$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft File: ie3CdDRVzlmv66wxSG3f6_fNB1E.mft (raw, json) Hash identifier: P+HwqglweKiCQ4TOkalOk3a7wfhHHbujCL9OhSt/AlM= Subject key identifier: 02:BC:92:3C:E8:8E:24:08:DA:25:29:D1:B5:12:0E:46:75:9B:B0:DC Authority key identifier: 89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51 Certificate issuer: /CN=A9158A3E/serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft Manifest number: 19 Signing time: Sat 19 Sep 2026 09:00:13 +0000 Manifest this update: Sat 19 Sep 2026 09:00:12 +0000 Manifest next update: Sat 26 Sep 2026 09:00:12 +0000 Files and hashes: 1: ie3CdDRVzlmv66wxSG3f6_fNB1E.crl (hash: FvlYMfZMp4voYj6ffoJgel0zb++YGIpXhR5aTVrirj8=) 2: HakCQQo3z8v2-5Gs_uA3Bayj2sA.asa (hash: TqF7VDLUvGn6swrLSWdyVb07AQkMUSMT51u5VOQs9aE=) 3: 1C162B1892FF11F1ADF87C276D11F970.roa (hash: QNsu5mDAlK5ceLi1SvnsBhnHeCKn6PMBuIedIEG5/+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158A3E, serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751 Validity Not Before: Sep 19 09:00:12 2026 GMT Not After : Sep 26 09:00:12 2026 GMT Subject: CN=6aae4f1d-5c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e4:d6:9a:a5:ce:ce:6d:ee:f8:53:ce:98:cc: 47:0c:02:1c:c9:5e:7f:84:0f:66:c4:7f:56:c7:38: a9:67:43:1b:fb:53:39:2a:83:cb:5d:55:51:d8:d7: 06:9a:4b:a1:75:70:cc:d5:1d:75:82:75:9a:00:f9: 6f:55:6b:35:ee:7f:ae:87:69:7d:2f:5e:38:01:3e: 27:02:9b:67:4c:92:21:7e:29:31:bd:ca:c5:db:6c: b3:3e:4e:1f:bc:ee:f7:13:fe:d5:1e:40:a3:cf:7f: 1a:e9:c5:d5:6b:58:c8:c5:3b:c8:19:f7:f9:d2:17: 09:c6:3c:ad:5d:01:1b:1c:10:40:41:f1:fd:9e:90: 0a:66:f6:87:59:42:c9:67:21:bb:eb:c5:d4:1e:f2: 91:fb:cd:41:7a:22:43:a7:3a:5c:e2:80:b8:cd:99: 98:d1:59:b4:05:de:d8:d5:a3:85:37:ee:df:35:14: 60:37:70:7b:98:af:d5:20:e3:de:1f:e5:db:96:c6: 68:91:30:e8:88:71:0d:17:44:f7:10:d2:8d:f9:bb: 30:aa:7c:0f:09:26:43:22:60:46:62:36:3a:fd:19: da:46:21:95:e9:22:58:b8:ac:c3:69:2e:a6:23:d8: 94:51:2c:7a:46:dc:99:c9:14:38:68:d6:7a:41:8c: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:92:3C:E8:8E:24:08:DA:25:29:D1:B5:12:0E:46:75:9B:B0:DC X509v3 Authority Key Identifier: keyid:89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:cc:e4:4f:24:e6:54:9b:fb:01:8f:b8:00:bc:bc:39:32:5d: c7:1b:93:a3:0e:ac:ca:33:5c:ea:15:a7:01:ed:9a:b9:26:82: f6:6a:0b:d3:79:8a:bc:6e:03:41:a1:f2:ec:b6:cb:7a:26:bd: 31:44:72:96:18:ec:dc:fb:c5:44:fb:9c:f5:bc:5c:14:05:58: 31:9b:dd:29:45:88:ce:21:4a:28:ea:29:22:a3:a2:b2:0f:7a: 16:a9:a9:0f:ed:24:4c:06:87:54:69:03:6e:d9:d9:68:dd:f4: 3b:6e:25:df:bc:cf:d0:72:e2:4a:f5:c1:13:ec:db:56:ed:b0: 77:22:aa:5b:67:49:ba:c4:ef:b3:18:9e:b6:e5:04:2e:bf:25: 21:cb:b0:0f:e9:89:dd:cb:33:04:d6:eb:66:64:10:41:f6:4e: fd:e4:07:bf:6d:1d:f2:8e:9d:52:81:91:51:79:ea:31:c1:fe: 2a:84:5b:8d:b8:0f:63:fc:5f:5d:81:7f:d8:18:4f:e5:27:b4: d0:bc:9e:0b:29:2d:06:88:f1:1a:71:a5:6e:e8:86:3d:b9:03: 31:fd:e5:a9:bb:ab:88:f0:12:c0:9e:9e:3c:a0:8a:2d:3c:dc: e4:31:5b:01:32:40:16:f9:ce:07:d5:51:50:9e:0a:9d:1f:ab: 2f:b8:7a:fc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEEzRTExMC8GA1UEBRMoODlFREMyNzQzNDU1Q0U1OUFGRUJBQzMxNDg2RERGRUJG N0NEMDc1MTAeFw0yNjA5MTkwOTAwMTJaFw0yNjA5MjYwOTAwMTJaMBgxFjAUBgNV BAMTDTZhYWU0ZjFkLTVjNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCY5Naapc7Obe74U86YzEcMAhzJXn+ED2bEf1bHOKlnQxv7Uzkqg8tdVVHY1waa S6F1cMzVHXWCdZoA+W9VazXuf66HaX0vXjgBPicCm2dMkiF+KTG9ysXbbLM+Th+8 7vcT/tUeQKPPfxrpxdVrWMjFO8gZ9/nSFwnGPK1dARscEEBB8f2ekApm9odZQsln IbvrxdQe8pH7zUF6IkOnOlzigLjNmZjRWbQF3tjVo4U37t81FGA3cHuYr9Ug494f 5duWxmiRMOiIcQ0XRPcQ0o35uzCqfA8JJkMiYEZiNjr9GdpGIZXpIli4rMNpLqYj 2JRRLHpG3JnJFDho1npBjO8xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUArySPOiO JAjaJSnRtRIORnWbsNwwHwYDVR0jBBgwFoAUie3CdDRVzlmv66wxSG3f6/fNB1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4QTNFL0VENDg2ODkyOTJG RDExRjFCNzRFQjVFNzZDMTFGOTcwL2llM0NkRFJWemxtdjY2d3hTRzNmNl9mTkIx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWUzQ2REUlZ6bG12NjZ3eFNHM2Y2X2ZOQjFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 QTNFL0VENDg2ODkyOTJGRDExRjFCNzRFQjVFNzZDMTFGOTcwL2llM0NkRFJWemxt djY2d3hTRzNmNl9mTkIxRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBlzORPJOZUm/sBj7gAvLw5Ml3HG5OjDqzKM1zqFacB7Zq5JoL2agvTeYq8bgNB ofLstst6Jr0xRHKWGOzc+8VE+5z1vFwUBVgxm90pRYjOIUoo6ikio6KyD3oWqakP 7SRMBodUaQNu2dlo3fQ7biXfvM/QcuJK9cET7NtW7bB3IqpbZ0m6xO+zGJ625QQu vyUhy7AP6YndyzME1utmZBBB9k795Ae/bR3yjp1SgZFReeoxwf4qhFuNuA9j/F9d gX/YGE/lJ7TQvJ4LKS0GiPEacaVu6IY9uQMx/eWpu6uI8BLAnp48oIotPNzkMVsB MkAW+c4H1VFQngqdH6svuHr8 -----END CERTIFICATE-----Generated at Sun Sep 20 11:48:21 2026 by rpki-client