$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: nLuqm05qLUETsqzLCnOQSjcMoiaYFNypUSndEsQFXBA= Subject key identifier: 97:67:E4:CC:C0:76:B0:DD:AA:67:E5:E6:0D:39:80:E0:A2:9D:AD:00 Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 117E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 1163 Signing time: Thu 24 Sep 2026 17:12:30 +0000 Manifest this update: Thu 24 Sep 2026 17:12:30 +0000 Manifest next update: Thu 01 Oct 2026 17:12:30 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: mvIFXRI0zqRWTCtClTYLsC8YpS/5KJ2GvHs8zSgkN+4=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: xEpgs9EW6VJ0cW2siZLFxIERKuNtIAPU67VQP3joc6Y=) 3: 9B8EF5B2ACBF11F19E9C47286511F970.roa (hash: gk6TXikdOPas7u9dfEunAM6jxTL5RhVuXDGbqKVYL4g=) 4: FC86F6E896C711F1AEEE8D0A5411F970.roa (hash: dAuO2BeAosWe+PuBWWYZH985vq1j2KsHsh8dEBqSois=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4478 (0x117e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Sep 24 17:12:30 2026 GMT Not After : Oct 1 17:12:30 2026 GMT Subject: CN=6ab559fe-c426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:bc:e9:3b:e9:5e:5d:34:4d:19:6c:6f:90: 58:40:16:fe:b0:b1:fa:c4:05:ea:3d:82:5b:0e:e3: 8e:e3:b3:79:f3:6a:dd:a1:5f:58:ab:73:20:14:7d: 33:61:9c:05:a5:43:d8:f6:00:91:43:79:0d:93:af: 3f:7a:04:48:28:dc:d4:05:26:93:2f:0a:cc:3e:42: d9:40:17:c0:6f:9f:ee:72:0a:21:f4:e1:08:c7:f5: b3:54:af:ab:ad:4d:d4:dc:5a:e1:67:9b:a1:71:6c: 3f:98:13:46:e1:ae:55:2e:ef:d4:d5:c5:2f:1d:a1: 5c:db:48:d0:70:c1:97:6e:0a:b8:e1:1e:fb:6c:43: 56:04:52:f4:88:75:13:c7:52:59:ad:61:60:c3:17: b5:45:e1:52:4a:30:95:37:a3:bf:40:a3:30:91:51: 0d:b1:7d:7d:f2:ff:3c:09:48:05:c6:f8:b8:ff:34: 8b:82:1d:6d:12:02:e4:01:30:4a:ad:0a:c1:b3:fe: 09:8a:4d:88:74:56:e1:30:11:d0:a4:53:43:a8:5b: 92:a4:90:db:c4:85:da:70:6c:7a:fd:a9:13:ae:c2: 2d:5f:49:48:9b:a9:a5:f7:33:c3:45:48:42:23:b8: de:31:26:01:d3:b2:fc:82:7e:a5:fd:67:9c:be:47: 2c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:67:E4:CC:C0:76:B0:DD:AA:67:E5:E6:0D:39:80:E0:A2:9D:AD:00 X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1b:cd:fb:45:ef:9e:82:b4:83:f3:3a:97:7a:b2:8b:cc:c4: a1:43:0b:27:1c:f5:ee:ac:7f:d0:9c:d0:81:dd:e0:52:ec:89: b3:d2:45:e0:30:c8:ea:c6:90:71:45:7d:c7:0f:e8:28:ce:70: 4b:c2:7f:77:c0:66:c7:3b:f8:6c:64:bf:2d:e2:0a:a5:68:05: a3:43:46:f4:bd:a0:bf:9a:64:28:e4:95:a2:b6:84:f4:aa:38: a0:f0:79:8a:47:01:83:de:2e:86:8b:71:5e:b5:87:04:94:b1: 57:0d:8f:df:58:86:7f:76:c1:32:87:8b:fb:78:35:74:37:a3: 5e:07:1c:78:53:15:7d:0c:e2:de:0b:c5:80:8a:8e:38:96:87: 7b:72:16:14:38:b1:f8:6c:a8:d0:48:bd:2a:03:6c:6f:95:49: da:1e:c7:90:ae:da:c8:ca:d5:b0:14:ff:f5:b5:4a:45:60:ca: f3:82:0b:ec:87:d9:6b:0b:4e:7b:2a:c8:26:9a:01:cd:b6:e6: 79:3d:24:5e:77:ca:80:0c:d9:01:d1:46:39:10:83:4d:e4:a3: 09:f5:d6:0f:9e:74:95:1a:e4:a4:20:15:ee:c7:b2:0e:2e:b8: d9:ee:79:bc:0d:0f:53:89:38:da:99:05:45:0e:c9:2a:7a:09: 2a:72:69:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjYwOTI0MTcxMjMwWhcNMjYxMDAxMTcxMjMwWjAYMRYwFAYD VQQDEw02YWI1NTlmZS1jNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOu86TvpXl00TRlsb5BYQBb+sLH6xAXqPYJbDuOO47N582rdoV9Yq3MgFH0z YZwFpUPY9gCRQ3kNk68/egRIKNzUBSaTLwrMPkLZQBfAb5/ucgoh9OEIx/WzVK+r rU3U3FrhZ5uhcWw/mBNG4a5VLu/U1cUvHaFc20jQcMGXbgq44R77bENWBFL0iHUT x1JZrWFgwxe1ReFSSjCVN6O/QKMwkVENsX198v88CUgFxvi4/zSLgh1tEgLkATBK rQrBs/4Jik2IdFbhMBHQpFNDqFuSpJDbxIXacGx6/akTrsItX0lIm6ml9zPDRUhC I7jeMSYB07L8gn6l/WecvkcsZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdn5MzA drDdqmfl5g05gOCina0AMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATRvN+0XvnoK0g/M6l3qyi8zEoUMLJxz17qx/0JzQgd3gUuyJs9JF4DDI6saQ cUV9xw/oKM5wS8J/d8Bmxzv4bGS/LeIKpWgFo0NG9L2gv5pkKOSVoraE9Ko4oPB5 ikcBg94uhotxXrWHBJSxVw2P31iGf3bBMoeL+3g1dDejXgcceFMVfQzi3gvFgIqO OJaHe3IWFDix+Gyo0Ei9KgNsb5VJ2h7HkK7ayMrVsBT/9bVKRWDK84IL7IfZawtO eyrIJpoBzbbmeT0kXnfKgAzZAdFGORCDTeSjCfXWD550lRrkpCAV7seyDi642e55 vA0PU4k42pkFRQ7JKnoJKnJpkQ== -----END CERTIFICATE-----Generated at Fri Sep 25 18:28:28 2026 by rpki-client