$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft File: D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft (raw, json) Hash identifier: BUxC2bjjKy56Z/g2Kx8XEUn38zWEwzvtWprSUAyXpnE= Subject key identifier: 34:78:8E:A3:C7:B9:AF:61:45:9A:89:D8:AE:B8:F9:5F:F9:CF:5A:53 Authority key identifier: 0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58 Certificate issuer: /CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258 Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft Manifest number: 0268 Signing time: Wed 23 Sep 2026 01:58:51 +0000 Manifest this update: Wed 23 Sep 2026 01:58:51 +0000 Manifest next update: Wed 30 Sep 2026 01:58:51 +0000 Files and hashes: 1: D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl (hash: nlXiLjJ+vVvMtH8dqtGhtsQ+YTbG2vj+mxY/zajLlUM=) 2: 075B4CC80AC511EEB25A152AC4F9AE02.roa (hash: +UwT5EuzqCMtcr13ivyOvHZ5BUB5y0RPoEF85OdZpKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134BB0, serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258 Validity Not Before: Sep 23 01:58:51 2026 GMT Not After : Sep 30 01:58:51 2026 GMT Subject: CN=6ab3325b-df07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:99:4c:21:86:1c:24:bb:04:93:da:85:b2: 96:11:b1:ee:eb:56:a1:1f:38:8b:4b:a6:8f:d8:a4: 45:4d:60:31:cb:1b:f1:83:a6:8f:aa:53:68:9d:d4: 92:60:67:8a:2e:17:ad:17:91:e9:45:70:ed:9f:51: f8:9e:2a:62:86:8a:82:b5:b7:ee:8e:c9:4b:9e:04: 6d:34:ab:e9:ad:7b:5d:dd:86:9c:19:8d:76:a2:98: cb:66:6e:21:cc:d2:59:35:63:d7:d0:53:bb:d8:de: 70:db:10:76:7e:7c:27:94:e8:28:b0:df:12:1d:11: 56:45:f1:9e:6d:03:2d:63:38:66:7a:1a:f3:26:21: 90:e2:6e:4f:71:80:0d:2d:56:8e:dc:ae:c4:c6:be: 54:af:a4:b0:47:37:8e:40:81:6b:20:e2:3e:83:39: b5:9b:26:55:8f:c1:2d:1b:da:b9:d0:35:34:92:11: df:75:d8:8b:de:18:7e:72:b2:ea:f4:a6:42:03:05: 25:02:22:33:d5:2a:c0:bf:8b:79:a6:1c:50:58:62: 95:da:18:be:d0:e5:ae:6e:d4:e0:6a:92:89:44:2d: ff:6d:93:99:da:0b:a7:19:f8:1e:05:ff:e9:75:03: 13:f2:2f:a3:c4:af:b3:d3:a0:ab:de:1f:50:ab:e9: ad:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:78:8E:A3:C7:B9:AF:61:45:9A:89:D8:AE:B8:F9:5F:F9:CF:5A:53 X509v3 Authority Key Identifier: keyid:0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:52:9a:d0:24:41:57:db:97:c6:50:c6:3a:e6:d7:e5:96:f1: a5:b7:ad:10:60:06:53:7a:01:26:65:50:c5:b7:eb:bf:62:04: a4:5a:b7:d5:95:9b:03:12:e4:d1:42:0e:22:98:65:d9:d3:73: 15:eb:08:0b:c6:1c:04:25:cd:ea:7e:64:bf:b2:b0:66:e4:c8: d2:27:b2:76:f2:26:98:3a:80:9a:b7:67:13:ca:ad:00:9c:90: 76:38:53:05:e5:e0:57:42:de:59:23:c3:ae:91:fb:b7:bf:01: af:3a:02:19:b1:d4:b2:ff:b6:dd:89:6b:9f:59:ef:1b:1e:f5: aa:b8:27:7a:6e:3b:d8:42:22:2f:b3:3c:54:2a:43:9f:91:5e: 88:8f:69:ed:1c:2a:1c:3f:ee:1e:71:a4:28:59:6c:62:55:26: d3:e7:92:cd:6d:56:92:25:6d:57:e5:d4:60:d3:6f:b3:05:5c: 6d:5e:37:e5:1e:b1:a9:6c:ca:12:a8:ed:a3:13:77:bf:9e:fb: e4:7f:13:ae:15:ae:3c:0e:e8:56:a7:10:12:af:09:17:5c:83: 5f:27:e4:b6:66:70:1d:f0:c0:03:33:1a:fd:d7:54:a5:90:53: 0e:3a:e3:80:83:66:42:05:51:98:2b:88:61:6d:c2:26:83:c2: 85:c5:69:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCQjAxMTAvBgNVBAUTKDBGNjE0MkFFNDE2OERGMEIxODA1RkE1ODFEMjAzOTQ3 NjdBQTIyNTgwHhcNMjYwOTIzMDE1ODUxWhcNMjYwOTMwMDE1ODUxWjAYMRYwFAYD VQQDEw02YWIzMzI1Yi1kZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5+ZTCGGHCS7BJPahbKWEbHu61ahHziLS6aP2KRFTWAxyxvxg6aPqlNondSS YGeKLhetF5HpRXDtn1H4nipihoqCtbfujslLngRtNKvprXtd3YacGY12opjLZm4h zNJZNWPX0FO72N5w2xB2fnwnlOgosN8SHRFWRfGebQMtYzhmehrzJiGQ4m5PcYAN LVaO3K7Exr5Ur6SwRzeOQIFrIOI+gzm1myZVj8EtG9q50DU0khHfddiL3hh+crLq 9KZCAwUlAiIz1SrAv4t5phxQWGKV2hi+0OWubtTgapKJRC3/bZOZ2gunGfgeBf/p dQMT8i+jxK+z06Cr3h9Qq+mtbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDR4jqPH ua9hRZqJ2K64+V/5z1pTMB8GA1UdIwQYMBaAFA9hQq5BaN8LGAX6WB0gOUdnqiJY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEJCMC9ERDQ3MzhFMDBB QkQxMUVFOTE3REE2NTVDNEY5QUUwMi9EMkZDcmtGbzN3c1lCZnBZSFNBNVIyZXFJ bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QyRkNya0ZvM3dzWUJmcFlIU0E1UjJlcUlsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEJCMC9ERDQ3MzhFMDBBQkQxMUVFOTE3REE2NTVDNEY5QUUwMi9EMkZDcmtGbzN3 c1lCZnBZSFNBNVIyZXFJbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArlKa0CRBV9uXxlDGOubX5ZbxpbetEGAGU3oBJmVQxbfrv2IEpFq31ZWbAxLk 0UIOIphl2dNzFesIC8YcBCXN6n5kv7KwZuTI0ieydvImmDqAmrdnE8qtAJyQdjhT BeXgV0LeWSPDrpH7t78BrzoCGbHUsv+23Ylrn1nvGx71qrgnem472EIiL7M8VCpD n5FeiI9p7RwqHD/uHnGkKFlsYlUm0+eSzW1WkiVtV+XUYNNvswVcbV435R6xqWzK EqjtoxN3v5775H8TrhWuPA7oVqcQEq8JF1yDXyfktmZwHfDAAzMa/ddUpZBTDjrj gINmQgVRmCuIYW3CJoPChcVp9w== -----END CERTIFICATE-----Generated at Thu Sep 24 10:29:21 2026 by rpki-client