$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BB94/42D8264EA4C411F1BD9503FD5E11F970/2IlVevCVfo_ThBiWOo7bhQSyLeA.mft File: 2IlVevCVfo_ThBiWOo7bhQSyLeA.mft (raw, json) Hash identifier: YF5QZgumtEzwjpVzf0rQSmdxk1OH+9JsvaWqUL87z/M= Subject key identifier: F8:62:6A:38:83:43:20:50:9A:DC:B3:C1:70:4C:AA:E5:8E:B2:92:3F Authority key identifier: D8:89:55:7A:F0:95:7E:8F:D3:84:18:96:3A:8E:DB:85:04:B2:2D:E0 Certificate issuer: /CN=A915BB94/serialNumber=D889557AF0957E8FD38418963A8EDB8504B22DE0 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IlVevCVfo_ThBiWOo7bhQSyLeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BB94/42D8264EA4C411F1BD9503FD5E11F970/2IlVevCVfo_ThBiWOo7bhQSyLeA.mft Manifest number: 0E Signing time: Wed 23 Sep 2026 08:52:42 +0000 Manifest this update: Wed 23 Sep 2026 08:52:41 +0000 Manifest next update: Wed 30 Sep 2026 08:52:41 +0000 Files and hashes: 1: 2IlVevCVfo_ThBiWOo7bhQSyLeA.crl (hash: wp6dJB+Lo54iSYyozzCAU7Ks3fcEkaMBbtFP83fJK7s=) 2: 19AD0378A4C611F1869C8B505F11F970.roa (hash: CnPx5d9gVTmbdlwzBW9wP83lzBl1Tm4rOsW1rZK1uCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BB94/42D8264EA4C411F1BD9503FD5E11F970/2IlVevCVfo_ThBiWOo7bhQSyLeA.crl rsync://rpki.apnic.net/member_repository/A915BB94/42D8264EA4C411F1BD9503FD5E11F970/2IlVevCVfo_ThBiWOo7bhQSyLeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IlVevCVfo_ThBiWOo7bhQSyLeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BB94, serialNumber=D889557AF0957E8FD38418963A8EDB8504B22DE0 Validity Not Before: Sep 23 08:52:41 2026 GMT Not After : Sep 30 08:52:41 2026 GMT Subject: CN=6ab3935a-f74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:c1:bc:c7:cc:63:d0:4b:37:29:d5:8e:36: 97:b6:8c:98:cf:bf:75:27:3f:30:c0:1f:71:f3:2a: ff:ce:13:28:23:b1:2d:8f:28:a2:c8:ee:c3:aa:03: 7b:f8:39:50:9b:7d:a4:4c:ce:55:e0:18:60:a0:45: f3:69:c4:be:7d:22:9e:8e:51:42:06:dc:da:28:cd: 13:14:f2:69:15:f8:9a:df:ef:3a:4a:4b:10:58:5c: 59:e2:55:9c:e3:e2:20:ba:5d:04:2c:d6:e4:20:3a: aa:34:d3:39:27:d7:6a:e8:3c:c5:9c:a8:6f:0f:5e: 39:6c:02:82:5a:c2:1b:78:2d:56:3c:39:21:b3:fb: ab:bf:07:37:ed:89:ec:31:a1:65:62:eb:15:22:40: 8e:ea:bd:f5:db:05:7e:56:c8:01:14:74:18:e4:23: 6c:94:a9:5a:ad:9e:ee:5b:41:90:a1:82:cd:8d:aa: bc:21:84:67:82:63:d9:a9:31:01:94:79:3c:c1:3a: 8d:87:c5:ed:ff:aa:87:84:94:18:43:e1:18:66:e4: 80:05:9f:b6:9d:9b:51:e6:59:07:51:db:d0:5e:aa: 33:30:02:b9:a1:27:c5:3a:c4:7d:42:8a:c6:a2:17: d6:8c:95:f6:3d:7a:e9:e9:e9:6e:8e:68:8d:cd:a8: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:62:6A:38:83:43:20:50:9A:DC:B3:C1:70:4C:AA:E5:8E:B2:92:3F X509v3 Authority Key Identifier: keyid:D8:89:55:7A:F0:95:7E:8F:D3:84:18:96:3A:8E:DB:85:04:B2:2D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BB94/42D8264EA4C411F1BD9503FD5E11F970/2IlVevCVfo_ThBiWOo7bhQSyLeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IlVevCVfo_ThBiWOo7bhQSyLeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BB94/42D8264EA4C411F1BD9503FD5E11F970/2IlVevCVfo_ThBiWOo7bhQSyLeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:2b:5c:db:3d:d1:e3:42:50:23:22:20:32:d5:60:43:7d:2f: 42:ff:73:06:0f:4b:0e:b6:68:53:e2:62:8f:9a:f4:7b:9f:f2: 54:97:da:92:63:f4:86:c8:06:dc:f2:5a:76:31:c8:05:8b:b0: e4:64:88:a3:f6:54:21:96:e7:25:f4:6a:f3:ef:df:3e:20:88: 9e:b0:a4:eb:67:b6:d6:a0:1c:5a:9e:45:8c:0c:3a:e6:5e:fc: c0:04:d5:e1:b4:ae:76:59:bd:4e:2c:91:26:ac:65:6f:4d:8f: 6d:94:2b:0a:d0:ce:bc:cb:22:6e:94:bc:34:6c:06:d9:c2:44: 4f:89:17:30:f2:9c:ff:ae:34:a1:7e:e5:10:f2:cf:d5:f4:f1: d0:cc:ce:d1:18:d6:a4:fc:0f:99:8f:eb:af:a2:b4:1f:c2:f7: e7:e6:6c:27:ed:12:45:b7:e7:40:10:8d:4c:98:2b:f7:3b:5b: d2:80:f4:04:3a:90:62:a8:c0:e2:02:fe:4e:a8:55:a6:98:c9: 23:51:dd:d4:c4:70:8c:f3:0a:5a:e1:8a:ee:df:99:f9:88:a6: b1:40:e9:11:1f:20:07:00:55:e4:91:99:16:85:e4:a9:1e:85: 7c:b8:a5:8e:ba:a3:a0:ef:b8:e8:8f:80:a6:c7:5c:0a:e8:22: 9f:44:31:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkI5NDExMC8GA1UEBRMoRDg4OTU1N0FGMDk1N0U4RkQzODQxODk2M0E4RURCODUw NEIyMkRFMDAeFw0yNjA5MjMwODUyNDFaFw0yNjA5MzAwODUyNDFaMBgxFjAUBgNV BAMTDTZhYjM5MzVhLWY3NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ4sG8x8xj0Es3KdWONpe2jJjPv3UnPzDAH3HzKv/OEygjsS2PKKLI7sOqA3v4 OVCbfaRMzlXgGGCgRfNpxL59Ip6OUUIG3NoozRMU8mkV+Jrf7zpKSxBYXFniVZzj 4iC6XQQs1uQgOqo00zkn12roPMWcqG8PXjlsAoJawht4LVY8OSGz+6u/Bzftiewx oWVi6xUiQI7qvfXbBX5WyAEUdBjkI2yUqVqtnu5bQZChgs2NqrwhhGeCY9mpMQGU eTzBOo2Hxe3/qoeElBhD4Rhm5IAFn7adm1HmWQdR29BeqjMwArmhJ8U6xH1Cisai F9aMlfY9eunp6W6OaI3NqPrlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+GJqOIND IFCa3LPBcEyq5Y6ykj8wHwYDVR0jBBgwFoAU2IlVevCVfo/ThBiWOo7bhQSyLeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQjk0LzQyRDgyNjRFQTRD NDExRjFCRDk1MDNGRDVFMTFGOTcwLzJJbFZldkNWZm9fVGhCaVdPbzdiaFFTeUxl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMklsVmV2Q1Zmb19UaEJpV09vN2JoUVN5TGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC Qjk0LzQyRDgyNjRFQTRDNDExRjFCRDk1MDNGRDVFMTFGOTcwLzJJbFZldkNWZm9f VGhCaVdPbzdiaFFTeUxlQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAZK1zbPdHjQlAjIiAy1WBDfS9C/3MGD0sOtmhT4mKPmvR7n/JUl9qSY/SGyAbc 8lp2McgFi7DkZIij9lQhlucl9Grz798+IIiesKTrZ7bWoBxankWMDDrmXvzABNXh tK52Wb1OLJEmrGVvTY9tlCsK0M68yyJulLw0bAbZwkRPiRcw8pz/rjShfuUQ8s/V 9PHQzM7RGNak/A+Zj+uvorQfwvfn5mwn7RJFt+dAEI1MmCv3O1vSgPQEOpBiqMDi Av5OqFWmmMkjUd3UxHCM8wpa4Yru35n5iKaxQOkRHyAHAFXkkZkWheSpHoV8uKWO uqOg77joj4Cmx1wK6CKfRDE2 -----END CERTIFICATE-----Generated at Thu Sep 24 15:35:25 2026 by rpki-client