$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft File: 2CIvXKRzliJE_BNBFXEOvtXjlWA.mft (raw, json) Hash identifier: yOo48u8dmCqyj9DitTU7Gr35/USoVdUbqlwYpEfCL28= Subject key identifier: 1B:71:BA:16:C8:75:D2:6E:15:9D:5A:4C:19:0E:15:A5:C5:B9:45:43 Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft Manifest number: 0CFE Signing time: Tue 22 Sep 2026 17:40:49 +0000 Manifest this update: Tue 22 Sep 2026 17:40:49 +0000 Manifest next update: Tue 29 Sep 2026 17:40:49 +0000 Files and hashes: 1: 2CIvXKRzliJE_BNBFXEOvtXjlWA.crl (hash: 1MY0QN8KGsAvyROkAumSXXmykPZvj7T2et7veCDGEj8=) 2: A4049C06213E11EAAA89A95DC4F9AE02.roa (hash: UbwOi9U9kZof7b43F/HRMpxGF4fX5ioRAi/qvaW/Bgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Sep 22 17:40:49 2026 GMT Not After : Sep 29 17:40:49 2026 GMT Subject: CN=6ab2bda1-f180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:22:31:a7:a7:79:ce:7f:99:ca:b9:c2:d9: f3:d4:9e:c4:f2:78:33:0c:50:84:2f:29:94:df:9c: 81:92:1c:16:ce:97:bb:24:70:50:74:66:98:6b:25: 3a:b5:65:4f:d8:a6:77:6c:2b:47:dc:56:3b:91:eb: 98:64:50:a1:cf:97:ff:bd:1c:cd:9a:85:09:85:17: 62:56:9f:f3:03:3e:bb:d0:f1:12:48:91:7d:9c:dd: 08:61:21:ff:2c:eb:34:0e:8d:f2:c8:be:23:be:f1: 7c:7e:f6:0e:cb:50:9c:42:f3:f9:c4:81:0b:7c:fe: 9a:0b:a8:5d:7e:96:4c:bd:49:52:39:34:40:00:6d: 9c:b8:2e:0c:04:7d:ba:06:eb:7c:b5:e7:a1:5c:96: 45:49:7f:3d:31:95:2a:9b:a7:08:b6:01:98:7b:91: 43:8f:b9:29:56:00:d1:d8:af:ed:9e:4f:13:ae:e4: 66:71:40:8d:8e:9e:1e:9f:01:72:06:06:ac:96:9f: fb:1f:ac:a5:ad:a4:7a:3a:68:9d:d4:de:a9:86:f7: 7d:6e:54:bf:e6:45:db:fa:bf:a6:b2:5f:c1:82:16: 79:a1:d4:58:30:ae:35:2f:12:6d:0d:25:7b:7c:d2: f6:51:e1:5e:e5:35:96:7e:ec:5d:21:35:07:97:d3: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:71:BA:16:C8:75:D2:6E:15:9D:5A:4C:19:0E:15:A5:C5:B9:45:43 X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7d:c9:1e:18:fd:8e:2d:19:15:22:3b:4b:81:d6:a1:f5:d6: ea:b4:ef:5b:95:20:87:ad:bf:56:3a:2e:fc:ca:f3:de:7a:e7: f6:42:a8:df:bb:fd:3e:45:1d:68:b9:7a:55:39:d2:61:ea:d8: ba:b1:39:a3:86:95:12:d7:03:61:b6:12:11:25:8b:fa:e1:4a: ec:88:a8:95:d4:9f:c7:0d:d9:07:1d:75:b5:e4:4e:01:ad:bf: 0f:0f:74:43:f4:6f:16:c4:7a:ca:36:47:56:83:0c:44:48:bb: 87:8e:ed:5a:be:9a:63:e4:20:cb:d3:ef:31:f2:40:d7:26:64: 68:76:2b:40:70:c7:1e:96:12:0e:e8:6c:66:0b:ab:7e:48:ea: 21:e3:e4:31:be:82:43:ac:b2:54:b0:32:f9:d3:dc:2d:8b:b5: b3:52:1e:15:f1:01:92:21:a3:16:0d:7b:57:6d:78:d5:4e:e9: 8e:a8:d6:bb:65:20:67:64:5f:42:d4:ff:0b:e9:27:3d:c5:4e: 6d:94:af:ff:3c:f8:c1:f0:7e:a1:88:0e:4f:f2:e4:c3:9e:ca: 79:bd:ac:b0:06:60:02:64:3c:f1:34:96:b6:2b:9f:ad:28:3e: 10:ec:4f:21:7e:49:38:14:97:3a:ca:bd:11:ed:21:43:b1:23: 5b:37:0b:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjYwOTIyMTc0MDQ5WhcNMjYwOTI5MTc0MDQ5WjAYMRYwFAYD VQQDEw02YWIyYmRhMS1mMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAov8iMaenec5/mcq5wtnz1J7E8ngzDFCELymU35yBkhwWzpe7JHBQdGaYayU6 tWVP2KZ3bCtH3FY7keuYZFChz5f/vRzNmoUJhRdiVp/zAz670PESSJF9nN0IYSH/ LOs0Do3yyL4jvvF8fvYOy1CcQvP5xIELfP6aC6hdfpZMvUlSOTRAAG2cuC4MBH26 But8teehXJZFSX89MZUqm6cItgGYe5FDj7kpVgDR2K/tnk8TruRmcUCNjp4enwFy Bgaslp/7H6ylraR6Omid1N6phvd9blS/5kXb+r+msl/BghZ5odRYMK41LxJtDSV7 fNL2UeFe5TWWfuxdITUHl9N8NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtxuhbI ddJuFZ1aTBkOFaXFuUVDMB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC9DNjk0ODIzNjEwRTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxp SkVfQk5CRlhFT3Z0WGpsV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATX3JHhj9ji0ZFSI7S4HWofXW6rTvW5Ugh62/Vjou/Mrz3nrn9kKo37v9PkUd aLl6VTnSYerYurE5o4aVEtcDYbYSESWL+uFK7IioldSfxw3ZBx11teROAa2/Dw90 Q/RvFsR6yjZHVoMMREi7h47tWr6aY+Qgy9PvMfJA1yZkaHYrQHDHHpYSDuhsZgur fkjqIePkMb6CQ6yyVLAy+dPcLYu1s1IeFfEBkiGjFg17V2141U7pjqjWu2UgZ2Rf QtT/C+knPcVObZSv/zz4wfB+oYgOT/Lkw57Keb2ssAZgAmQ88TSWtiufrSg+EOxP IX5JOBSXOsq9Ee0hQ7EjWzcLrw== -----END CERTIFICATE-----Generated at Tue Sep 22 21:17:00 2026 by rpki-client