$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft File: 28IYSbtMFwTSMZPEG3DGaxqWVi8.mft (raw, json) Hash identifier: 6q1OYToazspYy2+qR7CJVm4Hiakb77FAWPo8II37Wdk= Subject key identifier: 56:1C:11:DE:B3:82:3C:20:6F:29:19:50:7D:DE:05:D0:65:EF:BD:42 Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Certificate serial: 1649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft Manifest number: 163A Signing time: Tue 22 Sep 2026 16:37:48 +0000 Manifest this update: Tue 22 Sep 2026 16:37:47 +0000 Manifest next update: Tue 29 Sep 2026 16:37:47 +0000 Files and hashes: 1: 28IYSbtMFwTSMZPEG3DGaxqWVi8.crl (hash: h6ST/+wHjbnim6IhCzcFMuDrp+ecKPXUYBIcy7aSVac=) 2: 85CB3A8A4A9D11F1A2093B779BEE528E.roa (hash: HPg54/GUrW2e3ZBjByhQdgJ3W185EITXukQZc69O0IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5705 (0x1649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Validity Not Before: Sep 22 16:37:47 2026 GMT Not After : Sep 29 16:37:47 2026 GMT Subject: CN=6ab2aedb-a979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:f3:e1:e6:ed:0a:0a:92:0c:1f:fd:9c:54: 16:69:a0:64:cd:50:50:cf:a3:ef:1f:69:1a:57:03: 5a:d1:f5:c9:0b:ba:81:61:0c:9c:10:72:00:fe:49: f9:09:2e:3c:03:f9:68:bc:0c:63:88:0b:6b:51:de: 2c:68:40:0e:07:3c:d7:08:20:d9:82:b9:c0:a1:be: 99:eb:a1:35:13:58:09:ec:ac:a1:f5:59:c2:4a:7a: f9:14:d1:10:90:d2:e7:dd:fe:2b:2d:78:22:af:9a: 82:83:f1:66:80:10:88:45:2a:61:c2:a4:d9:3e:76: 1a:74:6e:75:4b:2d:1f:fe:fe:9f:41:24:12:70:51: f2:17:da:d4:8f:70:8d:34:d6:e1:58:7e:7a:67:cd: b9:59:ee:38:d8:a9:3f:37:7c:3b:0c:11:ac:30:76: b5:b3:92:a5:dd:ba:ba:86:64:86:82:7b:ad:95:74: 5b:cc:56:42:02:7b:0d:c7:f0:cc:85:33:8b:fc:2a: 5e:f7:3c:d4:c0:e5:cb:b3:cf:68:d4:58:10:b0:72: f1:00:88:5d:44:92:5f:a9:93:44:a3:8c:68:e9:a5: c9:f9:09:3c:40:10:be:2e:55:48:50:aa:48:26:db: 24:29:36:d8:e3:17:00:67:ef:78:0b:ab:35:10:f4: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1C:11:DE:B3:82:3C:20:6F:29:19:50:7D:DE:05:D0:65:EF:BD:42 X509v3 Authority Key Identifier: keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:79:3f:51:ce:18:0a:e4:be:d6:5d:6c:93:30:ba:4f:ac:f0: 58:0b:bf:37:69:0d:ef:cb:0f:30:9d:cd:2a:4d:fc:92:15:85: 7f:d7:97:bd:73:08:42:45:cc:0a:71:96:de:7b:f7:7d:2f:08: 1b:e0:bb:17:ef:87:6b:4c:58:46:07:6d:e2:63:8a:73:17:1b: 86:de:1b:c9:a5:d1:88:54:ea:65:c4:1b:65:24:0f:64:28:76: e0:ea:01:57:47:93:0a:30:b9:e4:9f:d9:ad:a1:1e:bf:66:1f: 7d:7b:2b:98:76:fb:cd:4c:49:bb:50:6a:c1:42:ac:83:ca:31: 06:fb:31:47:20:75:d9:7e:1b:97:57:98:22:c5:c5:22:10:c1: 9e:71:ca:eb:59:53:c9:d2:b5:08:6d:58:49:25:fd:96:11:1e: d1:75:06:d4:34:9a:d9:cd:5f:a4:22:19:79:97:2e:fe:ca:09: 3a:70:63:22:77:a9:df:18:a8:2d:09:0f:43:01:d7:db:b9:68: 49:d6:ac:7c:7e:5d:e1:67:31:4a:51:9b:81:c7:44:bd:d4:66: 90:7b:9b:e9:24:ec:4e:89:f6:7f:94:b5:dd:5d:35:42:1e:25: 4f:c4:d7:a0:34:76:5b:89:e0:b1:b7:11:8a:11:a5:ee:61:57: a6:a1:0c:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzMxMTAvBgNVBAUTKERCQzIxODQ5QkI0QzE3MDREMjMxOTNDNDFCNzBDNjZC MUE5NjU2MkYwHhcNMjYwOTIyMTYzNzQ3WhcNMjYwOTI5MTYzNzQ3WjAYMRYwFAYD VQQDEw02YWIyYWVkYi1hOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkPz4ebtCgqSDB/9nFQWaaBkzVBQz6PvH2kaVwNa0fXJC7qBYQycEHIA/kn5 CS48A/lovAxjiAtrUd4saEAOBzzXCCDZgrnAob6Z66E1E1gJ7Kyh9VnCSnr5FNEQ kNLn3f4rLXgir5qCg/FmgBCIRSphwqTZPnYadG51Sy0f/v6fQSQScFHyF9rUj3CN NNbhWH56Z825We442Kk/N3w7DBGsMHa1s5Kl3bq6hmSGgnutlXRbzFZCAnsNx/DM hTOL/Cpe9zzUwOXLs89o1FgQsHLxAIhdRJJfqZNEo4xo6aXJ+Qk8QBC+LlVIUKpI JtskKTbY4xcAZ+94C6s1EPQ34wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFYcEd6z gjwgbykZUH3eBdBl771CMB8GA1UdIwQYMBaAFNvCGEm7TBcE0jGTxBtwxmsallYv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMy8xRkRBRkQ2MjQz RTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3VFNNWlBFRzNER2F4cVdW aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4SVlTYnRNRndUU01aUEVHM0RHYXhxV1ZpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMy8xRkRBRkQ2MjQzRTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3 VFNNWlBFRzNER2F4cVdWaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADXk/Uc4YCuS+1l1skzC6T6zwWAu/N2kN78sPMJ3NKk38khWFf9eXvXMIQkXM CnGW3nv3fS8IG+C7F++Ha0xYRgdt4mOKcxcbht4byaXRiFTqZcQbZSQPZCh24OoB V0eTCjC55J/ZraEev2YffXsrmHb7zUxJu1BqwUKsg8oxBvsxRyB12X4bl1eYIsXF IhDBnnHK61lTydK1CG1YSSX9lhEe0XUG1DSa2c1fpCIZeZcu/soJOnBjInep3xio LQkPQwHX27loSdasfH5d4WcxSlGbgcdEvdRmkHub6STsTon2f5S13V01Qh4lT8TX oDR2W4ngsbcRihGl7mFXpqEMkQ== -----END CERTIFICATE-----Generated at Wed Sep 23 19:36:51 2026 by rpki-client