$ rpki-client -vvvf rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft File: 2GhqpteQQFqfGbGIICyuBDWGCWE.mft (raw, json) Hash identifier: gS7KCdxuSxhUUyW10UkCYY61lbLkDiCOYPD78FTeIKs= Subject key identifier: E3:A6:03:E0:BF:69:89:5D:62:E5:35:03:AF:26:05:00:28:C5:D6:C6 Authority key identifier: D8:68:6A:A6:D7:90:40:5A:9F:19:B1:88:20:2C:AE:04:35:86:09:61 Certificate issuer: /CN=A915651D/serialNumber=D8686AA6D790405A9F19B188202CAE0435860961 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft Manifest number: 07 Signing time: Wed 23 Sep 2026 08:59:07 +0000 Manifest this update: Wed 23 Sep 2026 08:59:06 +0000 Manifest next update: Wed 30 Sep 2026 08:59:06 +0000 Files and hashes: 1: 2GhqpteQQFqfGbGIICyuBDWGCWE.crl (hash: PlpwXw/J3wURmKB7iBuLKHgyNKC7DuV9SbXES+o2r3s=) 2: 023DC3A2B03911F1AE1EC8CE3E11F970.roa (hash: G06NnHMX2WuVcev4nQuCxyrbcAxR0mS9/vCckCp/Ykc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.crl rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915651D, serialNumber=D8686AA6D790405A9F19B188202CAE0435860961 Validity Not Before: Sep 23 08:59:06 2026 GMT Not After : Sep 30 08:59:06 2026 GMT Subject: CN=6ab394db-7e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:63:35:bf:21:f8:7f:66:b4:72:3e:f1:b7: c5:65:9e:95:93:99:38:42:0f:21:a8:e4:3b:b6:14: 71:8d:10:f0:60:43:0e:3e:f4:cc:d1:79:6d:25:da: 90:3a:a5:09:65:eb:05:44:b7:78:75:5a:d6:41:fb: 05:61:dc:9b:9a:6b:cc:60:d2:7b:4b:d9:dc:7b:a4: 0d:a0:b1:49:9f:ad:10:1f:86:aa:76:b6:c5:b2:3a: 50:32:ba:5a:38:ba:78:ca:5a:23:8c:2d:3b:34:3e: 3a:79:81:92:99:6a:83:87:d5:79:07:be:c8:51:e9: cb:dc:99:ae:c4:90:7f:61:f3:58:7b:69:19:d5:5b: 12:64:20:16:52:65:64:76:2c:64:7c:37:33:20:11: eb:c8:a2:1c:ee:ff:3b:72:70:2f:0e:6b:b3:4b:1d: 3d:50:f2:02:e4:2b:49:aa:22:6c:f1:0e:f1:2c:94: 4c:8d:53:22:1a:65:e7:d0:a3:4e:6d:b3:83:98:37: 45:da:a2:2e:a7:fb:f5:ea:30:1b:81:32:68:56:f3: 15:11:9e:9b:97:f7:09:8a:8a:a1:71:73:42:1d:de: a8:83:10:58:3c:83:b1:68:c8:8a:97:76:e2:87:ef: fb:c7:67:6d:15:b0:92:a9:ab:22:30:c1:75:d0:7a: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A6:03:E0:BF:69:89:5D:62:E5:35:03:AF:26:05:00:28:C5:D6:C6 X509v3 Authority Key Identifier: keyid:D8:68:6A:A6:D7:90:40:5A:9F:19:B1:88:20:2C:AE:04:35:86:09:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:09:19:4f:bf:32:bf:fd:5b:a3:0b:71:f5:e3:3e:5f:d0:7d: 5d:63:eb:6f:bf:f7:18:b3:18:71:d6:86:8e:53:61:41:c1:ca: 13:41:c7:23:27:5c:7a:db:53:5f:40:3f:91:4c:16:97:c8:a1: d9:e5:f2:13:cb:8f:83:af:a1:47:55:e0:d8:86:2a:54:e3:4a: f2:be:02:3b:8d:31:71:07:98:e2:6a:24:f9:6e:09:c4:04:1d: 78:fa:3f:71:24:05:12:c3:19:6d:df:34:0d:60:52:ce:32:1f: d3:66:71:7b:b1:96:5f:fb:c7:52:88:9f:f6:f4:11:34:85:24: 01:db:1c:be:63:ff:53:82:25:d9:7b:10:6f:66:c7:ef:0c:a0: d6:14:68:19:b8:f0:a8:75:79:f9:8c:78:e0:96:4e:c7:79:2e: a8:3e:ad:50:cc:c2:e4:e0:b9:22:b5:21:dc:37:22:c0:0a:e2: 2d:7c:ab:bc:7d:96:18:3c:08:25:2c:45:f7:8f:88:45:73:95: 05:a7:c2:12:b8:d0:01:1e:5b:68:60:98:8d:8f:29:bb:36:3b: ac:81:17:15:34:ad:5e:52:19:a9:00:a4:a3:54:f3:0c:cf:2b: 54:e5:c9:ac:cf:a7:0c:09:e9:88:0d:9c:a2:17:d5:18:74:5d: 76:54:4c:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjUxRDExMC8GA1UEBRMoRDg2ODZBQTZENzkwNDA1QTlGMTlCMTg4MjAyQ0FFMDQz NTg2MDk2MTAeFw0yNjA5MjMwODU5MDZaFw0yNjA5MzAwODU5MDZaMBgxFjAUBgNV BAMTDTZhYjM5NGRiLTdlOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCHM2M1vyH4f2a0cj7xt8VlnpWTmThCDyGo5Du2FHGNEPBgQw4+9MzReW0l2pA6 pQll6wVEt3h1WtZB+wVh3Juaa8xg0ntL2dx7pA2gsUmfrRAfhqp2tsWyOlAyulo4 unjKWiOMLTs0Pjp5gZKZaoOH1XkHvshR6cvcma7EkH9h81h7aRnVWxJkIBZSZWR2 LGR8NzMgEevIohzu/ztycC8Oa7NLHT1Q8gLkK0mqImzxDvEslEyNUyIaZefQo05t s4OYN0Xaoi6n+/XqMBuBMmhW8xURnpuX9wmKiqFxc0Id3qiDEFg8g7FoyIqXduKH 7/vHZ20VsJKpqyIwwXXQen/TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU46YD4L9p iV1i5TUDryYFACjF1sYwHwYDVR0jBBgwFoAU2GhqpteQQFqfGbGIICyuBDWGCWEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NTFELzE1OTBEOUMyQjAz ODExRjFCNTFCQ0Q4MTNFMTFGOTcwLzJHaHFwdGVRUUZxZkdiR0lJQ3l1QkRXR0NX RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMkdocXB0ZVFRRnFmR2JHSUlDeXVCRFdHQ1dFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NTFELzE1OTBEOUMyQjAzODExRjFCNTFCQ0Q4MTNFMTFGOTcwLzJHaHFwdGVRUUZx ZkdiR0lJQ3l1QkRXR0NXRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKCRlPvzK//VujC3H14z5f0H1dY+tvv/cYsxhx1oaOU2FBwcoTQccjJ1x621Nf QD+RTBaXyKHZ5fITy4+Dr6FHVeDYhipU40ryvgI7jTFxB5jiaiT5bgnEBB14+j9x JAUSwxlt3zQNYFLOMh/TZnF7sZZf+8dSiJ/29BE0hSQB2xy+Y/9TgiXZexBvZsfv DKDWFGgZuPCodXn5jHjglk7HeS6oPq1QzMLk4LkitSHcNyLACuItfKu8fZYYPAgl LEX3j4hFc5UFp8ISuNABHltoYJiNjym7NjusgRcVNK1eUhmpAKSjVPMMzytU5cms z6cMCemIDZyiF9UYdF12VEyS -----END CERTIFICATE-----Generated at Thu Sep 24 10:21:32 2026 by rpki-client