f1:e7:f1:21:0b:9f:f0:35:40:7d:ef:73:24: cf:ef:4a:d9:97:64:8c:5b:f3:4c:cc:b4:6b:3c:c8:e8:74:8f: 02:82:bb:42:af:0a:11:78:5f:c7:0a:f3:99:6a:89:06:42:9b: c0:ac:70:af:31:54:3a:19:7d:96:44:b9:a7:0b:df:56:63:ca: 96:99:c8:cc:08:26:94:36:54:8f:ee:c9:ee:20:d1:c9:17:13: 76:fa:83:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjYwOTI2MTkwNzM4WhcNMjYxMDAzMTkwNzM4WjAYMRYwFAYD VQQDEw02YWI4MTdmYS03MDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBCQXABwnAkGuoXcuIcXcCOTabzk4ieI2WQqMmDaNP4lhnO4epMAAqOcHj4r BwMmpPROPuSLeV6KN9MnNEaReLXaZvtlWGaDEw/cevf83cJmnqtBrjTTpXfPosbr 9K/a3pK8B3Cba7BosUoab5GMOg4xk7ZLELA1kAIdTfPVPXj0OGJdbHu6R3la6esM 31oGQoLlVEfQ9Ojid5Eg81Y7p+KdPCt1jCh7royPg9EubY5ulTLoJtL6ULAx70yc 1/5MIMGxwWQBRMrFtMq/C45RhXT9v4RA4Xp0oirIQV4YD1jw/Vn8Lt4lQ7fGpsbq IqgJoLPuUqPcSQwVXFBdr6F5ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGfVQ0t 7hLLxhO/uqxIGMhI0PGSMB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjQxMy9COEZDQTdCQTUxNkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJw UVd0XzY4Z1R3OExxa1d2RVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUakQmbp/L8qGV9MSW+mh3a6Dd3GqjxGoiNvMYZMIs57KUGUt/6MhuBuTfu6x AvMrYA3VTfUhXsNXjC2kWijhcGhMZMntbHR9DkcULTtnaRC3WMPn7GIx3rhYnUIj i31fJMG+XfFsqg+yNIJEH7luUz8buOhryvFztOCXq0m/uOIwc66fwUdJzR8quUnV tsAxdM7uT25eM29CrAJ4FB9pValq7owPi2zx5/EhC5/wNUB973Mkz+9K2ZdkjFvz TMy0azzI6HSPAoK7Qq8KEXhfxwrzmWqJBkKbwKxwrzFUOhl9lkS5pwvfVmPKlpnI zAgmlDZUj+7J7iDRyRcTdvqDFQ== -----END CERTIFICATE-----Generated at Sun Sep 27 05:23:32 2026 by rpki-client