$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json) Hash identifier: MuCo8A3DMJFoTT1ZTrbbHuSObIRs9PF3zo/RgxoyX9U= Subject key identifier: 78:9C:C7:EF:19:9F:33:E8:D5:18:16:CB:19:D1:A5:D9:A5:0E:D8:29 Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E Certificate issuer: /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft Manifest number: 8F Signing time: Wed 23 Sep 2026 07:19:06 +0000 Manifest this update: Wed 23 Sep 2026 07:19:05 +0000 Manifest next update: Wed 30 Sep 2026 07:19:05 +0000 Files and hashes: 1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: LHWnFlpqTr5plJSTkXJYrVrT7EBd/asF90nRfD3uLPg=) 2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: RXKHt1MxZAi094IIW7YlJh5giMLTwFT/Xi1lVrRSFcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Validity Not Before: Sep 23 07:19:05 2026 GMT Not After : Sep 30 07:19:05 2026 GMT Subject: CN=6ab37d69-1f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:b1:d6:b5:12:a7:3e:fa:2b:c8:ec:b0:cf: 67:b1:eb:13:8a:d7:8d:68:cf:87:e5:23:3e:9d:47: 31:30:04:05:3b:a0:56:a1:aa:4a:80:9a:89:8c:1e: 73:e7:86:9c:4d:a7:c8:dd:08:2a:3e:b2:b5:a1:c9: 31:f1:d5:d0:01:d0:58:a0:3f:2b:c8:25:cf:af:7d: c5:e4:3a:cb:44:8c:7d:d9:23:80:1a:e7:fe:c5:be: 75:29:02:7a:6a:0b:70:e9:31:8d:64:a2:16:46:77: ae:e8:e1:29:de:28:8e:7c:e9:62:80:c8:f4:a7:34: 30:76:f0:2f:65:ba:4e:de:5a:91:95:39:9c:52:e6: ed:f9:23:89:26:4a:9a:ab:35:9a:1e:ba:47:73:e3: 9f:1b:55:15:ca:96:e0:b9:23:f0:1d:bb:59:76:5f: ae:fb:ec:da:66:49:c0:c5:51:95:77:6f:b9:65:c5: 15:94:b7:3b:35:be:43:6d:4a:76:ea:af:d3:2b:2b: 33:99:b8:0d:70:d1:06:8e:cb:4e:d1:1e:2e:20:66: 7c:dc:51:39:ad:e9:1f:37:4a:cc:43:e3:77:f2:07: 7a:28:30:a5:21:5d:63:df:a2:27:79:64:1b:41:86: aa:50:3e:bb:73:6a:58:87:03:70:cb:49:7c:fa:7a: 8c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9C:C7:EF:19:9F:33:E8:D5:18:16:CB:19:D1:A5:D9:A5:0E:D8:29 X509v3 Authority Key Identifier: keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:91:cb:02:16:7a:43:f2:68:e5:0f:56:1e:c8:39:85:0d:d6: 88:82:bf:7c:9f:50:8c:2d:1b:61:ed:ae:5b:4b:51:6c:d7:4e: 1e:95:61:f1:a8:21:59:4d:25:7b:22:0c:3d:aa:75:7a:68:a7: 94:20:33:43:6d:c5:15:06:3d:3f:e4:18:79:d6:79:2b:b1:a3: 25:07:6a:e8:e7:7c:c4:fc:0b:b9:6e:39:47:77:5e:ff:26:91: 14:53:4c:03:0d:89:41:49:08:84:1e:b4:54:37:66:e3:3a:f8: 08:c0:c8:2b:37:1c:bb:42:6c:40:e1:08:f4:ae:21:b0:b3:98: 16:9f:cc:07:dc:50:67:5d:c3:97:fd:88:6f:1f:63:bc:ce:5e: bd:98:26:34:8b:04:0f:4b:5c:ea:60:62:e4:0b:84:58:dd:68: de:bb:1d:63:ff:12:ed:0e:de:9d:5f:8b:66:d5:bc:a2:00:21: e7:fb:b5:bf:a4:78:0a:49:08:15:0a:aa:21:a0:ba:74:64:37: 79:b7:20:69:6c:d1:00:74:4a:29:1a:4c:c3:b3:d8:51:af:52: 4c:89:f7:57:17:d9:59:4a:d1:9f:b6:de:60:4d:d7:c5:ed:08: 71:3e:90:15:bf:d9:4f:75:03:e9:90:73:7c:1b:ee:b2:61:cc: 68:14:42:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyRUIxMTAvBgNVBAUTKDIwMDNFRTQwNTIyOUQ4OEM5NDhCNzZEQzE5NUQ0MzBC QzAyMEFGMUUwHhcNMjYwOTIzMDcxOTA1WhcNMjYwOTMwMDcxOTA1WjAYMRYwFAYD VQQDEw02YWIzN2Q2OS0xZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRWx1rUSpz76K8jssM9nsesTiteNaM+H5SM+nUcxMAQFO6BWoapKgJqJjB5z 54acTafI3QgqPrK1ockx8dXQAdBYoD8ryCXPr33F5DrLRIx92SOAGuf+xb51KQJ6 agtw6TGNZKIWRneu6OEp3iiOfOligMj0pzQwdvAvZbpO3lqRlTmcUubt+SOJJkqa qzWaHrpHc+OfG1UVypbguSPwHbtZdl+u++zaZknAxVGVd2+5ZcUVlLc7Nb5DbUp2 6q/TKyszmbgNcNEGjstO0R4uIGZ83FE5rekfN0rMQ+N38gd6KDClIV1j36IneWQb QYaqUD67c2pYhwNwy0l8+nqMKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHicx+8Z nzPo1RgWyxnRpdmlDtgpMB8GA1UdIwQYMBaAFCAD7kBSKdiMlIt23BldQwvAIK8e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzJFQi84OTk3MjUxMkU1 MzQxMUYwOTEyQ0ZENTY2RTZGNTZCQy9JQVB1UUZJcDJJeVVpM2JjR1YxREM4QWdy eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lBUHVRRklwMkl5VWkzYmNHVjFEQzhBZ3J4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzJFQi84OTk3MjUxMkU1MzQxMUYwOTEyQ0ZENTY2RTZGNTZCQy9JQVB1UUZJcDJJ eVVpM2JjR1YxREM4QWdyeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbJHLAhZ6Q/Jo5Q9WHsg5hQ3WiIK/fJ9QjC0bYe2uW0tRbNdOHpVh8aghWU0l eyIMPap1eminlCAzQ23FFQY9P+QYedZ5K7GjJQdq6Od8xPwLuW45R3de/yaRFFNM Aw2JQUkIhB60VDdm4zr4CMDIKzccu0JsQOEI9K4hsLOYFp/MB9xQZ13Dl/2Ibx9j vM5evZgmNIsED0tc6mBi5AuEWN1o3rsdY/8S7Q7enV+LZtW8ogAh5/u1v6R4CkkI FQqqIaC6dGQ3ebcgaWzRAHRKKRpMw7PYUa9STIn3VxfZWUrRn7beYE3Xxe0IcT6Q Fb/ZT3UD6ZBzfBvusmHMaBRCcg== -----END CERTIFICATE-----Generated at Wed Sep 23 20:02:23 2026 by rpki-client