$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: iQXCmAtPaJyC5QUlRsP3MsvtgDjfL1jKqXgN2vXZGYw= Subject key identifier: 39:9C:6B:2F:43:AD:92:1B:11:FF:4E:93:E5:6D:FB:63:3F:3E:7B:BB Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 090F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 08F5 Signing time: Mon 28 Sep 2026 20:28:41 +0000 Manifest this update: Mon 28 Sep 2026 20:28:41 +0000 Manifest next update: Mon 05 Oct 2026 20:28:41 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: PXIP169xQqZ6kVs8muN+SOXS7mYPryZSoMt5htFtgSs=) 2: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: mf6qln82PscHDH0xPIvnUcgowJvdgyrORzlGrhrol0w=) 3: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: GhHf45/vb5I/X0MIOpzOvwX20CEWTC0IaH/0NH4EfF4=) 4: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: +xbbDGKjJ6DqQpBrbDd8JJCmqdHxccmvBDGEJY8Y1eA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 20:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Sep 28 20:28:41 2026 GMT Not After : Oct 5 20:28:41 2026 GMT Subject: CN=6abacdf9-a652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:f8:60:29:ec:b3:24:46:2a:e9:56:7d:fa: 9e:1e:88:79:45:3a:6b:c8:9a:30:32:65:c3:9e:0b: 62:dc:b9:ed:7d:6a:30:78:9b:20:f3:a7:f1:5b:a9: b8:aa:d3:e1:16:b0:7f:ff:71:61:ca:78:5b:d7:64: b0:fd:cf:1e:1f:97:48:fd:87:d4:f2:4b:28:3f:c2: f9:cb:58:13:bb:80:31:d4:45:c3:bc:16:e9:a5:00: 2f:ec:f6:8f:b9:6e:12:2d:12:46:ae:ec:08:37:93: 05:a6:c6:44:54:e7:1e:87:c3:8f:9c:1c:9a:a8:51: 03:80:b1:22:17:0e:1e:f5:e7:06:1d:92:14:b7:e8: ec:32:e4:63:df:68:b5:21:f7:af:ab:3d:b2:d5:50: a3:5e:ec:6f:88:32:a8:4b:cb:77:6a:80:ea:2b:85: e8:fa:db:23:7d:2e:a6:34:ad:96:86:ea:a5:ef:a3: 06:26:da:4d:b4:8c:58:4b:bf:fb:1e:3e:78:01:56: 0f:76:28:c0:7d:a5:88:2e:34:5e:48:d9:01:bc:ea: 0e:c7:d6:91:53:ad:cb:84:2f:9c:81:82:56:c6:cb: a6:8b:f7:8a:6b:6b:1b:e1:f7:8c:23:9c:01:85:d1: 3f:48:d8:b5:a8:8b:6d:f5:d7:38:c4:64:a0:91:ab: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9C:6B:2F:43:AD:92:1B:11:FF:4E:93:E5:6D:FB:63:3F:3E:7B:BB X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:3b:35:c1:6b:14:9c:36:74:62:7f:3b:5a:6d:01:a5:3c:72: f2:23:1b:83:a4:dd:7b:da:3a:bf:52:83:ed:8c:ba:ed:d3:dd: a5:a3:32:c4:98:1e:9d:85:98:a8:05:63:d8:aa:cf:0c:96:f3: dc:33:cc:7c:16:32:bd:4c:05:4a:67:75:a9:97:b8:54:ea:c4: 76:9c:c4:40:39:cc:89:70:2f:cf:57:86:3b:68:35:12:fa:ca: 63:e0:75:dd:a8:db:ab:fd:3e:bb:1d:ae:b3:69:12:cb:d7:83: 49:ff:47:cc:35:bf:c4:91:4a:e6:79:f7:94:00:ee:be:a6:3b: bb:f7:fa:b3:17:67:4e:a1:63:36:c8:be:53:38:d4:97:8e:33: b6:4b:22:b8:09:a2:28:a6:0c:f3:63:3b:dd:23:b2:0f:c8:b3: a5:a0:47:d1:ee:da:16:d0:90:42:4a:d6:9c:f8:48:d0:52:71: 8f:d0:b3:64:bd:eb:33:eb:e0:89:42:61:bb:0e:d5:e6:68:ca: a9:8f:73:88:e9:4e:c1:0d:14:d7:a1:b3:67:67:23:46:65:af: 1e:3d:b0:07:c5:ba:57:aa:3d:78:d1:98:70:59:f1:dd:dd:7d: 57:0d:87:77:90:b7:61:6d:cc:2e:a4:a9:d6:46:6b:d0:6c:dd: 90:63:f5:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjYwOTI4MjAyODQxWhcNMjYxMDA1MjAyODQxWjAYMRYwFAYD VQQDEw02YWJhY2RmOS1hNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vH4YCnssyRGKulWffqeHoh5RTpryJowMmXDngti3LntfWoweJsg86fxW6m4 qtPhFrB//3Fhynhb12Sw/c8eH5dI/YfU8ksoP8L5y1gTu4Ax1EXDvBbppQAv7PaP uW4SLRJGruwIN5MFpsZEVOceh8OPnByaqFEDgLEiFw4e9ecGHZIUt+jsMuRj32i1 Ifevqz2y1VCjXuxviDKoS8t3aoDqK4Xo+tsjfS6mNK2Whuql76MGJtpNtIxYS7/7 Hj54AVYPdijAfaWILjReSNkBvOoOx9aRU63LhC+cgYJWxsumi/eKa2sb4feMI5wB hdE/SNi1qItt9dc4xGSgkavPkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmcay9D rZIbEf9Ok+Vt+2M/Pnu7MB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARDs1wWsUnDZ0Yn87Wm0BpTxy8iMbg6Tde9o6v1KD7Yy67dPdpaMyxJgenYWY qAVj2KrPDJbz3DPMfBYyvUwFSmd1qZe4VOrEdpzEQDnMiXAvz1eGO2g1EvrKY+B1 3ajbq/0+ux2us2kSy9eDSf9HzDW/xJFK5nn3lADuvqY7u/f6sxdnTqFjNsi+UzjU l44ztksiuAmiKKYM82M73SOyD8izpaBH0e7aFtCQQkrWnPhI0FJxj9CzZL3rM+vg iUJhuw7V5mjKqY9ziOlOwQ0U16GzZ2cjRmWvHj2wB8W6V6o9eNGYcFnx3d19Vw2H d5C3YW3MLqSp1kZr0GzdkGP1Iw== -----END CERTIFICATE-----Generated at Tue Sep 29 11:49:32 2026 by rpki-client