$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json) Hash identifier: oMkMH7aiXBjrPgxjNvzT0SkqHgAkWKbhPVR/a3OyukA= Subject key identifier: 50:71:2D:12:7B:19:14:7C:41:25:28:4F:74:D8:37:8B:21:B5:BC:E9 Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft Manifest number: 0109 Signing time: Thu 24 Sep 2026 19:37:12 +0000 Manifest this update: Thu 24 Sep 2026 19:37:11 +0000 Manifest next update: Thu 01 Oct 2026 19:37:11 +0000 Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: mxvWZx41F2PZwbVHqyyL5vBYZ4D8bXp693jqJ0XNQrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Validity Not Before: Sep 24 19:37:11 2026 GMT Not After : Oct 1 19:37:11 2026 GMT Subject: CN=6ab57be7-52d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:74:5c:b2:65:ce:e1:f2:ee:b9:a2:82:e6:30: ea:95:33:49:85:32:60:a1:9b:8b:d7:e0:f0:be:7b: f4:d3:5b:e4:13:ed:5a:da:53:b4:cf:d5:90:c1:7b: c7:0b:75:af:f8:ee:87:34:d3:cf:86:e5:78:1f:f8: 25:24:db:b9:4f:1a:32:5e:b3:44:ba:da:f2:67:d1: f1:a6:d2:b3:a8:f6:82:c6:88:49:d9:10:ed:c1:a5: 75:76:3c:45:33:8f:e8:37:ec:fe:20:bc:fe:0f:4e: 87:c4:cb:c4:e3:8f:0e:b6:6f:92:9c:dd:42:84:40: 61:d7:55:95:7c:3c:97:67:c9:84:01:84:36:5e:13: a0:67:50:a9:41:c7:9e:a4:1c:eb:cb:7d:af:48:a9: c0:d7:7f:8c:cd:a1:3b:37:c2:a4:36:e2:bf:02:6c: ee:0d:20:ad:3c:9f:91:03:f4:ce:aa:26:27:7b:39: 49:e8:63:b7:6d:ac:c1:21:f0:4a:30:94:c1:c2:56: af:2b:9e:fc:2c:19:55:24:5e:f1:0c:52:d7:3b:54: ec:90:a3:ef:e6:2f:d7:43:4b:fe:0c:21:dc:f3:02: de:6f:08:de:19:50:0f:6f:01:eb:95:7a:c5:8c:1c: 97:28:c9:33:81:e9:26:15:2e:97:f7:14:a2:a3:82: 95:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:71:2D:12:7B:19:14:7C:41:25:28:4F:74:D8:37:8B:21:B5:BC:E9 X509v3 Authority Key Identifier: keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:95:d1:bb:66:5b:a7:74:f3:51:a1:b2:72:8c:bd:fd:b9:55: 7f:97:ed:56:f5:6a:fb:a7:1e:c2:da:74:e5:d4:2f:c1:37:b2: 59:b9:f8:30:6a:4f:f4:15:9b:88:ba:0c:96:0a:67:78:ee:66: 0e:5e:5b:95:70:f9:ff:52:ef:88:07:4d:c7:e4:16:8c:8e:b2: 49:2b:1f:bc:f1:f5:89:95:f4:9e:08:14:33:2f:ab:77:c9:94: 63:3d:ee:8a:1b:24:d0:8a:c4:e5:46:f2:26:f9:e2:d6:8e:f4: a6:a4:1f:ce:90:a4:ff:e5:a6:f7:03:41:61:82:cb:b2:db:e8: ac:9b:fb:12:96:cf:13:27:31:82:a9:5f:4a:b1:5a:92:51:a7: 30:8f:7f:9b:92:12:3a:7e:bb:73:9b:67:5f:70:3d:2c:4f:35: be:44:ba:97:cc:70:f3:d1:7e:e8:81:ef:0d:72:e0:12:c3:2b: 5f:a2:86:c6:d5:da:f5:b7:c3:55:b5:61:25:22:f0:39:21:d4: b9:82:ee:19:7d:47:e1:84:a5:1d:a8:83:37:53:07:5b:ec:43: 4f:28:59:28:55:67:16:a8:18:69:b1:a2:ef:94:e6:ea:f1:94: 92:81:8b:d0:ef:26:d9:62:5c:49:74:19:f6:65:0c:95:e3:14: e4:ac:71:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMEYxMTAvBgNVBAUTKDhBMTFFQjc2NEIxNTc4NTM5RDZFRDNCMjkwM0JGNjFG NEMwODAwN0MwHhcNMjYwOTI0MTkzNzExWhcNMjYxMDAxMTkzNzExWjAYMRYwFAYD VQQDEw02YWI1N2JlNy01MmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjXRcsmXO4fLuuaKC5jDqlTNJhTJgoZuL1+Dwvnv001vkE+1a2lO0z9WQwXvH C3Wv+O6HNNPPhuV4H/glJNu5TxoyXrNEutryZ9HxptKzqPaCxohJ2RDtwaV1djxF M4/oN+z+ILz+D06HxMvE448Otm+SnN1ChEBh11WVfDyXZ8mEAYQ2XhOgZ1CpQcee pBzry32vSKnA13+MzaE7N8KkNuK/AmzuDSCtPJ+RA/TOqiYnezlJ6GO3bazBIfBK MJTBwlavK578LBlVJF7xDFLXO1TskKPv5i/XQ0v+DCHc8wLebwjeGVAPbwHrlXrF jByXKMkzgekmFS6X9xSio4KVOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBxLRJ7 GRR8QSUoT3TYN4shtbzpMB8GA1UdIwQYMBaAFIoR63ZLFXhTnW7TspA79h9MCAB8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MwRi80OUU5OTZDNDJD NjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVGT2RidE95a0R2Mkgwd0lB SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MwRi80OUU5OTZDNDJDNjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVG T2RidE95a0R2Mkgwd0lBSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl5XRu2Zbp3TzUaGycoy9/blVf5ftVvVq+6cewtp05dQvwTeyWbn4MGpP9BWb iLoMlgpneO5mDl5blXD5/1LviAdNx+QWjI6ySSsfvPH1iZX0nggUMy+rd8mUYz3u ihsk0IrE5UbyJvni1o70pqQfzpCk/+Wm9wNBYYLLstvorJv7EpbPEycxgqlfSrFa klGnMI9/m5ISOn67c5tnX3A9LE81vkS6l8xw89F+6IHvDXLgEsMrX6KGxtXa9bfD VbVhJSLwOSHUuYLuGX1H4YSlHaiDN1MHW+xDTyhZKFVnFqgYabGi75Tm6vGUkoGL 0O8m2WJcSXQZ9mUMleMU5Kxx6A== -----END CERTIFICATE-----Generated at Fri Sep 25 03:33:00 2026 by rpki-client