$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: LXSSphXeW+nYcLrJbk7q3G8Z+duyZflKNS++tE/ocqE= Subject key identifier: 55:D7:FF:08:C5:19:F8:A3:9A:BC:3B:70:66:5B:6E:CA:16:CF:39:FE Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: 020D Signing time: Fri 09 Oct 2026 03:47:13 +0000 Manifest this update: Fri 09 Oct 2026 03:47:12 +0000 Manifest next update: Fri 16 Oct 2026 03:47:12 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: oxDbndeF1ZG8zB3PTGCMr/SunkRNdGkpX7jQmTG4sTI=) 2: 69EBCB546BAE11F196CCF4747547A888.roa (hash: 1Gdi4BISZtZus3v8EQtLjaJq5e484jVmiTvugjuhr5E=) 3: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: e+A9R6047fz/CtRSSMnfQGJqOvNAoPOsGN6eczRG5bA=) 4: 87662556555511EF88D9F680C4F9AE02.roa (hash: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 03:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Oct 9 03:47:12 2026 GMT Not After : Oct 16 03:47:12 2026 GMT Subject: CN=6ac863c0-712a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:08:85:89:20:73:5c:d9:4c:e2:7f:6c:f6:88: 02:48:27:f4:df:d6:6c:96:61:21:09:45:81:7a:76: 2c:92:71:e0:7c:84:5a:48:b7:ec:68:a0:19:41:27: 44:12:ad:d9:03:06:08:bf:31:d5:7f:53:fe:e9:b8: 36:bf:8d:26:88:c2:6a:e4:29:1f:f6:33:33:af:09: fb:ff:46:40:ae:19:49:f3:0c:96:ae:c7:d1:78:b2: 27:22:b4:73:73:29:1e:89:7c:eb:53:6f:94:4e:6c: 7c:75:36:08:6d:a5:a5:d5:4f:ac:b3:14:8f:bb:4d: 42:e6:eb:21:a1:fe:ca:11:5d:1d:f7:7c:99:df:d9: 5c:7a:95:21:3c:9e:ce:9c:2c:1d:ce:86:0e:8c:52: f7:92:f6:5b:3c:7f:15:2a:11:d9:47:d3:9c:f0:5c: 94:8c:a3:e4:5c:21:1d:6c:a3:53:b7:08:86:a1:1e: 35:59:55:cf:af:2b:1f:2c:e1:01:ce:8b:f9:3e:68: 2d:93:6c:25:ef:60:4c:06:88:f4:f1:69:39:6e:f1: e2:22:55:0d:c5:1c:2f:30:c8:d0:d2:08:d0:f0:0d: 7a:af:a8:55:d5:80:10:e1:d2:16:f8:97:1b:05:a0: 54:0d:b7:c3:11:cb:ff:30:32:3d:e0:c3:d2:7a:64: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D7:FF:08:C5:19:F8:A3:9A:BC:3B:70:66:5B:6E:CA:16:CF:39:FE X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:7d:3d:d0:19:8b:ea:84:87:bd:45:4a:65:84:7b:a4:21:2d: a2:73:6b:c9:cd:39:cb:7f:8f:8a:3b:27:ba:80:cd:59:b1:bb: 46:e6:f6:f8:d1:11:89:81:57:c7:3a:14:65:a6:df:e9:7f:01: 8f:e2:8f:fa:32:9c:f4:6d:10:2f:84:d0:11:a9:53:1f:85:da: d3:66:1e:6a:d1:2a:a0:bb:d4:d3:52:d7:0f:eb:e6:02:d9:46: be:6e:bd:14:bd:ae:fd:3c:0b:7f:60:8d:a7:ca:27:c8:aa:b2: e9:80:27:65:41:86:48:21:f9:ad:7b:86:de:31:2d:72:23:f1: 01:21:0e:91:05:58:89:22:a7:ae:de:96:73:70:e5:1e:68:10: 94:a2:f2:63:ee:a6:75:17:f1:47:fe:1c:81:6f:b3:97:5d:ac: 03:77:32:44:60:50:40:3a:73:9d:34:47:82:77:5e:5c:22:d8: a3:7f:67:6a:1f:4b:9b:7d:05:b0:8b:40:19:45:38:5e:e9:ab: 82:8f:53:9a:e7:74:7f:b1:06:c6:15:98:9a:10:60:3f:60:2d: df:3a:27:38:2b:c9:82:66:1c:c7:2b:06:5b:80:ce:02:9f:e7: a1:43:41:80:d3:b4:83:2e:d1:b3:3c:6f:af:67:66:e5:2f:a3: 22:37:08:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYxMDA5MDM0NzEyWhcNMjYxMDE2MDM0NzEyWjAYMRYwFAYD VQQDEw02YWM4NjNjMC03MTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQiFiSBzXNlM4n9s9ogCSCf039ZslmEhCUWBenYsknHgfIRaSLfsaKAZQSdE Eq3ZAwYIvzHVf1P+6bg2v40miMJq5Ckf9jMzrwn7/0ZArhlJ8wyWrsfReLInIrRz cykeiXzrU2+UTmx8dTYIbaWl1U+ssxSPu01C5ushof7KEV0d93yZ39lcepUhPJ7O nCwdzoYOjFL3kvZbPH8VKhHZR9Oc8FyUjKPkXCEdbKNTtwiGoR41WVXPrysfLOEB zov5Pmgtk2wl72BMBoj08Wk5bvHiIlUNxRwvMMjQ0gjQ8A16r6hV1YAQ4dIW+Jcb BaBUDbfDEcv/MDI94MPSemQawQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXX/wjF Gfijmrw7cGZbbsoWzzn+MB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq3090BmL6oSHvUVKZYR7pCEtonNryc05y3+PijsnuoDNWbG7Rub2+NERiYFX xzoUZabf6X8Bj+KP+jKc9G0QL4TQEalTH4Xa02YeatEqoLvU01LXD+vmAtlGvm69 FL2u/TwLf2CNp8onyKqy6YAnZUGGSCH5rXuG3jEtciPxASEOkQVYiSKnrt6Wc3Dl HmgQlKLyY+6mdRfxR/4cgW+zl12sA3cyRGBQQDpznTRHgndeXCLYo39nah9Lm30F sItAGUU4Xumrgo9Tmud0f7EGxhWYmhBgP2At3zonOCvJgmYcxysGW4DOAp/noUNB gNO0gy7Rszxvr2dm5S+jIjcIZQ== -----END CERTIFICATE-----Generated at Sat Oct 10 14:36:47 2026 by rpki-client