$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: ZyIKT+WAOE9wBgU1iDGNH9DqPmB7WbdOJNo+IFN7JSI= Subject key identifier: CD:54:8A:01:5F:B8:45:BE:66:2A:48:C6:F3:CB:FA:DE:89:3D:61:4F Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 0223 Signing time: Wed 23 Sep 2026 02:43:42 +0000 Manifest this update: Wed 23 Sep 2026 02:43:42 +0000 Manifest next update: Wed 30 Sep 2026 02:43:42 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: fCCPqw2mifvJtvKliZHx5PCv4ZAuk6u1ZQeeYe4ZIgI=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: SzmtgdmOFJZhk9jVTnV/yTe6X6D8nfk0jT/tOuImmRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: Sep 23 02:43:42 2026 GMT Not After : Sep 30 02:43:42 2026 GMT Subject: CN=6ab33cde-6df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:75:8f:b5:26:8d:68:37:93:91:8c:93:b3: a7:7a:60:6a:5f:c8:65:72:19:9f:f0:38:0e:4c:81: c3:25:b6:9e:a7:2c:14:b0:08:55:8f:8b:94:4b:cf: 28:3f:53:e5:e4:d1:29:8d:fd:08:28:7a:3b:d3:18: 26:f0:99:b6:86:b9:c6:7c:dc:7c:3b:a6:36:65:1d: a8:4f:57:ca:57:ee:1d:eb:4b:1c:1d:54:6a:45:30: 20:c1:e2:27:4c:3c:c5:a8:dd:c1:00:28:24:04:26: 15:7a:80:60:ac:ae:17:72:0d:17:27:d9:83:13:68: 7f:0a:9b:26:40:14:4c:ad:a6:55:c2:10:40:40:3b: d5:0b:72:a2:63:f9:ae:92:3f:af:1b:25:e3:c8:e1: 41:f6:1f:4c:e5:ba:d6:25:92:7b:ce:2b:26:29:a0: d6:ee:60:ab:51:70:c3:1d:94:33:63:71:ab:3d:92: 27:d6:70:ab:6d:2e:31:58:05:8f:cc:59:e1:67:ee: af:cb:a8:ad:69:7a:ef:11:91:0e:91:dc:08:78:58: 40:d0:63:15:1d:88:5d:89:7a:f7:2f:e7:ea:dd:c9: 82:fb:81:66:df:ad:8b:6b:00:3f:54:28:9b:6a:06: 8d:25:db:1a:84:90:81:3b:cf:b2:e3:28:38:0c:f9: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:8A:01:5F:B8:45:BE:66:2A:48:C6:F3:CB:FA:DE:89:3D:61:4F X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:86:43:d3:ab:c3:eb:56:ef:ed:28:0c:32:7f:9b:49:d9:21: 6a:83:e4:26:0b:63:53:1d:31:7f:75:f9:0b:10:41:46:d6:3c: d5:f8:be:3e:ac:d4:02:58:bc:71:8d:69:ba:d8:94:a0:0b:ab: 7c:b9:ad:09:7b:ed:05:3b:c3:87:d6:29:1e:27:7d:fc:e5:9e: 24:b2:33:2e:36:df:4e:06:76:4a:5b:69:31:38:ac:4c:b8:f8: 34:80:3b:e5:e8:49:e4:38:11:a6:7f:79:68:f5:8f:55:85:93: 0e:fb:5e:77:18:a5:13:d6:2c:75:14:91:47:b3:e1:1d:c5:2a: 03:f7:49:b5:5c:ce:a3:54:28:b8:a4:b6:a8:72:6d:20:76:49: 67:42:a5:20:28:17:6c:c7:fb:f3:d9:40:8b:4e:88:39:a3:74: b1:c9:4d:5f:37:4d:5f:11:6f:61:51:49:aa:79:c9:f0:83:0d: 9e:89:27:59:69:b1:65:93:6a:22:44:3c:de:5e:2f:a9:c4:ca: 96:fc:32:a6:48:6e:b2:9e:06:69:f0:58:5d:93:73:d3:fe:f2: 85:f5:ee:83:7c:12:6a:b4:67:f2:15:6a:06:ae:f9:c6:d2:4d: fe:39:fe:a2:65:27:33:d4:8d:fa:72:7c:71:5e:ee:8d:b2:ed: ef:b2:cc:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjYwOTIzMDI0MzQyWhcNMjYwOTMwMDI0MzQyWjAYMRYwFAYD VQQDEw02YWIzM2NkZS02ZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1B1j7UmjWg3k5GMk7OnemBqX8hlchmf8DgOTIHDJbaepywUsAhVj4uUS88o P1Pl5NEpjf0IKHo70xgm8Jm2hrnGfNx8O6Y2ZR2oT1fKV+4d60scHVRqRTAgweIn TDzFqN3BACgkBCYVeoBgrK4Xcg0XJ9mDE2h/CpsmQBRMraZVwhBAQDvVC3KiY/mu kj+vGyXjyOFB9h9M5brWJZJ7zismKaDW7mCrUXDDHZQzY3GrPZIn1nCrbS4xWAWP zFnhZ+6vy6itaXrvEZEOkdwIeFhA0GMVHYhdiXr3L+fq3cmC+4Fm362LawA/VCib agaNJdsahJCBO8+y4yg4DPknJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1UigFf uEW+ZipIxvPL+t6JPWFPMB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS4ZD06vD61bv7SgMMn+bSdkhaoPkJgtjUx0xf3X5CxBBRtY81fi+PqzUAli8 cY1putiUoAurfLmtCXvtBTvDh9YpHid9/OWeJLIzLjbfTgZ2SltpMTisTLj4NIA7 5ehJ5DgRpn95aPWPVYWTDvtedxilE9YsdRSRR7PhHcUqA/dJtVzOo1QouKS2qHJt IHZJZ0KlICgXbMf789lAi06IOaN0sclNXzdNXxFvYVFJqnnJ8IMNnoknWWmxZZNq IkQ83l4vqcTKlvwypkhusp4GafBYXZNz0/7yhfXug3wSarRn8hVqBq75xtJN/jn+ omUnM9SN+nJ8cV7ujbLt77LM3Q== -----END CERTIFICATE-----Generated at Wed Sep 23 09:46:33 2026 by rpki-client