$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft File: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft (raw, json) Hash identifier: pjBrlDnFB1/gJyzv8tpMkdvsVCHtAvq6K2AedNwTejY= Subject key identifier: B1:BB:DC:13:C5:7D:96:C9:C9:1F:98:02:D7:D9:26:A5:33:3C:F2:26 Authority key identifier: 23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB Certificate issuer: /CN=A9122796/serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft Manifest number: 14 Signing time: Fri 25 Sep 2026 09:13:56 +0000 Manifest this update: Fri 25 Sep 2026 09:13:55 +0000 Manifest next update: Fri 02 Oct 2026 09:13:55 +0000 Files and hashes: 1: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl (hash: YvdlOtIK4os/ASxqNNiOiXV4IaBffckWF+cbK7DuftI=) 2: B6E9F4E89E0411F192F8ACA34A11F970.roa (hash: i+mz8RKuF8p3hv1YLSt70vMBBM5Cu/pBQuz04gTb5ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122796, serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB Validity Not Before: Sep 25 09:13:55 2026 GMT Not After : Oct 2 09:13:55 2026 GMT Subject: CN=6ab63b54-054c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:41:e6:9b:7b:20:74:d4:0d:6d:d4:db:38:2a: 90:f6:1d:09:cb:55:eb:d8:1b:a2:4c:9c:c1:11:83: 22:a4:bd:32:cc:7e:65:39:66:9a:34:e7:f0:c2:d2: af:f7:40:29:0d:35:93:c2:f3:d1:04:a1:fc:71:16: fd:1b:54:88:d9:ba:ba:2d:28:20:a8:b1:e8:fc:47: 41:bd:7a:da:4b:2b:bd:9d:cf:33:ef:08:78:7c:85: f3:03:b9:aa:53:eb:a4:28:97:89:80:07:e7:5f:71: 82:37:6f:79:45:97:41:2a:7b:3d:9a:1c:a9:73:51: 3f:32:1e:ce:46:f7:7d:05:01:65:f2:89:71:cf:bf: 1a:cb:f2:b9:52:49:37:0d:8c:1d:ca:cd:16:cc:9a: 37:f0:33:41:cc:ad:a7:0f:82:76:a5:26:55:26:b6: cb:a7:ae:a2:6b:a9:60:9e:a3:d0:71:d3:a1:c7:2c: 46:17:3c:1c:80:50:c3:bd:e1:5e:ca:1c:79:09:e5: 24:9e:48:3c:72:3e:df:01:ad:82:d5:0d:1d:32:a6: 74:3f:d8:0e:2d:bc:4b:51:41:b8:37:73:72:43:65: a0:75:05:0e:5b:2d:47:f7:7f:a7:82:db:d2:b1:68: 16:c6:bb:18:3c:47:2e:50:35:9a:bf:98:f5:dc:81: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BB:DC:13:C5:7D:96:C9:C9:1F:98:02:D7:D9:26:A5:33:3C:F2:26 X509v3 Authority Key Identifier: keyid:23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:6c:d5:77:9f:da:50:29:13:7f:60:08:84:45:30:bb:a1:f1: 2b:cc:d1:ed:10:24:ad:80:b1:c6:8a:7b:ff:b0:0c:c5:21:16: c8:76:6f:03:52:f1:73:43:7b:03:3d:ec:f5:6a:9a:eb:72:dc: 7d:93:ec:6c:cd:72:46:2b:0b:de:2a:f6:d6:8f:34:e0:4c:52: 8c:91:e4:0a:8b:ba:2f:7f:92:3d:b7:2e:5b:6a:ea:05:37:e9: b7:d9:f4:5c:55:b0:6a:cc:5b:bb:31:bd:34:e7:80:eb:fc:34: a3:8f:3f:11:ec:6b:02:ff:0e:9f:cb:79:1c:9a:38:a3:eb:6a: f4:32:98:64:3f:b4:85:bf:d0:c1:27:b2:92:2a:db:e3:74:a1: cb:38:69:6e:34:1d:90:92:3d:10:28:41:2d:fa:50:f5:03:e7: e3:51:05:b6:71:26:fb:40:81:73:ef:09:a1:5b:33:81:10:f5: cc:92:6b:d3:0a:95:61:86:4d:cd:d5:67:36:20:09:0f:6d:d5: 68:3f:d0:c9:c8:18:c1:57:d6:11:b8:37:9a:f7:bc:7f:cc:fe: e2:2f:8f:d9:65:7a:9f:18:d9:21:9a:63:65:19:f5:f3:90:67: 7b:3e:c9:cb:0c:da:05:15:06:77:a8:48:14:1d:b9:b0:50:c2: 47:b0:de:b1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Mjc5NjExMC8GA1UEBRMoMjM5N0E5RDU5ODM2ODM2MjZCQUQyQzE0N0ZCN0QzM0M0 OUJEQzZCQjAeFw0yNjA5MjUwOTEzNTVaFw0yNjEwMDIwOTEzNTVaMBgxFjAUBgNV BAMTDTZhYjYzYjU0LTA1NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCGQeabeyB01A1t1Ns4KpD2HQnLVevYG6JMnMERgyKkvTLMfmU5Zpo05/DC0q/3 QCkNNZPC89EEofxxFv0bVIjZurotKCCosej8R0G9etpLK72dzzPvCHh8hfMDuapT 66Qol4mAB+dfcYI3b3lFl0Eqez2aHKlzUT8yHs5G930FAWXyiXHPvxrL8rlSSTcN jB3KzRbMmjfwM0HMracPgnalJlUmtsunrqJrqWCeo9Bx06HHLEYXPByAUMO94V7K HHkJ5SSeSDxyPt8BrYLVDR0ypnQ/2A4tvEtRQbg3c3JDZaB1BQ5bLUf3f6eC29Kx aBbGuxg8Ry5QNZq/mPXcgbJRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsbvcE8V9 lsnJH5gC19kmpTM88iYwHwYDVR0jBBgwFoAUI5ep1Zg2g2JrrSwUf7fTPEm9xrsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyNzk2L0JEQUI1MTEyOUUw MTExRjFBMUM5Q0M1ODQ4MTFGOTcwL0k1ZXAxWmcyZzJKcnJTd1VmN2ZUUEVtOXhy cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTVlcDFaZzJnMkpyclN3VWY3ZlRQRW05eHJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Nzk2L0JEQUI1MTEyOUUwMTExRjFBMUM5Q0M1ODQ4MTFGOTcwL0k1ZXAxWmcyZzJK cnJTd1VmN2ZUUEVtOXhycy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBgbNV3n9pQKRN/YAiERTC7ofErzNHtECStgLHGinv/sAzFIRbIdm8DUvFzQ3sD Pez1aprrctx9k+xszXJGKwveKvbWjzTgTFKMkeQKi7ovf5I9ty5bauoFN+m32fRc VbBqzFu7Mb0054Dr/DSjjz8R7GsC/w6fy3kcmjij62r0MphkP7SFv9DBJ7KSKtvj dKHLOGluNB2Qkj0QKEEt+lD1A+fjUQW2cSb7QIFz7wmhWzOBEPXMkmvTCpVhhk3N 1Wc2IAkPbdVoP9DJyBjBV9YRuDea97x/zP7iL4/ZZXqfGNkhmmNlGfXzkGd7PsnL DNoFFQZ3qEgUHbmwUMJHsN6x -----END CERTIFICATE-----Generated at Sun Sep 27 10:18:48 2026 by rpki-client