$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: WgahQbGQPDpsWzV+32qUMrBwvsCAf2DOOiVOd43cfxw= Subject key identifier: DE:A0:24:A4:D6:BC:E0:39:F9:8F:2C:94:7E:A9:97:32:72:DC:1C:12 Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0D46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0D3B Signing time: Sat 26 Sep 2026 18:14:54 +0000 Manifest this update: Sat 26 Sep 2026 18:14:53 +0000 Manifest next update: Sat 03 Oct 2026 18:14:53 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: sts8dzfmEfiGeEsyv/+CqTHZSnc/+7NA3FF5jFO6oXw=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: lLzLMFvq75P6s11FcUbySa49RP0prDTXCNFomk88MZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3398 (0xd46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Sep 26 18:14:53 2026 GMT Not After : Oct 3 18:14:53 2026 GMT Subject: CN=6ab80b9e-6c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ee:31:e6:3b:cb:00:d3:d2:ff:cd:08:f1:e0: d5:96:ff:77:f3:f8:f2:88:fa:19:ae:53:40:17:f1: 37:12:a9:70:57:4a:8e:67:de:42:07:12:94:fa:ab: 7d:09:74:8f:05:b8:2e:f8:7a:73:cb:72:e3:29:9f: fa:b9:cb:6e:a8:0a:c1:5b:f2:db:01:d5:1c:03:00: 15:d6:c7:74:e6:da:5d:52:90:d3:f6:c2:9b:9a:b7: 80:f7:5b:b5:2d:4d:70:cf:70:5b:4b:9d:28:c5:1e: 34:56:5c:18:ea:b2:e0:b2:4c:aa:a0:97:0b:81:87: 31:57:67:d1:e2:72:29:87:4c:7e:da:f9:50:b9:a0: 01:21:f7:78:69:fa:c3:23:a1:8b:8b:ee:ba:ca:44: 68:b8:c7:1a:95:f7:d5:0c:af:58:32:1b:d9:f4:29: 8b:0b:21:19:8d:65:ed:a6:a8:9c:25:06:84:84:72: f7:9c:47:0a:fc:09:65:ce:b8:aa:08:91:f1:0b:5b: ef:92:a1:ee:12:39:c7:fc:cc:c0:33:9d:b5:04:df: de:d3:7f:48:6e:39:85:ea:6c:8b:c5:d3:d9:8c:10: e1:d5:82:a9:66:34:16:70:70:0b:c3:17:55:2d:a8: 24:04:86:8f:48:0f:f4:3f:91:ff:8e:6f:62:05:8b: b3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A0:24:A4:D6:BC:E0:39:F9:8F:2C:94:7E:A9:97:32:72:DC:1C:12 X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:08:d3:b2:d1:30:74:2b:d7:e6:c8:92:ba:45:06:17:07:91: 9c:67:75:cd:52:91:fc:53:20:42:9d:8e:77:35:60:cb:72:e9: 0f:01:e4:e2:7f:65:c8:ec:5d:cc:1d:69:49:c9:12:54:0b:01: f0:09:a1:57:73:45:d9:1b:4e:2c:ee:59:6d:86:4d:0b:60:38: ec:3c:db:88:2b:a8:98:b7:18:64:36:44:0d:54:cd:0f:31:c8: 61:ab:52:c3:6e:7e:33:25:61:f5:f4:ba:b0:62:b7:25:18:7c: d0:57:c7:7d:72:47:37:1f:ea:2d:ec:22:b9:ae:8d:dd:74:5b: 0f:a0:b0:c9:28:9f:d0:91:00:cb:3f:70:cd:85:1f:c4:d2:fd: 5e:26:83:0f:1f:44:1d:1f:84:ac:07:f7:53:5f:13:82:34:71: 7f:d6:da:e1:0b:fe:16:df:9c:2e:9c:1b:f6:dd:1b:6a:e2:5f: 6c:e1:0b:16:bf:04:92:69:ba:8f:5a:30:ca:e0:eb:93:e0:04: ab:b5:8d:f6:73:7b:68:35:86:19:42:fa:b6:aa:8b:d0:82:9e: 5f:fe:ea:b9:a2:7d:54:46:2c:fa:a7:62:3d:ff:d5:74:6c:95: 32:e1:67:dd:89:6f:cd:d3:8b:f6:05:b2:ae:69:77:01:16:cb: e9:d8:f7:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjYwOTI2MTgxNDUzWhcNMjYxMDAzMTgxNDUzWjAYMRYwFAYD VQQDEw02YWI4MGI5ZS02YzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2u4x5jvLANPS/80I8eDVlv938/jyiPoZrlNAF/E3EqlwV0qOZ95CBxKU+qt9 CXSPBbgu+Hpzy3LjKZ/6uctuqArBW/LbAdUcAwAV1sd05tpdUpDT9sKbmreA91u1 LU1wz3BbS50oxR40VlwY6rLgskyqoJcLgYcxV2fR4nIph0x+2vlQuaABIfd4afrD I6GLi+66ykRouMcalffVDK9YMhvZ9CmLCyEZjWXtpqicJQaEhHL3nEcK/Allzriq CJHxC1vvkqHuEjnH/MzAM521BN/e039IbjmF6myLxdPZjBDh1YKpZjQWcHALwxdV LagkBIaPSA/0P5H/jm9iBYuzfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6gJKTW vOA5+Y8slH6plzJy3BwSMB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJwjTstEwdCvX5siSukUGFweRnGd1zVKR/FMgQp2OdzVgy3LpDwHk4n9lyOxd zB1pSckSVAsB8AmhV3NF2RtOLO5ZbYZNC2A47DzbiCuomLcYZDZEDVTNDzHIYatS w25+MyVh9fS6sGK3JRh80FfHfXJHNx/qLewiua6N3XRbD6CwySif0JEAyz9wzYUf xNL9XiaDDx9EHR+ErAf3U18TgjRxf9ba4Qv+Ft+cLpwb9t0bauJfbOELFr8Ekmm6 j1owyuDrk+AEq7WN9nN7aDWGGUL6tqqL0IKeX/7quaJ9VEYs+qdiPf/VdGyVMuFn 3YlvzdOL9gWyrml3ARbL6dj30A== -----END CERTIFICATE-----Generated at Sun Sep 27 07:48:52 2026 by rpki-client