$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft File: iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft (raw, json) Hash identifier: 0LXwM/3+j75Hcv993P9wDqPfQefUxU1Ur8wlLsh+n7g= Subject key identifier: BC:42:C3:A1:EB:E3:F8:A8:BE:65:22:C0:11:E1:D7:69:4B:BC:72:5C Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Certificate serial: 35B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft Manifest number: 3597 Signing time: Tue 22 Sep 2026 14:35:55 +0000 Manifest this update: Tue 22 Sep 2026 14:35:55 +0000 Manifest next update: Tue 29 Sep 2026 14:35:55 +0000 Files and hashes: 1: iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl (hash: 1r3NuhgOFJetDOx3cSGWFZXKcZchr/Npc5NLwLqxP78=) 2: A5A8DBE2865111F18C986E6391A30FBC.roa (hash: 96vGy7bp1vNNLVl0lRAFljn5SIt5ui19VMtj1FMFzNE=) 3: E4BA3CE8DFCE11EFBC4CD631C4F9AE02.roa (hash: gaWU+X+/mNK/B9cZjLPSBTco2OY87BQH5ky7affM8lQ=) 4: E52708AADFCE11EFBC4CD631C4F9AE02.roa (hash: 7mdn7K/pFTz7Pj5x+lPuobQnpXFUmB94xMoVdDvQnh8=) 5: 075152B253CB11F09DA22358C4F9AE02.roa (hash: VxzUodkd5BwCYwN/SAUBovVstnmyYoCGYsD/9kzzeCs=) 6: A997FC56865111F18C986E6391A30FBC.roa (hash: tkr9QszuSPa+E62pcGkCyeoDv7+eIjaCRBenHSUaRkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13753 (0x35b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DA0, serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Validity Not Before: Sep 22 14:35:55 2026 GMT Not After : Sep 29 14:35:55 2026 GMT Subject: CN=6ab2924b-f518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:98:c6:d9:01:4e:0f:90:e4:9b:d8:eb:4b:b6: a6:31:55:fb:f4:65:fa:a9:92:0e:9a:9b:67:19:f2: 6e:9b:0b:4d:55:93:88:32:5f:a0:7d:ce:7b:22:ba: ad:fa:37:54:14:89:a4:83:c9:14:8c:76:1b:25:1b: bf:8c:e9:c5:cf:43:82:80:28:5c:f3:49:22:2e:b5: 0a:5c:3d:d4:f9:28:c3:52:cf:d4:51:e9:56:69:92: de:97:97:54:8b:5a:ab:5e:07:89:c7:b8:3a:aa:26: 8d:82:1e:5b:94:47:dd:0c:ad:53:ca:90:78:60:2f: 78:29:46:6d:57:44:ae:ed:fb:e9:51:c6:a7:86:35: 11:60:03:44:05:c4:c3:00:ee:06:f2:6f:58:ea:74: 70:a0:92:a9:78:2f:e0:ad:3c:d6:0e:94:92:f5:3c: 74:56:34:1e:f7:3c:e1:1f:48:23:66:a7:bc:86:6e: 9e:f4:8b:e5:cb:5c:38:63:03:05:d5:cb:b9:ec:60: 8c:10:b3:c2:a8:48:f6:f5:81:6c:00:ef:8b:3b:83: 7b:f6:f7:38:3d:1d:7d:8f:a8:41:6b:4a:14:8e:c1: 27:e7:df:11:4b:25:78:57:bc:65:6d:13:d1:3f:88: 58:8a:3d:46:d2:68:84:61:e1:dc:e5:48:99:d0:9d: c9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:42:C3:A1:EB:E3:F8:A8:BE:65:22:C0:11:E1:D7:69:4B:BC:72:5C X509v3 Authority Key Identifier: keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e9:b1:98:40:03:86:1e:06:f6:96:4b:8b:36:d6:62:92:74: 8e:f1:b9:1f:10:39:64:08:73:61:88:39:65:9f:11:76:4b:1f: 69:4a:cb:c6:05:04:8b:2c:89:b3:bd:3d:cb:d4:6c:bf:d2:69: ae:39:9c:18:fb:b5:ad:5c:20:66:68:3e:db:86:34:66:f4:fe: b9:41:8e:19:18:bf:41:4c:17:7f:c7:9e:e2:4a:7b:85:97:3f: 53:3f:51:ba:8b:98:f3:8f:1c:93:39:5b:ff:68:66:e5:bd:a1: 1f:f3:09:8b:34:f3:6e:56:06:7b:ec:ad:fe:58:79:1d:cc:d3: 61:6c:50:b6:f1:d0:2a:96:4f:41:59:54:51:26:76:09:55:7d: 7e:62:6c:03:83:ce:f8:8f:ee:33:d4:ad:0b:00:16:01:54:38: 52:55:ef:c1:52:2c:81:54:5d:4b:7e:4b:2f:e3:94:64:96:54: 50:fd:02:c3:3d:ba:28:f3:0b:04:51:2a:6e:0e:98:f3:10:32: 41:36:36:72:f9:66:f4:e4:71:9b:c8:6e:75:79:37:39:07:a4: 6b:87:2f:da:5f:4c:cd:4a:61:37:91:de:1e:cf:61:a3:18:4f: f0:63:04:9e:eb:f6:08:e9:76:10:f4:04:cc:dd:56:af:53:b3: 94:21:81:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQTAxMTAvBgNVBAUTKDg4ODdDRjZDRjUxMDJGMEZCNzEzRjRDNEExQkRFMzg5 NDgxRjFDNDQwHhcNMjYwOTIyMTQzNTU1WhcNMjYwOTI5MTQzNTU1WjAYMRYwFAYD VQQDEw02YWIyOTI0Yi1mNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JjG2QFOD5Dkm9jrS7amMVX79GX6qZIOmptnGfJumwtNVZOIMl+gfc57Irqt +jdUFImkg8kUjHYbJRu/jOnFz0OCgChc80kiLrUKXD3U+SjDUs/UUelWaZLel5dU i1qrXgeJx7g6qiaNgh5blEfdDK1TypB4YC94KUZtV0Su7fvpUcanhjURYANEBcTD AO4G8m9Y6nRwoJKpeC/grTzWDpSS9Tx0VjQe9zzhH0gjZqe8hm6e9Ivly1w4YwMF 1cu57GCMELPCqEj29YFsAO+LO4N79vc4PR19j6hBa0oUjsEn598RSyV4V7xlbRPR P4hYij1G0miEYeHc5UiZ0J3JIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxCw6Hr 4/iovmUiwBHh12lLvHJcMB8GA1UdIwQYMBaAFIiHz2z1EC8PtxP0xKG944lIHxxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBMC8zQTBEOTMxMDFE OEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3LTNFX1RFb2IzamlVZ2ZI RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lJZlBiUFVRTHctM0VfVEVvYjNqaVVnZkhFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBMC8zQTBEOTMxMDFEOEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3 LTNFX1RFb2IzamlVZ2ZIRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhemxmEADhh4G9pZLizbWYpJ0jvG5HxA5ZAhzYYg5ZZ8RdksfaUrLxgUEiyyJ s709y9Rsv9JprjmcGPu1rVwgZmg+24Y0ZvT+uUGOGRi/QUwXf8ee4kp7hZc/Uz9R uouY848ckzlb/2hm5b2hH/MJizTzblYGe+yt/lh5HczTYWxQtvHQKpZPQVlUUSZ2 CVV9fmJsA4PO+I/uM9StCwAWAVQ4UlXvwVIsgVRdS35LL+OUZJZUUP0Cwz26KPML BFEqbg6Y8xAyQTY2cvlm9ORxm8hudXk3OQeka4cv2l9MzUphN5HeHs9hoxhP8GME nuv2COl2EPQEzN1Wr1OzlCGBUQ== -----END CERTIFICATE-----Generated at Tue Sep 22 17:22:17 2026 by rpki-client