$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft File: IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft (raw, json) Hash identifier: SfrA38qORxH6ihbts/u7u5QW8Y/NNVmxKb8vckqL4EI= Subject key identifier: F2:E3:0F:F7:B2:67:59:C6:91:99:C5:F7:74:CC:6F:E1:9A:40:4E:7C Authority key identifier: 21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D Certificate issuer: /CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft Manifest number: 04F4 Signing time: Sun 20 Sep 2026 23:31:21 +0000 Manifest this update: Sun 20 Sep 2026 23:31:20 +0000 Manifest next update: Sun 27 Sep 2026 23:31:20 +0000 Files and hashes: 1: IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl (hash: WVSvxdyXV/TC1M33UXj9NYyP4ynlNIPzgEuAzbDoqJk=) 2: E986DDEC979911ECB3B7CE39C4F9AE02.roa (hash: BfgbyrDUSPaDFbvmIvU+wE2M70H25WXoCbwhEXrv7bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152DE4, serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D Validity Not Before: Sep 20 23:31:20 2026 GMT Not After : Sep 27 23:31:20 2026 GMT Subject: CN=6ab06cc9-7b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:01:41:42:40:01:b0:ff:4e:d2:10:54:40: 50:68:b2:db:fc:b3:ab:88:93:45:4c:b9:ab:ac:84: a4:7a:aa:cb:9a:03:bb:eb:f2:7a:5c:78:8a:6d:a7: fb:b1:6f:58:dd:0e:2e:02:42:3f:06:0f:88:69:b7: 7a:56:27:31:64:70:3d:9c:4d:de:a5:68:22:c4:09: 69:c1:b0:b4:8e:c0:31:8c:c7:c5:91:a7:bb:22:bf: d8:28:c0:b8:b6:b7:dc:33:5a:59:dc:dd:2b:ef:68: 94:d9:3e:c7:91:b7:99:8c:96:27:98:b3:b4:f4:f6: de:d4:0d:97:c0:08:e8:50:ff:d1:f4:d0:0a:ea:6b: 9e:c2:cd:68:51:49:61:04:3a:dc:aa:b4:12:0c:6e: 5d:00:c4:b8:11:2e:7b:88:50:ce:46:64:4a:2a:c2: 54:2c:35:1c:4b:4f:3a:64:d2:b3:e1:01:7a:81:c1: af:8f:b5:88:6c:e0:a0:ab:70:36:2b:7b:dc:4e:1f: 8b:4c:f3:2a:bc:49:f3:f2:dc:02:7e:53:dd:a1:e6: 90:4b:f4:c4:bc:6b:3c:1e:32:9e:3e:1b:b9:5e:4d: 3a:68:a9:7c:27:38:db:ce:a7:df:d2:d2:76:2b:ee: 78:85:99:d7:a4:21:2e:ad:a7:62:f0:8c:25:09:a4: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E3:0F:F7:B2:67:59:C6:91:99:C5:F7:74:CC:6F:E1:9A:40:4E:7C X509v3 Authority Key Identifier: keyid:21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e5:00:e6:07:39:7b:01:bb:dc:07:97:a1:8d:90:9f:de:97: 0b:57:2b:54:c9:6f:02:c0:05:e2:83:e2:a8:51:da:d8:1a:6c: cb:e0:88:05:a1:6d:af:45:c5:75:76:28:73:1a:72:f5:69:da: 19:53:4e:5a:76:20:66:ce:1f:43:be:72:fa:59:e0:d0:c7:0d: 43:ce:54:6e:8d:1f:1b:58:2a:50:2e:37:27:23:e1:e9:b1:d8: 95:a7:ce:df:72:85:89:ca:06:38:6d:c0:12:b4:cc:73:ad:fc: af:6a:6a:33:1b:f6:2c:b9:0d:2c:e8:0a:ec:a9:df:f9:38:4a: 30:b5:c6:0a:08:6c:e2:34:be:3b:45:16:a8:3b:ec:59:46:fe: 0c:f8:dc:b2:83:d2:28:bf:8d:c2:65:6c:87:0f:1a:5c:2c:ea: 09:5f:69:7d:d3:c2:dc:2d:98:4d:6f:19:d5:97:7f:c3:c2:21: 02:3c:db:ab:55:38:b7:e0:30:da:dd:4f:50:88:50:04:17:e9: 51:80:6d:61:26:d6:8d:98:30:ce:bf:64:e7:3c:ec:16:43:28: b1:b7:28:7b:a4:e6:c9:a5:79:54:b1:82:c1:fd:51:6f:f1:ea: 1e:58:43:e7:09:ef:17:77:c2:b2:fb:93:d7:5f:4d:87:50:ee: 5e:09:05:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJERTQxMTAvBgNVBAUTKDIxN0MzRDhCRUQwQjQwQzBGQjA4OEI1OUVFNkU2NUFF NkM2NjFGMEQwHhcNMjYwOTIwMjMzMTIwWhcNMjYwOTI3MjMzMTIwWjAYMRYwFAYD VQQDEw02YWIwNmNjOS03YjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGUBQUJAAbD/TtIQVEBQaLLb/LOriJNFTLmrrISkeqrLmgO76/J6XHiKbaf7 sW9Y3Q4uAkI/Bg+Iabd6VicxZHA9nE3epWgixAlpwbC0jsAxjMfFkae7Ir/YKMC4 trfcM1pZ3N0r72iU2T7HkbeZjJYnmLO09Pbe1A2XwAjoUP/R9NAK6muews1oUUlh BDrcqrQSDG5dAMS4ES57iFDORmRKKsJULDUcS086ZNKz4QF6gcGvj7WIbOCgq3A2 K3vcTh+LTPMqvEnz8twCflPdoeaQS/TEvGs8HjKePhu5Xk06aKl8Jzjbzqff0tJ2 K+54hZnXpCEuradi8IwlCaTVKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLjD/ey Z1nGkZnF93TMb+GaQE58MB8GA1UdIwQYMBaAFCF8PYvtC0DA+wiLWe5uZa5sZh8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkRFNC80Q0NDQzMzMjc5 MkExMUVDQjBDNTkxNjJDNEY5QUUwMi9JWHc5aS0wTFFNRDdDSXRaN201bHJteG1I dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYdzlpLTBMUU1EN0NJdFo3bTVscm14bUh3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkRFNC80Q0NDQzMzMjc5MkExMUVDQjBDNTkxNjJDNEY5QUUwMi9JWHc5aS0wTFFN RDdDSXRaN201bHJteG1IdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIOUA5gc5ewG73AeXoY2Qn96XC1crVMlvAsAF4oPiqFHa2Bpsy+CIBaFtr0XF dXYocxpy9WnaGVNOWnYgZs4fQ75y+lng0McNQ85Ubo0fG1gqUC43JyPh6bHYlafO 33KFicoGOG3AErTMc638r2pqMxv2LLkNLOgK7Knf+ThKMLXGCghs4jS+O0UWqDvs WUb+DPjcsoPSKL+NwmVshw8aXCzqCV9pfdPC3C2YTW8Z1Zd/w8IhAjzbq1U4t+Aw 2t1PUIhQBBfpUYBtYSbWjZgwzr9k5zzsFkMosbcoe6TmyaV5VLGCwf1Rb/HqHlhD 5wnvF3fCsvuT119Nh1DuXgkFRQ== -----END CERTIFICATE-----Generated at Mon Sep 21 22:00:10 2026 by rpki-client