$ rpki-client -vvvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json) Hash identifier: 9YvqMwjFbtJRL1G3mU1oNm7+clJFDSjxD/1uyxCB/Bw= Subject key identifier: D0:06:1F:9A:FB:7F:8B:68:87:FB:FE:0F:0A:9E:DA:2A:7F:08:54:B7 Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 13CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft Manifest number: 13AF Signing time: Sun 20 Sep 2026 16:54:39 +0000 Manifest this update: Sun 20 Sep 2026 16:54:39 +0000 Manifest next update: Sun 27 Sep 2026 16:54:39 +0000 Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: BNCCmidANWLD1zr0SUOJZLA6pNNjNtMoaU3rEF/9VDo=) 2: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: LjoDddRIHfdyvbMdkYPATybnnKwBZMxY+IE0OlrkYcE=) 3: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: kTVtJf0sXNv/myeQcbWLzlKqwsk/htvDmO2Qa4BwMyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5066 (0x13ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Sep 20 16:54:39 2026 GMT Not After : Sep 27 16:54:39 2026 GMT Subject: CN=6ab00fcf-44e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:18:90:0f:15:70:80:1e:11:12:86:44:f2:f2: 0c:8a:7a:25:f1:7f:c7:21:86:cd:cf:af:1c:05:5b: fc:ce:c1:e0:32:44:fe:96:2d:18:83:27:54:2c:11: 24:04:f1:7b:70:63:5c:38:9d:75:59:56:f5:5c:ff: fd:f6:09:f0:7d:11:3f:b1:3f:c0:0d:4e:13:ab:00: 30:0d:0b:e2:77:17:6c:40:4a:58:21:3c:ed:87:7f: 82:12:66:4b:53:a3:d2:01:5b:3d:ec:5e:fd:a6:bc: 79:81:b8:33:d2:de:d0:17:1f:47:f9:3b:9d:4b:2d: 37:a4:4e:7d:50:0a:c9:e6:00:fd:e9:e1:dd:eb:f6: 64:85:07:bb:d2:19:cf:05:71:9d:96:85:f0:aa:5e: e1:c2:3a:fc:09:98:f1:ef:3e:c2:db:6c:a6:6c:41: b5:01:92:7b:14:20:f2:e9:6d:3a:d3:74:88:24:7d: 3f:94:eb:49:d0:62:70:8d:dd:a5:1c:3d:e2:f6:d6: 5a:ff:e6:11:ca:48:0e:99:9d:8d:32:eb:cf:17:6e: 61:e3:64:24:6f:46:14:b4:dd:dd:71:40:2b:55:2b: 26:03:75:8c:82:db:cf:69:40:7d:fd:4a:b5:2f:77: b1:5a:98:d4:aa:be:a1:19:11:97:09:6c:e1:5f:8a: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:06:1F:9A:FB:7F:8B:68:87:FB:FE:0F:0A:9E:DA:2A:7F:08:54:B7 X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:56:39:82:bd:c4:50:da:22:5a:b1:c0:9b:7b:3e:69:67:9c: 69:b6:17:7f:90:2a:93:80:8c:df:62:c0:3e:42:dc:0f:39:6a: 9e:56:26:b8:b3:da:08:03:18:a2:bb:39:05:9f:ce:dd:29:5c: cf:d7:df:9f:6e:af:3a:90:3b:02:b1:56:c3:98:2c:ca:73:de: 8a:65:32:ec:b7:17:3f:ee:c3:15:b8:80:24:f4:33:43:b5:04: d7:00:e9:4b:97:ba:63:96:ae:d0:87:45:50:ef:be:5c:87:74: 16:e0:79:28:b8:6b:d0:9d:c8:e2:b4:79:19:67:4a:ba:6d:82: 01:d8:e9:ae:16:5a:a0:c3:73:63:a2:62:30:8c:c8:0c:e1:3a: 36:b7:b1:c5:e4:71:98:4f:e3:74:f0:ab:3c:63:57:80:be:fa: bb:c7:26:f2:29:5c:54:08:aa:43:fd:7c:6c:4c:e2:ca:46:02: 02:95:63:f6:b6:f5:31:cb:18:04:6f:06:8a:56:4d:2a:fb:5d: 11:dd:b4:a8:95:32:36:56:c1:e3:ce:d4:e9:91:33:89:7b:73: 47:80:7b:57:03:ec:1d:b8:51:3b:bb:14:7a:cc:79:17:ae:2c: a0:53:f3:5a:10:46:37:a8:40:34:93:15:f7:c3:fd:be:01:3c: b0:23:7b:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjYwOTIwMTY1NDM5WhcNMjYwOTI3MTY1NDM5WjAYMRYwFAYD VQQDEw02YWIwMGZjZi00NGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxiQDxVwgB4REoZE8vIMinol8X/HIYbNz68cBVv8zsHgMkT+li0YgydULBEk BPF7cGNcOJ11WVb1XP/99gnwfRE/sT/ADU4TqwAwDQvidxdsQEpYITzth3+CEmZL U6PSAVs97F79prx5gbgz0t7QFx9H+TudSy03pE59UArJ5gD96eHd6/ZkhQe70hnP BXGdloXwql7hwjr8CZjx7z7C22ymbEG1AZJ7FCDy6W0603SIJH0/lOtJ0GJwjd2l HD3i9tZa/+YRykgOmZ2NMuvPF25h42Qkb0YUtN3dcUArVSsmA3WMgtvPaUB9/Uq1 L3exWpjUqr6hGRGXCWzhX4rrKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAGH5r7 f4toh/v+Dwqe2ip/CFS3MB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzJGOS9EMkVENDlDMkMyNkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQ bmdQa3hOUk9iUFcyU0xlT3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYlY5gr3EUNoiWrHAm3s+aWecabYXf5Aqk4CM32LAPkLcDzlqnlYmuLPaCAMY ors5BZ/O3Slcz9ffn26vOpA7ArFWw5gsynPeimUy7LcXP+7DFbiAJPQzQ7UE1wDp S5e6Y5au0IdFUO++XId0FuB5KLhr0J3I4rR5GWdKum2CAdjprhZaoMNzY6JiMIzI DOE6NrexxeRxmE/jdPCrPGNXgL76u8cm8ilcVAiqQ/18bEziykYCApVj9rb1McsY BG8GilZNKvtdEd20qJUyNlbB487U6ZEziXtzR4B7VwPsHbhRO7sUesx5F64soFPz WhBGN6hANJMV98P9vgE8sCN7vA== -----END CERTIFICATE-----Generated at Tue Sep 22 10:14:03 2026 by rpki-client