$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json) Hash identifier: zsoicHPAQi56O9eOnOVkdb8jdN15cibZEd3gpGKmYyA= Subject key identifier: 0D:CB:52:EA:09:A2:BD:96:51:44:97:15:54:3C:57:65:89:DA:F9:8A Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft Manifest number: 02D2 Signing time: Thu 24 Sep 2026 23:58:25 +0000 Manifest this update: Thu 24 Sep 2026 23:58:24 +0000 Manifest next update: Thu 01 Oct 2026 23:58:24 +0000 Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: mJXB9blJ6KG0STCILAUUi5vcko8hAvmWeoAzriUrGvA=) 2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: XjvBtz5g4frcjOMdQDCMXkpZji1fTdysFW39IJffTO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Validity Not Before: Sep 24 23:58:24 2026 GMT Not After : Oct 1 23:58:24 2026 GMT Subject: CN=6ab5b920-5f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3c:ab:7d:f8:a1:ef:ca:c8:fc:29:a8:47:ae: e5:74:8a:35:2d:ee:af:cd:c9:06:9d:e8:ff:19:0e: 8e:ec:6b:f6:cb:50:1f:ed:2d:49:23:ae:84:0a:78: 9e:2e:bd:60:81:ce:d8:ba:bf:c4:91:e0:20:37:c3: c1:f9:76:27:fb:fb:cf:57:90:fe:1f:01:b6:f6:0d: 9c:42:cd:de:9a:17:d9:c5:1e:2a:5a:d0:59:f0:e9: 3e:14:73:d7:5b:96:a8:33:c9:c1:c6:10:29:06:43: 58:9c:cd:34:58:84:dc:48:b5:ce:81:ba:a3:0f:f8: 48:be:6d:5d:ef:a4:74:28:f8:00:5b:54:06:3a:7a: 56:cd:0f:db:cd:d6:e8:c9:9b:9b:c3:55:21:fb:f6: 6c:f8:89:7c:a9:c9:41:a0:be:f3:f4:ae:d1:0b:77: e6:40:f6:c7:76:e6:bd:44:84:e4:a9:83:d8:94:3e: 9d:d0:b0:1c:15:c8:14:c7:15:97:26:a9:b9:2c:fd: 01:a8:65:f7:75:ad:ff:77:42:69:62:17:5f:92:84: 99:a0:ae:77:24:30:a9:46:be:f0:70:c6:15:ed:d2: 71:8e:ab:73:a5:be:0f:0e:37:76:78:b9:74:01:fa: 19:80:27:a7:c1:cb:6d:78:cc:9d:45:21:49:03:d4: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CB:52:EA:09:A2:BD:96:51:44:97:15:54:3C:57:65:89:DA:F9:8A X509v3 Authority Key Identifier: keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:3e:93:f3:2d:5d:18:f3:91:7b:c9:0a:42:1d:a6:12:a1:8e: d6:9e:56:f2:f2:83:03:86:d4:c8:71:a6:01:12:ba:55:40:c2: 57:ca:c7:5c:6f:f5:72:a5:90:33:6a:86:68:a7:9d:e2:6b:fa: c6:1e:4f:bf:51:b3:10:0c:13:b0:4d:3a:43:47:44:7d:2f:61: db:b4:e4:39:d1:1b:ee:d3:7c:21:aa:04:e1:e8:55:64:65:31: c5:db:cb:56:94:7b:b1:c4:97:4e:be:16:70:af:36:b9:17:f7: 84:f1:44:8c:60:25:0f:6e:d4:2f:6c:a5:3c:5e:ca:a4:f9:63: da:7f:7a:2c:5f:34:35:3d:06:35:22:0f:e8:8b:d1:23:0b:6b: f1:3a:c9:bd:6f:fe:0c:33:f6:ef:d5:12:40:0c:89:7d:f5:3d: 2c:e1:cd:0f:66:10:69:2e:be:3f:a7:83:dd:dc:92:3c:c1:25: f6:73:9d:ae:5b:92:ad:40:fe:bf:06:ac:8b:7c:7c:81:2c:c3: b0:c7:49:26:75:cc:6b:29:aa:92:90:64:9a:7c:c9:6d:5f:c0: 3d:3a:0a:aa:b6:57:97:42:15:b1:b9:8c:5c:17:e6:58:d3:8f: 0f:52:13:f2:53:6f:d0:b7:b4:e7:18:f1:6b:54:db:00:91:88: a7:45:03:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEQ5ODUyOTE0OENCQTVEREVEM0I3M0Q2MDUyRUUwNTE2 QzAyNEM0RjMwHhcNMjYwOTI0MjM1ODI0WhcNMjYxMDAxMjM1ODI0WjAYMRYwFAYD VQQDEw02YWI1YjkyMC01ZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDyrffih78rI/CmoR67ldIo1Le6vzckGnej/GQ6O7Gv2y1Af7S1JI66ECnie Lr1ggc7Yur/EkeAgN8PB+XYn+/vPV5D+HwG29g2cQs3emhfZxR4qWtBZ8Ok+FHPX W5aoM8nBxhApBkNYnM00WITcSLXOgbqjD/hIvm1d76R0KPgAW1QGOnpWzQ/bzdbo yZubw1Uh+/Zs+Il8qclBoL7z9K7RC3fmQPbHdua9RITkqYPYlD6d0LAcFcgUxxWX Jqm5LP0BqGX3da3/d0JpYhdfkoSZoK53JDCpRr7wcMYV7dJxjqtzpb4PDjd2eLl0 AfoZgCenwctteMydRSFJA9R4uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3LUuoJ or2WUUSXFVQ8V2WJ2vmKMB8GA1UdIwQYMBaAFNmFKRSMul3e07c9YFLuBRbAJMTz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC83NTk4NDQ0NDcy MEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5NlhkN1R0ejFnVXU0RkZzQWt4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJZVXBGSXk2WGQ3VHR6MWdVdTRGRnNBa3hQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC83NTk4NDQ0NDcyMEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5Nlhk N1R0ejFnVXU0RkZzQWt4UE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApz6T8y1dGPORe8kKQh2mEqGO1p5W8vKDA4bUyHGmARK6VUDCV8rHXG/1cqWQ M2qGaKed4mv6xh5Pv1GzEAwTsE06Q0dEfS9h27TkOdEb7tN8IaoE4ehVZGUxxdvL VpR7scSXTr4WcK82uRf3hPFEjGAlD27UL2ylPF7KpPlj2n96LF80NT0GNSIP6IvR Iwtr8TrJvW/+DDP279USQAyJffU9LOHND2YQaS6+P6eD3dySPMEl9nOdrluSrUD+ vwasi3x8gSzDsMdJJnXMaymqkpBkmnzJbV/APToKqrZXl0IVsbmMXBfmWNOPD1IT 8lNv0Le05xjxa1TbAJGIp0UDIw== -----END CERTIFICATE-----Generated at Sun Sep 27 00:33:35 2026 by rpki-client