$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft File: 2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json) Hash identifier: grFqukvMFxV8/ULWDsZzcBCVD9xeg+rNCd2F5jxDzXI= Subject key identifier: 87:74:F2:85:EF:6B:B2:92:C3:8E:86:4C:6E:F7:4A:72:22:7A:9E:DF Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 Certificate issuer: /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft Manifest number: 09C3 Signing time: Tue 22 Sep 2026 19:43:53 +0000 Manifest this update: Tue 22 Sep 2026 19:43:52 +0000 Manifest next update: Tue 29 Sep 2026 19:43:52 +0000 Files and hashes: 1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: 5WUN2u0L/IxXbpBSBSaSpgjqHTUr6ruTsbFAKhj7rMc=) 2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: 0ne4K9JoSK2WlX9JqXTzRcGcBBHfVYU04ULkoNhTDPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E652, serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Validity Not Before: Sep 22 19:43:52 2026 GMT Not After : Sep 29 19:43:52 2026 GMT Subject: CN=6ab2da78-e07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:99:6c:1c:61:23:53:a6:b5:fd:7b:06:82:e7: b8:0c:54:bd:e1:67:0c:a3:3b:27:fd:98:1b:c2:ce: 30:e9:6a:32:21:24:7b:38:94:3a:1a:db:81:ef:5e: bc:dd:31:9f:3f:9b:29:78:9f:55:95:e9:64:ca:6d: e7:00:94:fd:8c:a6:1d:55:84:e2:b9:c6:78:23:c7: 1d:e2:7a:1b:57:f9:32:5d:40:ba:5d:c8:38:fa:55: 2b:e8:69:06:a6:79:a1:e2:9b:b7:c6:cb:5c:ea:d5: ba:aa:56:40:2f:25:7f:4c:b6:76:cb:45:b9:64:61: 92:cd:b0:0f:c1:2a:5f:da:7c:cb:6e:c8:ae:b7:fc: a9:a0:74:1b:fc:d7:3d:49:c9:c1:18:e1:28:b4:8f: 27:cd:67:e5:22:7c:7b:5e:f6:72:c2:03:be:cd:45: 6d:75:b8:da:7b:bb:e3:d8:33:99:dc:a5:e8:4e:21: aa:42:2f:a5:74:a4:c3:b8:43:89:a4:ec:b8:ad:44: 3c:43:07:26:e1:5c:c4:5d:0b:75:e3:b2:25:af:81: e5:e5:47:b7:45:47:a1:8e:16:60:77:76:ba:b5:fd: ca:a9:bc:29:ea:e0:bd:d3:df:81:28:1b:50:dd:df: 9c:e0:00:05:0f:e3:e4:8a:19:63:84:a2:4b:8a:84: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:74:F2:85:EF:6B:B2:92:C3:8E:86:4C:6E:F7:4A:72:22:7A:9E:DF X509v3 Authority Key Identifier: keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a4:9c:17:97:ce:f4:cd:79:58:37:0b:64:16:d5:9e:cd:5c: 1e:4a:04:6d:fd:53:16:9e:9f:1f:25:ed:92:38:32:26:93:0a: 26:6f:54:5b:ce:d6:bf:08:54:c3:62:b4:85:3b:a5:42:2e:c4: f0:5f:f9:ac:fb:d5:65:a4:bb:3e:e1:6c:a4:b1:fe:0e:d1:f5: 47:87:c3:a8:5a:be:fb:43:6c:29:b7:19:b1:5b:61:ab:b6:b4: c9:2a:ce:e1:6a:59:9f:ea:7a:0d:fe:dd:79:29:3a:60:50:aa: 21:b2:18:1f:80:6e:fc:59:ad:98:f9:de:74:99:0d:6a:3e:bc: 0f:2c:3d:33:95:09:9a:50:b5:e5:f6:13:06:65:fd:69:6d:9a: f8:3c:0e:a1:fd:ec:92:45:2d:79:5a:30:fe:5d:40:53:de:74: cf:73:c1:10:a4:c9:f3:68:82:7a:4f:e9:af:83:36:ec:c4:e3: e7:8e:52:26:1a:54:3f:7c:24:17:f3:59:39:6f:a7:ed:90:66: d5:73:52:2f:fe:59:39:fa:9e:68:8b:e6:1a:ca:26:fb:af:50: e0:a9:76:87:dc:0f:1e:8b:c8:e3:c0:10:86:64:18:d9:95:62: 10:fd:6e:f5:97:04:d1:e9:29:58:ec:5f:d2:97:44:2c:94:61: 62:38:5b:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U2NTIxMTAvBgNVBAUTKERCMzdDRDI4MkM2QzdEQkMzQTkwQjEwM0I3QTIzOURD RDE1OEZGNjAwHhcNMjYwOTIyMTk0MzUyWhcNMjYwOTI5MTk0MzUyWjAYMRYwFAYD VQQDEw02YWIyZGE3OC1lMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkJlsHGEjU6a1/XsGgue4DFS94WcMozsn/Zgbws4w6WoyISR7OJQ6GtuB7168 3TGfP5speJ9Vlelkym3nAJT9jKYdVYTiucZ4I8cd4nobV/kyXUC6Xcg4+lUr6GkG pnmh4pu3xstc6tW6qlZALyV/TLZ2y0W5ZGGSzbAPwSpf2nzLbsiut/ypoHQb/Nc9 ScnBGOEotI8nzWflInx7XvZywgO+zUVtdbjae7vj2DOZ3KXoTiGqQi+ldKTDuEOJ pOy4rUQ8Qwcm4VzEXQt147Ilr4Hl5Ue3RUehjhZgd3a6tf3Kqbwp6uC909+BKBtQ 3d+c4AAFD+PkihljhKJLioSvPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFId08oXv a7KSw46GTG73SnIiep7fMB8GA1UdIwQYMBaAFNs3zSgsbH28OpCxA7eiOdzRWP9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTY1Mi82MDBBQjQ2NEIy QjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2ZidzZrTEVEdDZJNTNORllf MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6Zk5LQ3hzZmJ3NmtMRUR0Nkk1M05GWV8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTY1Mi82MDBBQjQ2NEIyQjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2Zi dzZrTEVEdDZJNTNORllfMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANaScF5fO9M15WDcLZBbVns1cHkoEbf1TFp6fHyXtkjgyJpMKJm9UW87WvwhU w2K0hTulQi7E8F/5rPvVZaS7PuFspLH+DtH1R4fDqFq++0NsKbcZsVthq7a0ySrO 4WpZn+p6Df7deSk6YFCqIbIYH4Bu/FmtmPnedJkNaj68Dyw9M5UJmlC15fYTBmX9 aW2a+DwOof3skkUteVow/l1AU950z3PBEKTJ82iCek/pr4M27MTj545SJhpUP3wk F/NZOW+n7ZBm1XNSL/5ZOfqeaIvmGsom+69Q4Kl2h9wPHovI48AQhmQY2ZViEP1u 9ZcE0ekpWOxf0pdELJRhYjhbLw== -----END CERTIFICATE-----Generated at Wed Sep 23 05:43:32 2026 by rpki-client