$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: XJi9nnvz8fQqCOaGrpc3rhIc+zQAjoRdThmx+2wNOhQ= Subject key identifier: 50:87:16:76:60:09:4E:21:21:46:EF:98:D0:C2:99:60:A5:05:CE:A2 Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: 020F Signing time: Tue 13 Oct 2026 03:45:19 +0000 Manifest this update: Tue 13 Oct 2026 03:45:18 +0000 Manifest next update: Tue 20 Oct 2026 03:45:18 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: P1xbR+saxd2RKLXNHWkJLbBrjl1nXTrOGi2qTi3U4eM=) 2: 69EBCB546BAE11F196CCF4747547A888.roa (hash: 1Gdi4BISZtZus3v8EQtLjaJq5e484jVmiTvugjuhr5E=) 3: 87662556555511EF88D9F680C4F9AE02.roa (hash: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4=) 4: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: e+A9R6047fz/CtRSSMnfQGJqOvNAoPOsGN6eczRG5bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 03:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Oct 13 03:45:18 2026 GMT Not After : Oct 20 03:45:18 2026 GMT Subject: CN=6acda94f-ccc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:59:94:23:e0:4c:54:d4:0b:b9:de:68:0b:b2: 35:91:4f:e5:ac:20:a7:c2:d4:be:69:1e:1a:af:49: ec:f6:5f:3d:a7:4c:2a:9e:87:0b:c7:ca:81:68:ae: b7:b9:67:de:a2:41:e9:c0:55:10:49:3c:f5:7e:91: 1f:b9:92:7f:62:1e:4a:28:05:7b:5a:62:71:c2:ad: 68:37:b1:b0:13:e9:7e:e5:ed:76:cc:3b:63:a2:0d: ad:28:75:00:a8:b1:e9:4b:77:e5:61:9d:44:e5:1c: 3a:d9:0a:b1:78:f8:eb:37:b0:2e:df:dc:94:37:eb: ab:e0:ab:6f:f0:7b:b9:c1:19:56:e0:28:98:72:76: d1:79:26:97:f1:17:e9:27:a4:04:a2:b0:6b:e0:3c: b5:16:6b:0c:47:5b:81:f1:d0:06:a1:da:93:48:89: f0:21:e8:b5:4e:df:63:69:f7:17:f6:05:ad:2d:f7: ae:f1:aa:ba:21:85:ac:95:d8:0f:68:68:f0:5f:6d: 0d:9d:b6:db:76:3d:09:1d:64:61:f2:86:20:bf:99: 2b:2e:9a:f9:c8:c5:5b:8f:66:fc:c5:23:bf:bb:26: aa:44:34:8c:03:93:b8:c4:a3:d1:a7:38:1a:8f:c7: aa:a3:ac:5c:26:62:3a:4c:f8:12:de:61:7a:5a:9b: 00:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:87:16:76:60:09:4E:21:21:46:EF:98:D0:C2:99:60:A5:05:CE:A2 X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c8:82:c1:df:0a:b5:f5:10:a4:58:06:2b:8d:2a:57:6c:90: e7:1b:91:e1:1a:f4:bf:16:e3:0d:94:5a:8e:59:06:bb:72:69: e8:8b:0e:09:65:e7:61:08:b2:a1:37:d8:00:b3:2e:91:f4:e2: 23:1b:b2:d5:57:e5:9f:c5:97:bd:6d:ae:21:f9:dc:cd:60:9d: c7:2a:ef:3d:55:f8:33:59:e5:68:d9:90:f0:4f:a2:51:7b:74: df:02:14:d7:f1:ce:8e:71:b7:96:36:3e:d0:d0:d8:17:ca:f7: a7:66:0f:aa:60:40:38:26:c2:bf:98:ad:b8:ac:72:68:9f:c4: 23:8d:bd:4e:42:61:f2:32:8a:b9:2c:a2:67:00:96:bb:59:e6: 21:d0:dd:25:fe:d3:b7:e8:d5:a6:02:b4:46:5b:5e:c0:83:8d: f3:1c:f5:28:c3:09:19:6c:b1:90:7a:e9:98:ff:fc:60:5f:21: 9e:84:3d:8a:d6:70:aa:b5:c0:52:19:25:bd:2e:ba:fe:44:27: 39:35:c7:14:fc:ad:a3:91:c8:99:f1:1d:a9:29:07:3b:7a:c4: 5d:05:90:39:c9:6d:3a:02:4a:a1:7b:24:a0:a7:2c:73:9c:01: d5:28:ea:8c:73:d0:01:2f:b7:35:37:37:6a:c4:d5:54:b9:9c: a2:1a:2e:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYxMDEzMDM0NTE4WhcNMjYxMDIwMDM0NTE4WjAYMRYwFAYD VQQDEw02YWNkYTk0Zi1jY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VmUI+BMVNQLud5oC7I1kU/lrCCnwtS+aR4ar0ns9l89p0wqnocLx8qBaK63 uWfeokHpwFUQSTz1fpEfuZJ/Yh5KKAV7WmJxwq1oN7GwE+l+5e12zDtjog2tKHUA qLHpS3flYZ1E5Rw62QqxePjrN7Au39yUN+ur4Ktv8Hu5wRlW4CiYcnbReSaX8Rfp J6QEorBr4Dy1FmsMR1uB8dAGodqTSInwIei1Tt9jafcX9gWtLfeu8aq6IYWsldgP aGjwX20Nnbbbdj0JHWRh8oYgv5krLpr5yMVbj2b8xSO/uyaqRDSMA5O4xKPRpzga j8eqo6xcJmI6TPgS3mF6WpsAcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCHFnZg CU4hIUbvmNDCmWClBc6iMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB8iCwd8KtfUQpFgGK40qV2yQ5xuR4Rr0vxbjDZRajlkGu3Jp6IsOCWXnYQiy oTfYALMukfTiIxuy1Vfln8WXvW2uIfnczWCdxyrvPVX4M1nlaNmQ8E+iUXt03wIU 1/HOjnG3ljY+0NDYF8r3p2YPqmBAOCbCv5ituKxyaJ/EI429TkJh8jKKuSyiZwCW u1nmIdDdJf7Tt+jVpgK0RltewION8xz1KMMJGWyxkHrpmP/8YF8hnoQ9itZwqrXA UhklvS66/kQnOTXHFPyto5HImfEdqSkHO3rEXQWQOcltOgJKoXskoKcsc5wB1Sjq jHPQAS+3NTc3asTVVLmcohouuQ== -----END CERTIFICATE-----Generated at Wed Oct 14 04:15:04 2026 by rpki-client