$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: RiLMBjIzEFOy4VJTY0vWqMTOygks7pG7nD0oYQdavbc= Subject key identifier: C0:3C:66:FF:ED:F1:83:71:AA:0F:48:F1:6D:B6:91:02:F2:00:BD:11 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 0899 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 088A Signing time: Sun 20 Sep 2026 20:41:27 +0000 Manifest this update: Sun 20 Sep 2026 20:41:27 +0000 Manifest next update: Sun 27 Sep 2026 20:41:27 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: HGtPDPWZBkdFUIEfbwyOnqc7/FpfgWjxGLoG7+XlHQg=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: FELlTiK0zkTPaIvuZPqjSFuesBh1m/szylRmww5rrlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2201 (0x899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Sep 20 20:41:27 2026 GMT Not After : Sep 27 20:41:27 2026 GMT Subject: CN=6ab044f7-9701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:10:25:98:dc:97:c7:64:6c:fe:cc:7b:8e: 65:cc:7f:e7:8a:5c:ac:23:8e:d0:ff:23:10:93:06: a6:df:72:65:9a:2e:64:48:21:ea:91:39:26:9d:e9: 9f:4b:0e:9e:b1:a3:e9:1b:13:db:d0:13:13:95:a8: 3c:42:60:98:7a:d4:b9:e5:d2:47:9a:30:83:1f:07: 01:16:1d:0a:7d:b7:c2:73:63:16:e3:f9:19:b5:38: 27:71:be:ed:58:1f:04:12:79:de:42:bb:07:96:1c: 96:43:f6:7f:d9:11:10:62:36:56:dd:f8:a7:24:bf: 4c:75:60:dd:9f:a3:3d:c1:06:06:f6:38:16:b0:58: 4f:c8:a3:a2:64:12:a4:ec:bf:a7:1a:3b:1b:a2:77: 48:d3:c0:b2:66:47:26:e1:3f:57:7b:24:f0:5e:e4: 81:57:89:15:67:7f:0f:14:ba:9d:8d:ce:cc:fc:af: 28:a8:47:0c:a5:2d:86:47:ba:63:38:52:32:ad:67: 98:52:eb:c4:b4:da:8c:c3:0d:51:d6:33:71:23:dc: db:c5:a6:6d:7e:e9:d5:00:0f:a2:9d:8e:fd:6c:67: c9:55:c0:6b:32:f2:32:ee:da:b7:c7:c4:47:b8:17: 53:cf:39:6c:f8:96:5a:6a:d9:c5:9a:1c:46:70:21: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3C:66:FF:ED:F1:83:71:AA:0F:48:F1:6D:B6:91:02:F2:00:BD:11 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4f:77:bc:ea:1c:c3:09:94:b1:ef:bd:bc:f7:e0:c0:53:48: 0e:55:63:c4:52:58:28:23:46:03:67:09:ee:ff:34:46:37:92: 55:7e:e6:a1:b0:de:d3:b1:1a:91:7c:9b:9a:5c:65:1e:54:10: db:e8:8f:1d:0a:67:72:14:2f:95:03:0a:54:95:a1:7f:14:a0: a5:13:1a:0e:a5:aa:5d:5f:01:40:dd:06:12:7f:34:84:cc:e8: 78:2d:61:3d:34:61:5e:16:c7:a2:4f:0c:06:16:fb:7b:7a:eb: 1b:d5:8b:16:43:b4:27:19:fc:a0:8b:99:e3:fa:96:65:48:96: cb:8c:75:4e:08:82:c8:78:9a:63:bb:2b:d5:62:c6:92:ea:6a: 31:d4:0f:b1:72:88:ad:a9:8d:5a:e7:75:25:d8:71:d6:f4:6e: 47:5a:86:1f:7a:93:a8:05:34:dc:34:61:ba:50:ea:a6:ef:3c: 22:c1:02:bc:be:9b:8b:a1:e1:ab:24:e8:43:44:53:7b:9a:a8: f9:03:51:6c:52:76:75:a9:7f:38:d6:16:ab:0f:0d:1a:f0:7a: 41:6c:3b:b1:2c:36:40:c8:3d:d7:a1:c4:36:db:31:b9:c2:d9: 1e:a7:82:a5:72:fe:cf:a7:7f:20:6c:0d:41:e7:dc:e6:92:7e: cc:a2:57:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjYwOTIwMjA0MTI3WhcNMjYwOTI3MjA0MTI3WjAYMRYwFAYD VQQDEw02YWIwNDRmNy05NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA088QJZjcl8dkbP7Me45lzH/nilysI47Q/yMQkwam33Jlmi5kSCHqkTkmnemf Sw6esaPpGxPb0BMTlag8QmCYetS55dJHmjCDHwcBFh0KfbfCc2MW4/kZtTgncb7t WB8EEnneQrsHlhyWQ/Z/2REQYjZW3finJL9MdWDdn6M9wQYG9jgWsFhPyKOiZBKk 7L+nGjsbondI08CyZkcm4T9XeyTwXuSBV4kVZ38PFLqdjc7M/K8oqEcMpS2GR7pj OFIyrWeYUuvEtNqMww1R1jNxI9zbxaZtfunVAA+inY79bGfJVcBrMvIy7tq3x8RH uBdTzzls+JZaatnFmhxGcCEEWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMA8Zv/t 8YNxqg9I8W22kQLyAL0RMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnE93vOocwwmUse+9vPfgwFNIDlVjxFJYKCNGA2cJ7v80RjeSVX7mobDe07Ea kXybmlxlHlQQ2+iPHQpnchQvlQMKVJWhfxSgpRMaDqWqXV8BQN0GEn80hMzoeC1h PTRhXhbHok8MBhb7e3rrG9WLFkO0Jxn8oIuZ4/qWZUiWy4x1TgiCyHiaY7sr1WLG kupqMdQPsXKIramNWud1Jdhx1vRuR1qGH3qTqAU03DRhulDqpu88IsECvL6bi6Hh qyToQ0RTe5qo+QNRbFJ2dal/ONYWqw8NGvB6QWw7sSw2QMg916HENtsxucLZHqeC pXL+z6d/IGwNQefc5pJ+zKJX4Q== -----END CERTIFICATE-----Generated at Tue Sep 22 23:10:49 2026 by rpki-client