$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: hiWjWmQAkqGYgaAe++/76oSpIlnHIgUhDjRNpjQNv8o= Subject key identifier: 9C:EB:9A:B0:4E:F1:A5:BE:BB:7D:9F:B5:76:03:A2:2A:50:4D:CE:6D Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 2015 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 2000 Signing time: Tue 22 Sep 2026 15:55:23 +0000 Manifest this update: Tue 22 Sep 2026 15:55:22 +0000 Manifest next update: Tue 29 Sep 2026 15:55:22 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: yAyfGpO9CVMKrH8yERZ5/b804QRr4drbrS7JK5JhUOk=) 2: lG-P8_tyowUyvUqx-QJQ3EW4qDQ.asa (hash: 3ATMs4JsQ/LAedCTubLr7Yda8yWHmsCUXfYUrmTD0Ws=) 3: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: 8KvkPRwmxhEV4smy31k45OPE8C8gicai+UQplmn5B6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8213 (0x2015) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Sep 22 15:55:22 2026 GMT Not After : Sep 29 15:55:22 2026 GMT Subject: CN=6ab2a4eb-8dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:48:81:a1:c8:1f:52:da:ed:da:a1:9b:29: c2:7c:5a:78:fe:74:13:00:23:17:03:e5:61:29:9d: 90:cf:b9:95:bd:1e:71:61:75:8d:cd:fd:3b:c6:3c: c5:41:de:fd:3e:e9:01:34:98:3c:21:9d:29:5c:b0: ab:1f:f4:4d:08:08:ea:0c:59:03:a6:a1:9d:0c:ef: 7b:1e:f4:7c:a8:b0:14:0a:e1:32:97:16:f5:ac:fc: 21:32:cc:54:fe:15:02:06:13:ce:86:f2:db:7a:2e: 5b:a0:88:5b:ec:ba:bf:8c:a7:93:f1:fd:bb:8a:22: 48:ee:9d:3c:66:ed:c8:e9:d7:ef:e9:2b:8a:41:be: c2:6e:69:12:9f:bc:64:70:dc:56:8b:31:65:dc:75: cb:9c:79:4b:f4:8b:55:cb:29:6b:ce:e5:4b:85:d9: 03:23:d1:cc:74:5c:30:95:db:97:d6:1c:6f:34:2e: 62:3f:9a:68:2b:91:44:d3:7f:35:e4:86:14:3b:a9: 2e:4d:38:25:3d:24:d1:09:d2:0e:42:f3:c0:3a:41: 36:de:1b:ae:88:e3:c0:77:ec:82:3d:87:b8:42:92: 4d:7a:89:0b:e7:d1:7e:72:19:eb:62:3c:2c:a2:f7: 5e:00:39:7e:28:8f:06:d0:bd:08:c9:9b:92:0b:88: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:9A:B0:4E:F1:A5:BE:BB:7D:9F:B5:76:03:A2:2A:50:4D:CE:6D X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:1e:b0:60:bd:41:6e:ba:ca:27:5f:21:94:9f:c3:3c:27:9d: e4:82:48:9a:33:19:22:04:63:18:cb:5f:38:1d:b1:33:ac:bf: 89:12:cd:35:84:e6:07:bc:1a:a4:9b:1f:a0:84:a5:af:6b:64: 2f:f7:b1:3f:59:d6:a2:77:b5:11:30:59:ef:bf:09:cb:9c:98: dd:17:ff:53:36:11:84:07:78:26:01:20:84:e6:12:aa:62:78: f7:1a:4c:70:54:66:3d:4c:f3:de:96:86:2b:7c:83:0b:75:59: 1b:a5:a9:ae:a9:bc:0b:ff:aa:95:1e:df:86:0d:b2:dc:17:05: be:66:e4:fd:85:44:89:ed:35:bf:69:5a:50:c8:7a:66:68:7a: 04:7e:e2:af:ed:1f:6e:7a:0f:91:19:dd:35:3f:b7:d1:21:78: a3:62:27:29:13:1c:0a:7a:49:cc:ae:2a:84:41:a0:cc:9c:af: 14:98:58:da:7c:15:1f:d9:22:67:2f:0a:3d:29:5e:58:c5:1c: 76:82:12:6d:70:63:e2:6f:66:69:da:ef:f2:77:d5:37:7e:8c: f0:c5:8c:d0:da:fb:91:06:ec:07:fa:b4:07:c1:fc:bb:77:57: 2d:d8:af:5d:d8:21:65:fe:49:c5:e9:c5:1f:ca:ff:d3:84:83: da:d2:26:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjYwOTIyMTU1NTIyWhcNMjYwOTI5MTU1NTIyWjAYMRYwFAYD VQQDEw02YWIyYTRlYi04ZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+JIgaHIH1La7dqhmynCfFp4/nQTACMXA+VhKZ2Qz7mVvR5xYXWNzf07xjzF Qd79PukBNJg8IZ0pXLCrH/RNCAjqDFkDpqGdDO97HvR8qLAUCuEylxb1rPwhMsxU /hUCBhPOhvLbei5boIhb7Lq/jKeT8f27iiJI7p08Zu3I6dfv6SuKQb7CbmkSn7xk cNxWizFl3HXLnHlL9ItVyylrzuVLhdkDI9HMdFwwlduX1hxvNC5iP5poK5FE0381 5IYUO6kuTTglPSTRCdIOQvPAOkE23huuiOPAd+yCPYe4QpJNeokL59F+chnrYjws ovdeADl+KI8G0L0IyZuSC4jCRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzrmrBO 8aW+u32ftXYDoipQTc5tMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsR6wYL1BbrrKJ18hlJ/DPCed5IJImjMZIgRjGMtfOB2xM6y/iRLNNYTmB7wa pJsfoISlr2tkL/exP1nWone1ETBZ778Jy5yY3Rf/UzYRhAd4JgEghOYSqmJ49xpM cFRmPUzz3paGK3yDC3VZG6Wprqm8C/+qlR7fhg2y3BcFvmbk/YVEie01v2laUMh6 Zmh6BH7ir+0fbnoPkRndNT+30SF4o2InKRMcCnpJzK4qhEGgzJyvFJhY2nwVH9ki Zy8KPSleWMUcdoISbXBj4m9madrv8nfVN36M8MWM0Nr7kQbsB/q0B8H8u3dXLdiv XdghZf5JxenFH8r/04SD2tImQg== -----END CERTIFICATE-----Generated at Thu Sep 24 13:34:56 2026 by rpki-client