$ rpki-client -vvvf rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft File: -ibzSoM5sd823JwRkSBXw6WD9nM.mft (raw, json) Hash identifier: A38KV6P7xK12eoGTTRGOFg43CBRyUgIzPp3LCBVX35o= Subject key identifier: 88:BC:CE:34:64:AF:EF:0D:A2:56:8E:62:D8:F0:B1:4D:15:CF:A8:6B Authority key identifier: FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73 Certificate issuer: /CN=A914711C/serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft Manifest number: 043D Signing time: Sat 19 Sep 2026 00:06:44 +0000 Manifest this update: Sat 19 Sep 2026 00:06:43 +0000 Manifest next update: Sat 26 Sep 2026 00:06:43 +0000 Files and hashes: 1: -ibzSoM5sd823JwRkSBXw6WD9nM.crl (hash: JP8mquA2TB5jp4mEhEvRgjleR7TdKEuT+NfDV3CA+Bk=) 2: 1AF42E76BBAC11EC8A07FE72C4F9AE02.roa (hash: 67LlS2Q1Ll84dJ+nyUpzM3AprVCuS78sQpZWBwZl53s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914711C, serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673 Validity Not Before: Sep 19 00:06:43 2026 GMT Not After : Sep 26 00:06:43 2026 GMT Subject: CN=6aadd214-95ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cd:2f:64:3e:5d:5c:c0:94:79:e4:be:0b:3b: 75:c0:fd:94:15:ec:f8:04:9d:09:e8:fb:f3:f0:b5: 0d:9b:3f:b1:7e:e7:f4:d6:e8:9d:0d:3d:69:61:21: 27:7c:be:ea:dd:d1:f1:85:70:da:fa:7f:41:d8:4e: 31:2d:ae:d1:49:25:f9:d3:6b:4f:97:f5:2f:80:2b: b5:5b:2a:69:b4:94:6d:9e:b6:d4:a6:f0:26:ef:95: 25:6e:b2:2e:50:a5:59:29:06:5f:e5:2f:e5:3d:82: 8c:f1:16:fe:3b:15:9d:da:2d:c0:f0:93:87:6c:48: c0:44:f8:5e:a1:f4:d7:9e:74:6a:e6:b0:c2:43:45: 64:51:ca:10:5b:78:eb:ab:21:a2:1e:b5:29:1e:c3: 53:a4:66:03:fa:f8:0d:5f:d4:41:65:bf:7e:4e:2d: 96:d7:00:b0:ec:66:37:cc:56:47:d0:37:91:c0:bc: a4:f1:0c:19:2d:23:54:c8:17:80:6d:12:70:bd:1f: b6:ca:a1:25:9c:00:ba:8b:52:14:8d:0c:80:c6:5f: ab:2e:71:75:d1:b7:b9:57:98:07:55:e3:a3:84:c5: 5e:25:84:31:7d:ed:9d:8f:7a:16:21:dd:4d:ae:9f: cf:64:72:7d:75:07:17:07:c5:7f:c0:67:b8:75:33: 74:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BC:CE:34:64:AF:EF:0D:A2:56:8E:62:D8:F0:B1:4D:15:CF:A8:6B X509v3 Authority Key Identifier: keyid:FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a3:32:ca:23:34:a5:e9:9d:c2:22:90:8f:11:3e:7a:b3:7f: 41:76:10:9c:61:61:7f:83:7e:ee:6c:59:cf:72:bc:1a:3d:91: 76:2e:55:d8:05:c6:85:c6:2b:8a:ec:a5:c7:f2:7e:9b:74:99: fe:8a:26:83:7f:b3:21:fe:e1:35:82:5e:27:88:8d:e2:dd:40: 8d:38:9b:b4:d6:8a:e7:89:fc:37:06:a4:cd:b9:b6:1b:51:79: 21:18:29:45:0b:f2:78:4d:b5:da:c4:e5:41:f9:88:65:49:9c: cb:aa:6a:18:91:27:84:50:21:22:43:9a:32:38:34:d4:35:b0: 51:6c:62:46:cd:3f:e2:4c:99:63:d4:0d:34:e5:3a:28:bc:f9: 48:9d:ba:cc:a1:3e:7f:43:c2:0f:18:b4:83:5c:8a:80:7d:ad: 9e:97:cd:47:aa:d9:ed:a0:af:19:97:10:4a:d8:d4:d2:4c:8d: 1a:e9:53:64:b8:8b:59:ee:82:d3:be:c8:74:c5:91:18:65:de: e1:18:0b:2b:28:b4:e2:7b:c0:90:43:4c:78:95:ad:95:57:33: 52:83:52:e9:ef:ef:af:3b:b7:7b:09:47:4e:92:90:46:ff:69: dc:57:38:f1:1c:eb:91:49:5f:7a:32:b4:92:26:37:60:51:d1: 0f:39:16:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxMUMxMTAvBgNVBAUTKEZBMjZGMzRBODMzOUIxREYzNkRDOUMxMTkxMjA1N0Mz QTU4M0Y2NzMwHhcNMjYwOTE5MDAwNjQzWhcNMjYwOTI2MDAwNjQzWjAYMRYwFAYD VQQDEw02YWFkZDIxNC05NWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl80vZD5dXMCUeeS+Czt1wP2UFez4BJ0J6Pvz8LUNmz+xfuf01uidDT1pYSEn fL7q3dHxhXDa+n9B2E4xLa7RSSX502tPl/UvgCu1WypptJRtnrbUpvAm75UlbrIu UKVZKQZf5S/lPYKM8Rb+OxWd2i3A8JOHbEjARPheofTXnnRq5rDCQ0VkUcoQW3jr qyGiHrUpHsNTpGYD+vgNX9RBZb9+Ti2W1wCw7GY3zFZH0DeRwLyk8QwZLSNUyBeA bRJwvR+2yqElnAC6i1IUjQyAxl+rLnF10be5V5gHVeOjhMVeJYQxfe2dj3oWId1N rp/PZHJ9dQcXB8V/wGe4dTN0UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIi8zjRk r+8NolaOYtjwsU0Vz6hrMB8GA1UdIwQYMBaAFPom80qDObHfNtycEZEgV8Olg/Zz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzExQy9BOEFDNzI1MEJC QTcxMUVDOEZDRDQ0MjJDNEY5QUUwMi8taWJ6U29NNXNkODIzSndSa1NCWHc2V0Q5 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1pYnpTb001c2Q4MjNKd1JrU0JYdzZXRDluTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzExQy9BOEFDNzI1MEJCQTcxMUVDOEZDRDQ0MjJDNEY5QUUwMi8taWJ6U29NNXNk ODIzSndSa1NCWHc2V0Q5bk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFKMyyiM0pemdwiKQjxE+erN/QXYQnGFhf4N+7mxZz3K8Gj2Rdi5V2AXGhcYr iuylx/J+m3SZ/oomg3+zIf7hNYJeJ4iN4t1AjTibtNaK54n8Nwakzbm2G1F5IRgp RQvyeE212sTlQfmIZUmcy6pqGJEnhFAhIkOaMjg01DWwUWxiRs0/4kyZY9QNNOU6 KLz5SJ26zKE+f0PCDxi0g1yKgH2tnpfNR6rZ7aCvGZcQStjU0kyNGulTZLiLWe6C 077IdMWRGGXe4RgLKyi04nvAkENMeJWtlVczUoNS6e/vrzu3ewlHTpKQRv9p3Fc4 8RzrkUlfejK0kiY3YFHRDzkWiQ== -----END CERTIFICATE-----Generated at Sun Sep 20 22:27:03 2026 by rpki-client