$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft File: IRoCHoq99NvyBwgibMgyj9JBMd8.mft (raw, json) Hash identifier: qUe5xssGP8nBaqAHLZaZo3UVgqccra9QjVSEfXKkflk= Subject key identifier: CD:F4:F3:40:A3:EC:2B:A6:0B:65:C8:E7:53:FB:05:7C:CB:BD:FB:A3 Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF Certificate issuer: /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft Manifest number: 017C Signing time: Mon 19 Oct 2026 05:28:27 +0000 Manifest this update: Mon 19 Oct 2026 05:28:26 +0000 Manifest next update: Mon 26 Oct 2026 05:28:26 +0000 Files and hashes: 1: IRoCHoq99NvyBwgibMgyj9JBMd8.crl (hash: P+f9WWIAynIfniYFjArxb8Yjfy9WEDIza4NdgPwtul4=) 2: 0029F6EAD41F11F0B1A47183C4F9AE02.roa (hash: F5fxp0etukBOn3CKrqqukvD42srMqVoYQvkoxd9V4Hk=) 3: 00926CA2D41F11F092947183C4F9AE02.roa (hash: 3FsjY4W+7e6UjIfuM4I6PgXH3/hgMZDSIiOMlANI138=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 05:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Validity Not Before: Oct 19 05:28:26 2026 GMT Not After : Oct 26 05:28:26 2026 GMT Subject: CN=6ad5aa7b-5a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:f8:cc:e0:3e:92:4f:7f:d8:2e:f9:78:70: f5:1c:be:8a:7b:91:ab:ed:5d:72:76:79:53:eb:ca: a0:4a:ae:e7:8e:09:5f:11:9b:05:3c:c7:3a:47:8e: c1:6f:e7:66:44:7b:e0:9e:cb:18:a5:90:ce:69:5b: 32:ee:a7:8f:78:72:33:9a:f9:8f:a7:1d:2d:4d:d7: bc:96:1b:c0:05:27:3a:4e:93:38:a9:9b:61:56:7f: 55:16:ee:10:26:7a:a6:58:84:be:9f:8f:23:39:1b: 9a:b2:12:eb:f6:49:67:b9:3a:53:5c:4e:41:2a:5a: ae:29:fa:b5:c7:0e:9b:e4:2c:c4:40:a0:d4:5a:47: ab:b2:3e:60:73:3b:e9:b1:72:c5:c7:44:fe:7d:15: 20:00:c2:f7:86:42:22:43:39:bd:4d:49:73:5c:48: ee:c7:f3:cd:c2:87:55:0d:19:50:8a:3d:8c:fd:41: a8:f9:51:77:bb:d6:3f:ef:cb:4b:01:df:7a:1e:df: f7:bb:fe:dc:ef:20:72:53:e7:d9:c1:52:33:e5:6d: 53:55:a4:07:e7:a7:34:35:c7:f1:48:ad:b4:d5:58: c7:e5:e1:9e:de:03:81:a8:ff:0f:5f:9a:0b:b1:cf: ab:b9:3c:4c:2d:36:8d:6e:6c:b0:c2:e1:af:2f:73: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F4:F3:40:A3:EC:2B:A6:0B:65:C8:E7:53:FB:05:7C:CB:BD:FB:A3 X509v3 Authority Key Identifier: keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:93:7f:72:d8:93:9b:bb:ba:22:d3:32:f1:67:a6:7b:8f:63: 39:44:80:4c:05:b7:d6:c0:f6:5c:83:84:5e:3b:dd:dd:8e:88: b4:fc:06:d5:e5:05:9f:9e:0e:17:25:cf:37:54:67:6a:5b:5f: 34:9b:14:79:bf:8d:3d:25:cb:8d:23:76:37:85:a8:0a:c9:7b: 7f:12:25:ab:3c:b3:d1:2c:c4:38:0e:4a:16:80:ca:a6:c4:32: a8:61:5c:da:b5:a5:8d:cd:d6:d0:ab:f5:23:2b:5e:6d:be:db: 1f:c9:cb:2f:95:eb:61:ea:7f:b6:1c:3a:c8:95:ae:b8:83:c5: f1:e0:73:1f:31:e9:de:a7:68:d2:ca:20:68:b1:51:dd:59:7d: 4b:ce:6a:f0:d5:e0:60:f8:a1:e1:c5:b7:db:bd:28:23:a7:5c: 08:e2:6b:27:d6:de:6d:26:eb:6c:dc:a1:b7:6d:3a:cb:34:c9: 44:92:cd:6c:b2:00:b2:09:f3:38:e6:f4:1f:65:7f:c1:36:20: 15:18:ea:fd:79:64:5b:a6:a8:27:c3:20:0d:f5:70:7c:fa:9a: 3a:65:a3:8c:7e:1e:54:28:b6:cf:f1:87:7a:4d:98:99:88:a3: 17:47:40:b4:6a:2a:df:7a:ae:ef:54:6d:95:70:da:3b:d2:15: f1:97:8d:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKDIxMUEwMjFFOEFCREY0REJGMjA3MDgyMjZDQzgzMjhG RDI0MTMxREYwHhcNMjYxMDE5MDUyODI2WhcNMjYxMDI2MDUyODI2WjAYMRYwFAYD VQQDEw02YWQ1YWE3Yi01YTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAss34zOA+kk9/2C75eHD1HL6Ke5Gr7V1ydnlT68qgSq7njglfEZsFPMc6R47B b+dmRHvgnssYpZDOaVsy7qePeHIzmvmPpx0tTde8lhvABSc6TpM4qZthVn9VFu4Q JnqmWIS+n48jORuashLr9klnuTpTXE5BKlquKfq1xw6b5CzEQKDUWkersj5gczvp sXLFx0T+fRUgAML3hkIiQzm9TUlzXEjux/PNwodVDRlQij2M/UGo+VF3u9Y/78tL Ad96Ht/3u/7c7yByU+fZwVIz5W1TVaQH56c0NcfxSK201VjH5eGe3gOBqP8PX5oL sc+ruTxMLTaNbmywwuGvL3NmBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3080Cj 7CumC2XI51P7BXzLvfujMB8GA1UdIwQYMBaAFCEaAh6KvfTb8gcIImzIMo/SQTHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FMTYzODkxMDlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9JUm9DSG9xOTlOdnlCd2dpYk1neWo5SkJN ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lSb0NIb3E5OU52eUJ3Z2liTWd5ajlKQk1kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEYxMS9FMTYzODkxMDlBN0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9JUm9DSG9xOTlO dnlCd2dpYk1neWo5SkJNZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZN/ctiTm7u6ItMy8Weme49jOUSATAW31sD2XIOEXjvd3Y6ItPwG1eUFn54O FyXPN1RnaltfNJsUeb+NPSXLjSN2N4WoCsl7fxIlqzyz0SzEOA5KFoDKpsQyqGFc 2rWljc3W0Kv1Iytebb7bH8nLL5XrYep/thw6yJWuuIPF8eBzHzHp3qdo0sogaLFR 3Vl9S85q8NXgYPih4cW3270oI6dcCOJrJ9bebSbrbNyht206yzTJRJLNbLIAsgnz OOb0H2V/wTYgFRjq/XlkW6aoJ8MgDfVwfPqaOmWjjH4eVCi2z/GHek2YmYijF0dA tGoq33qu71RtlXDaO9IV8ZeNrw== -----END CERTIFICATE-----Generated at Mon Oct 19 22:22:42 2026 by rpki-client