$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json) Hash identifier: p08RDjvfVnfdI5Yc23ABFWk35GLC4ffb0gWWAcE8woM= Subject key identifier: 4B:23:30:0C:92:53:99:A2:F5:81:FA:70:D5:31:D5:42:B0:E1:05:50 Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft Manifest number: 021A Signing time: Mon 21 Sep 2026 02:54:37 +0000 Manifest this update: Mon 21 Sep 2026 02:54:37 +0000 Manifest next update: Mon 28 Sep 2026 02:54:37 +0000 Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: Rita/w3muYnaB7zKcI/7k9Ijdoo0EZE3xCKf8Q4z9+c=) 2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: HD0K5jglBpup2Ya1bJZyAOnbAr95k75UE1CHe344A3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Validity Not Before: Sep 21 02:54:37 2026 GMT Not After : Sep 28 02:54:37 2026 GMT Subject: CN=6ab09c6d-9223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:a0:a2:70:29:cb:06:46:62:3c:04:a2:ed: 75:7e:78:98:a2:7f:bd:72:47:43:30:46:b7:6c:37: 35:61:e2:7c:f7:29:48:40:fe:fa:47:88:06:cc:e2: 76:64:2b:c7:7f:92:f6:f6:d2:31:6a:09:39:75:23: 9b:7f:8a:1a:a9:41:b0:03:46:a1:a7:75:5b:f0:15: 49:8f:e6:72:00:d9:8c:81:bc:fc:2e:e1:58:d0:9d: 9c:e6:75:3a:d4:26:a9:69:a6:11:16:1a:56:80:0c: b5:4c:7f:3b:85:8e:10:9e:4e:b6:b0:1e:ae:e4:fc: 4b:76:d2:b2:24:d8:e0:69:e0:3c:da:4f:cb:c3:a7: a4:9e:d7:4b:a5:c9:82:61:4f:89:7b:a4:ec:0a:7f: 60:b7:c4:0f:81:d0:4e:ac:66:c8:55:e0:4f:ce:9d: 8f:81:83:f1:09:54:b5:9b:45:da:7e:b4:74:ec:a3: ec:ec:f4:ed:e8:c9:45:c4:92:02:d2:88:29:dc:e4: 90:f6:91:26:c5:f1:b3:95:7c:8f:6f:85:05:10:02: ec:ec:46:af:3e:2e:a4:a9:46:65:25:1e:9d:ad:75: 60:88:6a:41:47:e6:f4:99:34:2d:84:99:56:0c:bb: 5b:73:6f:64:3e:f5:f6:01:f4:ca:c5:0b:a7:ca:f4: 25:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:23:30:0C:92:53:99:A2:F5:81:FA:70:D5:31:D5:42:B0:E1:05:50 X509v3 Authority Key Identifier: keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:f7:07:17:68:2c:76:14:d8:df:81:af:1f:0b:0e:e0:91:ee: e9:92:3f:4d:aa:74:67:03:68:c0:3a:45:27:63:68:e4:75:d1: c6:0b:e8:b6:25:07:c9:cd:44:e8:d8:cd:66:28:32:3f:06:0c: d9:64:04:78:cf:48:b1:05:63:40:63:e3:fb:d9:c7:9a:59:92: 1d:90:c9:7f:f7:56:ba:13:77:45:83:a3:fb:0b:68:97:40:83: a9:10:4b:4e:11:09:51:fd:e0:a0:82:5c:5b:f1:36:b9:f3:68: a3:cc:be:f8:81:94:9f:3d:7b:8f:54:cc:c5:d6:f4:c5:99:dd: e9:c6:4d:e1:b7:06:2b:fa:d2:77:9d:83:97:bd:43:91:7d:da: a8:bf:ae:60:5b:42:b4:d8:62:77:f6:6a:5c:94:26:e5:18:3b: 89:fc:dd:f8:58:92:84:af:11:a3:47:c2:ca:0b:be:ec:56:a9: a6:99:12:94:40:7a:87:13:27:2b:38:ba:67:f6:4d:6f:7d:f4: 6b:6e:8b:0f:14:fd:34:9f:2a:4d:87:b6:fa:28:06:d1:44:7a: c9:66:14:66:b1:37:35:55:62:ce:7f:3a:ff:5f:ea:11:7e:bc: 28:d0:79:41:f6:08:b4:11:c6:96:97:56:53:19:0b:64:f5:39: d0:ea:73:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0RjcxMTAvBgNVBAUTKDIyRDNFOTc0NERBRDQ5NzUwMzZDQzQyMkFDMTFDNDA0 NzIwRTY2RUEwHhcNMjYwOTIxMDI1NDM3WhcNMjYwOTI4MDI1NDM3WjAYMRYwFAYD VQQDEw02YWIwOWM2ZC05MjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhCgonApywZGYjwEou11fniYon+9ckdDMEa3bDc1YeJ89ylIQP76R4gGzOJ2 ZCvHf5L29tIxagk5dSObf4oaqUGwA0ahp3Vb8BVJj+ZyANmMgbz8LuFY0J2c5nU6 1CapaaYRFhpWgAy1TH87hY4Qnk62sB6u5PxLdtKyJNjgaeA82k/Lw6ekntdLpcmC YU+Je6TsCn9gt8QPgdBOrGbIVeBPzp2PgYPxCVS1m0XafrR07KPs7PTt6MlFxJIC 0ogp3OSQ9pEmxfGzlXyPb4UFEALs7EavPi6kqUZlJR6drXVgiGpBR+b0mTQthJlW DLtbc29kPvX2AfTKxQunyvQlnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsjMAyS U5mi9YH6cNUx1UKw4QVQMB8GA1UdIwQYMBaAFCLT6XRNrUl1A2zEIqwRxARyDmbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRGNy8yQTQ4OTM4NjdF ODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNYVURiTVFpckJIRUJISU9a dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0UHBkRTJ0U1hVRGJNUWlyQkhFQkhJT1p1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTRGNy8yQTQ4OTM4NjdFODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNY VURiTVFpckJIRUJISU9adW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyfcHF2gsdhTY34GvHwsO4JHu6ZI/Tap0ZwNowDpFJ2No5HXRxgvotiUHyc1E 6NjNZigyPwYM2WQEeM9IsQVjQGPj+9nHmlmSHZDJf/dWuhN3RYOj+wtol0CDqRBL ThEJUf3goIJcW/E2ufNoo8y++IGUnz17j1TMxdb0xZnd6cZN4bcGK/rSd52Dl71D kX3aqL+uYFtCtNhid/ZqXJQm5Rg7ifzd+FiShK8Ro0fCygu+7FapppkSlEB6hxMn Kzi6Z/ZNb330a26LDxT9NJ8qTYe2+igG0UR6yWYUZrE3NVVizn86/1/qEX68KNB5 QfYItBHGlpdWUxkLZPU50OpzPQ== -----END CERTIFICATE-----Generated at Mon Sep 21 16:30:49 2026 by rpki-client