$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: hY8Tsbv78jWoha2EQTn8cuVuRH1oxIoaORR4Ox52uiY= Subject key identifier: 3A:FB:E1:7F:CF:33:52:F2:14:BC:4B:30:38:CB:F3:D8:7B:F4:8B:09 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2E94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2E6C Signing time: Sun 20 Sep 2026 15:27:20 +0000 Manifest this update: Sun 20 Sep 2026 15:27:20 +0000 Manifest next update: Sun 27 Sep 2026 15:27:20 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: 8GEvlWCiLjFP6t35Ab0QJfAqZO9Gi3lHxtnXy1Gs+WA=) 2: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: H04QBDV26pSEqU+6Gzyw1sm5OlSGepj/HF/CM4cYOU8=) 3: F2AE85D6128E11F1BA652BAD3A3D8C67.roa (hash: XFZyAVomr+D6cpEwC0fdueBEAmEYpPj3c5fCswDRg+E=) 4: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: vFnVJbm4MytKKwLhxeVpxNuD1ipukSf0zI8pzazbsp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11924 (0x2e94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Sep 20 15:27:20 2026 GMT Not After : Sep 27 15:27:20 2026 GMT Subject: CN=6aaffb58-132e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:0c:0c:96:6a:93:b7:c3:2e:15:98:d0:b1: 0c:a1:cf:da:1d:7b:61:64:93:a2:cb:53:5e:a1:40: 3d:ed:e5:b3:3b:c3:8f:61:3b:c2:ca:c8:83:7d:f2: 1d:79:7a:18:be:bb:27:cd:f0:04:02:69:a9:1c:eb: c6:aa:ac:f5:04:ab:19:b5:39:72:72:77:d7:ba:cc: 99:a2:9e:fc:69:6a:1a:f1:9a:ad:52:af:08:93:34: 67:c4:52:32:c0:47:5a:62:f3:d2:eb:49:e9:ac:c7: 7d:75:b3:e5:6f:8e:4c:33:37:ff:01:7c:d6:00:af: d1:73:07:ab:1b:b8:a9:72:55:e8:46:9e:3d:20:d5: d8:b2:93:cf:b2:dd:51:82:fc:27:d6:7b:12:2c:5e: 9e:12:62:ce:cd:31:35:0e:3b:ee:90:d5:06:1b:f8: c8:21:73:35:f0:6e:31:03:09:fa:d0:2e:76:bb:11: 2f:ae:0a:34:7a:f1:60:51:90:1f:ae:dc:4a:ad:c4: 97:32:65:65:8c:be:85:e2:08:db:c1:5e:05:36:44: 9e:bc:a5:88:d8:46:c1:80:db:3d:b1:68:fa:87:a5: 2d:d1:1b:17:69:c4:ea:a6:60:70:90:2a:a9:fd:de: 3f:69:8b:92:b8:1a:f5:aa:ac:03:a0:92:a8:e3:97: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FB:E1:7F:CF:33:52:F2:14:BC:4B:30:38:CB:F3:D8:7B:F4:8B:09 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:80:2f:c3:74:b7:0b:a5:a2:0b:82:2f:cd:b0:5e:14:a1:6c: 86:bd:cf:b4:83:fb:3b:46:51:fc:3d:dc:72:2b:6d:58:5d:b0: 4c:9c:77:87:29:d3:9a:b3:0f:f7:00:51:01:44:9b:6f:80:e3: 7a:6a:b0:92:c3:a5:85:f8:27:32:e6:a2:f2:88:b0:28:6b:52: b2:ae:15:47:2e:c2:74:56:e6:28:cb:ea:c3:3d:9d:c5:73:a5: 4f:e8:9a:85:c5:5e:b9:4f:d1:83:78:cd:25:d2:95:0d:88:c2: ad:e8:e3:c4:da:30:42:c8:05:5a:56:ee:56:dc:49:5c:75:f2: 69:9c:03:50:a0:63:db:03:6f:12:68:a8:3a:9a:33:75:d0:33: 36:9e:ac:f9:49:ca:58:94:7f:ad:d8:f4:ce:e7:97:fe:f0:29: d6:0b:bf:2a:1e:0e:8f:64:c8:98:4a:d7:81:87:8f:c2:86:45: 42:bc:9d:98:57:a2:dd:b8:c3:fa:6b:20:e6:4f:61:93:6d:ba: 84:e7:c0:b4:75:c8:3e:87:4b:d8:76:c3:90:2d:1b:3a:86:6b: 70:57:19:75:22:8e:6f:52:58:60:1b:ff:38:36:eb:98:d6:85: 8a:19:2b:67:08:97:68:4a:39:d5:3c:28:fa:41:b9:14:a0:d6: e9:35:ac:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjYwOTIwMTUyNzIwWhcNMjYwOTI3MTUyNzIwWjAYMRYwFAYD VQQDEw02YWFmZmI1OC0xMzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt4MDJZqk7fDLhWY0LEMoc/aHXthZJOiy1NeoUA97eWzO8OPYTvCysiDffId eXoYvrsnzfAEAmmpHOvGqqz1BKsZtTlycnfXusyZop78aWoa8ZqtUq8IkzRnxFIy wEdaYvPS60nprMd9dbPlb45MMzf/AXzWAK/RcwerG7ipclXoRp49INXYspPPst1R gvwn1nsSLF6eEmLOzTE1DjvukNUGG/jIIXM18G4xAwn60C52uxEvrgo0evFgUZAf rtxKrcSXMmVljL6F4gjbwV4FNkSevKWI2EbBgNs9sWj6h6Ut0RsXacTqpmBwkCqp /d4/aYuSuBr1qqwDoJKo45fmiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDr74X/P M1LyFLxLMDjL89h79IsJMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnIAvw3S3C6WiC4IvzbBeFKFshr3PtIP7O0ZR/D3ccittWF2wTJx3hynTmrMP 9wBRAUSbb4DjemqwksOlhfgnMuai8oiwKGtSsq4VRy7CdFbmKMvqwz2dxXOlT+ia hcVeuU/Rg3jNJdKVDYjCrejjxNowQsgFWlbuVtxJXHXyaZwDUKBj2wNvEmioOpoz ddAzNp6s+UnKWJR/rdj0zueX/vAp1gu/Kh4Oj2TImErXgYePwoZFQrydmFei3bjD +msg5k9hk226hOfAtHXIPodL2HbDkC0bOoZrcFcZdSKOb1JYYBv/ODbrmNaFihkr ZwiXaEo51Two+kG5FKDW6TWsrA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:18:20 2026 by rpki-client