$ rpki-client -vvvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json) Hash identifier: APFTdJmKDlHNSq5AMORRqZmEn2071iU2bGlSYyLs4uI= Subject key identifier: 1C:77:73:D7:CC:75:E0:BA:37:2F:37:8E:D6:95:BE:2A:10:DD:4E:DB Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Certificate serial: 19AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft Manifest number: 19A0 Signing time: Mon 12 Oct 2026 16:27:21 +0000 Manifest this update: Mon 12 Oct 2026 16:27:20 +0000 Manifest next update: Mon 19 Oct 2026 16:27:20 +0000 Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: pE7uLHemTh60GTOhYJ1xq1oORcMNU35vcOAAR9Cn/KQ=) 2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: jJwP90lV+q6WXhwVY0B4Efvs4u3oObXh+KWbb3d4U00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6571 (0x19ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Validity Not Before: Oct 12 16:27:20 2026 GMT Not After : Oct 19 16:27:20 2026 GMT Subject: CN=6acd0a68-40e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:0f:9e:37:84:76:0b:18:54:45:5e:47:97: c0:06:b1:38:2e:2c:15:5a:e0:17:d1:94:a2:ef:ca: be:72:51:83:0f:f1:65:59:d1:f8:e7:64:06:25:80: bd:fa:8b:64:f0:29:35:19:53:4b:ac:d0:74:ad:c4: fc:17:c7:f3:27:9d:05:85:c8:4c:cc:09:86:d4:ed: 1a:0e:d1:a8:ce:5b:56:08:e3:14:59:1e:65:c3:43: 13:1e:0b:29:49:74:e9:22:f3:4e:3b:95:41:44:3a: 29:7e:01:91:c0:49:62:41:90:90:6e:b4:6c:ea:da: 38:5e:a8:4a:59:30:55:fc:8d:e7:e8:f1:f9:8f:28: 1e:c4:e6:66:98:79:10:aa:4a:7f:87:b3:aa:22:8d: b3:a5:ad:16:ff:ef:40:65:ab:6a:0a:cb:97:1d:b7: c3:f2:b8:2d:cd:db:c5:ce:8b:fe:ac:58:31:c7:46: 79:f8:95:6f:70:bb:ff:12:fe:d6:0b:2c:08:50:e0: c0:df:8e:ac:87:7a:3f:06:52:6f:27:ff:7e:ea:26: 5a:13:bd:76:a4:0d:d5:10:53:60:4e:11:1e:07:61: ec:62:0b:02:bf:d3:b1:e6:20:94:2a:59:d5:72:8b: a6:51:4e:07:2a:f5:58:f7:28:43:77:5c:1c:cc:64: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:77:73:D7:CC:75:E0:BA:37:2F:37:8E:D6:95:BE:2A:10:DD:4E:DB X509v3 Authority Key Identifier: keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d1:68:73:60:13:fe:80:de:21:2a:1c:dd:38:d2:aa:1b:35: 78:e0:4f:34:bd:46:1c:c6:1c:f0:89:6b:d2:57:69:11:05:68: 86:43:30:e0:ad:b5:65:87:41:ff:80:df:26:38:32:64:2b:42: f4:65:a4:44:0d:ed:3e:b4:d8:2b:cf:52:5c:12:6e:88:3e:a6: 61:63:d6:ad:34:1f:82:15:57:2d:56:8c:8a:eb:82:14:04:28: fe:cf:85:d1:c4:d8:bf:a6:f4:a7:d9:12:ba:fa:92:64:76:cf: 15:59:27:71:d4:08:81:8b:3c:84:56:ec:5e:26:01:e3:78:8c: 8d:b4:de:dd:7b:4f:6d:92:69:e1:78:6e:76:60:ab:dd:56:20: 75:09:1a:1f:08:5f:fa:58:49:f2:05:08:b0:26:e8:c2:87:f3: 9f:01:67:9f:63:c0:7a:6c:e9:2f:00:09:05:d4:55:23:aa:e4: 09:6e:b3:f1:87:53:c2:68:84:e5:a7:77:4f:12:8f:34:26:ed: ac:88:17:b0:98:41:11:52:64:86:c6:ad:39:be:b6:e0:bb:3e: 15:54:a9:f1:2e:55:48:68:61:eb:ea:67:9b:92:89:3d:61:e4: 34:7f:ef:71:ed:54:13:62:24:ec:2d:69:38:7b:1e:ad:d5:de: f2:d2:74:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MkUxMTAvBgNVBAUTKDIxMzQzNkJBMjNBOUFGMjUwQkYyNURERUE1MEM3NjIy MTlGOTA2QkMwHhcNMjYxMDEyMTYyNzIwWhcNMjYxMDE5MTYyNzIwWjAYMRYwFAYD VQQDEw02YWNkMGE2OC00MGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlAPnjeEdgsYVEVeR5fABrE4LiwVWuAX0ZSi78q+clGDD/FlWdH452QGJYC9 +otk8Ck1GVNLrNB0rcT8F8fzJ50FhchMzAmG1O0aDtGozltWCOMUWR5lw0MTHgsp SXTpIvNOO5VBRDopfgGRwEliQZCQbrRs6to4XqhKWTBV/I3n6PH5jygexOZmmHkQ qkp/h7OqIo2zpa0W/+9AZatqCsuXHbfD8rgtzdvFzov+rFgxx0Z5+JVvcLv/Ev7W CywIUODA346sh3o/BlJvJ/9+6iZaE712pA3VEFNgThEeB2HsYgsCv9Ox5iCUKlnV coumUU4HKvVY9yhDd1wczGTjaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBx3c9fM deC6Ny83jtaVvioQ3U7bMB8GA1UdIwQYMBaAFCE0Nrojqa8lC/Jd3qUMdiIZ+Qa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgyRS8zMTFFQUM1Njk4 NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5VUw4bDNlcFF4MklobjVC cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lUUTJ1aU9wcnlVTDhsM2VwUXgySWhuNUJydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgyRS8zMTFFQUM1Njk4NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5 VUw4bDNlcFF4MklobjVCcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARdFoc2AT/oDeISoc3TjSqhs1eOBPNL1GHMYc8Ilr0ldpEQVohkMw4K21ZYdB /4DfJjgyZCtC9GWkRA3tPrTYK89SXBJuiD6mYWPWrTQfghVXLVaMiuuCFAQo/s+F 0cTYv6b0p9kSuvqSZHbPFVkncdQIgYs8hFbsXiYB43iMjbTe3XtPbZJp4XhudmCr 3VYgdQkaHwhf+lhJ8gUIsCbowofznwFnn2PAemzpLwAJBdRVI6rkCW6z8YdTwmiE 5ad3TxKPNCbtrIgXsJhBEVJkhsatOb624Ls+FVSp8S5VSGhh6+pnm5KJPWHkNH/v ce1UE2Ik7C1pOHserdXe8tJ0pQ== -----END CERTIFICATE-----Generated at Tue Oct 13 03:44:00 2026 by rpki-client