$ rpki-client -vvvf rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.mft File: 2DV6n0vTGCELX3cfCV2G_dtycq8.mft (raw, json) Hash identifier: nb0Ga12h7zEoVMuabzkigWHPdKBt3pDb6hHvuGDbEp0= Subject key identifier: E7:0D:AA:D0:66:29:48:70:C9:73:FF:BA:16:C4:85:25:CF:10:EF:43 Authority key identifier: D8:35:7A:9F:4B:D3:18:21:0B:5F:77:1F:09:5D:86:FD:DB:72:72:AF Certificate issuer: /CN=A91285B0/serialNumber=D8357A9F4BD318210B5F771F095D86FDDB7272AF Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DV6n0vTGCELX3cfCV2G_dtycq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.mft Manifest number: 18 Signing time: Wed 23 Sep 2026 08:44:54 +0000 Manifest this update: Wed 23 Sep 2026 08:44:54 +0000 Manifest next update: Wed 30 Sep 2026 08:44:54 +0000 Files and hashes: 1: 2DV6n0vTGCELX3cfCV2G_dtycq8.crl (hash: HkxZSKTRtUyz0lzrrE3heiFsmdeEQtC3GbA6SvO0d8I=) 2: B1F05BC897CC11F19AC96A7D6211F970.roa (hash: 4DI8XgGHG4T3ff5h2QztBlN6qygGWRJXhkGqL1S6tQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.crl rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DV6n0vTGCELX3cfCV2G_dtycq8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91285B0, serialNumber=D8357A9F4BD318210B5F771F095D86FDDB7272AF Validity Not Before: Sep 23 08:44:54 2026 GMT Not After : Sep 30 08:44:54 2026 GMT Subject: CN=6ab39186-1883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c0:be:cd:34:41:5f:8d:7c:b9:65:3d:2b:0a: 47:cd:c6:83:51:da:d9:ff:04:ff:f3:c5:61:93:62: 56:64:0a:92:00:41:94:a2:bc:08:2a:c0:48:1b:c0: b4:a6:31:bd:d1:ab:7b:82:f9:91:66:ea:fc:c6:8f: f4:46:bb:c5:cf:06:b0:f9:31:8e:10:57:12:ee:51: 9b:f1:a2:02:68:cd:cf:2c:e3:a9:d8:a0:e6:d6:d5: 21:70:d5:01:49:35:5d:59:f8:03:f2:f6:ce:a9:bd: 63:78:29:bc:17:ce:02:e8:48:47:e9:66:e0:d7:04: d1:c1:bd:5b:e2:45:85:f0:0a:30:9f:3a:4f:f0:2d: e6:a4:08:4d:31:de:45:4e:c7:0e:3b:a3:02:11:e4: 04:a5:95:75:f3:78:e5:2b:93:96:f5:62:ba:fd:cf: 34:3f:29:1b:e9:50:9a:b7:a5:cd:05:8d:15:08:1a: 3a:32:34:e5:57:f6:e7:f1:c5:bb:9a:f6:ca:d3:81: c0:39:31:bf:33:05:0a:a9:79:fc:c6:81:68:bf:55: 1e:3a:86:9f:7b:04:07:51:aa:86:14:52:81:29:23: 8e:f3:80:82:c7:ef:34:1f:3f:72:f7:97:70:78:60: e3:9a:5d:6a:1f:41:80:cc:ae:99:d7:24:e5:f8:cf: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0D:AA:D0:66:29:48:70:C9:73:FF:BA:16:C4:85:25:CF:10:EF:43 X509v3 Authority Key Identifier: keyid:D8:35:7A:9F:4B:D3:18:21:0B:5F:77:1F:09:5D:86:FD:DB:72:72:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DV6n0vTGCELX3cfCV2G_dtycq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:65:8f:02:29:7d:9a:b9:57:36:6c:58:22:3f:d8:d6:69:5c: 86:26:af:68:17:61:b7:73:95:d9:7b:5a:ed:2e:60:c8:ce:aa: aa:fe:39:e1:72:95:71:aa:5e:b7:29:15:3e:e2:0b:9a:bd:c6: 60:d2:1f:34:39:7b:3a:67:1f:4c:ed:74:eb:1c:b8:b3:e5:ad: 57:61:9a:fe:54:15:96:24:56:c8:ea:22:dd:fa:42:05:e3:26: 62:d2:48:d3:26:ab:65:f5:6f:01:ca:87:2b:fb:6c:1f:0b:1a: 0d:8d:17:81:3a:1a:32:6c:aa:ad:36:55:d7:94:95:4c:7e:26: 31:92:62:9a:a1:e5:61:31:ac:55:7d:b0:43:ea:ad:0b:7e:29: 96:f5:ef:30:f8:52:f5:df:f5:b1:71:a2:47:d4:79:05:1a:0f: a4:31:de:2d:ee:0f:d7:a7:42:1f:db:88:d1:6e:46:17:61:9b: b2:30:8c:b0:0d:63:8c:95:72:76:09:07:4f:cf:14:1f:f5:05: 7a:93:48:9d:03:c8:19:80:b6:b0:2e:42:40:9d:32:61:b4:26: 18:24:de:5f:e9:6e:eb:57:31:16:8a:7a:26:1e:20:37:ce:85: 42:52:b2:46:d3:3e:26:c1:56:7c:67:07:da:d9:4f:a9:c7:6a: cf:a9:98:6e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODVCMDExMC8GA1UEBRMoRDgzNTdBOUY0QkQzMTgyMTBCNUY3NzFGMDk1RDg2RkRE QjcyNzJBRjAeFw0yNjA5MjMwODQ0NTRaFw0yNjA5MzAwODQ0NTRaMBgxFjAUBgNV BAMTDTZhYjM5MTg2LTE4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNwL7NNEFfjXy5ZT0rCkfNxoNR2tn/BP/zxWGTYlZkCpIAQZSivAgqwEgbwLSm Mb3Rq3uC+ZFm6vzGj/RGu8XPBrD5MY4QVxLuUZvxogJozc8s46nYoObW1SFw1QFJ NV1Z+APy9s6pvWN4KbwXzgLoSEfpZuDXBNHBvVviRYXwCjCfOk/wLeakCE0x3kVO xw47owIR5ASllXXzeOUrk5b1Yrr9zzQ/KRvpUJq3pc0FjRUIGjoyNOVX9ufxxbua 9srTgcA5Mb8zBQqpefzGgWi/VR46hp97BAdRqoYUUoEpI47zgILH7zQfP3L3l3B4 YOOaXWofQYDMrpnXJOX4zz99AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5w2q0GYp SHDJc/+6FsSFJc8Q70MwHwYDVR0jBBgwFoAU2DV6n0vTGCELX3cfCV2G/dtycq8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NUIwLzBCRTgyOTEyOTZG QjExRjE5MDVFMkM1MTYzMTFGOTcwLzJEVjZuMHZUR0NFTFgzY2ZDVjJHX2R0eWNx OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMkRWNm4wdlRHQ0VMWDNjZkNWMkdfZHR5Y3E4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NUIwLzBCRTgyOTEyOTZGQjExRjE5MDVFMkM1MTYzMTFGOTcwLzJEVjZuMHZUR0NF TFgzY2ZDVjJHX2R0eWNxOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBlZY8CKX2auVc2bFgiP9jWaVyGJq9oF2G3c5XZe1rtLmDIzqqq/jnhcpVxql63 KRU+4guavcZg0h80OXs6Zx9M7XTrHLiz5a1XYZr+VBWWJFbI6iLd+kIF4yZi0kjT Jqtl9W8Byocr+2wfCxoNjReBOhoybKqtNlXXlJVMfiYxkmKaoeVhMaxVfbBD6q0L fimW9e8w+FL13/WxcaJH1HkFGg+kMd4t7g/Xp0If24jRbkYXYZuyMIywDWOMlXJ2 CQdPzxQf9QV6k0idA8gZgLawLkJAnTJhtCYYJN5f6W7rVzEWinomHiA3zoVCUrJG 0z4mwVZ8Zwfa2U+px2rPqZhu -----END CERTIFICATE-----Generated at Thu Sep 24 00:47:50 2026 by rpki-client