$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: pZVhzuMXGQoJl8gfjm5boGQaxDHK7i3+bfigbJGHjnE= Subject key identifier: B8:A7:9E:CE:C9:34:15:72:03:B8:9D:C2:71:64:D3:5E:90:15:45:B0 Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: D6 Signing time: Mon 21 Sep 2026 06:41:51 +0000 Manifest this update: Mon 21 Sep 2026 06:41:51 +0000 Manifest next update: Mon 28 Sep 2026 06:41:51 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: OVdMUrmYr+70yw8p5HQ7xwEqRt7sU0WRwq5qEPsVG6Q=) 2: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: bJw6aITse+eniewVtF8bgjXkhRkSrrBco5fghncx6Cg=) 3: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: vrlI1pszTNOMrzyBgG79jCCwevKnYILu7ZDEahfp4WY=) 4: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: DrgQ3c30s/8aRln/0QBML0s10GhufbUYZIMkX/pX6Mc=) 5: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: k4KE8zC6lSjJRhlE/re99tOEHbG8sUjwvgrGoKF/M58=) 6: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: qpSDoTipwbn3qmlJo9kOaWOWyQWNuZBEXvzsDRT1K7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Sep 21 06:41:51 2026 GMT Not After : Sep 28 06:41:51 2026 GMT Subject: CN=6ab0d1af-3cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:b0:96:bb:4a:d8:36:e5:c3:a0:47:fd:b9: 85:f2:1b:f1:3f:92:eb:72:ec:77:25:8a:1f:02:07: 65:5f:22:df:0b:bc:b6:66:ed:0a:37:0e:ae:1b:9a: 58:06:1f:31:b3:4d:a6:0f:99:2d:6b:04:15:8b:2b: 5c:6f:cd:1a:a0:ec:2e:71:e6:3f:74:89:57:cc:97: fc:24:2d:30:d4:96:40:d2:c8:cd:a8:49:e6:9e:16: 12:52:ef:0a:cc:3c:57:f4:fe:5d:9c:de:dc:4b:a5: 62:d7:4b:f6:2f:39:65:52:1e:03:90:00:77:68:f1: 73:28:3c:bc:00:1b:a3:cc:1c:07:cb:7f:75:0a:4e: b8:a6:6d:0c:4e:9d:85:b0:f0:ae:84:17:dd:2d:8e: df:30:0b:76:06:43:b7:f2:ba:57:da:e2:df:40:d3: 15:44:0a:eb:3d:c3:bf:24:c5:d0:b3:46:7a:f4:6e: 42:37:57:99:6e:2f:b8:06:81:e9:a0:8a:09:9f:33: f4:3f:76:57:35:1e:98:24:0f:b9:28:a6:fb:dd:0d: 91:a3:95:e6:f4:cf:9b:e3:3b:d7:eb:a2:fb:59:16: 10:1a:90:a3:48:41:31:dd:ab:ce:25:12:f6:29:c7: d0:d1:7e:2b:a8:f6:7c:0b:c8:68:4f:84:8b:49:bc: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A7:9E:CE:C9:34:15:72:03:B8:9D:C2:71:64:D3:5E:90:15:45:B0 X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:30:75:8a:21:4e:cf:79:de:d6:8b:23:8a:17:b8:37:55:d7: 0f:93:4e:d7:ef:70:73:fd:39:e3:2b:1c:ea:d5:7c:b8:7e:3f: 51:02:bd:94:42:c9:26:0d:e4:e8:79:de:46:d5:02:ee:f5:fb: 8d:f9:2e:5e:9e:ae:df:69:a3:51:d3:b4:2d:90:18:8d:4c:8a: b9:3c:c8:89:e8:56:14:67:44:a4:32:c3:d7:06:73:45:9f:b5: 54:8b:b0:63:dd:cd:69:bc:a4:d0:04:04:76:3d:ce:5b:ef:7d: 0a:39:85:64:1e:70:6d:da:b0:9c:6c:7f:74:7c:32:76:fb:70: 87:b7:c2:63:ec:3a:e8:32:5a:3f:19:ab:db:eb:55:92:f0:e0: b1:3f:f8:8c:6d:0d:85:36:1d:4a:b2:9d:56:cb:4f:c1:0d:31: bd:43:0c:1e:de:19:95:55:71:93:5e:c3:06:8d:4c:f9:60:d8: 28:ce:4e:15:6e:67:be:64:77:a9:e1:32:af:b5:12:78:c4:1a: 96:bc:ff:ca:9a:b4:14:cb:e6:54:75:64:b0:16:ca:63:08:42: 9e:80:39:25:3c:a1:d3:10:ef:e8:84:b0:3c:a8:7f:cd:1f:1b: 34:67:65:23:da:9d:ce:58:8d:03:d6:da:e8:46:2b:68:07:0a: ed:f6:19:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw NzVFMDlBOTgwHhcNMjYwOTIxMDY0MTUxWhcNMjYwOTI4MDY0MTUxWjAYMRYwFAYD VQQDEw02YWIwZDFhZi0zY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsOwlrtK2Dblw6BH/bmF8hvxP5Lrcux3JYofAgdlXyLfC7y2Zu0KNw6uG5pY Bh8xs02mD5ktawQViytcb80aoOwuceY/dIlXzJf8JC0w1JZA0sjNqEnmnhYSUu8K zDxX9P5dnN7cS6Vi10v2LzllUh4DkAB3aPFzKDy8ABujzBwHy391Ck64pm0MTp2F sPCuhBfdLY7fMAt2BkO38rpX2uLfQNMVRArrPcO/JMXQs0Z69G5CN1eZbi+4BoHp oIoJnzP0P3ZXNR6YJA+5KKb73Q2Ro5Xm9M+b4zvX66L7WRYQGpCjSEEx3avOJRL2 KcfQ0X4rqPZ8C8hoT4SLSbzydQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLinns7J NBVyA7idwnFk016QFUWwMB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU4OC9CRjdENUU3NjdCRjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhC VngyZFRQbFQ5RjRIWGdtcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYzB1iiFOz3ne1osjihe4N1XXD5NO1+9wc/054ysc6tV8uH4/UQK9lELJJg3k 6HneRtUC7vX7jfkuXp6u32mjUdO0LZAYjUyKuTzIiehWFGdEpDLD1wZzRZ+1VIuw Y93Nabyk0AQEdj3OW+99CjmFZB5wbdqwnGx/dHwydvtwh7fCY+w66DJaPxmr2+tV kvDgsT/4jG0NhTYdSrKdVstPwQ0xvUMMHt4ZlVVxk17DBo1M+WDYKM5OFW5nvmR3 qeEyr7USeMQalrz/ypq0FMvmVHVksBbKYwhCnoA5JTyh0xDv6ISwPKh/zR8bNGdl I9qdzliNA9ba6EYraAcK7fYZEw== -----END CERTIFICATE-----Generated at Tue Sep 22 20:31:46 2026 by rpki-client