$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft File: IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json) Hash identifier: 4it2OSKaXATQl+xe/TWHF/QHBidTzwqzxJKcuKCOQnk= Subject key identifier: 8B:01:F7:1A:E9:0C:8C:B8:81:73:0F:83:7E:C6:36:27:20:DB:59:1D Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft Manifest number: 01A4 Signing time: Mon 21 Sep 2026 04:11:01 +0000 Manifest this update: Mon 21 Sep 2026 04:11:01 +0000 Manifest next update: Mon 28 Sep 2026 04:11:01 +0000 Files and hashes: 1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: JPCrOJ5h+JggBW/WkjcjDClpC9reMtg+e9632fK02L4=) 2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: Z9psePfPHTD1JWqFIEMEnQFvkSAfBuwnGTYYVZWeEbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Validity Not Before: Sep 21 04:11:01 2026 GMT Not After : Sep 28 04:11:01 2026 GMT Subject: CN=6ab0ae55-b2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:41:7c:f1:08:9e:83:e8:f3:1b:05:cf:0b: b4:65:ca:b0:06:20:77:f3:ed:66:e8:51:31:8f:f8: 94:96:45:92:d7:80:38:bc:2f:8a:d8:84:a8:88:94: 88:0e:0b:59:7b:75:57:e5:87:14:5b:1c:18:61:89: 2b:e3:f2:26:b4:4c:88:aa:dd:23:c6:95:52:e2:0b: 78:14:6b:10:8a:6a:fc:d1:75:6f:a4:e4:31:9e:1c: 53:5a:fc:9e:84:1d:f8:7a:4b:59:81:14:4f:52:99: bf:d0:33:a4:a6:36:95:b1:7e:77:99:4d:1c:30:30: 37:5f:b6:d5:1a:cd:d4:9a:e3:41:ef:21:a3:f1:7a: 37:b5:24:88:80:82:63:22:f6:a0:45:72:aa:cd:c0: 45:52:79:18:16:c5:4b:33:28:fb:56:a9:9e:bc:74: 29:99:fa:9a:8b:05:16:8e:38:55:4b:5d:16:55:92: a7:92:6d:ad:8b:e7:60:02:0e:55:60:98:75:b9:0a: 39:70:54:f9:d0:71:ef:53:da:09:f1:b1:ff:97:d2: 46:9a:61:6b:f7:e1:fa:79:1e:50:a4:c1:f3:69:bd: fd:e0:6b:91:e8:9c:4e:c4:58:c3:99:c8:5f:29:b3: 30:25:f8:d3:ad:89:25:ec:82:a2:1e:0b:4b:6d:11: ac:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:01:F7:1A:E9:0C:8C:B8:81:73:0F:83:7E:C6:36:27:20:DB:59:1D X509v3 Authority Key Identifier: keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ec:a4:cc:97:2d:46:a7:02:4a:35:b2:54:11:27:8b:28:0f: 9d:2e:41:43:04:6a:8e:5b:4a:2a:dd:1a:f7:43:31:08:2a:dc: 4a:eb:d1:9c:3a:b0:6a:e6:11:85:bb:05:22:f6:d9:90:04:92: e6:58:ef:84:c8:6b:b6:c7:43:17:5b:55:c5:47:be:3e:b9:bf: 84:ef:9b:fd:08:1e:43:76:5d:ce:4e:24:1b:8e:27:47:b8:4e: 8c:27:ec:c3:24:f3:3b:7e:24:55:6c:08:a2:be:44:3f:6c:48: bf:69:05:f5:24:33:73:d8:8b:94:73:e4:82:00:62:c8:19:2b: af:62:cf:8d:08:29:dd:e8:a3:d4:bc:d6:b8:66:0e:28:b1:bb: 24:6a:02:11:74:42:fb:ab:65:5f:62:9b:25:12:09:13:2f:e2: e4:fb:7c:6d:e0:0c:92:c9:03:5c:f5:73:0e:41:0a:63:31:ca: 13:7c:94:46:80:0d:55:f8:84:4d:f1:fc:be:31:84:c6:b1:f2: 7c:52:81:26:2b:70:05:9b:65:5a:6c:8f:38:ad:26:b0:f8:89: b2:f0:20:67:b8:6b:f2:9c:3f:ff:b0:7a:b3:ed:c9:b0:5a:36: fa:91:e5:97:ad:88:2e:28:ec:88:3f:7e:47:55:4d:e2:97:59: d8:6f:11:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQTcxMTAvBgNVBAUTKDIyQTYyQzE0RDJCRDMyRTNFNTk2RDhBM0U2MkJCQzMy NzQ0NjhGOTkwHhcNMjYwOTIxMDQxMTAxWhcNMjYwOTI4MDQxMTAxWjAYMRYwFAYD VQQDEw02YWIwYWU1NS1iMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvExBfPEInoPo8xsFzwu0ZcqwBiB38+1m6FExj/iUlkWS14A4vC+K2ISoiJSI DgtZe3VX5YcUWxwYYYkr4/ImtEyIqt0jxpVS4gt4FGsQimr80XVvpOQxnhxTWvye hB34ektZgRRPUpm/0DOkpjaVsX53mU0cMDA3X7bVGs3UmuNB7yGj8Xo3tSSIgIJj IvagRXKqzcBFUnkYFsVLMyj7VqmevHQpmfqaiwUWjjhVS10WVZKnkm2ti+dgAg5V YJh1uQo5cFT50HHvU9oJ8bH/l9JGmmFr9+H6eR5QpMHzab394GuR6JxOxFjDmchf KbMwJfjTrYkl7IKiHgtLbRGspwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsB9xrp DIy4gXMPg37GNicg21kdMB8GA1UdIwQYMBaAFCKmLBTSvTLj5ZbYo+YrvDJ0Ro+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVBNy9CMUIzRTJENjM4 NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11UGxsdGlqNWl1OE1uUkdq NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVBNy9CMUIzRTJENjM4NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11 UGxsdGlqNWl1OE1uUkdqNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAROykzJctRqcCSjWyVBEniygPnS5BQwRqjltKKt0a90MxCCrcSuvRnDqwauYR hbsFIvbZkASS5ljvhMhrtsdDF1tVxUe+Prm/hO+b/QgeQ3Zdzk4kG44nR7hOjCfs wyTzO34kVWwIor5EP2xIv2kF9SQzc9iLlHPkggBiyBkrr2LPjQgp3eij1LzWuGYO KLG7JGoCEXRC+6tlX2KbJRIJEy/i5Pt8beAMkskDXPVzDkEKYzHKE3yURoANVfiE TfH8vjGExrHyfFKBJitwBZtlWmyPOK0msPiJsvAgZ7hr8pw//7B6s+3JsFo2+pHl l62ILijsiD9+R1VN4pdZ2G8RUg== -----END CERTIFICATE-----Generated at Mon Sep 21 07:40:17 2026 by rpki-client