$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: 0oJl2JvW9OzSCV5zKD33diUprnNakpL4pcN5RiOQVGQ= Subject key identifier: D0:0F:21:0A:0B:D0:64:F1:D6:DF:C9:B8:D5:83:26:EC:AA:8E:DE:96 Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: 01B5 Signing time: Fri 25 Sep 2026 04:04:01 +0000 Manifest this update: Fri 25 Sep 2026 04:04:00 +0000 Manifest next update: Fri 02 Oct 2026 04:04:00 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: Dfodtgc9qd39fqYHWgMVapJeXIl0gRefn7jUzIeKnWI=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: PBjbgLkLmMBj/F7PFO+ds4NYTRx+qR9D6LQ6bjgmDuc=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: uE9BZOQRvrYyitomF6RoiQleo5uOBCO+TRSMtaSljks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Sep 25 04:04:00 2026 GMT Not After : Oct 2 04:04:00 2026 GMT Subject: CN=6ab5f2b1-bbb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c2:de:9c:c6:a4:65:59:9d:72:72:96:8f:84: 47:b2:39:f3:f9:36:b8:3d:a8:dd:7a:7c:f2:92:c4: 9a:5c:19:79:b6:8f:d2:0b:2a:5b:2b:55:89:83:96: a6:bb:ec:a0:a0:a1:d8:da:d9:bf:12:b4:9d:c6:4b: 8c:1f:e7:d0:95:0e:6b:15:93:f0:23:48:bd:1e:cd: e1:11:82:7b:66:9c:43:45:ec:44:cc:87:4d:24:97: 08:44:e3:94:4b:ec:91:54:f7:df:cc:cc:3d:a1:9d: 51:07:e4:90:4d:4e:90:78:2f:29:2f:f3:24:85:7f: e0:63:5b:49:21:fa:86:d1:e1:8d:dd:6c:6d:7b:e3: 0f:af:a1:c8:e5:91:85:12:0d:06:d0:08:cd:e6:a0: e1:8d:46:7d:78:07:df:95:52:42:2c:5c:36:d0:58: 42:0c:f3:7d:cd:78:87:dd:99:89:5d:cc:09:50:19: a0:5a:ba:5d:07:57:ce:ca:03:0c:a4:17:19:25:b5: bc:50:2d:95:ea:3b:58:9a:54:98:66:8d:c6:67:71: 52:29:fb:b2:e1:ac:cc:20:78:85:72:91:dc:af:23: ca:14:6f:ec:ea:fd:b4:6e:64:e1:59:39:16:07:a7: ab:de:c0:68:a6:01:f7:87:99:90:ba:e9:08:21:ca: d4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0F:21:0A:0B:D0:64:F1:D6:DF:C9:B8:D5:83:26:EC:AA:8E:DE:96 X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:1a:fc:f4:50:e4:2d:8d:b1:55:9a:83:b3:b1:32:13:17:6d: 48:f6:41:19:f3:2a:93:74:ad:18:43:79:88:7c:67:d2:59:9f: b6:63:a4:b4:31:f7:5a:26:2a:1d:04:40:d1:71:5e:15:be:11: 96:ed:85:ba:a5:d3:f0:56:06:16:95:b6:4d:29:8e:47:da:8c: 30:24:d1:e9:19:b3:45:c6:bf:1d:d8:3c:0f:a9:68:50:23:d6: 92:88:26:01:13:1a:60:e2:47:84:65:12:81:9d:26:e9:c5:62: ec:eb:e4:29:c4:1a:27:1e:9f:ed:cf:fc:15:7d:7b:65:03:ab: d1:5c:ef:b4:74:5c:66:27:55:dc:d7:20:32:1a:5d:27:2b:f2: 17:e6:85:57:1a:84:be:58:fc:65:f9:90:eb:7c:cc:88:6a:b2: 58:54:dc:3e:ac:50:ad:a4:fd:65:22:38:19:81:17:0c:4f:43: 36:fe:4a:7f:a7:fc:2e:65:36:a3:7c:53:7b:26:c3:6a:48:e9: ff:88:1a:ad:58:f6:77:54:aa:de:9a:26:96:48:35:1d:3d:b5: a0:70:27:41:42:1b:a5:00:18:6f:9b:d2:3c:5b:6c:a0:e6:b9: 9e:2b:a2:d6:2a:83:19:db:04:0d:5e:d9:db:de:e7:b2:98:e7: 07:ad:bd:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjYwOTI1MDQwNDAwWhcNMjYxMDAyMDQwNDAwWjAYMRYwFAYD VQQDEw02YWI1ZjJiMS1iYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8LenMakZVmdcnKWj4RHsjnz+Ta4PajdenzyksSaXBl5to/SCypbK1WJg5am u+ygoKHY2tm/ErSdxkuMH+fQlQ5rFZPwI0i9Hs3hEYJ7ZpxDRexEzIdNJJcIROOU S+yRVPffzMw9oZ1RB+SQTU6QeC8pL/MkhX/gY1tJIfqG0eGN3Wxte+MPr6HI5ZGF Eg0G0AjN5qDhjUZ9eAfflVJCLFw20FhCDPN9zXiH3ZmJXcwJUBmgWrpdB1fOygMM pBcZJbW8UC2V6jtYmlSYZo3GZ3FSKfuy4azMIHiFcpHcryPKFG/s6v20bmThWTkW B6er3sBopgH3h5mQuukIIcrUmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAPIQoL 0GTx1t/JuNWDJuyqjt6WMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmRr89FDkLY2xVZqDs7EyExdtSPZBGfMqk3StGEN5iHxn0lmftmOktDH3WiYq HQRA0XFeFb4Rlu2FuqXT8FYGFpW2TSmOR9qMMCTR6RmzRca/Hdg8D6loUCPWkogm ARMaYOJHhGUSgZ0m6cVi7OvkKcQaJx6f7c/8FX17ZQOr0VzvtHRcZidV3NcgMhpd JyvyF+aFVxqEvlj8ZfmQ63zMiGqyWFTcPqxQraT9ZSI4GYEXDE9DNv5Kf6f8LmU2 o3xTeybDakjp/4garVj2d1Sq3pomlkg1HT21oHAnQUIbpQAYb5vSPFtsoOa5niui 1iqDGdsEDV7Z297nspjnB629WA== -----END CERTIFICATE-----Generated at Sat Sep 26 08:15:49 2026 by rpki-client