$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft File: 2WQZRdW0z31j_JExr89yeuNtkCA.mft (raw, json) Hash identifier: 8C7Qc1rT4VC34MkpsHzilzaW52iXCnBeqK9kv4L3dAg= Subject key identifier: 45:B1:C3:82:20:9D:B3:87:18:F7:97:ED:B2:8A:38:4A:BB:E7:9B:BE Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20 Certificate issuer: /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft Manifest number: 02C9 Signing time: Wed 23 Sep 2026 01:07:48 +0000 Manifest this update: Wed 23 Sep 2026 01:07:48 +0000 Manifest next update: Wed 30 Sep 2026 01:07:48 +0000 Files and hashes: 1: 2WQZRdW0z31j_JExr89yeuNtkCA.crl (hash: bDThvn7HFu0tFOxpKaEkeCwgkmgkeUTsz9DkW+NC4b8=) 2: 77490C9A792F11EEBF849942C4F9AE02.roa (hash: MpcjQVs1Jc1cjgEQDQ1xjrNe8yr/lbGI3mI0RqgvaQ8=) 3: 15714ED2776A11ED98AF7341C4F9AE02.roa (hash: GVyHO9aPtU+XPsp7j3IVen2mhZWFCWup91n2kBUjWV8=) 4: 590A6A9A792E11EEA5AAB840C4F9AE02.roa (hash: /sj3JZ3p1665YJRvSUXz4i11ey7ZoPynVcwKSHS8SnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F316, serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020 Validity Not Before: Sep 23 01:07:48 2026 GMT Not After : Sep 30 01:07:48 2026 GMT Subject: CN=6ab32664-c4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:cf:b6:6c:e6:01:cb:b4:28:ca:2c:42:bc: 64:8a:f8:98:9d:5a:03:a5:88:b4:9e:44:38:d4:06: bd:29:e8:e4:31:91:ca:0f:d6:ad:8e:5c:a1:fe:f2: 8d:69:7d:79:8c:fd:36:9a:9a:30:6b:b5:5e:47:d3: 9a:c3:d7:ba:19:e7:9e:fa:e9:99:b0:57:65:13:10: 85:7f:ce:0c:3a:ad:24:48:50:8a:19:14:ca:bc:5c: 16:cd:8c:97:af:15:9b:c2:d4:bd:45:07:bc:6a:7f: e0:6f:18:e6:24:01:ed:de:38:04:ec:88:50:2d:dc: 88:c8:d6:2e:4e:5a:82:3b:94:bb:96:3d:f7:f7:c6: ef:6b:9d:a1:8a:f6:a9:f2:79:46:a7:0b:dc:c1:29: 8b:b4:5a:51:ee:51:eb:cf:45:83:86:6d:4c:31:c0: 57:da:6f:4d:47:53:23:9a:e3:27:ab:d7:5e:fe:28: 1a:b4:ae:5b:c4:d6:8a:a0:d5:7b:35:8d:63:7e:83: 37:3f:e0:39:fa:b5:06:87:13:fd:f5:b3:59:83:ee: 2a:6f:c7:36:6b:6d:d9:aa:e7:d5:7a:91:d9:ff:a8: ac:d6:39:13:a1:15:71:ec:34:4e:fe:41:59:3d:f5: 78:38:6a:c7:e8:14:16:0a:5e:25:d8:55:53:d3:58: 00:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B1:C3:82:20:9D:B3:87:18:F7:97:ED:B2:8A:38:4A:BB:E7:9B:BE X509v3 Authority Key Identifier: keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6c:1d:09:52:e5:e5:32:60:3d:f6:d4:f9:42:5d:e2:3a:ae: 47:c3:dd:0a:88:24:e8:a2:d8:28:37:5c:64:20:f6:63:56:6c: fc:07:fd:38:47:17:4e:9e:07:6b:8e:98:3e:6f:87:66:a6:36: f1:d8:5d:e3:07:80:45:81:8f:8e:39:29:81:7a:3a:ca:bd:f6: b7:f3:4e:ed:26:20:79:46:ad:a1:6b:5d:cf:50:b7:1b:70:00: cf:81:a2:10:03:fe:38:c6:3b:36:88:f5:b8:b2:57:a1:c5:f7: 97:5d:5c:50:a9:e5:99:5f:61:11:c0:65:4d:46:db:d9:24:51: 31:13:f0:f0:e2:c5:ed:de:54:6b:7a:75:10:2c:50:5f:cc:ec: 3a:46:5f:99:4e:70:e3:5b:3f:52:ed:96:0f:29:3f:0c:8f:15: 62:62:85:09:2c:0d:5a:78:78:3c:7a:84:26:b0:28:32:1b:64: 22:e1:8d:b1:0d:b8:d5:71:30:a7:f3:76:57:e2:f3:6f:ac:f5: 4c:1b:42:15:3d:49:24:b5:a2:c7:03:b3:d7:67:dd:d5:63:74: 8c:bf:73:7c:da:c7:d8:45:58:df:95:7d:6d:2e:bc:76:a5:f7: 51:d4:ad:bb:7f:1c:23:f7:41:f6:73:a0:11:10:1b:c3:43:1f: 3b:1a:0b:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYzMTYxMTAvBgNVBAUTKEQ5NjQxOTQ1RDVCNENGN0Q2M0ZDOTEzMUFGQ0Y3MjdB RTM2RDkwMjAwHhcNMjYwOTIzMDEwNzQ4WhcNMjYwOTMwMDEwNzQ4WjAYMRYwFAYD VQQDEw02YWIzMjY2NC1jNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAHPtmzmAcu0KMosQrxkiviYnVoDpYi0nkQ41Aa9KejkMZHKD9atjlyh/vKN aX15jP02mpowa7VeR9Oaw9e6Geee+umZsFdlExCFf84MOq0kSFCKGRTKvFwWzYyX rxWbwtS9RQe8an/gbxjmJAHt3jgE7IhQLdyIyNYuTlqCO5S7lj3398bva52hivap 8nlGpwvcwSmLtFpR7lHrz0WDhm1MMcBX2m9NR1MjmuMnq9de/igatK5bxNaKoNV7 NY1jfoM3P+A5+rUGhxP99bNZg+4qb8c2a23ZqufVepHZ/6is1jkToRVx7DRO/kFZ PfV4OGrH6BQWCl4l2FVT01gAJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWxw4Ig nbOHGPeX7bKKOEq755u+MB8GA1UdIwQYMBaAFNlkGUXVtM99Y/yRMa/PcnrjbZAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjMxNi9BMURGMTUyMDc3 NEMxMUVEQjgyNkJDMEJDNEY5QUUwMi8yV1FaUmRXMHozMWpfSkV4cjg5eWV1TnRr Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXUVpSZFcwejMxal9KRXhyODl5ZXVOdGtDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjMxNi9BMURGMTUyMDc3NEMxMUVEQjgyNkJDMEJDNEY5QUUwMi8yV1FaUmRXMHoz MWpfSkV4cjg5eWV1TnRrQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAamwdCVLl5TJgPfbU+UJd4jquR8PdCogk6KLYKDdcZCD2Y1Zs/Af9OEcXTp4H a46YPm+HZqY28dhd4weARYGPjjkpgXo6yr32t/NO7SYgeUatoWtdz1C3G3AAz4Gi EAP+OMY7Noj1uLJXocX3l11cUKnlmV9hEcBlTUbb2SRRMRPw8OLF7d5Ua3p1ECxQ X8zsOkZfmU5w41s/Uu2WDyk/DI8VYmKFCSwNWnh4PHqEJrAoMhtkIuGNsQ241XEw p/N2V+Lzb6z1TBtCFT1JJLWixwOz12fd1WN0jL9zfNrH2EVY35V9bS68dqX3UdSt u38cI/dB9nOgERAbw0MfOxoLJQ== -----END CERTIFICATE-----Generated at Thu Sep 24 13:40:06 2026 by rpki-client