$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft File: 2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft (raw, json) Hash identifier: up4uRIZ3oADuLl9baZi93Q+j12J6tvaqegHgmLFqgZ0= Subject key identifier: 25:EF:92:32:BB:01:C8:90:6B:0F:5F:40:E6:B2:8B:DD:0E:35:8B:2B Authority key identifier: D9:21:C0:18:F2:84:F2:57:4B:67:18:34:A8:48:DD:93:42:47:FA:00 Certificate issuer: /CN=A9138A44/serialNumber=D921C018F284F2574B671834A848DD934247FA00 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft Manifest number: 13 Signing time: Fri 25 Sep 2026 09:15:59 +0000 Manifest this update: Fri 25 Sep 2026 09:15:58 +0000 Manifest next update: Fri 02 Oct 2026 09:15:58 +0000 Files and hashes: 1: 2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl (hash: QxqMhG+uAVHquo9weiHalvGnwxtm8nRrwlrzM1TCnf4=) 2: 53F5B3FAA11911F1AA6D5C983C11F970.roa (hash: W6FAy14Qs/4IBAuF6r/C27RQuwXDjcTuwQ+QiTmoY9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A44, serialNumber=D921C018F284F2574B671834A848DD934247FA00 Validity Not Before: Sep 25 09:15:58 2026 GMT Not After : Oct 2 09:15:58 2026 GMT Subject: CN=6ab63bce-7111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:4b:88:7a:dd:49:5c:12:96:d3:c9:43:22: 84:f9:71:47:da:16:35:98:f7:20:47:1d:fa:95:4e: cd:d7:c2:03:82:ff:0a:ad:46:d2:10:ed:9d:67:25: 84:85:1f:a0:d6:7b:b5:8b:9c:9e:9d:a0:19:cd:a9: bd:3b:54:1b:da:aa:ed:79:0e:ed:0f:aa:4b:de:de: 82:c6:25:f1:3c:89:4a:ab:de:22:bd:e8:47:e1:2d: b3:25:8e:32:f1:88:9f:2c:e3:cb:b2:18:74:33:19: 18:e0:77:6e:da:ee:b9:d1:27:fe:b3:42:e7:57:71: 9c:e6:76:fe:91:7d:85:83:f9:77:33:d1:d5:76:99: 31:e2:20:b1:d3:a0:1f:40:d8:bd:f9:3f:9e:4d:01: aa:00:00:d0:c0:d3:28:6d:fc:5b:a2:e2:9c:2f:af: 41:e4:38:33:6a:f4:51:d9:16:de:7d:9f:d8:70:66: e6:90:6c:a3:53:1a:79:6c:be:f8:77:b6:a1:50:5c: 6f:dc:a4:2e:18:8e:2c:1e:b5:c8:88:53:f8:67:ff: 64:05:2c:bd:ab:59:2e:6a:73:e2:22:85:c1:6e:87: f5:c8:43:46:88:08:db:bb:92:de:24:4e:2f:4c:5b: ee:00:4d:d3:a0:c5:aa:20:8c:ca:a1:29:4b:d3:b1: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EF:92:32:BB:01:C8:90:6B:0F:5F:40:E6:B2:8B:DD:0E:35:8B:2B X509v3 Authority Key Identifier: keyid:D9:21:C0:18:F2:84:F2:57:4B:67:18:34:A8:48:DD:93:42:47:FA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2e:b2:89:84:d0:3a:fb:6b:29:85:16:dc:55:64:51:ce:61: ce:da:73:c6:95:72:0c:19:fd:1c:a0:5e:8f:cb:95:88:a4:9f: d2:63:81:78:5b:42:8f:6c:95:ae:a6:eb:ca:89:2a:c8:9b:3b: 88:d4:c0:df:4c:6a:f2:a6:49:85:17:4a:ac:fc:ab:3f:9d:f4: 0f:c7:97:e4:72:79:c4:22:cb:cf:1d:6a:06:73:e3:06:19:71: 2a:39:92:86:82:c0:0b:0f:88:d1:6b:31:f5:3c:db:4e:12:ea: 18:7e:8c:4f:dd:81:a5:11:75:83:85:52:a9:f5:a1:59:20:8c: a0:c1:4f:c9:a2:6b:15:87:50:b3:d9:d1:38:23:9c:10:c2:bc: 8e:2f:b3:23:0b:75:9b:db:04:1e:ef:25:fd:88:67:62:74:71: 02:12:b6:20:d1:52:56:09:58:0e:6b:66:9d:cf:82:e0:c3:47: fb:4c:49:a5:3b:de:a0:2e:bf:5a:dd:47:8e:cf:44:44:51:bc: 6b:5d:66:b5:d8:fb:4e:e0:ac:b2:9b:2c:68:d6:71:8c:81:f1: e4:a6:1d:fc:3b:d8:a5:7b:70:67:80:07:c8:36:62:d8:77:9f: 14:a7:b9:0a:68:c7:0b:bc:83:62:5a:25:c4:8d:ac:56:15:53: a9:6b:b6:ce -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEE0NDExMC8GA1UEBRMoRDkyMUMwMThGMjg0RjI1NzRCNjcxODM0QTg0OEREOTM0 MjQ3RkEwMDAeFw0yNjA5MjUwOTE1NThaFw0yNjEwMDIwOTE1NThaMBgxFjAUBgNV BAMTDTZhYjYzYmNlLTcxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWiUuIet1JXBKW08lDIoT5cUfaFjWY9yBHHfqVTs3XwgOC/wqtRtIQ7Z1nJYSF H6DWe7WLnJ6doBnNqb07VBvaqu15Du0Pqkve3oLGJfE8iUqr3iK96EfhLbMljjLx iJ8s48uyGHQzGRjgd27a7rnRJ/6zQudXcZzmdv6RfYWD+Xcz0dV2mTHiILHToB9A 2L35P55NAaoAANDA0yht/Fui4pwvr0HkODNq9FHZFt59n9hwZuaQbKNTGnlsvvh3 tqFQXG/cpC4YjiwetciIU/hn/2QFLL2rWS5qc+IihcFuh/XIQ0aICNu7kt4kTi9M W+4ATdOgxaogjMqhKUvTsb3nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJe+SMrsB yJBrD19A5rKL3Q41iyswHwYDVR0jBBgwFoAU2SHAGPKE8ldLZxg0qEjdk0JH+gAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QTQ0LzZERkU0QkQ2QTEw NTExRjE4MENFQjZFRjM1MTFGOTcwLzJTSEFHUEtFOGxkTFp4ZzBxRWpkazBKSC1n QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlNIQUdQS0U4bGRMWnhnMHFFamRrMEpILWdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QTQ0LzZERkU0QkQ2QTEwNTExRjE4MENFQjZFRjM1MTFGOTcwLzJTSEFHUEtFOGxk TFp4ZzBxRWpkazBKSC1nQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+LrKJhNA6+2sphRbcVWRRzmHO2nPGlXIMGf0coF6Py5WIpJ/SY4F4W0KPbJWu puvKiSrImzuI1MDfTGrypkmFF0qs/Ks/nfQPx5fkcnnEIsvPHWoGc+MGGXEqOZKG gsALD4jRazH1PNtOEuoYfoxP3YGlEXWDhVKp9aFZIIygwU/JomsVh1Cz2dE4I5wQ wryOL7MjC3Wb2wQe7yX9iGdidHECErYg0VJWCVgOa2adz4Lgw0f7TEmlO96gLr9a 3UeOz0REUbxrXWa12PtO4Kyymyxo1nGMgfHkph38O9ile3BngAfINmLYd58Up7kK aMcLvINiWiXEjaxWFVOpa7bO -----END CERTIFICATE-----Generated at Sun Sep 27 04:01:42 2026 by rpki-client