$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft File: ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft (raw, json) Hash identifier: rbdk7gcs+0sYJY7aY3vEL4ijt2CCvVJ5DnjWBlk08gQ= Subject key identifier: A1:AE:42:67:1A:9B:08:6B:B3:6B:56:07:0B:6D:FB:F5:20:79:43:02 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1E68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft Manifest number: 1DD2 Signing time: Thu 24 Sep 2026 16:05:56 +0000 Manifest this update: Thu 24 Sep 2026 16:05:55 +0000 Manifest next update: Thu 01 Oct 2026 16:05:55 +0000 Files and hashes: 1: ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl (hash: eD1DoLdOf5MlztGghlnmoJ1YIs0T9bbTkGmcybV7BLw=) 2: CCD092AE4E6411EF92C0EC3AC4F9AE02.roa (hash: /vJS5mvYoaeQ7e5TPVVBx64c5yOqiYznmnqStY9GYWY=) 3: D1A879DA769011F18B30BBE765A30FBC.roa (hash: MWgXgLvg84RJCX9V3qs+7dPPh/hqmJ2OanGVl5DYgwY=) 4: 2F9A7A1648FC11EBBAE0991CC4F9AE02.roa (hash: OyJ386kUL4gGWlM9zenD8Or9GBx/nawzJcbJiadjXEs=) 5: 089DB16C769111F1BA451BEF65A30FBC.roa (hash: 8p6Re7pqOXecnmQu/NSydvCbJad68BH9Gn7yDp3+bDg=) 6: 84064494E48F11EF8386EA50C4F9AE02.roa (hash: e2z23i28QBdo2imUKS15DY31HQcf+q8FZJ7ZqEZMi64=) 7: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (hash: syfI5VBGCCOaxinq66/rQy0KiVO/nQZm82G8XJ0s/uQ=) 8: 87F433B2234C11EBA94AE637C4F9AE02.roa (hash: FZUA9ujh5y+qedLhZYHjBMCqwCiia7dWK5HBk6r/R3A=) 9: D3C8593E905E11EFAF2C185CC4F9AE02.roa (hash: Ruxh9vs1IEEY8sUgeoqbiAjkOA3NIO1oE49c/aSiPyo=) 10: 3322FCF6B8B611F09EE22E11C4F9AE02.roa (hash: vPw7xATzv0O2yNoJH3ofUOV61xAOAH8pdJ0rodOC4Lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7784 (0x1e68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Sep 24 16:05:55 2026 GMT Not After : Oct 1 16:05:55 2026 GMT Subject: CN=6ab54a63-a50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:2f:90:18:76:52:e5:5f:71:43:90:f3:cd: cc:df:b3:09:a7:85:1d:41:e7:d2:96:9f:4a:ad:68: dc:b2:b7:d4:f7:ca:70:47:5b:27:b8:aa:5a:55:00: e5:59:d1:43:92:9b:96:98:91:31:a2:20:26:f5:24: 85:da:4b:5f:08:7e:0c:25:cd:c5:1a:a9:36:a9:4b: dc:ea:2f:f4:8c:eb:d0:ca:df:81:3b:4a:4b:98:4d: 90:7d:f3:fe:4d:25:c2:23:bc:7e:a7:e1:ae:9e:e2: 44:25:25:9d:1a:3e:98:01:16:ce:93:5b:17:98:40: e1:1b:c1:d6:5a:4c:97:a0:16:c0:84:32:46:f9:a2: ce:6f:45:c6:61:86:3a:42:e1:c5:d3:66:f7:67:fc: 0a:cc:bb:3f:77:de:6e:87:aa:53:41:01:8c:1a:82: 35:37:20:cc:95:85:25:9f:cd:46:a1:14:24:a6:13: 79:70:ca:5b:b0:b2:f7:d3:b1:4b:87:b0:cd:e3:7c: 64:cf:e7:1f:a6:b2:78:a5:6e:f6:b0:32:06:98:e2: fa:1a:2e:05:52:34:c5:59:52:9b:d4:a4:cd:ad:b9: 58:5c:76:35:ef:7b:e9:bf:15:3a:95:ae:13:b6:65: 13:4b:62:5c:55:7e:b6:8d:bc:46:0d:ca:fd:d3:4f: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AE:42:67:1A:9B:08:6B:B3:6B:56:07:0B:6D:FB:F5:20:79:43:02 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d1:49:3d:86:20:b1:0b:39:d9:8e:c4:17:75:cd:2a:61:58: 79:7b:94:5f:17:50:6c:e4:a9:b5:81:03:de:71:ce:26:9a:ae: 5b:00:c3:68:a9:e3:b4:83:9c:fb:bd:23:d9:d6:4b:4c:ac:d3: af:e0:fd:1f:2c:e0:12:63:42:63:ff:f0:3c:35:1a:dc:aa:f0: 75:5a:31:7a:d7:64:ab:a5:ff:65:09:f7:b7:cb:3b:92:67:3f: 42:af:26:49:62:a2:85:62:cd:45:36:f6:6f:e7:1b:84:c6:99: ae:7d:9a:3d:65:72:5e:db:68:c6:72:d3:89:82:c6:24:8e:6a: 57:60:1d:20:49:18:ec:61:ed:48:55:ad:03:93:42:81:2a:21: 86:de:e0:0d:c3:a6:2e:80:36:41:c5:0c:d5:40:05:a3:cf:43: 5e:72:4f:03:88:be:36:dd:9e:8b:26:36:33:2c:78:39:3c:bf: 94:88:fd:82:c9:c1:54:50:84:8b:93:8b:b6:23:1f:96:59:47: 37:30:ab:b3:03:a8:04:d7:5e:07:cd:3a:fb:1f:ca:70:94:67: 07:7a:d5:71:ba:65:66:b2:15:51:f4:3a:e4:de:8d:e4:c0:bd: 4c:3b:d3:87:ff:5e:a7:e8:1c:a2:be:7d:ca:f9:ec:61:29:66: 58:6c:0e:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjYwOTI0MTYwNTU1WhcNMjYxMDAxMTYwNTU1WjAYMRYwFAYD VQQDEw02YWI1NGE2My1hNTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbIvkBh2UuVfcUOQ883M37MJp4UdQefSlp9KrWjcsrfU98pwR1snuKpaVQDl WdFDkpuWmJExoiAm9SSF2ktfCH4MJc3FGqk2qUvc6i/0jOvQyt+BO0pLmE2QffP+ TSXCI7x+p+GunuJEJSWdGj6YARbOk1sXmEDhG8HWWkyXoBbAhDJG+aLOb0XGYYY6 QuHF02b3Z/wKzLs/d95uh6pTQQGMGoI1NyDMlYUln81GoRQkphN5cMpbsLL307FL h7DN43xkz+cfprJ4pW72sDIGmOL6Gi4FUjTFWVKb1KTNrblYXHY173vpvxU6la4T tmUTS2JcVX62jbxGDcr9008upQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGuQmca mwhrs2tWBwtt+/UgeUMCMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTg0QS8xODA1MTkxQUUxRUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJj SVZMS2lWYjBNdm1vRTVZRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATNFJPYYgsQs52Y7EF3XNKmFYeXuUXxdQbOSptYED3nHOJpquWwDDaKnjtIOc +70j2dZLTKzTr+D9HyzgEmNCY//wPDUa3KrwdVoxetdkq6X/ZQn3t8s7kmc/Qq8m SWKihWLNRTb2b+cbhMaZrn2aPWVyXttoxnLTiYLGJI5qV2AdIEkY7GHtSFWtA5NC gSohht7gDcOmLoA2QcUM1UAFo89DXnJPA4i+Nt2eiyY2Myx4OTy/lIj9gsnBVFCE i5OLtiMflllHNzCrswOoBNdeB806+x/KcJRnB3rVcbplZrIVUfQ65N6N5MC9TDvT h/9ep+gcor59yvnsYSlmWGwO6w== -----END CERTIFICATE-----Generated at Sat Sep 26 17:03:27 2026 by rpki-client