$ rpki-client -vvvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: dEpEIcCAS2RX0c0vv4DOqY4NmYq752LLkQ9Qv6SwFOo= Subject key identifier: 37:C1:3C:8D:FF:87:6A:97:7A:05:98:FF:80:95:F6:2A:7C:FB:88:3C Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 014E Signing time: Tue 22 Sep 2026 14:28:16 +0000 Manifest this update: Tue 22 Sep 2026 14:28:15 +0000 Manifest next update: Tue 29 Sep 2026 14:28:15 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: eXUdzvgLqZYoLu9qq7yNS7w5ZAzOfIQxmVYghtscvX4=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: qHE12pZJwFpe8wyPzOgoide5sDGoFWiN9Bd/hNLVIe4=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: yVchdU3xVWj31ewZ5w80+tHH4ZJNPmu+JLTdmSt6IhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Sep 22 14:28:15 2026 GMT Not After : Sep 29 14:28:15 2026 GMT Subject: CN=6ab2907f-147e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:a2:21:46:0e:a4:f1:a4:b0:79:dd:3d:4f: 31:a7:80:60:cf:ce:ed:a6:87:93:d5:8d:12:07:74: 10:6a:be:4f:ea:d8:b2:8e:d0:e6:b7:38:2e:27:c5: ca:b2:74:d8:e5:25:45:a2:26:f6:93:cb:98:62:eb: 75:25:58:40:c2:2f:e4:e7:08:68:c8:1b:35:5b:56: 69:aa:87:03:5f:57:a0:91:e7:65:59:d3:11:22:63: 37:e1:c4:3f:86:6b:26:76:3d:31:9b:47:15:07:54: 69:1d:8b:bc:27:95:cf:8e:8f:be:87:63:c0:97:81: 69:a5:a2:19:c1:6e:ec:57:0e:5a:8f:a1:c5:d4:cc: 93:60:32:8f:e7:57:64:c1:3c:53:41:ee:6f:c0:85: 05:37:26:14:c9:72:ea:3d:f5:a3:36:16:19:dc:51: 04:bd:f8:7f:ab:b1:d2:45:a9:87:64:8c:80:9d:84: 17:85:15:3e:ee:d1:bd:ef:5d:1d:23:48:c6:21:ef: ed:86:93:af:8b:ad:c3:12:43:0b:79:d0:72:eb:c9: 56:64:ae:59:a2:87:f4:88:b9:b8:d0:5b:1f:de:ce: 87:d0:35:b8:73:53:ac:b6:96:6a:c4:b5:fe:83:b3: 51:c9:16:af:0f:d1:10:73:7e:d0:b8:d4:57:57:dd: 94:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C1:3C:8D:FF:87:6A:97:7A:05:98:FF:80:95:F6:2A:7C:FB:88:3C X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:60:79:2a:ce:d4:c7:1a:e3:f0:c0:03:5a:6c:96:53:b3:a2: 5e:64:6b:9e:0b:0a:6c:8c:6d:7b:b9:95:1d:23:a6:6f:10:9d: c9:a2:a6:c5:8b:4d:70:3e:38:cc:d6:36:e4:b6:6f:f6:58:c3: 2a:eb:0e:e6:33:58:f9:05:40:14:a0:2f:8b:e8:00:48:f3:02: bc:3b:29:e2:4b:2d:9b:d9:4f:2d:e7:3e:66:10:eb:20:cd:56: ae:32:90:17:dd:b6:ff:74:1d:c4:ec:21:6f:74:11:04:fc:d0: 57:57:dc:8f:7b:f8:6f:d5:8c:7c:d1:b1:0d:5b:3e:75:22:d3: 67:1b:6c:31:bb:ff:89:7b:f0:21:89:2b:71:f1:11:e1:aa:65: f2:06:92:fe:f1:71:c9:c9:77:55:00:4d:73:d5:69:4e:dd:97: 33:d8:d3:93:31:7f:a6:e2:79:3a:a8:83:ee:9c:bb:7d:27:7a: 19:53:4d:4c:ab:c1:e0:04:b5:24:3a:20:e7:fa:5d:12:a6:4c: a7:7c:29:ca:b8:ee:1c:c6:16:fe:32:f2:76:ac:b7:c5:d6:cc: 6c:8e:eb:cc:47:1b:0e:ab:5d:d3:84:02:6d:c7:c1:be:03:ac: 3a:0c:60:5f:73:bd:ad:d2:ad:45:09:0f:83:e2:4d:24:6d:77: f3:07:14:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEVDMDJDRDA2Qjc0NzM3OEIyQzFDQzVBMjIxRTZFMDg2 NjFEQTgyMjUwHhcNMjYwOTIyMTQyODE1WhcNMjYwOTI5MTQyODE1WjAYMRYwFAYD VQQDEw02YWIyOTA3Zi0xNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuuiIUYOpPGksHndPU8xp4Bgz87tpoeT1Y0SB3QQar5P6tiyjtDmtzguJ8XK snTY5SVFoib2k8uYYut1JVhAwi/k5whoyBs1W1ZpqocDX1egkedlWdMRImM34cQ/ hmsmdj0xm0cVB1RpHYu8J5XPjo++h2PAl4FppaIZwW7sVw5aj6HF1MyTYDKP51dk wTxTQe5vwIUFNyYUyXLqPfWjNhYZ3FEEvfh/q7HSRamHZIyAnYQXhRU+7tG9710d I0jGIe/thpOvi63DEkMLedBy68lWZK5Zoof0iLm40Fsf3s6H0DW4c1OstpZqxLX+ g7NRyRavD9EQc37QuNRXV92U+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfBPI3/ h2qXegWY/4CV9ip8+4g8MB8GA1UdIwQYMBaAFOwCzQa3RzeLLBzFoiHm4IZh2oIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yQzJGNkU1MENF RTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40c3NITVdpSWViZ2htSGFn aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yQzJGNkU1MENFRTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40 c3NITVdpSWViZ2htSGFnaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhGB5Ks7Uxxrj8MADWmyWU7OiXmRrngsKbIxte7mVHSOmbxCdyaKmxYtNcD44 zNY25LZv9ljDKusO5jNY+QVAFKAvi+gASPMCvDsp4kstm9lPLec+ZhDrIM1WrjKQ F922/3QdxOwhb3QRBPzQV1fcj3v4b9WMfNGxDVs+dSLTZxtsMbv/iXvwIYkrcfER 4apl8gaS/vFxycl3VQBNc9VpTt2XM9jTkzF/puJ5OqiD7py7fSd6GVNNTKvB4AS1 JDog5/pdEqZMp3wpyrjuHMYW/jLydqy3xdbMbI7rzEcbDqtd04QCbcfBvgOsOgxg X3O9rdKtRQkPg+JNJG138wcUDg== -----END CERTIFICATE-----Generated at Wed Sep 23 18:58:49 2026 by rpki-client