$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft File: iWOqihtflIfiJtJG8ORMlgyPKpg.mft (raw, json) Hash identifier: /TQl5W+5Nm54+u4gbVhsQwPJEoNSSBEuGgIa5HZrBSI= Subject key identifier: B5:0E:BB:FC:F2:B4:26:25:3F:34:B6:A6:43:CD:9F:D8:93:40:2F:80 Authority key identifier: 89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98 Certificate issuer: /CN=A9145CAB/serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft Manifest number: 68 Signing time: Sun 27 Sep 2026 08:38:07 +0000 Manifest this update: Sun 27 Sep 2026 08:38:06 +0000 Manifest next update: Sun 04 Oct 2026 08:38:06 +0000 Files and hashes: 1: iWOqihtflIfiJtJG8ORMlgyPKpg.crl (hash: C3AtmAlsnPQN8kCZ5/SLIatYLMnYllXkmIPnVGn8mfI=) 2: F5FB1528251811F19BF603D3C0833773.roa (hash: TLG1k3Q91kNnW2jkhy++pzacaj+shkC+zTdEO1lOQC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 08:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145CAB, serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98 Validity Not Before: Sep 27 08:38:06 2026 GMT Not After : Oct 4 08:38:06 2026 GMT Subject: CN=6ab8d5ef-0f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:19:26:7a:b0:63:80:56:e9:1c:8d:fa:38: 21:c2:da:29:ff:7c:80:60:e9:26:f4:ac:f6:3e:fd: f5:67:0e:e7:cd:ea:af:cd:dc:71:79:a5:1c:16:00: ba:23:3c:d0:cc:29:79:81:69:40:d0:7a:24:e9:27: fc:72:ce:dc:52:08:44:3b:c2:13:f1:7b:3b:79:ff: d6:2d:36:ac:db:d7:18:b6:ce:16:05:d5:8f:14:8c: 92:d3:0e:9b:4a:5c:c7:6e:be:cc:44:18:92:c5:fe: 93:7b:4b:4d:da:8f:65:4a:ab:fa:1f:e1:a9:94:24: a4:6e:93:2d:b0:f7:ea:96:6d:de:a9:3f:81:ef:96: 6c:54:d8:fc:95:54:61:76:f7:e8:88:a1:ab:e5:73: 9d:20:5b:91:c7:53:c4:e9:e3:a3:d5:29:63:f2:d5: b3:33:90:95:a9:c2:f1:cf:41:64:01:fc:85:4f:cb: b0:d6:d3:58:aa:b7:e1:c2:b5:4c:c8:9d:e6:f4:82: 26:83:2a:14:34:ca:87:19:92:74:15:7b:1b:83:28: 29:5a:f1:5b:df:f8:c1:92:25:28:c7:c3:ca:a5:b6: 11:b4:1e:eb:92:da:8d:70:b9:88:6d:6a:e8:90:ad: ef:19:cb:7d:aa:29:00:a2:95:67:24:dd:b4:25:bc: 18:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0E:BB:FC:F2:B4:26:25:3F:34:B6:A6:43:CD:9F:D8:93:40:2F:80 X509v3 Authority Key Identifier: keyid:89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8a:88:d4:73:01:22:f9:ea:1a:2d:f5:ce:5c:58:35:04:9e: bd:9d:a9:ff:d9:56:b3:e7:35:0d:57:73:fd:52:72:a9:f1:3d: 55:bd:1d:01:82:1d:e1:21:e9:19:6e:b1:56:e5:81:f2:2e:4c: 72:42:82:bb:bf:5d:3d:a8:ef:a1:b6:78:02:bc:a5:1d:47:7b: c2:04:33:f5:f2:1c:b3:2d:5c:a5:68:a6:7b:41:e6:63:48:81: 5a:f1:d1:b2:3e:6f:0f:49:f2:48:fd:4f:1a:38:0e:83:ba:d8: 4a:30:88:7b:8b:8a:7c:76:69:52:97:14:6f:ae:cc:8c:8e:c0: ef:b1:b8:cc:85:96:bb:5c:7f:cb:52:07:f9:13:e3:24:d5:92: da:84:b3:4e:8f:02:98:33:f0:26:44:f2:78:49:d1:8f:38:81: 74:0d:62:30:a1:36:26:87:b0:02:05:d2:69:df:03:7d:f5:76: 16:76:92:05:18:65:28:59:78:78:c4:26:20:e6:ad:94:d6:f5: c1:56:d4:8a:63:5b:79:92:e8:d4:a5:df:76:0d:94:f5:e0:08: a9:9d:75:fa:79:6c:83:c4:4c:bd:a2:5c:73:8d:20:2a:58:5b: 3e:54:31:1f:82:2a:7c:72:52:f8:c5:67:f4:75:43:f9:c6:04: 22:37:d0:d6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUNBQjExMC8GA1UEBRMoODk2M0FBOEExQjVGOTQ4N0UyMjZEMjQ2RjBFNDRDOTYw QzhGMkE5ODAeFw0yNjA5MjcwODM4MDZaFw0yNjEwMDQwODM4MDZaMBgxFjAUBgNV BAMTDTZhYjhkNWVmLTBmOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCxRkmerBjgFbpHI36OCHC2in/fIBg6Sb0rPY+/fVnDufN6q/N3HF5pRwWALoj PNDMKXmBaUDQeiTpJ/xyztxSCEQ7whPxezt5/9YtNqzb1xi2zhYF1Y8UjJLTDptK XMduvsxEGJLF/pN7S03aj2VKq/of4amUJKRuky2w9+qWbd6pP4HvlmxU2PyVVGF2 9+iIoavlc50gW5HHU8Tp46PVKWPy1bMzkJWpwvHPQWQB/IVPy7DW01iqt+HCtUzI neb0giaDKhQ0yocZknQVexuDKCla8Vvf+MGSJSjHw8qlthG0HuuS2o1wuYhtauiQ re8Zy32qKQCilWck3bQlvBg5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtQ67/PK0 JiU/NLamQ82f2JNAL4AwHwYDVR0jBBgwFoAUiWOqihtflIfiJtJG8ORMlgyPKpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1Q0FCLzJFNUM0NUM0MjRD QzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElmaUp0Skc4T1JNbGd5UEtw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVdPcWlodGZsSWZpSnRKRzhPUk1sZ3lQS3BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 Q0FCLzJFNUM0NUM0MjRDQzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElm aUp0Skc4T1JNbGd5UEtwZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAfiojUcwEi+eoaLfXOXFg1BJ69nan/2Vaz5zUNV3P9UnKp8T1VvR0Bgh3hIekZ brFW5YHyLkxyQoK7v109qO+htngCvKUdR3vCBDP18hyzLVylaKZ7QeZjSIFa8dGy Pm8PSfJI/U8aOA6DuthKMIh7i4p8dmlSlxRvrsyMjsDvsbjMhZa7XH/LUgf5E+Mk 1ZLahLNOjwKYM/AmRPJ4SdGPOIF0DWIwoTYmh7ACBdJp3wN99XYWdpIFGGUoWXh4 xCYg5q2U1vXBVtSKY1t5kujUpd92DZT14AipnXX6eWyDxEy9olxzjSAqWFs+VDEf gip8clL4xWf0dUP5xgQiN9DW -----END CERTIFICATE-----Generated at Mon Sep 28 22:57:25 2026 by rpki-client