$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft File: 2QhrDfk0LcKwkbrobLd5_GJZvXs.mft (raw, json) Hash identifier: xQHWeFYMTkg20m6iSIUCAog34FOa/9vuL6Vz4dod2X8= Subject key identifier: 60:A6:0D:D2:F2:62:AB:89:73:2D:FA:71:4E:29:BA:A0:EE:FA:6B:4D Authority key identifier: D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B Certificate issuer: /CN=A914F2EC/serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B Certificate serial: 3593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft Manifest number: 3588 Signing time: Thu 24 Sep 2026 14:57:11 +0000 Manifest this update: Thu 24 Sep 2026 14:57:10 +0000 Manifest next update: Thu 01 Oct 2026 14:57:10 +0000 Files and hashes: 1: 2QhrDfk0LcKwkbrobLd5_GJZvXs.crl (hash: 7gkQdbdHZimcPTWYrjAs0qKC4R+AzXCroFV8KQMkf4Y=) 2: 588BD7269A1211E8B97A623AC4F9AE02.roa (hash: WIHf/g57A92kBt+M1v/6HUGwLpZi39D8KAuOlAkvShg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13715 (0x3593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F2EC, serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B Validity Not Before: Sep 24 14:57:10 2026 GMT Not After : Oct 1 14:57:10 2026 GMT Subject: CN=6ab53a46-8a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:7a:46:5f:d2:9a:44:f1:af:8b:d6:cb:bd: d3:7e:63:bc:1a:21:9e:90:97:65:31:32:a8:2c:6a: 6c:1e:72:01:48:bc:4b:ac:23:37:5b:2f:44:02:8b: 9b:81:17:38:04:e1:9b:0b:0e:81:5d:36:4f:8b:19: 6d:e4:e3:bb:95:0b:52:87:6f:7c:53:a8:4e:0e:b0: 70:85:0b:06:8c:79:5a:eb:0c:68:d1:0d:2c:8a:6c: 6e:46:a7:0b:a2:7c:8c:a6:23:77:6d:9f:95:48:1c: e4:56:48:9e:05:e4:4b:69:24:47:fd:7a:61:8a:7c: de:66:42:a1:a5:0c:4b:26:3c:2d:08:79:d7:44:15: 0d:cd:bb:bc:28:3e:76:8e:4d:23:f4:ed:b9:bc:73: 93:d4:a4:fb:09:66:6f:e5:b8:55:dc:f9:7e:20:28: fc:b4:d2:2b:44:96:12:07:ea:5b:8d:f7:67:df:9b: db:63:71:64:46:a8:23:a3:6c:bd:ec:ce:ab:08:3a: 82:34:4c:e8:11:44:04:05:5b:77:b1:02:88:f8:95: f2:bf:79:ed:a2:86:b9:b2:30:58:14:e9:34:dd:cb: 90:6a:ab:43:c6:e4:ff:d8:60:5b:76:2c:c9:fd:3f: 9a:44:9f:76:be:a5:52:7a:c4:7d:43:82:06:87:89: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A6:0D:D2:F2:62:AB:89:73:2D:FA:71:4E:29:BA:A0:EE:FA:6B:4D X509v3 Authority Key Identifier: keyid:D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:12:5d:1e:3a:d5:71:04:19:b0:be:bc:ea:82:24:68:b4:a8: 2e:2b:ff:10:0e:bd:22:50:b2:7c:4d:59:ce:a2:bb:a2:30:b9: 95:6e:af:ec:73:c2:74:aa:06:0a:22:71:96:b3:ea:53:58:d8: 00:3f:8b:0e:12:08:e5:3d:42:c3:76:04:bf:49:5c:9f:91:c1: 5b:59:5c:12:6d:fe:c8:e8:12:8e:e6:58:f0:e5:c1:ec:3a:58: 0b:6a:54:36:ce:72:b9:d3:e1:c5:dd:c4:ff:c9:f0:87:27:04: 11:28:16:d8:67:65:c8:6c:0c:e0:fc:dc:7f:bc:db:1c:ad:3b: 23:96:f4:5d:ec:91:d0:6e:03:01:c3:67:e4:9a:6e:c1:0d:cf: 23:3c:d1:97:07:fe:72:65:17:f5:f8:99:a5:df:11:97:4e:f2: d6:0c:4f:a1:b3:d9:13:44:88:63:e8:c7:26:76:17:69:28:bc: 8e:b6:98:1e:6f:6b:e4:c6:d9:eb:8d:cb:5d:0c:65:ea:4d:32: 36:98:14:85:27:ef:cf:7a:53:74:65:9d:f9:da:c3:24:74:d7: ee:10:ad:8f:f4:38:f4:38:ee:98:f0:d4:6e:01:29:ab:e4:d7: 90:70:3a:b6:01:94:22:e5:33:d1:bf:ad:40:d8:26:13:5e:0a: 90:dc:52:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyRUMxMTAvBgNVBAUTKEQ5MDg2QjBERjkzNDJEQzJCMDkxQkFFODZDQjc3OUZD NjI1OUJEN0IwHhcNMjYwOTI0MTQ1NzEwWhcNMjYxMDAxMTQ1NzEwWjAYMRYwFAYD VQQDEw02YWI1M2E0Ni04YTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlZ6Rl/SmkTxr4vWy73TfmO8GiGekJdlMTKoLGpsHnIBSLxLrCM3Wy9EAoub gRc4BOGbCw6BXTZPixlt5OO7lQtSh298U6hODrBwhQsGjHla6wxo0Q0simxuRqcL onyMpiN3bZ+VSBzkVkieBeRLaSRH/XphinzeZkKhpQxLJjwtCHnXRBUNzbu8KD52 jk0j9O25vHOT1KT7CWZv5bhV3Pl+ICj8tNIrRJYSB+pbjfdn35vbY3FkRqgjo2y9 7M6rCDqCNEzoEUQEBVt3sQKI+JXyv3ntooa5sjBYFOk03cuQaqtDxuT/2GBbdizJ /T+aRJ92vqVSesR9Q4IGh4n9bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGCmDdLy YquJcy36cU4puqDu+mtNMB8GA1UdIwQYMBaAFNkIaw35NC3CsJG66Gy3efxiWb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjJFQy9ENThBMjI2QzFE OUMxMUUyOUJDM0IyOEIwOEIwMkNEMi8yUWhyRGZrMExjS3drYnJvYkxkNV9HSlp2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaHJEZmswTGNLd2ticm9iTGQ1X0dKWnZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjJFQy9ENThBMjI2QzFEOUMxMUUyOUJDM0IyOEIwOEIwMkNEMi8yUWhyRGZrMExj S3drYnJvYkxkNV9HSlp2WHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKRJdHjrVcQQZsL686oIkaLSoLiv/EA69IlCyfE1ZzqK7ojC5lW6v7HPCdKoG CiJxlrPqU1jYAD+LDhII5T1Cw3YEv0lcn5HBW1lcEm3+yOgSjuZY8OXB7DpYC2pU Ns5yudPhxd3E/8nwhycEESgW2GdlyGwM4Pzcf7zbHK07I5b0XeyR0G4DAcNn5Jpu wQ3PIzzRlwf+cmUX9fiZpd8Rl07y1gxPobPZE0SIY+jHJnYXaSi8jraYHm9r5MbZ 643LXQxl6k0yNpgUhSfvz3pTdGWd+drDJHTX7hCtj/Q49DjumPDUbgEpq+TXkHA6 tgGUIuUz0b+tQNgmE14KkNxSdg== -----END CERTIFICATE-----Generated at Fri Sep 25 13:53:55 2026 by rpki-client