$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json) Hash identifier: fi6UCowFAAcKTC8T5NeVu7Sz6jQDSSlVSqheJ+gcGrA= Subject key identifier: B6:53:9B:5A:DA:57:86:70:A2:AD:73:B3:12:1D:3C:0A:4D:C8:F6:AF Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft Manifest number: 04B7 Signing time: Tue 22 Sep 2026 23:32:32 +0000 Manifest this update: Tue 22 Sep 2026 23:32:32 +0000 Manifest next update: Tue 29 Sep 2026 23:32:32 +0000 Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: EEDfZ4J/gmngKz8bNn8cJIh3Q9xuLdvw0lU7nu54em8=) 2: 58C00854905211EC90E6100FC4F9AE02.roa (hash: HavGxilFCXPwJZ5ysPf3ohVQv79l6ZGEb7A58aULo/M=) 3: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: JVO8JZCfYqp3N9h+hRdEkwlagsjOuD7MM+G3/8q05pI=) 4: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: OS+MMRRjQluFNuI+98G/Gv/Ff4t99hp6Izi7LUhaJJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Validity Not Before: Sep 22 23:32:32 2026 GMT Not After : Sep 29 23:32:32 2026 GMT Subject: CN=6ab31010-b2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:95:8f:9d:38:11:dd:cd:b1:b1:1d:a8:1e: 22:e9:8a:36:2a:81:46:11:c6:92:e5:96:6b:d9:7b: e4:e6:ed:d2:74:8c:50:e9:4f:f8:f1:b9:1e:8d:20: c1:32:04:b2:4d:5c:96:f0:f1:9e:36:0d:50:a3:56: f7:06:d0:fa:95:6b:f2:21:3f:f7:03:c1:3d:a6:c1: f6:41:8e:5a:78:eb:ba:b7:30:d8:42:6f:e9:ad:58: 23:0c:4c:e2:b7:3a:90:7f:66:d0:db:66:69:85:ba: a4:2e:53:ea:43:85:15:6c:37:64:8f:8a:f6:96:53: 35:49:d7:e2:81:38:5e:8c:0a:de:cf:35:b8:a0:d9: a3:04:2e:2d:a0:66:3b:d2:ae:63:83:9d:01:6b:98: bf:1e:6b:2c:78:f3:52:12:58:2a:8d:98:c3:5f:e5: b5:9c:b1:08:d3:60:c1:13:0d:d7:b9:c7:59:08:c9: 4c:a5:56:a5:6c:5a:d9:ba:54:37:b2:92:58:da:a2: ea:43:b3:e7:4e:f2:2c:74:be:cd:8e:51:f4:d3:07: 7d:e1:e9:38:90:6a:fd:cc:88:ab:5f:59:d3:3c:e3: 14:cd:58:7f:ac:cb:99:7e:e3:d4:76:93:96:29:82: 66:8d:c6:45:07:10:21:a6:d9:de:7f:16:6d:cb:d9: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:53:9B:5A:DA:57:86:70:A2:AD:73:B3:12:1D:3C:0A:4D:C8:F6:AF X509v3 Authority Key Identifier: keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:47:1e:39:a6:af:30:69:af:3a:7a:b5:05:31:6a:88:39:15: c7:40:71:aa:c8:0d:05:b9:53:47:ff:7f:69:bb:dd:8e:35:71: 89:3c:2a:e8:86:ea:5c:9c:53:24:b5:18:89:fb:7b:7f:bf:84: d0:2e:6d:0c:dc:b5:92:aa:94:ae:60:8e:7e:cb:6e:9c:d4:de: 77:f6:0c:aa:db:d8:42:5c:57:87:69:1b:e4:b9:d7:cd:14:f8: d1:45:70:a8:c9:2b:1a:70:e4:ae:6b:49:ab:a6:bc:7f:c5:bd: 4a:26:5e:b3:16:ce:68:ec:de:9e:5c:59:90:39:ea:1f:87:38: c2:1f:32:cb:39:f7:de:6f:4e:00:3b:14:60:51:6f:15:d9:55: ff:cf:7f:06:6e:42:c0:d9:3e:9a:be:c6:7b:cf:38:05:44:32: 60:7c:ea:8a:d6:79:01:bb:4c:ea:e7:89:d5:37:ac:eb:24:57: b3:28:c2:5e:d9:dd:5b:81:16:ae:2f:47:78:5e:a9:fc:08:4d: a1:bd:60:bd:bf:c0:95:f1:62:61:96:d2:90:94:ab:d1:b0:21: a9:9e:41:49:ec:a3:61:fa:04:58:9d:cc:a9:2d:6a:9d:0e:66: 93:c9:44:77:6b:0f:42:b8:33:b4:20:0c:e9:7e:c4:2f:d9:8e: ae:31:7d:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1 MUZGRkExQTQwHhcNMjYwOTIyMjMzMjMyWhcNMjYwOTI5MjMzMjMyWjAYMRYwFAYD VQQDEw02YWIzMTAxMC1iMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx6Vj504Ed3NsbEdqB4i6Yo2KoFGEcaS5ZZr2Xvk5u3SdIxQ6U/48bkejSDB MgSyTVyW8PGeNg1Qo1b3BtD6lWvyIT/3A8E9psH2QY5aeOu6tzDYQm/prVgjDEzi tzqQf2bQ22ZphbqkLlPqQ4UVbDdkj4r2llM1SdfigThejArezzW4oNmjBC4toGY7 0q5jg50Ba5i/HmssePNSElgqjZjDX+W1nLEI02DBEw3XucdZCMlMpValbFrZulQ3 spJY2qLqQ7PnTvIsdL7NjlH00wd94ek4kGr9zIirX1nTPOMUzVh/rMuZfuPUdpOW KYJmjcZFBxAhptnefxZty9lACwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZTm1ra V4Zwoq1zsxIdPApNyPavMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6 NE1DVXR0cHFPTHRSX19vYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK0ceOaavMGmvOnq1BTFqiDkVx0BxqsgNBblTR/9/abvdjjVxiTwq6IbqXJxT JLUYift7f7+E0C5tDNy1kqqUrmCOfstunNTed/YMqtvYQlxXh2kb5LnXzRT40UVw qMkrGnDkrmtJq6a8f8W9SiZesxbOaOzenlxZkDnqH4c4wh8yyzn33m9OADsUYFFv FdlV/89/Bm5CwNk+mr7Ge884BUQyYHzqitZ5AbtM6ueJ1Tes6yRXsyjCXtndW4EW ri9HeF6p/AhNob1gvb/AlfFiYZbSkJSr0bAhqZ5BSeyjYfoEWJ3MqS1qnQ5mk8lE d2sPQrgztCAM6X7EL9mOrjF9uQ== -----END CERTIFICATE-----Generated at Thu Sep 24 18:42:25 2026 by rpki-client