$ rpki-client -vvvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: xKey1is31Fr6DLUUw8Zz4GF6CaQwP5Ln/eo9+I9t2xs= Subject key identifier: 2E:91:DA:5E:F4:8F:2C:D7:4A:72:6B:32:76:F3:7C:08:2C:4C:27:19 Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 0568 Signing time: Sat 26 Sep 2026 23:25:24 +0000 Manifest this update: Sat 26 Sep 2026 23:25:24 +0000 Manifest next update: Sat 03 Oct 2026 23:25:24 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: J+oj7v425Oyfi4qlZR0yDEU7JVFxou2n60z2TrZtr6E=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: LJy17ILIBfPomAik/C3VD6opwZLbdXQBjkGQXiaQSQ4=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: HrJ+8JztV8jOok9XoxaSZjsBUJtbPDSkJYLMEhJeKdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Sep 26 23:25:24 2026 GMT Not After : Oct 3 23:25:24 2026 GMT Subject: CN=6ab85464-00d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:4d:56:59:d8:59:d0:68:67:bb:f7:05:26: df:14:3a:85:f9:25:eb:6a:ee:fd:d5:e1:77:fd:9c: da:fd:14:4b:79:1b:7c:e9:78:62:e9:7d:1a:0a:e1: 49:bc:5b:a8:09:97:64:15:46:58:17:45:7d:1a:d5: 01:da:80:b9:1c:72:77:79:59:b3:b8:f2:68:a2:17: 32:a0:a4:e4:d2:b6:f6:58:c0:98:16:9c:87:07:dc: ce:9e:ff:ec:b9:e8:65:b5:de:aa:77:a4:40:d7:88: 52:78:ba:d1:af:6f:0c:2a:1c:7c:b7:44:fb:8c:a5: ec:97:83:b9:ec:55:5a:d1:51:c5:52:0e:b4:2e:a1: 15:c7:78:22:6e:a7:28:45:e6:49:06:d9:51:08:c1: f0:2c:de:20:af:09:03:ec:87:29:73:19:c7:9b:9d: 6d:1c:df:b0:46:bb:e5:45:c2:da:07:55:e3:d3:c7: 2c:e1:57:b3:e1:61:49:12:47:f6:a7:ee:d7:25:7c: 0e:df:b6:26:10:87:ee:e8:a4:4d:70:85:b2:38:12: 6a:6d:09:59:03:dc:57:22:bf:7c:3e:41:f7:0d:9d: 5b:f2:28:c2:5f:22:05:d7:0c:25:46:ad:40:39:a6: 65:14:c1:ac:42:63:1d:ba:24:0c:a2:21:3d:82:f9: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:91:DA:5E:F4:8F:2C:D7:4A:72:6B:32:76:F3:7C:08:2C:4C:27:19 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4a:77:db:e5:8b:76:56:52:c1:da:be:34:80:4a:e6:71:05: 10:0a:a1:eb:49:86:92:84:a1:52:f5:42:5e:85:9d:74:7e:26: 4f:88:ec:ca:77:58:ee:f4:39:1b:6b:ec:25:b7:0e:52:62:69: ab:48:b8:33:18:42:51:b3:27:14:60:f6:32:0c:20:cd:23:53: 37:81:b0:1f:8f:b5:e2:f6:1b:a1:8d:f2:98:ff:83:43:fd:14: ab:d7:c8:8b:e3:72:05:20:a2:f2:1a:c4:f6:fb:b6:61:62:aa: 64:9a:db:35:9e:be:96:d0:dc:b9:65:7f:ac:2f:b2:74:d1:90: 9f:73:7e:4a:50:35:b9:ac:3a:af:46:6d:ab:89:f9:a4:a0:d3: 45:2c:67:80:ca:09:a2:6e:da:a7:85:21:ef:b5:fe:8f:40:9e: 10:35:b2:8d:19:d5:7c:2c:a5:f2:a8:14:4d:14:2b:3a:1a:d7: 67:ea:c0:46:61:3a:2c:45:46:c4:5e:78:f7:18:48:81:36:f5: da:12:48:e5:4a:6a:6b:48:c8:cc:1f:80:1a:83:e9:90:d4:c5: c9:e9:68:ec:6c:5d:78:6d:d1:4f:1b:5b:e4:cf:74:97:ba:32: 06:a1:1a:07:4d:8b:ee:af:d9:7b:43:cc:e4:ca:55:2c:be:9e: 3d:3f:b0:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjYwOTI2MjMyNTI0WhcNMjYxMDAzMjMyNTI0WjAYMRYwFAYD VQQDEw02YWI4NTQ2NC0wMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA9NVlnYWdBoZ7v3BSbfFDqF+SXrau791eF3/Zza/RRLeRt86Xhi6X0aCuFJ vFuoCZdkFUZYF0V9GtUB2oC5HHJ3eVmzuPJoohcyoKTk0rb2WMCYFpyHB9zOnv/s uehltd6qd6RA14hSeLrRr28MKhx8t0T7jKXsl4O57FVa0VHFUg60LqEVx3gibqco ReZJBtlRCMHwLN4grwkD7IcpcxnHm51tHN+wRrvlRcLaB1Xj08cs4Vez4WFJEkf2 p+7XJXwO37YmEIfu6KRNcIWyOBJqbQlZA9xXIr98PkH3DZ1b8ijCXyIF1wwlRq1A OaZlFMGsQmMduiQMoiE9gvkeFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6R2l70 jyzXSnJrMnbzfAgsTCcZMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfUp32+WLdlZSwdq+NIBK5nEFEAqh60mGkoShUvVCXoWddH4mT4jsyndY7vQ5 G2vsJbcOUmJpq0i4MxhCUbMnFGD2MgwgzSNTN4GwH4+14vYboY3ymP+DQ/0Uq9fI i+NyBSCi8hrE9vu2YWKqZJrbNZ6+ltDcuWV/rC+ydNGQn3N+SlA1uaw6r0Ztq4n5 pKDTRSxngMoJom7ap4Uh77X+j0CeEDWyjRnVfCyl8qgUTRQrOhrXZ+rARmE6LEVG xF549xhIgTb12hJI5Upqa0jIzB+AGoPpkNTFyelo7GxdeG3RTxtb5M90l7oyBqEa B02L7q/Ze0PM5MpVLL6ePT+wjw== -----END CERTIFICATE-----Generated at Sun Sep 27 11:51:07 2026 by rpki-client