$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json) Hash identifier: 6QBTtr9Q7jH3aljJ78glykMSyf2B4Ew2Kml4zCkFoh0= Subject key identifier: FC:C0:9C:D2:08:91:B9:06:09:C9:E5:7A:7C:0B:95:56:8C:B8:F7:6A Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Certificate serial: 04D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft Manifest number: 04B6 Signing time: Sun 20 Sep 2026 23:42:52 +0000 Manifest this update: Sun 20 Sep 2026 23:42:51 +0000 Manifest next update: Sun 27 Sep 2026 23:42:51 +0000 Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: sCqgV1MGI7Fxm9I/vhXJfg7AXz85pXRV8JH2CSBzcg8=) 2: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: OS+MMRRjQluFNuI+98G/Gv/Ff4t99hp6Izi7LUhaJJQ=) 3: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: JVO8JZCfYqp3N9h+hRdEkwlagsjOuD7MM+G3/8q05pI=) 4: 58C00854905211EC90E6100FC4F9AE02.roa (hash: HavGxilFCXPwJZ5ysPf3ohVQv79l6ZGEb7A58aULo/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Validity Not Before: Sep 20 23:42:51 2026 GMT Not After : Sep 27 23:42:51 2026 GMT Subject: CN=6ab06f7c-feb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:b3:ec:ec:ed:81:df:a7:83:38:e3:43:15: 42:a7:6a:2b:74:e8:7f:62:50:0a:85:2c:78:3a:61: 73:46:03:cc:69:f2:b7:61:ef:f4:6f:b6:76:e8:80: 90:16:c7:5c:93:ac:2b:e1:02:45:bc:d6:df:65:1a: 94:c6:c0:1a:ce:1e:9a:ce:ed:95:6f:27:e0:0f:93: 53:c2:ea:e7:95:19:ea:13:23:aa:dd:41:ea:2f:eb: 6c:1e:c1:d6:85:6e:fe:2c:ab:5d:f9:af:26:84:f9: f4:29:51:74:da:4f:d5:ae:e8:fa:2d:d8:f7:48:ca: 7b:e1:25:cc:ae:3b:d7:a0:9f:a1:d9:1e:a1:db:56: c8:6a:59:ee:b5:88:66:02:03:f1:47:71:21:7f:8e: 80:36:f2:18:5d:9b:91:5a:7d:35:80:95:d4:3f:9b: 95:70:dd:77:23:fb:e9:91:e7:df:40:29:41:9e:01: 99:8d:94:0e:21:a2:16:e1:d7:8b:29:f5:1e:6d:de: a3:1e:b2:e0:af:db:df:b0:aa:f3:4b:99:46:fe:99: 89:0d:30:0c:c6:80:32:2a:b3:67:d0:6a:bc:cb:f5: ee:97:90:bc:ee:51:62:a6:91:8c:21:17:86:b1:7f: b6:ec:6e:96:10:86:f5:06:b3:02:0e:2f:1d:08:02: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C0:9C:D2:08:91:B9:06:09:C9:E5:7A:7C:0B:95:56:8C:B8:F7:6A X509v3 Authority Key Identifier: keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:8f:04:f1:47:11:92:ed:ae:88:ea:b9:f4:ec:99:b1:51:b2: 7f:aa:34:4b:ce:cd:65:5b:ae:00:d9:3a:d9:7d:0b:84:b9:0f: ff:f5:5b:05:74:4b:4e:53:f8:d6:71:99:30:54:34:fb:48:47: 7b:d8:01:fa:5d:17:19:2f:f6:88:25:11:59:d5:d4:83:27:19: 08:f8:44:e7:4f:d6:0b:c9:0d:01:c4:52:cf:c1:1b:ee:93:fb: ff:e0:8a:6b:1d:d9:4a:3f:a8:43:49:57:77:15:e2:90:53:5b: 03:04:3d:10:f1:e1:92:c8:ed:f4:2c:63:2e:25:84:43:40:52: 6e:49:1d:f9:c2:f1:01:66:00:c6:0a:45:28:96:ce:7c:41:e9: c3:d3:13:34:01:45:96:16:4c:c2:08:fa:27:66:0d:96:b8:8b: 49:47:fd:2a:30:b8:c5:17:23:25:d3:f4:54:70:97:51:4b:12: e1:af:a2:63:ee:76:35:e7:10:66:b4:41:36:be:9d:de:aa:fb: da:eb:89:7a:d0:09:20:77:69:e4:76:1b:5a:46:22:70:2d:b5: 20:7d:13:7c:dd:63:6d:3f:84:06:0e:f3:21:05:b0:73:47:cc: 70:03:63:a5:75:44:60:03:28:47:f5:ef:f8:62:49:59:6e:34: d8:c1:f7:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1 MUZGRkExQTQwHhcNMjYwOTIwMjM0MjUxWhcNMjYwOTI3MjM0MjUxWjAYMRYwFAYD VQQDEw02YWIwNmY3Yy1mZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbSz7Oztgd+ngzjjQxVCp2ordOh/YlAKhSx4OmFzRgPMafK3Ye/0b7Z26ICQ Fsdck6wr4QJFvNbfZRqUxsAazh6azu2VbyfgD5NTwurnlRnqEyOq3UHqL+tsHsHW hW7+LKtd+a8mhPn0KVF02k/Vruj6Ldj3SMp74SXMrjvXoJ+h2R6h21bIalnutYhm AgPxR3Ehf46ANvIYXZuRWn01gJXUP5uVcN13I/vpkeffQClBngGZjZQOIaIW4deL KfUebd6jHrLgr9vfsKrzS5lG/pmJDTAMxoAyKrNn0Gq8y/Xul5C87lFippGMIReG sX+27G6WEIb1BrMCDi8dCAJ7TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzAnNII kbkGCcnlenwLlVaMuPdqMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6 NE1DVXR0cHFPTHRSX19vYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABY8E8UcRku2uiOq59OyZsVGyf6o0S87NZVuuANk62X0LhLkP//VbBXRLTlP4 1nGZMFQ0+0hHe9gB+l0XGS/2iCURWdXUgycZCPhE50/WC8kNAcRSz8Eb7pP7/+CK ax3ZSj+oQ0lXdxXikFNbAwQ9EPHhksjt9CxjLiWEQ0BSbkkd+cLxAWYAxgpFKJbO fEHpw9MTNAFFlhZMwgj6J2YNlriLSUf9KjC4xRcjJdP0VHCXUUsS4a+iY+52NecQ ZrRBNr6d3qr72uuJetAJIHdp5HYbWkYicC21IH0TfN1jbT+EBg7zIQWwc0fMcANj pXVEYAMoR/Xv+GJJWW402MH3yA== -----END CERTIFICATE-----Generated at Tue Sep 22 22:27:10 2026 by rpki-client