$ rpki-client -vvvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft File: iaGX0JdonG6zOGepzIrM1_s2Tok.mft (raw, json) Hash identifier: /3S/1xWzaI0nW+xNJGLFMEIl395EUGKXuJV76AHDUj4= Subject key identifier: A7:01:5D:42:35:4F:06:AB:2D:34:32:A6:10:ED:D6:C7:6D:FA:D9:2B Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 Certificate issuer: /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Certificate serial: 0545 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft Manifest number: 0538 Signing time: Tue 22 Sep 2026 23:13:27 +0000 Manifest this update: Tue 22 Sep 2026 23:13:27 +0000 Manifest next update: Tue 29 Sep 2026 23:13:27 +0000 Files and hashes: 1: iaGX0JdonG6zOGepzIrM1_s2Tok.crl (hash: mF/B2GxQ14fmA19Mf7NL+AsGbnEmjA5dPE2wxrnkgrM=) 2: E82DE3C290AB11ECAB81252FC4F9AE02.roa (hash: PglW3T12IKlMircnLLUZ33j6kRlzVW56A2kCHbmh2rY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1349 (0x545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917991B, serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Validity Not Before: Sep 22 23:13:27 2026 GMT Not After : Sep 29 23:13:27 2026 GMT Subject: CN=6ab30b97-8966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:fa:8b:56:6a:74:e8:47:c4:df:7b:ff:c7: e0:0e:ef:50:88:07:38:62:32:32:d3:bd:97:9e:5e: 98:02:57:da:43:b4:78:70:f5:1e:5d:81:df:54:78: 6a:df:90:a7:5e:e5:fe:a4:d3:16:58:b1:c6:b2:90: ea:d6:11:76:d8:d1:00:62:ca:1f:8a:6e:78:53:c5: 60:fa:5c:c9:2f:df:2d:a2:d3:dd:e8:40:b2:31:b9: d7:e7:2e:f0:a2:d6:92:e5:c2:9b:71:b9:a8:35:7c: 29:c9:30:a8:ea:b2:07:c9:32:18:a4:ff:af:63:26: 9a:73:29:8a:c8:d3:a6:5c:8b:8b:d9:5b:41:be:de: 3c:a6:77:b9:93:f5:56:0c:15:63:64:c2:45:00:6f: 27:9d:e4:ae:79:ce:a2:13:ee:d0:bf:ce:41:20:1f: 48:89:b7:49:d5:43:33:3e:ed:e9:64:b3:67:c0:4a: 5f:1c:01:28:1d:4f:4f:c0:db:44:c0:a5:88:4e:57: 11:25:29:f9:46:9c:4b:11:e2:c1:53:94:26:58:0e: dd:21:3d:71:e2:ce:24:b5:7e:d0:78:53:64:17:af: 2c:80:39:69:7a:66:43:30:e0:3b:93:db:2c:02:e4: 57:b4:a6:43:0b:4e:c3:58:f2:bb:66:ae:88:98:51: f4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:01:5D:42:35:4F:06:AB:2D:34:32:A6:10:ED:D6:C7:6D:FA:D9:2B X509v3 Authority Key Identifier: keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f3:9c:67:f9:a1:ed:44:a0:de:50:ee:05:19:ce:f3:f5:11: 4a:ec:c5:8f:01:b2:07:91:4b:3e:13:50:50:22:94:02:71:57: e5:05:d6:4b:fe:5a:ab:f7:68:7b:8a:1f:26:0b:ef:6d:d5:eb: fc:64:2b:5b:5b:f2:2d:e7:13:8f:63:33:06:5f:fe:5f:84:64: 7f:d3:0f:fe:cb:49:5f:e4:86:71:cb:3c:57:b9:5e:d5:cd:8c: 82:c8:93:5e:32:a4:1b:96:6b:b3:6f:3c:9c:5b:fd:7c:af:8a: 91:80:b5:6d:b4:f9:d8:3a:83:a8:5c:13:95:88:20:5c:59:9a: b6:32:4e:a4:d1:2a:71:da:45:30:ab:44:36:25:05:17:4d:5f: dd:28:31:94:ab:85:a2:81:dd:a2:a0:ff:a2:8c:b4:50:0f:c7: 3f:0f:b3:8f:73:ff:06:37:a0:07:e2:48:d9:54:10:b3:64:ca: 35:65:80:cf:2d:9c:01:e6:91:f9:82:a5:b6:22:8a:d1:67:e7: 45:12:d2:ca:52:bc:2d:95:ab:d9:b1:0c:77:9e:3f:c3:f5:1d: ac:08:8a:ba:04:98:ee:95:52:a0:5c:44:cb:b2:ca:25:66:16: 2e:9f:60:fc:9f:06:f1:da:40:fd:13:2e:d2:fa:40:d6:d0:bf: 84:f3:f6:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5MUIxMTAvBgNVBAUTKDg5QTE5N0QwOTc2ODlDNkVCMzM4NjdBOUNDOEFDQ0Q3 RkIzNjRFODkwHhcNMjYwOTIyMjMxMzI3WhcNMjYwOTI5MjMxMzI3WjAYMRYwFAYD VQQDEw02YWIzMGI5Ny04OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlj6i1ZqdOhHxN97/8fgDu9QiAc4YjIy072Xnl6YAlfaQ7R4cPUeXYHfVHhq 35CnXuX+pNMWWLHGspDq1hF22NEAYsofim54U8Vg+lzJL98totPd6ECyMbnX5y7w otaS5cKbcbmoNXwpyTCo6rIHyTIYpP+vYyaacymKyNOmXIuL2VtBvt48pne5k/VW DBVjZMJFAG8nneSuec6iE+7Qv85BIB9IibdJ1UMzPu3pZLNnwEpfHAEoHU9PwNtE wKWITlcRJSn5RpxLEeLBU5QmWA7dIT1x4s4ktX7QeFNkF68sgDlpemZDMOA7k9ss AuRXtKZDC07DWPK7Zq6ImFH0pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcBXUI1 TwarLTQyphDt1sdt+tkrMB8GA1UdIwQYMBaAFImhl9CXaJxuszhnqcyKzNf7Nk6J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTkxQi83RDBDMzdEMDYw NDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25HNnpPR2VweklyTTFfczJU b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhR1gwSmRvbkc2ek9HZXB6SXJNMV9zMlRvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTkxQi83RDBDMzdEMDYwNDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25H NnpPR2VweklyTTFfczJUb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOPOcZ/mh7USg3lDuBRnO8/URSuzFjwGyB5FLPhNQUCKUAnFX5QXWS/5aq/do e4ofJgvvbdXr/GQrW1vyLecTj2MzBl/+X4Rkf9MP/stJX+SGccs8V7le1c2MgsiT XjKkG5Zrs288nFv9fK+KkYC1bbT52DqDqFwTlYggXFmatjJOpNEqcdpFMKtENiUF F01f3SgxlKuFooHdoqD/ooy0UA/HPw+zj3P/BjegB+JI2VQQs2TKNWWAzy2cAeaR +YKltiKK0WfnRRLSylK8LZWr2bEMd54/w/UdrAiKugSY7pVSoFxEy7LKJWYWLp9g /J8G8dpA/RMu0vpA1tC/hPP2SA== -----END CERTIFICATE-----Generated at Wed Sep 23 14:30:57 2026 by rpki-client