$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json) Hash identifier: ifszVL/EAwxoxfYndppC9+iQ97kWD0LCyfeHsv7It8Y= Subject key identifier: 67:BF:A5:21:C1:68:CB:E9:31:FE:DB:33:06:D8:14:68:BF:7A:8F:A6 Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Certificate serial: 1481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft Manifest number: 1443 Signing time: Mon 28 Sep 2026 16:58:42 +0000 Manifest this update: Mon 28 Sep 2026 16:58:42 +0000 Manifest next update: Mon 05 Oct 2026 16:58:42 +0000 Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: JPYNH8i99R26fjjPUjFy7hy99YX4fuMp+oItl5xuotQ=) 2: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 388AG09rRUDKvKhyNmxbF15VLGsqHkKaZsreBoM4fr8=) 3: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: Ip5tGE+xBmZzGbuYsKhlox7o+yVLz36sUIXrRO8cJe8=) 4: zSE0GmBxc2vuy2NqhgpEC2PZSVM.asa (hash: S0SNtYzstV/TE3XHy8x7+BvtycgWeW73p6rfD0JzYgg=) 5: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: WY85OZSDqgP3JecVrbLGH7yASGCrRmcqJRott+5khbE=) 6: qyLwIBj-Wx6AmSM1hxcj9vJ-hvc.asa (hash: 5ab75aSGsxcPedNr8xBXYZisce1dTfJNawoGkCK2fWU=) 7: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5249 (0x1481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Validity Not Before: Sep 28 16:58:42 2026 GMT Not After : Oct 5 16:58:42 2026 GMT Subject: CN=6aba9cc2-5182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:10:6c:1a:eb:c4:d6:a9:9c:92:8f:87:cb: ac:87:b9:87:4e:26:b0:d0:e5:05:c4:96:66:3f:e4: 8d:ed:68:d4:4e:83:c5:23:1e:55:bc:b2:ce:2f:6b: d3:97:03:ee:d9:b8:97:38:39:7b:f2:09:48:60:7b: e9:80:0b:24:10:1c:fa:a6:c9:05:ee:e9:bd:87:a0: 07:05:9e:9a:e5:b4:37:6f:d3:c3:b7:74:40:2c:fb: 42:8d:f2:b6:a1:d9:51:c1:7f:f8:f2:fd:98:d1:40: 91:6e:99:8f:1a:2e:01:65:f7:ce:8c:36:53:86:56: 9f:5d:f8:e6:22:7c:be:b0:e3:8d:1b:74:c4:40:58: e4:72:af:aa:48:3f:0a:37:53:55:84:37:c5:ed:19: 8c:70:d9:59:9a:bf:a7:f4:8d:ea:e7:bc:e2:71:e2: fe:b8:89:f0:51:8d:57:fd:ae:1d:11:b3:09:19:b4: 58:18:a7:cc:56:c9:6b:08:f8:e8:89:bc:81:57:a9: 89:7e:27:d5:5f:de:6b:a6:32:ad:01:1c:2c:22:9a: 7b:c9:fb:aa:c1:6e:e3:c1:c1:fa:2a:2c:bf:79:20: 91:14:83:fb:1b:95:7f:31:59:e2:33:d6:9c:37:39: c3:03:37:94:01:cd:df:04:af:9f:47:f3:ff:c2:2a: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BF:A5:21:C1:68:CB:E9:31:FE:DB:33:06:D8:14:68:BF:7A:8F:A6 X509v3 Authority Key Identifier: keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:02:0f:40:84:e2:b7:c6:05:d1:3f:15:a5:f1:a2:27:48:5d: 4b:80:f0:34:5e:07:5b:c6:03:cb:3a:90:45:d0:7e:1d:27:9f: e4:52:94:7e:bc:3f:9d:b8:72:11:02:90:30:6f:bf:8b:0b:2f: 26:38:01:72:0a:db:83:84:f8:c9:d4:d8:0f:1f:7e:32:bb:5e: 48:6a:f4:5d:94:33:fa:bb:d5:9f:10:1b:ee:fb:7c:1d:f6:1e: 29:e4:98:5a:5c:28:7c:a1:8b:cf:43:aa:74:3d:1a:6a:e2:8c: ed:7f:83:97:bd:37:49:8d:a7:9c:45:78:cc:36:a7:a0:8e:77: a8:70:a1:49:78:ea:77:04:6c:a6:4c:c4:b7:7b:80:15:cb:36: 40:97:e9:5a:09:ae:31:12:4b:87:75:4c:a3:6d:b3:15:d5:e5: 94:80:ff:d2:4d:ff:66:3d:d9:00:41:3d:f7:1d:16:1e:6d:e7: bc:1c:ac:89:3b:ef:8b:d1:49:c3:ed:b7:e3:f2:b9:06:f0:78: cf:10:be:89:84:ab:06:db:66:86:d3:22:d9:d1:39:05:94:bc: b4:87:b9:1d:d5:9c:c6:9c:4c:6a:b2:d3:d0:68:87:34:64:42: d1:49:0b:33:6e:60:c4:5e:88:00:a8:8e:4f:df:72:26:24:37: d1:45:00:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKDg5NEZFMTEzOThCNjc5QUVCMUIxMThCMUJERTY3M0Ux OENGNkU5MzQwHhcNMjYwOTI4MTY1ODQyWhcNMjYxMDA1MTY1ODQyWjAYMRYwFAYD VQQDEw02YWJhOWNjMi01MTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JQQbBrrxNapnJKPh8ush7mHTiaw0OUFxJZmP+SN7WjUToPFIx5VvLLOL2vT lwPu2biXODl78glIYHvpgAskEBz6pskF7um9h6AHBZ6a5bQ3b9PDt3RALPtCjfK2 odlRwX/48v2Y0UCRbpmPGi4BZffOjDZThlafXfjmIny+sOONG3TEQFjkcq+qSD8K N1NVhDfF7RmMcNlZmr+n9I3q57ziceL+uInwUY1X/a4dEbMJGbRYGKfMVslrCPjo ibyBV6mJfifVX95rpjKtARwsIpp7yfuqwW7jwcH6Kiy/eSCRFIP7G5V/MVniM9ac NznDAzeUAc3fBK+fR/P/wipT6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGe/pSHB aMvpMf7bMwbYFGi/eo+mMB8GA1UdIwQYMBaAFIlP4ROYtnmusbEYsb3mc+GM9uk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS9CQ0VERjQ0MkIw QkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVhNnhzUml4dmVaejRZejI2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVX2hFNWkyZWE2eHNSaXh2ZVp6NFl6MjZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS9CQ0VERjQ0MkIwQkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVh NnhzUml4dmVaejRZejI2VFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlwIPQITit8YF0T8VpfGiJ0hdS4DwNF4HW8YDyzqQRdB+HSef5FKUfrw/nbhy EQKQMG+/iwsvJjgBcgrbg4T4ydTYDx9+MrteSGr0XZQz+rvVnxAb7vt8HfYeKeSY WlwofKGLz0OqdD0aauKM7X+Dl703SY2nnEV4zDanoI53qHChSXjqdwRspkzEt3uA Fcs2QJfpWgmuMRJLh3VMo22zFdXllID/0k3/Zj3ZAEE99x0WHm3nvBysiTvvi9FJ w+234/K5BvB4zxC+iYSrBttmhtMi2dE5BZS8tIe5HdWcxpxMarLT0GiHNGRC0UkL M25gxF6IAKiOT99yJiQ30UUAzQ== -----END CERTIFICATE-----Generated at Tue Sep 29 13:48:38 2026 by rpki-client