$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json) Hash identifier: i2X/XAhFvwq2lTGiS0oHIxysgcsICKMyjg4ieKG+F4I= Subject key identifier: 07:9D:D3:F6:B9:C2:73:62:BA:E4:77:36:3E:C6:24:47:E1:D9:49:1E Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft Manifest number: 07CC Signing time: Sun 20 Sep 2026 21:18:50 +0000 Manifest this update: Sun 20 Sep 2026 21:18:49 +0000 Manifest next update: Sun 27 Sep 2026 21:18:49 +0000 Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: TFBzrNHlffRpjE/KbRiCuyKGo/eNTS1rPL7RabqtGKo=) 2: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: zXVV6Fq9+Ev8ZgtdPsPKQEYkkJ0zf+qFsMmrOUVqUuU=) 3: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: 2sdJJ6iJjkZc6Wd4X6PmhZwhxLJKNYxKwduCcx3eWls=) 4: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: RiHTyH8/u4E6R/xXsKR9Dt/X35Ipr5A7B/T2xRmCXs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Sep 20 21:18:49 2026 GMT Not After : Sep 27 21:18:49 2026 GMT Subject: CN=6ab04dba-654e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:34:0f:5b:fb:3e:d5:f5:7f:35:61:6c:de: 62:0f:9c:88:a5:c6:4f:25:ba:1d:f3:a7:1f:2d:de: 8a:5b:07:98:b2:64:e0:dd:d2:e8:98:68:87:4c:e4: bb:c5:e8:f8:60:01:fd:74:b2:9c:89:1a:fe:96:e2: 7a:57:dd:1a:1b:32:f7:b0:d9:55:ef:4d:c7:15:b2: 04:cb:de:7c:b2:ac:9d:8f:cb:86:62:77:0c:f1:48: 7b:6e:ad:8f:d9:b8:65:be:fa:bd:1a:02:0d:33:69: ba:fe:01:75:bd:42:8f:ab:e4:86:b5:08:25:75:95: 75:b5:ed:e7:e7:57:41:6e:c5:b8:f1:26:3e:af:6f: 81:78:16:d9:84:7b:27:08:43:2f:ee:dc:27:53:50: 1f:eb:b2:2f:ec:77:c8:ec:04:35:b1:41:fd:ff:b2: 28:7d:6d:5b:b8:08:cb:4b:6e:97:9f:e1:a8:d4:bd: db:67:19:0d:81:9c:85:c6:1c:a5:17:19:f4:00:4a: 9e:e5:60:82:a1:8b:59:bc:e5:46:bb:50:bb:a4:a3: 3d:56:53:7f:77:9a:e4:24:c1:3c:81:cd:0b:a6:9d: 77:d4:55:0c:8d:8b:49:51:91:80:80:45:04:05:4e: 98:af:f6:db:0f:0d:44:e6:b2:fb:7b:c3:be:68:8a: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9D:D3:F6:B9:C2:73:62:BA:E4:77:36:3E:C6:24:47:E1:D9:49:1E X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:dd:f0:9f:93:49:da:dd:90:32:92:ed:af:61:b7:27:f8:fa: d8:86:94:02:f3:fb:ce:f1:76:f6:59:e1:29:78:b8:09:b3:84: 72:e6:1a:ca:15:91:ba:76:73:dc:4d:ec:5c:59:a9:e8:b3:6b: 76:b3:e5:2a:c3:94:95:66:2c:01:98:0c:2e:48:6b:8f:ae:c9: 86:6d:22:c7:10:3b:42:64:c2:e7:1e:3a:d3:f7:4c:ac:a7:d6: 17:e0:5e:6b:2a:e2:45:31:27:e7:5c:43:97:77:f0:92:13:3f: 3b:ed:68:b0:fe:23:26:bb:1d:f7:f5:0d:aa:c6:e8:f9:0c:db: 08:93:44:1b:d9:31:49:bb:25:8d:35:7c:f7:e2:fb:d4:2f:8a: c7:0f:76:b5:3d:98:6d:db:99:45:69:34:9e:e3:da:5d:b2:ba: da:c9:01:ed:53:a2:aa:32:46:bd:68:5d:4a:70:25:cf:37:d9: a2:1e:af:ee:5b:50:09:a4:88:96:5b:7a:4d:d4:b6:f0:ef:c8: ce:59:b9:7e:90:0f:ac:cd:ab:89:6f:96:72:3a:11:8e:7d:45: cb:28:67:0e:f5:a3:36:1b:1a:aa:60:ac:0c:c0:57:68:34:c0: 0d:e0:21:a9:08:58:14:8c:c9:56:73:10:c3:04:32:a0:fe:a9: 03:54:ca:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjYwOTIwMjExODQ5WhcNMjYwOTI3MjExODQ5WjAYMRYwFAYD VQQDEw02YWIwNGRiYS02NTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbA0D1v7PtX1fzVhbN5iD5yIpcZPJbod86cfLd6KWweYsmTg3dLomGiHTOS7 xej4YAH9dLKciRr+luJ6V90aGzL3sNlV703HFbIEy958sqydj8uGYncM8Uh7bq2P 2bhlvvq9GgINM2m6/gF1vUKPq+SGtQgldZV1te3n51dBbsW48SY+r2+BeBbZhHsn CEMv7twnU1Af67Iv7HfI7AQ1sUH9/7IofW1buAjLS26Xn+Go1L3bZxkNgZyFxhyl Fxn0AEqe5WCCoYtZvOVGu1C7pKM9VlN/d5rkJME8gc0Lpp131FUMjYtJUZGAgEUE BU6Yr/bbDw1E5rL7e8O+aIoOJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAed0/a5 wnNiuuR3Nj7GJEfh2UkeMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5 R0xEbUFWMGVEN29jamtQeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU93wn5NJ2t2QMpLtr2G3J/j62IaUAvP7zvF29lnhKXi4CbOEcuYayhWRunZz 3E3sXFmp6LNrdrPlKsOUlWYsAZgMLkhrj67Jhm0ixxA7QmTC5x460/dMrKfWF+Be ayriRTEn51xDl3fwkhM/O+1osP4jJrsd9/UNqsbo+QzbCJNEG9kxSbsljTV89+L7 1C+Kxw92tT2YbduZRWk0nuPaXbK62skB7VOiqjJGvWhdSnAlzzfZoh6v7ltQCaSI llt6TdS28O/Izlm5fpAPrM2riW+WcjoRjn1FyyhnDvWjNhsaqmCsDMBXaDTADeAh qQhYFIzJVnMQwwQyoP6pA1TKaw== -----END CERTIFICATE-----Generated at Mon Sep 21 16:32:24 2026 by rpki-client