$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: o/zSaFu1+NqsqX228fxpFQki3fuKItwsE6XQUrH7rX4= Subject key identifier: 96:8D:2C:14:7B:3E:91:06:EE:49:F9:CC:92:62:49:DF:15:A4:CC:19 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 05B1 Signing time: Mon 12 Oct 2026 23:18:02 +0000 Manifest this update: Mon 12 Oct 2026 23:18:01 +0000 Manifest next update: Mon 19 Oct 2026 23:18:01 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: bOaR0tMg+A/tLdJqa9hHMtwlPVLIMxnoTPEeVoP9zsY=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: mMzlkdBS5l7zH1NqOtcSGsyrLWVpyJgkzBlaJ0LOo5U=) 3: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: IekuGWz95qJq1RkERKwpFfkq5YP338H+OPjlC3vFHYE=) 4: B8462FFC6DE711F1ADF0DD3B5CA30FBC.roa (hash: wR/gV0bAGkEOc7p9Q73UcbAxejY11n0Ak+N3vWrR/o8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 23:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Oct 12 23:18:01 2026 GMT Not After : Oct 19 23:18:01 2026 GMT Subject: CN=6acd6aa9-05cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:6b:31:b2:0d:d0:df:36:04:60:94:5b:22: 05:c6:b5:e9:9b:36:57:d2:c4:7c:00:3b:b0:3e:cf: cf:e2:6e:46:62:c9:6a:bc:60:32:41:47:26:6f:2b: 8f:dd:e8:f8:1e:37:a0:40:b5:61:11:0e:03:82:33: 39:25:f1:c7:5d:be:15:7c:5e:22:29:8f:93:24:dd: 8b:45:8a:cf:39:e9:27:e8:1d:d9:6e:ea:17:a2:dd: f6:44:12:c8:85:eb:03:48:d7:83:c3:ef:5f:2d:40: 51:ec:ed:c1:06:f2:90:55:82:4f:54:8f:21:8d:fb: ac:db:2c:09:e4:de:08:67:5d:02:94:de:61:e9:83: a5:43:99:fa:24:2e:d1:f2:b8:75:36:dc:72:04:4d: 07:bd:12:d1:29:b8:74:2a:16:06:29:5e:34:66:a6: d9:1a:73:66:9b:66:88:1d:05:9b:76:d9:b6:67:8d: 2d:a4:96:8b:0a:20:0a:49:6a:ef:63:83:cd:8d:3b: ae:ad:3b:95:6d:66:02:46:c5:fb:56:98:c7:e4:1a: 66:c5:d6:59:f1:29:e1:90:e6:1a:57:45:82:30:cd: 48:83:40:54:33:b9:b7:a6:0f:eb:b9:34:65:77:60: 47:72:10:ba:bf:63:f9:c4:db:03:28:13:0f:9b:f4: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8D:2C:14:7B:3E:91:06:EE:49:F9:CC:92:62:49:DF:15:A4:CC:19 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:0d:75:a7:75:9c:55:1e:4b:b3:ed:97:ff:75:53:af:e3:81: b9:11:f7:11:3d:9e:08:27:98:01:ee:58:05:2b:52:64:87:63: 5e:68:40:6f:0c:d8:15:30:25:05:d2:9d:78:a7:cd:da:6b:ff: ff:12:7c:09:72:7a:86:c7:83:29:b3:19:7c:bf:ca:42:a9:50: 70:9f:4e:f6:34:05:02:f5:9a:bd:35:65:7f:9e:af:24:8a:6a: 84:1b:f2:43:47:a4:62:bf:f8:67:f3:1d:f5:e3:2d:a5:c0:8d: 6c:2d:98:f3:b3:af:b2:6d:67:02:27:20:f4:aa:c8:37:23:79: 10:1b:27:61:ac:dd:80:75:fb:3f:97:54:a2:e0:3b:ff:e8:af: 6e:90:c9:74:9a:72:fc:4c:c3:e9:36:53:ce:ce:dd:e1:95:64: b3:3d:57:e1:18:67:54:05:fa:20:6c:e0:ed:72:05:3a:ad:0a: 3e:ea:86:4d:21:32:94:76:c5:bf:61:9e:5a:c9:86:92:59:a1: 45:70:89:a6:74:b6:8e:8d:62:b3:b2:ae:32:a3:01:a1:c6:e5: bf:d5:bb:df:ac:d7:19:b1:4b:8b:c9:7d:d3:2c:21:b1:1d:64: a6:dd:b4:61:0e:38:80:40:65:41:fc:79:6c:72:4d:16:3d:27: df:fc:d1:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjYxMDEyMjMxODAxWhcNMjYxMDE5MjMxODAxWjAYMRYwFAYD VQQDEw02YWNkNmFhOS0wNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8xrMbIN0N82BGCUWyIFxrXpmzZX0sR8ADuwPs/P4m5GYslqvGAyQUcmbyuP 3ej4HjegQLVhEQ4DgjM5JfHHXb4VfF4iKY+TJN2LRYrPOekn6B3ZbuoXot32RBLI hesDSNeDw+9fLUBR7O3BBvKQVYJPVI8hjfus2ywJ5N4IZ10ClN5h6YOlQ5n6JC7R 8rh1NtxyBE0HvRLRKbh0KhYGKV40ZqbZGnNmm2aIHQWbdtm2Z40tpJaLCiAKSWrv Y4PNjTuurTuVbWYCRsX7VpjH5BpmxdZZ8SnhkOYaV0WCMM1Ig0BUM7m3pg/ruTRl d2BHchC6v2P5xNsDKBMPm/RrXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJaNLBR7 PpEG7kn5zJJiSd8VpMwZMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJg11p3WcVR5Ls+2X/3VTr+OBuRH3ET2eCCeYAe5YBStSZIdjXmhAbwzYFTAl BdKdeKfN2mv//xJ8CXJ6hseDKbMZfL/KQqlQcJ9O9jQFAvWavTVlf56vJIpqhBvy Q0ekYr/4Z/Md9eMtpcCNbC2Y87Ovsm1nAicg9KrINyN5EBsnYazdgHX7P5dUouA7 /+ivbpDJdJpy/EzD6TZTzs7d4ZVksz1X4RhnVAX6IGzg7XIFOq0KPuqGTSEylHbF v2GeWsmGklmhRXCJpnS2jo1is7KuMqMBocblv9W736zXGbFLi8l90ywhsR1kpt20 YQ44gEBlQfx5bHJNFj0n3/zRFQ== -----END CERTIFICATE-----Generated at Tue Oct 13 22:39:26 2026 by rpki-client