$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json) Hash identifier: TosOKLRQLDPuyUTj0HK47k2zQmJTWO5+YzEz4Kdures= Subject key identifier: 89:A6:AE:54:9D:B2:DC:0D:B9:82:5B:D2:B7:30:AF:E7:7C:D9:E8:D2 Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft Manifest number: 0BAD Signing time: Sun 20 Sep 2026 19:01:43 +0000 Manifest this update: Sun 20 Sep 2026 19:01:42 +0000 Manifest next update: Sun 27 Sep 2026 19:01:42 +0000 Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: SavjK7MUH9T9rLw95r6dhFyIgdtDNhITNk3tkuHTCFA=) 2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: YDbrtcfj2P0fa1G87TD44JnTqpM+znfQHYibyFu6W0c=) 3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: 1k0SJPjACBfzIbH57TXQkwU+M3+Vmt1T4vlm8sPZ+NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Validity Not Before: Sep 20 19:01:42 2026 GMT Not After : Sep 27 19:01:42 2026 GMT Subject: CN=6ab02d96-d6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:4d:55:ad:94:21:28:a8:0e:30:34:32:8a: 78:95:1a:28:55:21:0c:fa:6e:ce:61:02:aa:10:1a: f1:31:9d:1d:b1:2f:c0:80:92:0f:73:74:1c:8b:69: cd:a9:c9:60:9f:7e:38:9c:7d:fb:fa:87:e3:b1:ea: 6c:5c:6a:aa:75:4e:f4:a5:8b:ba:73:94:8b:28:ea: 41:c1:cc:7e:1e:2f:0d:65:ac:dd:47:7a:8f:6f:30: 7d:ac:2a:81:1c:11:cf:ce:f6:3e:e9:e6:4c:59:ce: 74:f8:7d:c7:43:59:2c:b6:bf:27:94:e0:34:cf:f0: 96:86:5b:a0:c1:1a:ba:5b:df:0d:5e:d9:94:b3:04: 33:54:bf:a7:ca:f0:c2:44:31:a2:81:a2:74:da:b3: 6d:7a:96:65:fc:6d:31:d5:30:44:02:49:9d:bc:6d: e2:6b:2b:68:b9:89:c9:a2:ce:fe:62:63:b3:6d:0c: d4:60:ec:d9:2f:07:98:6a:1d:91:a9:ec:5c:19:46: 4f:f3:52:e8:98:15:13:6b:75:d4:e8:95:28:2b:9e: 46:e8:ca:60:a6:cd:33:2c:24:c4:bd:dd:c9:72:91: db:b8:c3:44:92:e8:7a:0b:3c:de:64:53:bf:c1:ff: 02:75:85:b1:08:03:08:70:2e:ba:2d:81:5f:52:94: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:AE:54:9D:B2:DC:0D:B9:82:5B:D2:B7:30:AF:E7:7C:D9:E8:D2 X509v3 Authority Key Identifier: keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:10:1a:c8:42:64:bf:2b:c4:0a:bb:88:7c:e8:6e:1f:9c:bc: bc:dc:20:8e:4f:b7:61:80:85:1f:b9:7d:e7:1c:48:f2:05:34: 96:12:3a:93:9a:b6:9f:cd:c1:81:2e:58:ae:61:35:c3:ed:27: fd:f3:f1:a3:fe:63:e2:05:08:aa:a2:99:a6:b0:34:d7:cb:97: 01:04:37:cc:75:8c:b2:c5:25:7e:e4:98:99:ad:b4:86:c6:1d: 23:7a:10:ec:7d:30:dd:51:b8:3e:e6:d8:32:0d:bc:d2:6f:94: 7f:79:c1:04:09:02:b7:b4:a9:48:25:9e:d3:0f:1c:25:20:15: ac:00:76:cc:ed:32:0a:67:a7:69:fa:ee:6a:0c:6a:f3:40:c2: 4f:41:4a:44:ba:e3:88:9b:d3:6c:a1:7e:8f:67:2d:3c:df:4f: 51:08:ca:72:2a:ca:12:84:a4:a3:db:a9:8b:b8:19:c6:c7:2c: e4:cd:3d:1c:ad:df:4b:24:1c:65:1f:ed:d5:e7:43:ed:db:09: 7c:66:ad:62:e6:26:de:36:96:c5:bd:ea:e9:ea:8a:50:e1:9b: 20:50:ff:c9:57:b5:4e:b5:04:7c:18:0e:ef:e5:33:f1:42:70: a9:56:f1:44:f8:a2:eb:21:f4:b9:6b:6f:aa:98:0d:78:8c:9c: 38:49:a8:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw QUFCMzlDRTUwHhcNMjYwOTIwMTkwMTQyWhcNMjYwOTI3MTkwMTQyWjAYMRYwFAYD VQQDEw02YWIwMmQ5Ni1kNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmBNVa2UISioDjA0Mop4lRooVSEM+m7OYQKqEBrxMZ0dsS/AgJIPc3Qci2nN qclgn344nH37+ofjsepsXGqqdU70pYu6c5SLKOpBwcx+Hi8NZazdR3qPbzB9rCqB HBHPzvY+6eZMWc50+H3HQ1kstr8nlOA0z/CWhlugwRq6W98NXtmUswQzVL+nyvDC RDGigaJ02rNtepZl/G0x1TBEAkmdvG3iaytouYnJos7+YmOzbQzUYOzZLweYah2R qexcGUZP81LomBUTa3XU6JUoK55G6Mpgps0zLCTEvd3JcpHbuMNEkuh6CzzeZFO/ wf8CdYWxCAMIcC66LYFfUpR4YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImmrlSd stwNuYJb0rcwr+d82ejSMB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN SjRVTHVzRnNBc0lLcXpuT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArBAayEJkvyvECruIfOhuH5y8vNwgjk+3YYCFH7l95xxI8gU0lhI6k5q2n83B gS5YrmE1w+0n/fPxo/5j4gUIqqKZprA018uXAQQ3zHWMssUlfuSYma20hsYdI3oQ 7H0w3VG4PubYMg280m+Uf3nBBAkCt7SpSCWe0w8cJSAVrAB2zO0yCmenafruagxq 80DCT0FKRLrjiJvTbKF+j2ctPN9PUQjKcirKEoSko9upi7gZxscs5M09HK3fSyQc ZR/t1edD7dsJfGatYuYm3jaWxb3q6eqKUOGbIFD/yVe1TrUEfBgO7+Uz8UJwqVbx RPii6yH0uWtvqpgNeIycOEmorQ== -----END CERTIFICATE-----Generated at Mon Sep 21 17:36:58 2026 by rpki-client