$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft File: 28IYSbtMFwTSMZPEG3DGaxqWVi8.mft (raw, json) Hash identifier: 3d2bFMfzGxr/QRKUYE2rKwssF5p3ukY3BiSM2MMmHiA= Subject key identifier: 5B:EE:F6:1C:FC:E1:F8:2A:D0:27:32:15:31:BB:5E:D5:F2:C9:9A:28 Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Certificate serial: 1648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft Manifest number: 1639 Signing time: Sun 20 Sep 2026 16:39:38 +0000 Manifest this update: Sun 20 Sep 2026 16:39:38 +0000 Manifest next update: Sun 27 Sep 2026 16:39:38 +0000 Files and hashes: 1: 28IYSbtMFwTSMZPEG3DGaxqWVi8.crl (hash: holV+U6ZKMBc00AQmIfWvWOZzwHE8grbd5pgbyQpTG0=) 2: 85CB3A8A4A9D11F1A2093B779BEE528E.roa (hash: HPg54/GUrW2e3ZBjByhQdgJ3W185EITXukQZc69O0IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5704 (0x1648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Validity Not Before: Sep 20 16:39:38 2026 GMT Not After : Sep 27 16:39:38 2026 GMT Subject: CN=6ab00c4a-41dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:a4:90:b7:b3:16:fb:67:cf:bc:1c:4c:c9: ea:90:dc:43:5f:73:46:8b:f2:a0:93:d8:86:be:8a: c6:f2:09:32:75:a1:b0:3c:f9:45:a3:c7:e7:05:da: 36:ec:58:43:9f:36:7a:e4:07:f1:d5:d6:94:b6:7f: 50:a9:77:1d:c2:6c:4d:6e:1a:85:7c:8a:79:61:c0: 39:d4:66:f7:2c:33:67:20:97:7d:0d:ee:99:93:7c: 11:1f:b0:e2:25:5e:32:c3:b6:98:5f:a8:1a:77:dd: 2d:45:01:08:a7:40:8e:95:ad:c5:27:4c:e0:93:42: 0d:01:bd:b1:e5:f3:8e:dd:86:09:16:12:44:ed:48: af:b4:88:b3:47:60:d8:37:2d:f7:a3:8b:0d:42:9f: 3e:d3:c5:9a:33:70:ad:a2:d9:74:df:31:50:5a:31: fc:7e:ef:d3:52:ca:57:79:4d:fe:94:41:25:00:db: 1b:a9:13:85:26:67:06:cb:bf:99:7e:c4:f8:90:fb: 28:bc:e9:25:41:6d:d5:1e:b6:2b:0e:1d:93:f7:b3: 44:d5:7b:13:81:c5:61:b9:04:39:72:05:78:8a:52: 47:0f:7c:e5:9d:59:7c:89:b4:52:86:e8:99:38:d9: ac:b7:2c:97:e6:b1:5f:3d:34:c9:d2:d0:e5:e5:e2: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EE:F6:1C:FC:E1:F8:2A:D0:27:32:15:31:BB:5E:D5:F2:C9:9A:28 X509v3 Authority Key Identifier: keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:02:c6:ce:22:63:2b:ec:0b:5b:9e:3e:b0:d8:57:84:d4:ea: 85:0c:ca:01:83:92:f5:bb:70:7d:03:a7:3e:f7:29:77:3d:9d: 6b:a7:83:8e:07:99:c2:07:11:40:17:16:ac:8c:25:89:57:7d: 1f:48:a1:9c:f1:4f:f7:5e:a4:ab:99:ab:53:36:d4:98:ad:b7: 96:06:fb:0c:e7:72:2c:cc:0d:b5:68:c2:87:80:08:cb:8b:fc: 01:2b:2f:ca:c7:f5:ba:8b:c0:ae:69:3d:2c:26:9a:34:d6:ee: c9:e3:fd:26:47:6d:4a:66:71:3e:68:33:02:dd:0a:04:28:90: c0:d2:4f:80:c2:41:bd:16:3f:6f:ac:be:b9:43:f9:7c:95:32: 9b:fd:bd:38:53:06:cb:65:f9:af:1e:10:5b:b6:36:81:d1:f5: 95:6c:44:de:6f:42:b5:d5:d2:51:d3:bf:3b:1d:ac:89:9a:ec: 00:30:4f:8b:8c:66:f3:1a:40:e4:2e:6a:fc:13:9d:82:9f:cc: e5:35:82:f3:33:b3:62:32:ab:c8:0b:66:3c:73:dc:63:2d:54: 4a:8e:44:d7:ab:f9:59:23:77:13:55:01:b9:38:29:75:23:2b: 0d:d0:65:c1:66:a4:97:e1:1d:40:62:b1:d3:69:83:6a:9e:fd: c8:c7:b4:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzMxMTAvBgNVBAUTKERCQzIxODQ5QkI0QzE3MDREMjMxOTNDNDFCNzBDNjZC MUE5NjU2MkYwHhcNMjYwOTIwMTYzOTM4WhcNMjYwOTI3MTYzOTM4WjAYMRYwFAYD VQQDEw02YWIwMGM0YS00MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCykkLezFvtnz7wcTMnqkNxDX3NGi/Kgk9iGvorG8gkydaGwPPlFo8fnBdo2 7FhDnzZ65Afx1daUtn9QqXcdwmxNbhqFfIp5YcA51Gb3LDNnIJd9De6Zk3wRH7Di JV4yw7aYX6gad90tRQEIp0COla3FJ0zgk0INAb2x5fOO3YYJFhJE7UivtIizR2DY Ny33o4sNQp8+08WaM3Ctotl03zFQWjH8fu/TUspXeU3+lEElANsbqROFJmcGy7+Z fsT4kPsovOklQW3VHrYrDh2T97NE1XsTgcVhuQQ5cgV4ilJHD3zlnVl8ibRShuiZ ONmstyyX5rFfPTTJ0tDl5eLeNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvu9hz8 4fgq0CcyFTG7XtXyyZooMB8GA1UdIwQYMBaAFNvCGEm7TBcE0jGTxBtwxmsallYv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMy8xRkRBRkQ2MjQz RTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3VFNNWlBFRzNER2F4cVdW aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4SVlTYnRNRndUU01aUEVHM0RHYXhxV1ZpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMy8xRkRBRkQ2MjQzRTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3 VFNNWlBFRzNER2F4cVdWaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjwLGziJjK+wLW54+sNhXhNTqhQzKAYOS9btwfQOnPvcpdz2da6eDjgeZwgcR QBcWrIwliVd9H0ihnPFP916kq5mrUzbUmK23lgb7DOdyLMwNtWjCh4AIy4v8ASsv ysf1uovArmk9LCaaNNbuyeP9JkdtSmZxPmgzAt0KBCiQwNJPgMJBvRY/b6y+uUP5 fJUym/29OFMGy2X5rx4QW7Y2gdH1lWxE3m9CtdXSUdO/Ox2siZrsADBPi4xm8xpA 5C5q/BOdgp/M5TWC8zOzYjKryAtmPHPcYy1USo5E16v5WSN3E1UBuTgpdSMrDdBl wWakl+EdQGKx02mDap79yMe0WA== -----END CERTIFICATE-----Generated at Mon Sep 21 06:01:37 2026 by rpki-client