$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft File: IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft (raw, json) Hash identifier: K2GhS94ssU/GfO73yvsCzTQqaemQRdQ6hlYDMOxI5vk= Subject key identifier: 20:3A:DC:EB:C0:C8:14:93:F8:7C:40:59:40:27:BF:38:AA:83:91:35 Authority key identifier: 22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62 Certificate issuer: /CN=A9195BA9/serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62 Certificate serial: 0ACE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft Manifest number: 0ABC Signing time: Thu 08 Oct 2026 19:35:28 +0000 Manifest this update: Thu 08 Oct 2026 19:35:28 +0000 Manifest next update: Thu 15 Oct 2026 19:35:28 +0000 Files and hashes: 1: IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl (hash: 6Ax0bdeX89GaU2SMwZU6u8o79CNU9KRKsyvN4b/sK7Y=) 2: 543CDDF0839011EAB5B82263C4F9AE02.roa (hash: LPpHOK81C3pNsWyGa2Q2W3gfstRuGd26hh2KRKuaOPE=) 3: 54DD69FA839011EAB5B82263C4F9AE02.roa (hash: KvrhkQvnKnpFTYVGWnMJN98DGB3DYDNMGELyZhZWRGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62 Validity Not Before: Oct 8 19:35:28 2026 GMT Not After : Oct 15 19:35:28 2026 GMT Subject: CN=6ac7f080-fdfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:db:93:46:18:12:2d:cb:f5:6b:a5:3e:04: 5b:e3:90:35:fd:ed:77:64:04:8c:32:36:b9:d1:d3: d8:c5:54:31:bf:8e:d8:59:57:05:ba:da:2c:d0:f1: 58:b5:4b:73:e2:01:4c:89:2a:79:b6:71:49:08:0a: 67:97:8d:cd:d2:ac:0c:58:df:ae:18:7b:cc:02:7f: 17:9f:89:e3:76:e6:6a:77:f6:d9:ac:20:6a:1d:50: 28:11:08:87:39:e4:4e:9e:fd:fb:a1:b8:3e:bf:f7: fa:6b:ec:a0:5b:23:01:cc:e1:02:21:1a:8d:1c:a2: b0:2b:17:e4:ef:69:9f:95:e7:c3:08:b6:2f:89:e3: 0d:c4:c3:cd:73:d8:b4:5b:7e:e8:82:7e:39:66:9d: e3:3c:fe:4a:a3:c7:5f:51:96:8b:d1:32:c7:da:bb: 2e:a8:40:43:cd:cf:9b:51:81:8f:84:91:99:b6:b0: 72:eb:d9:38:00:9b:ce:0c:f3:3b:8f:9f:e4:3f:ea: ce:17:0c:80:ae:6f:d5:e3:6f:08:85:4a:d4:37:09: dc:30:81:99:3c:e3:0f:39:ad:c9:27:2c:05:4c:72: 32:8c:7a:e1:09:1c:06:76:75:c2:99:f7:5c:b3:71: 7a:b5:23:13:b7:8b:02:28:f9:f6:4c:b2:86:af:74: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3A:DC:EB:C0:C8:14:93:F8:7C:40:59:40:27:BF:38:AA:83:91:35 X509v3 Authority Key Identifier: keyid:22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:71:40:81:27:a6:34:b0:8a:a4:1b:a9:92:04:46:88:1c:f9: d1:ed:b0:72:da:28:96:c1:ef:df:63:37:f1:b8:d3:93:8c:cb: f9:49:26:41:f6:83:d4:77:c5:d3:cb:7f:59:24:58:4d:d0:c4: 01:2f:0b:de:16:33:07:9c:80:29:5a:c0:a3:61:6b:8a:54:e0: 52:c8:03:c3:8b:8f:94:e2:31:24:7f:f6:44:38:c2:bb:ec:12: d6:bf:ed:5b:e2:e9:2e:b4:fb:07:2c:eb:12:3d:b9:a8:86:69: bf:ae:09:5e:34:06:10:9b:77:81:75:1b:01:0a:01:ca:8b:24: c1:bc:ca:53:0b:f0:06:cd:4c:b3:b6:a6:27:fc:87:ac:55:16: fc:8d:35:43:98:a9:8e:6f:10:0d:a0:71:c4:39:d2:4c:37:d8: da:68:43:f0:db:ff:fb:9f:49:0d:ca:f0:e0:15:be:1d:e4:2a: 62:b0:8c:b9:e9:35:5e:f2:17:5f:d7:73:ea:12:5b:ca:b9:b8: 73:71:81:89:44:4a:e3:31:7d:9d:c5:8d:53:74:bc:a7:f7:70: 82:7b:19:d3:36:d1:c6:65:c9:e6:60:53:ef:c0:94:52:7c:23: 72:c8:ec:a4:74:c1:91:00:80:ef:ff:dc:67:78:59:46:5a:46: f3:17:99:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKDIyNDVBRDkxNTQzQUREQUQ3ODEyM0RENDE1RDY1OUJC NTJENUZCNjIwHhcNMjYxMDA4MTkzNTI4WhcNMjYxMDE1MTkzNTI4WjAYMRYwFAYD VQQDEw02YWM3ZjA4MC1mZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ELbk0YYEi3L9WulPgRb45A1/e13ZASMMja50dPYxVQxv47YWVcFutos0PFY tUtz4gFMiSp5tnFJCApnl43N0qwMWN+uGHvMAn8Xn4njduZqd/bZrCBqHVAoEQiH OeROnv37obg+v/f6a+ygWyMBzOECIRqNHKKwKxfk72mflefDCLYvieMNxMPNc9i0 W37ogn45Zp3jPP5Ko8dfUZaL0TLH2rsuqEBDzc+bUYGPhJGZtrBy69k4AJvODPM7 j5/kP+rOFwyArm/V428IhUrUNwncMIGZPOMPOa3JJywFTHIyjHrhCRwGdnXCmfdc s3F6tSMTt4sCKPn2TLKGr3SBTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCA63OvA yBST+HxAWUAnvziqg5E1MB8GA1UdIwQYMBaAFCJFrZFUOt2teBI91BXWWbtS1fti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9EODkxNDc4Qzgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi9Ja1d0a1ZRNjNhMTRFajNVRmRaWnUxTFYt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrV3RrVlE2M2ExNEVqM1VGZFpadTFMVi0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9EODkxNDc4QzgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi9Ja1d0a1ZRNjNh MTRFajNVRmRaWnUxTFYtMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAXFAgSemNLCKpBupkgRGiBz50e2wctoolsHv32M38bjTk4zL+UkmQfaD1HfF 08t/WSRYTdDEAS8L3hYzB5yAKVrAo2FrilTgUsgDw4uPlOIxJH/2RDjCu+wS1r/t W+LpLrT7ByzrEj25qIZpv64JXjQGEJt3gXUbAQoByoskwbzKUwvwBs1Ms7amJ/yH rFUW/I01Q5ipjm8QDaBxxDnSTDfY2mhD8Nv/+59JDcrw4BW+HeQqYrCMuek1XvIX X9dz6hJbyrm4c3GBiURK4zF9ncWNU3S8p/dwgnsZ0zbRxmXJ5mBT78CUUnwjcsjs pHTBkQCA7//cZ3hZRlpG8xeZuw== -----END CERTIFICATE-----Generated at Fri Oct 9 11:53:53 2026 by rpki-client