$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json) Hash identifier: NrqjT0seWP44xYY7UEnc0jYaByDhb664FoU4mJRvi48= Subject key identifier: B4:BA:04:90:CC:E7:8D:45:80:E5:53:26:07:B6:E4:D1:EF:D0:7D:54 Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Certificate serial: 0858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft Manifest number: 084A Signing time: Fri 02 Oct 2026 21:19:16 +0000 Manifest this update: Fri 02 Oct 2026 21:19:16 +0000 Manifest next update: Fri 09 Oct 2026 21:19:16 +0000 Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: p1viBE0oI5q2TfaxWdEvJ8wI3DHpcUwKdtKE7p7odIc=) 2: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: +AUVvwTT7ST+BeSrArm8ZmuI1OzsiyoIqJ3c0xzwnVs=) 3: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=) 4: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: r04Ye74EEDh36FeBnIWb59XMMU9Mx+tkFNipeNmkuAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 21:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2136 (0x858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Validity Not Before: Oct 2 21:19:16 2026 GMT Not After : Oct 9 21:19:16 2026 GMT Subject: CN=6ac01fd4-e078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:aa:40:51:83:41:a7:7f:ac:af:3b:b3:7d: 2f:ae:63:12:c6:e7:9b:30:d1:d0:c8:e1:37:3f:4d: 60:e9:3f:08:e9:fd:11:eb:51:e8:3c:55:41:40:d7: a0:d1:23:85:e1:53:d0:d7:85:5b:5b:b8:fb:fd:f1: 57:a9:4b:e2:4d:a1:e6:c1:b2:b7:00:79:0d:c6:98: d7:a3:e2:2f:f3:98:db:9a:0f:d6:4f:a0:1b:e1:03: 3e:2b:60:2f:15:ea:4a:e7:37:aa:6b:2f:f9:25:4b: 55:81:60:db:e7:25:aa:c6:37:39:ab:13:02:66:6c: 0a:75:2b:01:95:7e:e4:59:b6:34:db:2c:ba:19:96: 18:0a:bb:5e:ba:3f:26:9b:71:63:9f:ff:a4:0c:eb: fd:9f:24:a4:a7:81:f9:2a:2c:0a:4e:34:9f:a3:d5: 2c:16:15:12:a1:bd:49:ef:bf:82:0b:21:e4:0d:98: d4:60:3f:44:f3:19:2c:95:70:56:56:22:1a:b0:bb: c7:61:6d:24:13:09:9a:2a:91:d4:53:6a:ea:63:3a: 44:5a:0a:bc:d1:15:7b:42:d2:06:f0:70:1c:df:47: b4:9d:6a:c2:07:3b:b1:61:18:5a:1a:59:bc:91:40: 07:5b:ad:12:c0:07:93:f9:5e:1b:bf:18:3b:6a:ef: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BA:04:90:CC:E7:8D:45:80:E5:53:26:07:B6:E4:D1:EF:D0:7D:54 X509v3 Authority Key Identifier: keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:98:ea:60:7b:0c:c5:b1:62:f1:e8:43:95:75:af:aa:6c:98: a5:8a:d6:30:cf:46:77:13:7a:f6:5d:45:0d:5a:b3:71:b6:f0: 15:92:79:8a:a3:c7:06:5a:18:0a:e3:2b:4a:f1:09:c9:62:c0: c4:39:55:d9:54:eb:ea:ce:46:a0:36:dc:b8:2e:04:77:42:94: ae:70:49:94:fe:e7:e0:b0:fa:45:32:73:e5:5c:c4:b8:d2:5d: ad:62:6f:2b:e0:00:2f:76:23:2a:ca:44:64:bc:7f:61:99:df: 6f:fa:33:2f:10:15:6f:d8:4b:d1:c3:56:7e:0e:2e:1c:78:f8: 1c:51:7e:9f:09:d8:97:b6:aa:f0:67:4f:85:69:04:2c:bb:54: c2:a2:11:23:e7:98:26:b8:0f:17:78:e5:c7:89:40:1b:3d:10: 68:d8:14:cf:3d:88:52:c3:f7:d8:69:c5:83:17:ed:86:f9:72: cb:fd:99:2b:ee:92:93:16:47:e8:bf:09:af:83:26:5d:18:9c: fe:1e:c6:5a:3f:29:aa:ff:53:22:bd:68:52:a2:df:1e:60:20: 1b:36:25:4e:c8:bf:27:4f:05:d3:ef:ad:95:68:5b:ab:35:bb: 14:4f:9b:3e:b7:2c:1b:2e:ec:6b:16:00:d3:3d:d1:db:18:a3: b7:08:66:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE2MjAxMTAvBgNVBAUTKDAzNjY4QTIxRjBGMDFGMDZCMjc0RkQ4OENDOUUwQTZF ODNENTVGODUwHhcNMjYxMDAyMjExOTE2WhcNMjYxMDA5MjExOTE2WjAYMRYwFAYD VQQDEw02YWMwMWZkNC1lMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1r+qQFGDQad/rK87s30vrmMSxuebMNHQyOE3P01g6T8I6f0R61HoPFVBQNeg 0SOF4VPQ14VbW7j7/fFXqUviTaHmwbK3AHkNxpjXo+Iv85jbmg/WT6Ab4QM+K2Av FepK5zeqay/5JUtVgWDb5yWqxjc5qxMCZmwKdSsBlX7kWbY02yy6GZYYCrteuj8m m3Fjn/+kDOv9nySkp4H5KiwKTjSfo9UsFhUSob1J77+CCyHkDZjUYD9E8xkslXBW ViIasLvHYW0kEwmaKpHUU2rqYzpEWgq80RV7QtIG8HAc30e0nWrCBzuxYRhaGlm8 kUAHW60SwAeT+V4bvxg7au/eoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLS6BJDM 541FgOVTJge25NHv0H1UMB8GA1UdIwQYMBaAFANmiiHw8B8GsnT9iMyeCm6D1V+F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTYyMC8yMTk4MTZBQTI5 M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3YXlkUDJJeko0S2JvUFZY NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyYUtJZkR3SHdheWRQMkl6SjRLYm9QVlg0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTYyMC8yMTk4MTZBQTI5M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3 YXlkUDJJeko0S2JvUFZYNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnJjqYHsMxbFi8ehDlXWvqmyYpYrWMM9GdxN69l1FDVqzcbbwFZJ5iqPHBloY CuMrSvEJyWLAxDlV2VTr6s5GoDbcuC4Ed0KUrnBJlP7n4LD6RTJz5VzEuNJdrWJv K+AAL3YjKspEZLx/YZnfb/ozLxAVb9hL0cNWfg4uHHj4HFF+nwnYl7aq8GdPhWkE LLtUwqIRI+eYJrgPF3jlx4lAGz0QaNgUzz2IUsP32GnFgxfthvlyy/2ZK+6SkxZH 6L8Jr4MmXRic/h7GWj8pqv9TIr1oUqLfHmAgGzYlTsi/J08F0++tlWhbqzW7FE+b PrcsGy7saxYA0z3R2xijtwhmbg== -----END CERTIFICATE-----Generated at Sun Oct 4 11:03:41 2026 by rpki-client