$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json) Hash identifier: Ffe4iSiMlZR4CVP6VOPUCxXl3xz1Q25TR6iTrNvyJIY= Subject key identifier: 7D:88:73:66:7F:1D:29:92:72:FB:A3:BC:B0:09:B3:8E:D0:F7:7E:7E Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 0778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft Manifest number: 08A3 Signing time: Tue 22 Sep 2026 20:10:38 +0000 Manifest this update: Tue 22 Sep 2026 20:10:38 +0000 Manifest next update: Tue 29 Sep 2026 20:10:38 +0000 Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: mx7alQ0PFF8Ks/pIZqp1zJ8GN4U5yxvScsn4ogOweVo=) 2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: uPVVKDs8FXCGXCVQqQJZYdG3JPqyWcieyoiy4+qFczg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1912 (0x778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: Sep 22 20:10:38 2026 GMT Not After : Sep 29 20:10:38 2026 GMT Subject: CN=6ab2e0be-b985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:31:30:3b:22:69:52:d4:3f:47:6a:71:8a: 97:ad:97:ef:71:48:ff:fe:85:ae:b3:fa:a1:cd:39: 81:ea:26:fa:b8:b2:de:2b:67:fc:c9:a0:93:fc:05: fa:ed:60:ac:10:1e:5c:b9:25:20:e2:bf:5a:62:5c: 53:67:75:49:4f:ef:58:5d:2d:86:8c:44:f3:7a:4e: 60:c4:67:0b:e9:f5:9d:b0:d9:5e:ec:10:47:5f:86: d5:f3:8d:97:80:03:cc:70:5b:02:e4:b5:8b:94:c4: 9e:04:f9:2e:7b:3e:3b:b4:9d:41:a6:ee:3c:71:29: fe:49:bc:4e:d2:38:62:b1:17:3a:d8:55:ee:a0:b2: 08:4a:c8:1a:61:2e:a4:c8:b7:99:2d:ae:6a:3c:7d: 9f:54:05:18:6d:db:fe:66:36:ee:5c:7e:b3:0b:e1: 79:01:51:ec:af:73:98:88:c3:4b:c1:a2:da:24:e8: e0:69:9f:79:87:13:c6:8f:af:b8:f1:03:9d:84:00: e1:54:1e:8a:a8:01:1f:0f:8a:b3:f7:0a:92:ce:d9: f3:02:15:b5:fc:76:b7:e5:47:3f:c1:f9:06:39:bd: cc:4f:cb:ba:52:4c:e9:76:61:a4:66:0e:d0:8b:41: 98:32:53:cc:df:bc:2d:64:b0:1e:32:97:88:89:fa: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:88:73:66:7F:1D:29:92:72:FB:A3:BC:B0:09:B3:8E:D0:F7:7E:7E X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:36:ad:a5:fa:c6:e0:a1:39:50:98:f3:2f:d6:6e:a2:52:96: 27:9c:bd:fc:df:b4:d2:90:97:db:ba:e1:12:74:54:d9:bc:60: ea:e7:ba:64:2e:02:7c:79:2d:dd:a9:cf:d9:62:87:a6:70:7f: 19:4c:3a:f3:8c:1e:63:ce:99:9c:85:02:2a:9b:24:ce:d0:d4: 33:89:bc:ca:82:cd:79:1f:cf:55:16:a4:50:30:3b:33:f0:7d: 9d:0e:cd:69:1f:aa:fa:59:bb:48:75:ea:d2:a4:3c:f2:94:f5: 1a:08:70:f4:11:24:72:74:d6:a0:01:ca:4b:3a:1d:e4:f2:f0: 79:ff:ca:04:41:e6:5c:d0:3c:d4:a7:dc:9f:ce:53:41:f5:e5: 42:0d:ab:51:b2:8e:2a:83:f0:06:db:05:b0:8a:d4:97:dc:d6: bb:88:9c:90:fd:f9:90:b5:2a:72:59:c4:2e:aa:15:14:4e:de: a4:cb:cd:8a:e0:34:0d:96:2c:33:59:8b:b8:40:ed:3b:66:86: 4a:57:31:0e:98:89:75:2c:5e:b8:25:da:43:bf:8f:cd:9e:6e: b5:e6:d1:38:0a:a4:fe:ba:a0:5d:ba:18:03:f8:1d:6c:25:9d: 0b:16:61:9a:32:56:d5:59:24:d6:08:23:e2:7f:eb:62:d4:66: 4c:98:76:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjYwOTIyMjAxMDM4WhcNMjYwOTI5MjAxMDM4WjAYMRYwFAYD VQQDEw02YWIyZTBiZS1iOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiMxMDsiaVLUP0dqcYqXrZfvcUj//oWus/qhzTmB6ib6uLLeK2f8yaCT/AX6 7WCsEB5cuSUg4r9aYlxTZ3VJT+9YXS2GjETzek5gxGcL6fWdsNle7BBHX4bV842X gAPMcFsC5LWLlMSeBPkuez47tJ1Bpu48cSn+SbxO0jhisRc62FXuoLIISsgaYS6k yLeZLa5qPH2fVAUYbdv+ZjbuXH6zC+F5AVHsr3OYiMNLwaLaJOjgaZ95hxPGj6+4 8QOdhADhVB6KqAEfD4qz9wqSztnzAhW1/Ha35Uc/wfkGOb3MT8u6UkzpdmGkZg7Q i0GYMlPM37wtZLAeMpeIifq0CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2Ic2Z/ HSmScvujvLAJs47Q935+MB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx NDFvaFd3NGhWRXJsSWpmb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALjatpfrG4KE5UJjzL9ZuolKWJ5y9/N+00pCX27rhEnRU2bxg6ue6ZC4CfHkt 3anP2WKHpnB/GUw684weY86ZnIUCKpskztDUM4m8yoLNeR/PVRakUDA7M/B9nQ7N aR+q+lm7SHXq0qQ88pT1Gghw9BEkcnTWoAHKSzod5PLwef/KBEHmXNA81Kfcn85T QfXlQg2rUbKOKoPwBtsFsIrUl9zWu4ickP35kLUqclnELqoVFE7epMvNiuA0DZYs M1mLuEDtO2aGSlcxDpiJdSxeuCXaQ7+PzZ5utebROAqk/rqgXboYA/gdbCWdCxZh mjJW1Vkk1ggj4n/rYtRmTJh2sA== -----END CERTIFICATE-----Generated at Thu Sep 24 10:16:01 2026 by rpki-client