$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft File: 2QaTkaPngEpuvd-dQfLeTZG9UbM.mft (raw, json) Hash identifier: P0ubU1Z9isgzptmchryjTxHnmupQWlkzTo8sXEFXPKc= Subject key identifier: AE:23:6E:21:15:F3:FA:EB:6C:5F:99:98:16:FE:D3:01:62:73:93:48 Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Certificate serial: 0779 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft Manifest number: 076B Signing time: Mon 28 Sep 2026 21:51:21 +0000 Manifest this update: Mon 28 Sep 2026 21:51:20 +0000 Manifest next update: Mon 05 Oct 2026 21:51:20 +0000 Files and hashes: 1: 2QaTkaPngEpuvd-dQfLeTZG9UbM.crl (hash: mAdSek9tWABa3NNWy9V/DRP+ulEpIX8Bbaaus+1d6zk=) 2: 202A51EA52D611EFA0333E23C4F9AE02.roa (hash: ukG+QjLIfQYYrJeHpmMVcGo76w8dZis2VZOGGlLuRHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 21:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C22, serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Validity Not Before: Sep 28 21:51:20 2026 GMT Not After : Oct 5 21:51:20 2026 GMT Subject: CN=6abae159-da6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:d6:66:d1:e9:51:fd:1e:8b:fb:c8:0d:f0: 21:fb:f0:32:61:44:39:93:08:0d:49:ca:86:14:d7: d0:1f:c3:4c:d7:2a:7e:ff:c1:26:65:13:3a:b4:c6: 18:ea:20:8d:c8:49:3b:37:80:16:5d:f3:3a:ed:06: 5b:26:9e:d2:24:72:96:db:66:f3:87:95:fb:b0:6e: d3:e8:52:4b:57:7e:57:ac:3b:f6:da:ed:0e:a6:75: d0:c9:c7:aa:2f:6d:ad:96:de:fa:34:49:f5:22:3b: ba:8b:18:14:4b:f7:14:48:49:27:c1:3a:42:fb:73: ea:80:47:a7:4e:8e:4a:51:c6:c4:09:eb:4d:80:3e: 74:ec:67:6f:ce:0b:e2:01:07:8c:4b:59:68:57:15: 03:ce:a2:25:70:3d:70:d8:f5:ad:62:55:08:80:0f: f2:19:bb:76:b6:4e:70:b3:28:47:dd:8f:87:6b:71: f8:ac:3a:4c:80:f2:8d:ff:5a:09:e6:95:a8:f5:01: 29:2f:68:c1:dc:67:19:df:dd:21:61:94:e8:4c:ff: a1:d7:30:b7:e2:a3:21:d1:4a:e5:43:0d:9f:bd:cf: 7a:2b:d4:a9:91:95:b2:0d:ae:31:81:4d:c1:47:a4: db:69:be:fa:99:83:66:ce:2c:8f:97:c8:e1:4f:4e: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:23:6E:21:15:F3:FA:EB:6C:5F:99:98:16:FE:D3:01:62:73:93:48 X509v3 Authority Key Identifier: keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:53:c6:03:7c:10:19:e1:f4:db:d1:32:cc:83:f7:6d:bd:35: f3:ce:e7:d0:fc:89:e8:8a:95:ed:2d:c9:0f:57:90:17:30:6a: a6:18:fe:9e:2f:ef:66:f6:5a:6d:42:e8:f9:ef:98:49:d0:53: c6:e7:f1:0b:f3:0c:35:41:5c:1d:b2:05:fb:09:37:91:0f:71: 96:53:6f:62:ce:90:80:64:f7:a4:46:1c:03:d0:b0:b5:d9:f9: 11:a3:35:8b:d2:f5:9c:74:35:fb:20:c2:80:ef:05:83:cb:13: 71:56:8c:ed:dd:c4:45:9f:f5:19:f3:4d:d6:e2:7f:ea:43:4d: 64:d4:1d:76:71:32:ce:02:2d:69:09:b3:81:14:5c:6d:a7:57: 03:bd:13:46:84:a2:c3:6f:92:07:be:af:dd:2c:2e:6d:9f:fc: b7:ea:2d:92:ad:8d:57:61:a2:18:c0:45:08:c1:24:d5:3f:28: 49:ce:56:07:0c:69:7a:f5:d8:6d:1f:67:59:e3:f7:97:55:bd: d2:a7:bc:a3:bc:46:66:70:1d:90:44:a9:f7:e6:05:ed:74:f8: e6:ef:13:aa:6d:d3:26:dc:b7:71:84:aa:0d:db:6d:e7:c8:b3: a7:05:3b:fa:73:c6:ee:34:34:4c:cb:5d:ba:8d:ef:6a:c9:9f: e8:3b:42:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMjIxMTAvBgNVBAUTKEQ5MDY5MzkxQTNFNzgwNEE2RUJEREY5RDQxRjJERTRE OTFCRDUxQjMwHhcNMjYwOTI4MjE1MTIwWhcNMjYxMDA1MjE1MTIwWjAYMRYwFAYD VQQDEw02YWJhZTE1OS1kYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYrWZtHpUf0ei/vIDfAh+/AyYUQ5kwgNScqGFNfQH8NM1yp+/8EmZRM6tMYY 6iCNyEk7N4AWXfM67QZbJp7SJHKW22bzh5X7sG7T6FJLV35XrDv22u0OpnXQyceq L22tlt76NEn1Iju6ixgUS/cUSEknwTpC+3PqgEenTo5KUcbECetNgD507Gdvzgvi AQeMS1loVxUDzqIlcD1w2PWtYlUIgA/yGbt2tk5wsyhH3Y+Ha3H4rDpMgPKN/1oJ 5pWo9QEpL2jB3GcZ390hYZToTP+h1zC34qMh0UrlQw2fvc96K9SpkZWyDa4xgU3B R6Tbab76mYNmziyPl8jhT06QhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK4jbiEV 8/rrbF+ZmBb+0wFic5NIMB8GA1UdIwQYMBaAFNkGk5Gj54BKbr3fnUHy3k2RvVGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi8wNDU2OTVCODdG QUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdFcHV2ZC1kUWZMZVRaRzlV Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRYVRrYVBuZ0VwdXZkLWRRZkxlVFpHOVViTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMyMi8wNDU2OTVCODdGQUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdF cHV2ZC1kUWZMZVRaRzlVYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg1PGA3wQGeH029EyzIP3bb01887n0PyJ6IqV7S3JD1eQFzBqphj+ni/vZvZa bULo+e+YSdBTxufxC/MMNUFcHbIF+wk3kQ9xllNvYs6QgGT3pEYcA9Cwtdn5EaM1 i9L1nHQ1+yDCgO8Fg8sTcVaM7d3ERZ/1GfNN1uJ/6kNNZNQddnEyzgItaQmzgRRc badXA70TRoSiw2+SB76v3SwubZ/8t+otkq2NV2GiGMBFCMEk1T8oSc5WBwxpevXY bR9nWeP3l1W90qe8o7xGZnAdkESp9+YF7XT45u8Tqm3TJty3cYSqDdtt58izpwU7 +nPG7jQ0TMtduo3vasmf6DtCEA== -----END CERTIFICATE-----Generated at Wed Sep 30 12:06:46 2026 by rpki-client