$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json) Hash identifier: Y39sxG5wGht2btet55OKIr6Uba9ESxZMBBXXBA24Ox4= Subject key identifier: 2E:E5:83:EB:7F:DE:93:6D:CA:30:16:6F:10:AF:49:7A:90:DE:32:DA Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Certificate serial: 35B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft Manifest number: 358B Signing time: Sun 20 Sep 2026 15:02:35 +0000 Manifest this update: Sun 20 Sep 2026 15:02:35 +0000 Manifest next update: Sun 27 Sep 2026 15:02:35 +0000 Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: kIdufjSMNXeBGNzEUS/cieqt/fdrEGY5ASjGuH77Qig=) 2: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: z7Wg/yYEe/naNZajz7OC8CRPdjQ8pKf0KALnyOn87iA=) 3: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=) 4: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13746 (0x35b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Validity Not Before: Sep 20 15:02:35 2026 GMT Not After : Sep 27 15:02:35 2026 GMT Subject: CN=6aaff58b-ee49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:e4:98:f9:94:8b:ee:3b:56:c7:60:0d:55: 8d:68:e3:94:57:ac:3e:ba:2a:be:e4:11:80:d9:35: d0:62:4f:9c:df:0b:3b:b0:20:60:89:fa:d6:f5:06: 13:ec:48:f8:a6:db:33:3e:0b:8a:66:f2:3e:5b:a0: 49:33:8f:2c:c1:1e:98:ca:64:67:58:55:54:5f:73: d5:1d:10:13:24:b2:5f:3b:92:35:51:23:1b:ca:0c: 89:5c:6f:a7:dd:e0:f2:73:29:82:d9:1f:e7:89:60: 47:81:c6:b0:19:1e:c8:41:29:6c:5d:91:fd:1c:2d: 8f:f5:c4:38:66:9a:fb:6b:cd:d9:f9:02:8d:93:22: 8d:bb:ba:07:1a:1f:d9:25:ce:26:99:7f:6a:68:97: 09:d1:ce:e8:71:29:1f:20:9f:fa:e1:dd:6a:4a:26: c3:84:f5:b0:83:7c:be:be:7b:46:87:2d:7b:7b:b7: 76:48:3c:46:37:bf:88:9f:8f:fd:b8:be:76:bb:90: 48:3d:5f:5c:ef:01:7c:ce:53:17:01:44:8d:1d:a1: 8d:03:58:9c:19:e2:e4:29:f7:67:b3:27:4e:59:89: df:f5:29:83:04:51:19:2d:42:b2:c4:c6:06:74:9d: a2:85:a0:2a:65:0b:68:68:98:1a:72:ee:ba:f6:52: 51:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E5:83:EB:7F:DE:93:6D:CA:30:16:6F:10:AF:49:7A:90:DE:32:DA X509v3 Authority Key Identifier: keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:71:46:f0:3e:c8:07:86:aa:6e:88:67:27:73:01:82:cf:19: e8:e1:92:83:c0:6b:a1:4f:18:90:e3:3f:ce:0b:52:ff:12:df: 07:17:97:b5:9d:f1:1f:31:fc:fb:a6:12:a2:ec:93:90:bd:12: 2d:9e:f6:96:30:0e:f7:ad:e0:fc:1e:b9:14:c7:65:8a:57:eb: 88:d3:eb:2a:89:88:f0:3c:3b:d3:8e:ae:b9:51:84:68:a3:85: 5e:39:0e:36:c0:94:57:29:01:b5:7b:ce:61:9a:1b:9a:06:d4: 72:54:ee:5b:79:14:28:b0:29:96:e7:8c:00:4f:1c:9c:34:8c: 2b:f1:60:9d:b4:6b:8b:ee:e8:8c:82:6a:4f:7b:80:c9:6d:69: e7:02:81:ce:0b:0f:44:4e:a4:1b:81:98:07:15:db:36:93:9d: 54:81:91:06:46:a3:04:4d:d4:5b:30:82:8d:9d:9f:2c:86:e5: 8c:e8:c6:20:37:32:62:f2:1c:78:d2:c0:0f:87:ec:74:35:ff: 03:03:44:c2:da:d9:d0:13:30:3d:1c:a5:d5:74:3e:cd:e8:ba: e5:f5:9d:73:ee:c0:d9:cf:f6:e1:8c:e3:e9:ab:74:f7:c6:dc: 39:a8:36:c6:bb:ee:a5:94:38:85:b1:49:fe:2b:54:66:40:ff: 93:01:f9:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz MTE4NTgwMEIwHhcNMjYwOTIwMTUwMjM1WhcNMjYwOTI3MTUwMjM1WjAYMRYwFAYD VQQDEw02YWFmZjU4Yi1lZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPPkmPmUi+47VsdgDVWNaOOUV6w+uiq+5BGA2TXQYk+c3ws7sCBgifrW9QYT 7Ej4ptszPguKZvI+W6BJM48swR6YymRnWFVUX3PVHRATJLJfO5I1USMbygyJXG+n 3eDycymC2R/niWBHgcawGR7IQSlsXZH9HC2P9cQ4Zpr7a83Z+QKNkyKNu7oHGh/Z Jc4mmX9qaJcJ0c7ocSkfIJ/64d1qSibDhPWwg3y+vntGhy17e7d2SDxGN7+In4/9 uL52u5BIPV9c7wF8zlMXAUSNHaGNA1icGeLkKfdnsydOWYnf9SmDBFEZLUKyxMYG dJ2ihaAqZQtoaJgacu669lJRQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7lg+t/ 3pNtyjAWbxCvSXqQ3jLaMB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTM0NC81MTVDQUJFMDFEQTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQ UVNLV19ycHM1dGd4R0ZnQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMXFG8D7IB4aqbohnJ3MBgs8Z6OGSg8BroU8YkOM/zgtS/xLfBxeXtZ3xHzH8 +6YSouyTkL0SLZ72ljAO963g/B65FMdlilfriNPrKomI8Dw7046uuVGEaKOFXjkO NsCUVykBtXvOYZobmgbUclTuW3kUKLAplueMAE8cnDSMK/FgnbRri+7ojIJqT3uA yW1p5wKBzgsPRE6kG4GYBxXbNpOdVIGRBkajBE3UWzCCjZ2fLIbljOjGIDcyYvIc eNLAD4fsdDX/AwNEwtrZ0BMwPRyl1XQ+zei65fWdc+7A2c/24Yzj6at098bcOag2 xrvupZQ4hbFJ/itUZkD/kwH5Sg== -----END CERTIFICATE-----Generated at Tue Sep 22 10:13:43 2026 by rpki-client