$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft File: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft (raw, json) Hash identifier: +VNt9KuBS7N8yy2Mdw20JL5hEKb7yNogRTCZ8ME0D0A= Subject key identifier: EE:D6:D6:5A:5C:A9:76:E0:DA:9D:D6:C4:E2:0E:B0:D3:EC:74:17:3B Authority key identifier: 22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39 Certificate issuer: /CN=A9197B7B/serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft Manifest number: 87 Signing time: Tue 13 Oct 2026 08:18:56 +0000 Manifest this update: Tue 13 Oct 2026 08:18:55 +0000 Manifest next update: Tue 20 Oct 2026 08:18:55 +0000 Files and hashes: 1: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl (hash: pNbOoqzmX7htbRK53u3ShRlgJ2zja72xyAkiVmXu2Gg=) 2: 153BBC22FBEC11F094C0A6516D6F56BC.roa (hash: Fa+JKx4M6Yd97D4JU6xtHSXgVRciDGQpK7A4XgrvaWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197B7B, serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39 Validity Not Before: Oct 13 08:18:55 2026 GMT Not After : Oct 20 08:18:55 2026 GMT Subject: CN=6acde970-c68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:5e:10:68:35:20:10:0b:72:5c:a7:6e:2f: e1:a0:32:45:52:cf:35:bb:ee:03:a7:60:40:de:02: db:4b:70:43:04:a3:92:36:b2:1f:5b:43:dc:1d:6c: 23:1d:f3:0b:3d:08:50:cf:3e:43:d3:af:0c:fa:b7: 30:cb:6a:3f:bc:32:a2:57:34:c3:e3:93:47:45:87: 53:ef:00:f0:b5:22:21:6f:16:32:56:14:9f:35:5a: 81:79:f4:bc:31:51:f1:3c:ae:f7:40:49:8d:a8:99: 97:1c:1e:a6:84:a8:20:e1:74:8c:5c:cd:cc:2d:a6: b1:88:01:c0:55:14:14:02:0a:24:10:6e:46:28:ab: aa:65:97:b7:b6:6a:59:0d:01:92:74:aa:80:27:cf: 93:6a:91:a5:5a:f1:e2:5e:61:be:54:d5:b0:40:7e: 96:52:32:35:0c:fe:f9:9f:4a:e2:c7:91:6d:08:10: 21:ea:33:14:d1:a6:9d:3a:25:c3:70:9c:85:f8:ad: 0e:c5:5c:3b:f6:37:77:90:e7:2c:01:0e:02:9e:59: f9:a1:c3:0e:89:f6:d5:03:97:fd:aa:b6:32:e2:25: d6:1d:25:e5:3e:ce:cd:54:7a:27:08:ad:64:62:1f: 2c:cb:77:6b:61:1c:cf:6e:ac:73:4e:d1:1a:7c:a4: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D6:D6:5A:5C:A9:76:E0:DA:9D:D6:C4:E2:0E:B0:D3:EC:74:17:3B X509v3 Authority Key Identifier: keyid:22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9a:b7:6e:6d:d3:8a:80:73:42:95:63:1d:5f:1f:40:4c:1f: 27:76:12:b4:da:60:67:fd:c2:f8:53:f1:c3:cf:b2:17:2d:f1: 4c:69:9e:63:c7:01:1c:57:62:a6:13:dd:f4:a3:4c:8a:44:84: 7a:08:c4:f7:fe:e5:7d:0e:f8:b8:b0:04:6c:c5:70:da:e9:97: 77:46:26:b6:5a:d7:8c:7e:bb:c7:68:42:24:be:04:36:41:ca: e9:de:4e:4d:f9:0f:dd:e6:e2:35:3a:d7:37:e2:2f:29:30:b7: d3:80:b8:33:eb:24:a2:3e:d3:50:a7:b9:1c:b7:58:2e:94:da: 8b:64:a5:15:a2:2e:e2:04:62:82:01:21:3d:c0:18:6f:62:92: b4:bd:83:e9:66:c8:2f:46:76:a3:17:31:2b:93:d1:c7:f3:59: 55:57:62:32:56:9c:66:b6:74:e5:32:35:22:16:36:2c:50:d3: 86:5d:bf:14:88:26:b2:ee:63:0f:8b:b1:56:e5:93:b1:80:36: 34:d3:82:d4:35:10:ce:38:26:a1:07:82:e3:9b:c8:44:8b:d6: b2:5c:bf:57:6e:1e:e5:e1:b7:0a:97:1c:87:5b:7e:29:b3:94: ff:fe:d7:1b:5e:3d:71:1f:25:68:b5:75:b8:48:c4:40:66:d7: 2e:e4:46:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdCN0IxMTAvBgNVBAUTKDIyNTZCODJCMEE2RURDNjI2OEEzQ0M5MEFDQzA1Qzc0 RjExNENFMzkwHhcNMjYxMDEzMDgxODU1WhcNMjYxMDIwMDgxODU1WjAYMRYwFAYD VQQDEw02YWNkZTk3MC1jNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTpeEGg1IBALclynbi/hoDJFUs81u+4Dp2BA3gLbS3BDBKOSNrIfW0PcHWwj HfMLPQhQzz5D068M+rcwy2o/vDKiVzTD45NHRYdT7wDwtSIhbxYyVhSfNVqBefS8 MVHxPK73QEmNqJmXHB6mhKgg4XSMXM3MLaaxiAHAVRQUAgokEG5GKKuqZZe3tmpZ DQGSdKqAJ8+TapGlWvHiXmG+VNWwQH6WUjI1DP75n0rix5FtCBAh6jMU0aadOiXD cJyF+K0OxVw79jd3kOcsAQ4Cnln5ocMOifbVA5f9qrYy4iXWHSXlPs7NVHonCK1k Yh8sy3drYRzPbqxzTtEafKT6FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7W1lpc qXbg2p3WxOIOsNPsdBc7MB8GA1UdIwQYMBaAFCJWuCsKbtxiaKPMkKzAXHTxFM45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0I3Qi80Q0IzQTM4NEZC RTkxMUYwOTEyRkU2MUM2RDZGNTZCQy9JbGE0S3dwdTNHSm9vOHlRck1CY2RQRVV6 amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0lsYTRLd3B1M0dKb284eVFyTUJjZFBFVXpqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0I3Qi80Q0IzQTM4NEZCRTkxMUYwOTEyRkU2MUM2RDZGNTZCQy9JbGE0S3dwdTNH Sm9vOHlRck1CY2RQRVV6amsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS5q3bm3TioBzQpVjHV8fQEwfJ3YStNpgZ/3C+FPxw8+yFy3xTGmeY8cBHFdi phPd9KNMikSEegjE9/7lfQ74uLAEbMVw2umXd0YmtlrXjH67x2hCJL4ENkHK6d5O TfkP3ebiNTrXN+IvKTC304C4M+skoj7TUKe5HLdYLpTai2SlFaIu4gRiggEhPcAY b2KStL2D6WbIL0Z2oxcxK5PRx/NZVVdiMlacZrZ05TI1IhY2LFDThl2/FIgmsu5j D4uxVuWTsYA2NNOC1DUQzjgmoQeC45vIRIvWsly/V24e5eG3Cpcch1t+KbOU//7X G149cR8laLV1uEjEQGbXLuRG1Q== -----END CERTIFICATE-----Generated at Tue Oct 13 21:17:09 2026 by rpki-client