$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft File: ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft (raw, json) Hash identifier: 4pBZtoOn/hWtvrAmuQIrY8q8+KXE7mn5Y8Rv6yaKY88= Subject key identifier: DA:D7:F2:B9:F6:CD:3A:58:31:96:B0:63:E5:A0:9E:A0:0C:45:31:E5 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1E66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft Manifest number: 1DD0 Signing time: Sun 20 Sep 2026 16:05:11 +0000 Manifest this update: Sun 20 Sep 2026 16:05:11 +0000 Manifest next update: Sun 27 Sep 2026 16:05:11 +0000 Files and hashes: 1: ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl (hash: yCwz6XqWbon4zxV5LeUDbwrnHuV9y3azw1WikiwH3P4=) 2: 089DB16C769111F1BA451BEF65A30FBC.roa (hash: 8p6Re7pqOXecnmQu/NSydvCbJad68BH9Gn7yDp3+bDg=) 3: CCD092AE4E6411EF92C0EC3AC4F9AE02.roa (hash: /vJS5mvYoaeQ7e5TPVVBx64c5yOqiYznmnqStY9GYWY=) 4: 87F433B2234C11EBA94AE637C4F9AE02.roa (hash: FZUA9ujh5y+qedLhZYHjBMCqwCiia7dWK5HBk6r/R3A=) 5: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (hash: syfI5VBGCCOaxinq66/rQy0KiVO/nQZm82G8XJ0s/uQ=) 6: D3C8593E905E11EFAF2C185CC4F9AE02.roa (hash: Ruxh9vs1IEEY8sUgeoqbiAjkOA3NIO1oE49c/aSiPyo=) 7: 3322FCF6B8B611F09EE22E11C4F9AE02.roa (hash: vPw7xATzv0O2yNoJH3ofUOV61xAOAH8pdJ0rodOC4Lw=) 8: 84064494E48F11EF8386EA50C4F9AE02.roa (hash: e2z23i28QBdo2imUKS15DY31HQcf+q8FZJ7ZqEZMi64=) 9: D1A879DA769011F18B30BBE765A30FBC.roa (hash: MWgXgLvg84RJCX9V3qs+7dPPh/hqmJ2OanGVl5DYgwY=) 10: 2F9A7A1648FC11EBBAE0991CC4F9AE02.roa (hash: OyJ386kUL4gGWlM9zenD8Or9GBx/nawzJcbJiadjXEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7782 (0x1e66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Sep 20 16:05:11 2026 GMT Not After : Sep 27 16:05:11 2026 GMT Subject: CN=6ab00437-e492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e1:35:b1:e2:7d:d7:a3:4a:d7:30:4e:36:e8: b7:f7:1b:1d:59:f5:a4:8d:0f:e7:e3:3d:20:1a:76: ed:65:79:fc:95:26:2b:2a:71:bd:62:45:a7:22:f0: af:ad:1a:37:ed:8d:0c:b7:ec:8a:8f:a0:02:e4:64: ff:db:24:c0:73:4b:10:69:37:94:40:13:b5:bb:e9: 55:02:84:01:ae:24:bf:54:0c:a1:44:37:1d:66:48: 68:41:78:2c:34:9b:ad:34:ad:7f:8b:0d:54:93:dc: 5f:72:76:e0:2d:af:a7:c1:ff:18:07:6f:4c:88:0d: 0a:ec:64:38:34:14:57:90:e3:5a:42:3b:d7:47:9c: 32:7e:91:c6:23:ee:e4:a6:da:53:e8:35:f6:22:e8: 63:e5:0f:f2:39:52:8b:d8:95:c6:85:d7:88:b3:fc: 98:92:4c:c8:79:56:ba:3c:07:52:83:6f:1e:72:6e: ad:ad:0d:21:de:17:f6:55:e8:9b:3b:fc:99:f0:dd: 4f:15:4e:15:60:8e:cd:bb:1f:f7:b3:0b:14:53:97: 1e:f3:f1:65:2b:93:75:2b:aa:bc:bd:91:e0:3f:9f: b0:5d:86:75:1e:ab:a9:5c:58:33:fb:d8:56:b9:0c: 7f:81:02:84:28:fc:9f:95:b5:00:69:59:ab:16:82: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D7:F2:B9:F6:CD:3A:58:31:96:B0:63:E5:A0:9E:A0:0C:45:31:E5 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:91:92:85:28:37:76:68:b9:2c:19:21:85:53:e1:74:a9:f7: 46:89:2e:8c:40:07:96:3e:a6:26:af:cd:1d:2c:81:89:31:6c: 74:74:95:72:ab:7c:7b:ce:70:ce:f9:78:06:ff:7c:24:13:c0: 79:4e:32:a5:5e:8a:28:44:45:b0:e5:6e:6d:94:af:3f:16:89: fc:ed:dd:04:00:d8:59:36:16:cc:38:fd:00:33:93:20:95:e4: 91:aa:9b:a8:64:60:4c:e0:37:76:f9:ae:45:e4:3f:c4:39:8a: 69:e1:87:dd:69:5b:fe:06:d1:4e:48:7b:cb:67:6e:31:83:2c: 21:b3:32:29:18:0a:84:4c:b7:15:ab:ba:11:53:d5:ed:63:04: a2:99:83:6f:6b:49:0a:9f:7d:fd:75:1f:08:12:c1:6f:c5:8d: 2e:80:ab:39:80:b5:16:db:03:13:1c:62:b1:fe:46:29:d1:d3: 62:a6:17:70:28:42:e0:0a:2c:86:6f:66:06:08:cc:a9:96:4c: b3:c5:8f:bb:bc:ac:73:85:a5:19:69:9a:3f:f1:80:1f:b6:f0: c4:79:3e:8b:9f:a6:c5:df:fe:7d:34:09:c6:c7:86:8b:99:7b: af:f1:5e:28:cf:b3:8a:0b:6b:a5:31:b8:a8:21:11:09:13:8d: 78:b0:d4:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjYwOTIwMTYwNTExWhcNMjYwOTI3MTYwNTExWjAYMRYwFAYD VQQDEw02YWIwMDQzNy1lNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuE1seJ916NK1zBONui39xsdWfWkjQ/n4z0gGnbtZXn8lSYrKnG9YkWnIvCv rRo37Y0Mt+yKj6AC5GT/2yTAc0sQaTeUQBO1u+lVAoQBriS/VAyhRDcdZkhoQXgs NJutNK1/iw1Uk9xfcnbgLa+nwf8YB29MiA0K7GQ4NBRXkONaQjvXR5wyfpHGI+7k ptpT6DX2Iuhj5Q/yOVKL2JXGhdeIs/yYkkzIeVa6PAdSg28ecm6trQ0h3hf2Veib O/yZ8N1PFU4VYI7Nux/3swsUU5ce8/FlK5N1K6q8vZHgP5+wXYZ1HqupXFgz+9hW uQx/gQKEKPyflbUAaVmrFoIN4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrX8rn2 zTpYMZawY+WgnqAMRTHlMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTg0QS8xODA1MTkxQUUxRUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJj SVZMS2lWYjBNdm1vRTVZRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAJGShSg3dmi5LBkhhVPhdKn3RokujEAHlj6mJq/NHSyBiTFsdHSVcqt8e85w zvl4Bv98JBPAeU4ypV6KKERFsOVubZSvPxaJ/O3dBADYWTYWzDj9ADOTIJXkkaqb qGRgTOA3dvmuReQ/xDmKaeGH3Wlb/gbRTkh7y2duMYMsIbMyKRgKhEy3Fau6EVPV 7WMEopmDb2tJCp99/XUfCBLBb8WNLoCrOYC1FtsDExxisf5GKdHTYqYXcChC4Aos hm9mBgjMqZZMs8WPu7ysc4WlGWmaP/GAH7bwxHk+i5+mxd/+fTQJxseGi5l7r/Fe KM+zigtrpTG4qCERCRONeLDUuw== -----END CERTIFICATE-----Generated at Tue Sep 22 14:08:36 2026 by rpki-client