$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json) Hash identifier: 5hIvc0+puAyEQGu+6zm21TXdS7Xsy2TwPxYxAAXuBNE= Subject key identifier: EB:F9:47:41:C2:80:48:57:11:DC:BE:79:65:8B:81:E2:BE:86:5A:BE Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Certificate serial: 05C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft Manifest number: 05B3 Signing time: Sat 26 Sep 2026 23:10:41 +0000 Manifest this update: Sat 26 Sep 2026 23:10:41 +0000 Manifest next update: Sat 03 Oct 2026 23:10:41 +0000 Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: /SI5eicUEzKkUrjAM5cqOR21cvr7c6+PqpT1+gaqGYE=) 2: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: y8fOQUHUEDgFmtL9MQBSGb81f+TiCWn3yini6uVHoSM=) 3: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: qi4jN4NH1cHfCHOBZAPI1Wv+ZZRVyRsB2Qs3k377dDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1475 (0x5c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Validity Not Before: Sep 26 23:10:41 2026 GMT Not After : Oct 3 23:10:41 2026 GMT Subject: CN=6ab850f1-cf64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:dd:83:67:ab:c2:7c:38:38:73:88:48:2d: 27:5f:ac:d3:9f:d2:1e:fd:12:d5:8d:2a:c6:12:a7: 23:7f:7f:1d:61:c2:ca:06:21:31:8d:e0:ce:84:41: 3e:3e:34:9e:71:be:06:2c:f1:25:43:26:7f:95:4d: ee:6a:1a:18:17:64:fb:c3:76:f4:52:a4:91:00:7b: 9f:e3:e8:fc:4d:f9:ea:1a:4d:4c:3f:86:9d:1b:94: 00:55:08:6e:46:a8:bf:b2:75:81:7c:a4:2e:47:11: 85:5b:2f:96:1c:b5:c8:13:5d:55:30:e0:14:1c:e2: d2:ba:4b:35:a4:89:a6:72:02:52:91:b5:79:f0:25: ef:23:95:cc:a0:45:08:7a:2b:15:f7:5d:a1:47:0f: 0d:50:e2:31:3a:96:1f:1f:be:f1:6e:dd:d9:81:05: 84:fe:92:e9:5f:c9:97:ac:81:26:6a:42:f4:da:d9: 66:5c:73:21:2d:d8:00:8c:86:a7:af:ca:91:bd:d4: 55:1a:c5:5b:e2:23:34:17:94:37:82:26:b1:36:5e: 7e:73:8a:40:39:dc:f7:ed:4b:bd:a4:15:cd:f6:2f: 85:f6:d7:b7:6a:5a:34:36:ca:3c:83:ee:ab:cb:db: ba:4b:2d:be:5b:be:08:0d:dc:11:99:95:c3:f5:a0: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F9:47:41:C2:80:48:57:11:DC:BE:79:65:8B:81:E2:BE:86:5A:BE X509v3 Authority Key Identifier: keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e2:9d:f8:e2:ca:aa:bf:0a:0e:11:96:ff:2e:3d:7a:ca:63: 03:8e:8f:f5:ff:a2:47:ad:cb:56:2b:0b:5f:29:73:36:41:11: 59:78:1c:d5:f3:91:ed:63:ee:b5:5e:e4:8d:65:00:3c:a0:75: e0:6e:9c:27:b4:38:62:9f:0a:8c:73:ab:2d:71:78:3e:39:b6: 02:90:1a:e2:b7:cf:bf:8b:f4:3b:b2:e1:f8:c4:15:f2:20:2e: 3e:dc:a5:11:b3:13:26:c8:4a:5c:a6:fb:c8:a5:e8:50:7f:5b: 25:98:a4:72:06:77:e8:6f:e1:0c:8d:ba:21:e4:cd:67:f9:80: f9:1e:37:26:29:31:53:11:4a:d5:b5:8f:ee:fa:4f:ac:91:fd: ff:76:a8:2e:63:5c:f6:6f:c0:f2:12:e2:e3:cd:ec:0b:62:d9: ae:76:19:fc:c0:d2:0a:c4:7c:de:5e:0d:a7:b5:4c:9c:84:86: fd:c8:05:30:7c:c8:fe:fc:b9:ea:c0:a7:d6:86:16:ea:33:94: f9:0c:80:d1:47:c3:fc:ab:4c:df:f5:d8:94:0c:b0:16:f3:3d: b9:c3:bc:ff:1a:9b:6c:70:de:5c:15:d8:a5:d0:30:f8:76:f4: 45:b1:9a:0d:b7:4e:bf:23:f7:77:64:ee:d9:8c:ce:3f:fa:ff: 80:6c:38:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDRUYxMTAvBgNVBAUTKEQ5NDVCNjBGMDA5Q0RGMTU1QzQyOUQ0MDg1QUVCNkNG RTA2QkNFMDAwHhcNMjYwOTI2MjMxMDQxWhcNMjYxMDAzMjMxMDQxWjAYMRYwFAYD VQQDEw02YWI4NTBmMS1jZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpvdg2erwnw4OHOISC0nX6zTn9Ie/RLVjSrGEqcjf38dYcLKBiExjeDOhEE+ PjSecb4GLPElQyZ/lU3uahoYF2T7w3b0UqSRAHuf4+j8TfnqGk1MP4adG5QAVQhu Rqi/snWBfKQuRxGFWy+WHLXIE11VMOAUHOLSuks1pImmcgJSkbV58CXvI5XMoEUI eisV912hRw8NUOIxOpYfH77xbt3ZgQWE/pLpX8mXrIEmakL02tlmXHMhLdgAjIan r8qRvdRVGsVb4iM0F5Q3giaxNl5+c4pAOdz37Uu9pBXN9i+F9te3alo0Nso8g+6r y9u6Sy2+W74IDdwRmZXD9aBa8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOv5R0HC gEhXEdy+eWWLgeK+hlq+MB8GA1UdIwQYMBaAFNlFtg8AnN8VXEKdQIWuts/ga84A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNFRi9DNDAxOUQyNDJD MTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4VmNRcDFBaGE2MnotQnJ6 Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVzJEd0NjM3hWY1FwMUFoYTYyei1CcnpnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNFRi9DNDAxOUQyNDJDMTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4 VmNRcDFBaGE2MnotQnJ6Z0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADOKd+OLKqr8KDhGW/y49espjA46P9f+iR63LVisLXylzNkERWXgc1fOR7WPu tV7kjWUAPKB14G6cJ7Q4Yp8KjHOrLXF4Pjm2ApAa4rfPv4v0O7Lh+MQV8iAuPtyl EbMTJshKXKb7yKXoUH9bJZikcgZ36G/hDI26IeTNZ/mA+R43JikxUxFK1bWP7vpP rJH9/3aoLmNc9m/A8hLi483sC2LZrnYZ/MDSCsR83l4Np7VMnISG/cgFMHzI/vy5 6sCn1oYW6jOU+QyA0UfD/KtM3/XYlAywFvM9ucO8/xqbbHDeXBXYpdAw+Hb0RbGa DbdOvyP3d2Tu2YzOP/r/gGw4eg== -----END CERTIFICATE-----Generated at Sun Sep 27 21:11:40 2026 by rpki-client