$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: 3iN47zAtb9sZ8ldMVeSX5YWpbHMe6UUFJOX2ghud7a4= Subject key identifier: 6A:F7:E3:04:11:05:B2:12:9E:57:EF:7D:74:7A:8B:61:D6:7B:55:EB Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 0101 Signing time: Wed 23 Sep 2026 05:56:44 +0000 Manifest this update: Wed 23 Sep 2026 05:56:43 +0000 Manifest next update: Wed 30 Sep 2026 05:56:43 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: 7c4fZ+ggCtdmbH+ZSL1sN3fZ3wkiNQHSlv4mkPeKikQ=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: /aTSxcHxRkOfKrRCHUaeDVdu5n6tqyMBf2gXf3ZAFRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Sep 23 05:56:43 2026 GMT Not After : Sep 30 05:56:43 2026 GMT Subject: CN=6ab36a1b-e4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:79:d5:21:aa:eb:c1:c3:9d:cb:69:c2:9c: 4c:f7:77:8d:99:e0:cd:2b:6c:19:9e:00:2c:de:14: fe:82:c6:8f:e1:8c:e8:d5:7f:44:be:17:9f:22:55: 0a:a0:8c:71:36:ca:77:22:50:61:7e:f9:72:3b:8f: 23:47:fd:5d:81:a6:0c:bd:f5:cc:86:c9:20:32:7d: 23:96:bd:36:a5:bf:58:1a:1e:4d:32:26:36:b9:22: c2:06:5c:dc:14:f0:e8:14:a1:8d:41:55:40:d2:f8: 85:3a:b8:9e:9e:69:23:54:47:de:69:79:71:4f:53: 17:48:84:e7:80:0f:31:5b:83:66:4d:31:3c:b4:19: df:b5:d7:85:5c:6b:da:3a:43:a7:fa:41:ab:72:8f: 57:51:c5:ff:51:51:01:af:c8:fb:ae:8a:66:97:0c: c8:0e:68:23:4a:8f:63:e2:33:9e:fe:a4:fb:74:8f: 85:a2:19:aa:68:6e:d7:c2:0a:b2:6e:52:bb:3a:0f: ae:ea:bd:e5:1a:d0:8e:40:d0:f9:57:1c:1f:da:a7: c2:af:91:db:5e:42:ec:26:6d:0e:25:ab:b4:89:74: 7f:1a:c6:dd:6a:87:83:97:5f:b5:50:6f:69:fe:d5: c2:4a:09:6d:57:3a:2c:a2:ae:83:a7:27:67:71:81: 8e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F7:E3:04:11:05:B2:12:9E:57:EF:7D:74:7A:8B:61:D6:7B:55:EB X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3d:97:c8:65:3e:96:d7:65:09:dd:f5:3f:03:c0:34:36:5c: a4:0b:7b:5d:72:3a:bc:64:02:cd:ec:9d:30:d1:e9:af:38:cc: 07:b1:f2:5b:79:47:c2:40:3f:53:c2:62:7a:1e:9a:ae:c2:96: a9:12:05:c0:4b:22:d8:2d:e3:97:f7:b9:fa:8d:77:f1:a0:ec: d1:71:44:a4:48:fb:ad:c1:c6:a0:79:6f:b8:07:3d:c9:ce:59: 87:5a:65:bf:f9:de:18:2e:33:98:9a:e1:77:a6:cf:e7:f0:02: 04:94:d9:94:6b:90:66:b8:c1:98:56:5c:f0:ca:5e:b8:85:7b: 8d:31:3e:86:cb:3b:0e:02:0c:2a:46:d0:b6:fa:92:e5:cc:c0: 77:ef:b8:bf:9b:b3:19:5e:b9:8c:33:38:42:09:de:0b:84:58: f7:2d:45:49:29:8c:a3:8d:a4:2d:ef:cc:16:39:18:48:af:8e: f0:c5:28:2b:d5:1d:68:85:07:6f:c8:2a:df:81:0d:88:50:07: 98:a0:23:c6:e0:ca:0a:56:37:d0:f4:a7:b3:4e:0f:5b:f0:9c: fd:88:4d:06:4b:1e:a3:66:47:54:50:d4:91:87:57:95:84:f6: c3:7b:7c:06:e6:df:49:b5:60:3e:4a:b4:be:12:cf:d6:48:f3: f3:d4:57:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwNDkxMTAvBgNVBAUTKEQ5RDFCMDU1RkVGQzg5RjU4MDNBN0ZBOEUyQjkwMjYx OUYzMzhEOEUwHhcNMjYwOTIzMDU1NjQzWhcNMjYwOTMwMDU1NjQzWjAYMRYwFAYD VQQDEw02YWIzNmExYi1lNGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvU951SGq68HDnctpwpxM93eNmeDNK2wZngAs3hT+gsaP4Yzo1X9EvhefIlUK oIxxNsp3IlBhfvlyO48jR/1dgaYMvfXMhskgMn0jlr02pb9YGh5NMiY2uSLCBlzc FPDoFKGNQVVA0viFOrienmkjVEfeaXlxT1MXSITngA8xW4NmTTE8tBnftdeFXGva OkOn+kGrco9XUcX/UVEBr8j7ropmlwzIDmgjSo9j4jOe/qT7dI+FohmqaG7Xwgqy blK7Og+u6r3lGtCOQND5Vxwf2qfCr5HbXkLsJm0OJau0iXR/GsbdaoeDl1+1UG9p /tXCSgltVzosoq6DpydncYGOwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGr34wQR BbISnlfvfXR6i2HWe1XrMB8GA1UdIwQYMBaAFNnRsFX+/In1gDp/qOK5AmGfM42O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzA0OS9CMDlDQkQ2NjJD NjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlmV0FPbi1vNHJrQ1laOHpq WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzA0OS9CMDlDQkQ2NjJDNjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlm V0FPbi1vNHJrQ1laOHpqWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATz2XyGU+ltdlCd31PwPANDZcpAt7XXI6vGQCzeydMNHprzjMB7HyW3lHwkA/ U8Jieh6arsKWqRIFwEsi2C3jl/e5+o138aDs0XFEpEj7rcHGoHlvuAc9yc5Zh1pl v/neGC4zmJrhd6bP5/ACBJTZlGuQZrjBmFZc8MpeuIV7jTE+hss7DgIMKkbQtvqS 5czAd++4v5uzGV65jDM4QgneC4RY9y1FSSmMo42kLe/MFjkYSK+O8MUoK9UdaIUH b8gq34ENiFAHmKAjxuDKClY30PSns04PW/Cc/YhNBkseo2ZHVFDUkYdXlYT2w3t8 BubfSbVgPkq0vhLP1kjz89RXUg== -----END CERTIFICATE-----Generated at Fri Sep 25 00:09:36 2026 by rpki-client