$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: fUHEuBoBGGhYE1maHkGl8MKqb3bXS7l5TbfETFMz07o= Subject key identifier: 9C:CE:40:6D:45:2C:2F:CC:38:37:B2:1C:C7:A7:C3:29:AE:35:D8:F7 Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: D9 Signing time: Sun 27 Sep 2026 07:13:12 +0000 Manifest this update: Sun 27 Sep 2026 07:13:11 +0000 Manifest next update: Sun 04 Oct 2026 07:13:11 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: O1ekAw5XF9Y/sCWTC+jWinoN3WcL2TtZ5EY3nCOM1Dk=) 2: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: qpSDoTipwbn3qmlJo9kOaWOWyQWNuZBEXvzsDRT1K7I=) 3: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: vrlI1pszTNOMrzyBgG79jCCwevKnYILu7ZDEahfp4WY=) 4: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: bJw6aITse+eniewVtF8bgjXkhRkSrrBco5fghncx6Cg=) 5: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: k4KE8zC6lSjJRhlE/re99tOEHbG8sUjwvgrGoKF/M58=) 6: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: DrgQ3c30s/8aRln/0QBML0s10GhufbUYZIMkX/pX6Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 07:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Sep 27 07:13:11 2026 GMT Not After : Oct 4 07:13:11 2026 GMT Subject: CN=6ab8c207-b974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:7b:25:86:28:81:19:56:05:a5:9f:37:2b: 20:92:54:c2:4e:79:f1:2c:1f:ad:e9:06:08:ec:e9: e3:d5:70:7b:49:13:22:20:ed:da:e7:29:f0:d6:47: bb:e0:5c:6c:5f:26:42:7f:a6:e6:38:f1:83:29:b6: ce:54:60:c6:40:97:e7:60:b8:2d:f8:c6:28:f7:76: 51:87:13:74:30:1e:8b:05:78:4c:49:fe:67:aa:aa: ad:f4:21:77:d7:eb:17:15:8a:48:de:04:31:39:e0: b4:06:e9:78:10:fb:f4:00:cb:e3:92:28:5d:bb:7d: ef:e0:ea:ca:3f:8c:89:48:1a:b5:69:6d:d5:4f:1f: 16:3e:8f:89:4c:d0:8f:55:db:46:ce:8c:98:65:8b: 60:ff:4b:b9:cc:54:73:bf:fc:fb:f8:8a:18:f3:bf: 55:02:6d:46:d1:4c:85:38:a0:07:e6:e7:e0:68:e9: 36:d5:91:1a:8d:94:b9:fc:a0:70:d9:22:4c:e4:7e: 39:86:56:56:6e:d4:de:c9:32:c8:d3:a8:54:d1:30: 09:83:c1:57:72:08:da:52:84:ec:9c:31:54:b2:c5: 24:5e:ca:57:e8:c2:d3:da:89:d2:99:7f:b8:2b:2a: 13:95:52:29:0b:f5:c8:5a:8c:1d:83:f1:32:b8:37: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CE:40:6D:45:2C:2F:CC:38:37:B2:1C:C7:A7:C3:29:AE:35:D8:F7 X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:30:7c:d6:27:95:69:66:84:43:d9:54:9b:8c:71:6d:ca:28: 42:b9:78:da:6d:37:89:28:9c:94:9c:3f:78:77:9c:68:71:9c: 59:13:36:b4:14:4a:ff:f8:ec:17:fe:03:63:83:bf:52:6b:33: bd:a7:51:1e:98:ca:7a:90:95:d8:d4:b6:60:50:b0:ec:92:ae: e6:54:45:09:61:7f:3f:9c:d4:75:bf:fe:12:0f:0c:39:df:f5: 00:27:57:ec:83:d8:3a:a8:ce:38:01:1d:39:71:ed:c8:2c:41: 74:e6:4c:d2:0a:cd:e6:a4:ce:04:c1:e9:19:c6:8a:46:06:75: 14:3c:b6:2e:39:84:cc:c1:b5:8f:e5:5e:79:c0:f6:db:1f:82: 5e:37:31:68:3f:e7:c9:a1:58:72:1a:3c:ed:e5:71:3a:2c:87: 14:9e:6b:49:df:db:31:15:c8:fe:ed:ea:79:2a:00:8a:1f:5b: e3:0d:46:51:33:9f:c2:9d:47:17:6e:63:a4:36:39:ef:35:56: a3:65:3b:bd:ab:fa:33:f0:00:2a:b3:27:74:26:be:01:1f:c8: a2:c5:6d:b7:66:54:71:4c:4d:a6:23:75:fd:d9:dc:50:c9:5b: 56:df:82:80:1e:d5:7f:65:79:a9:23:c0:30:24:58:19:fe:fc: ca:7f:48:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw NzVFMDlBOTgwHhcNMjYwOTI3MDcxMzExWhcNMjYxMDA0MDcxMzExWjAYMRYwFAYD VQQDEw02YWI4YzIwNy1iOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0h7JYYogRlWBaWfNysgklTCTnnxLB+t6QYI7Onj1XB7SRMiIO3a5ynw1ke7 4FxsXyZCf6bmOPGDKbbOVGDGQJfnYLgt+MYo93ZRhxN0MB6LBXhMSf5nqqqt9CF3 1+sXFYpI3gQxOeC0Bul4EPv0AMvjkihdu33v4OrKP4yJSBq1aW3VTx8WPo+JTNCP VdtGzoyYZYtg/0u5zFRzv/z7+IoY879VAm1G0UyFOKAH5ufgaOk21ZEajZS5/KBw 2SJM5H45hlZWbtTeyTLI06hU0TAJg8FXcgjaUoTsnDFUssUkXspX6MLT2onSmX+4 KyoTlVIpC/XIWowdg/EyuDex1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzOQG1F LC/MODeyHMenwymuNdj3MB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU4OC9CRjdENUU3NjdCRjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhC VngyZFRQbFQ5RjRIWGdtcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbTB81ieVaWaEQ9lUm4xxbcooQrl42m03iSiclJw/eHecaHGcWRM2tBRK//js F/4DY4O/UmszvadRHpjKepCV2NS2YFCw7JKu5lRFCWF/P5zUdb/+Eg8MOd/1ACdX 7IPYOqjOOAEdOXHtyCxBdOZM0grN5qTOBMHpGcaKRgZ1FDy2LjmEzMG1j+VeecD2 2x+CXjcxaD/nyaFYcho87eVxOiyHFJ5rSd/bMRXI/u3qeSoAih9b4w1GUTOfwp1H F25jpDY57zVWo2U7vav6M/AAKrMndCa+AR/IosVtt2ZUcUxNpiN1/dncUMlbVt+C gB7Vf2V5qSPAMCRYGf78yn9IhQ== -----END CERTIFICATE-----Generated at Mon Sep 28 21:09:56 2026 by rpki-client