$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft File: 2hAmH-_a0BGsriMnCqa_jEHeQpI.mft (raw, json) Hash identifier: z8A5P4gQcpCfVHP6sMsaU+zLq/wbmL6x04VGP2c2ZSc= Subject key identifier: 7F:E8:F5:F7:71:F7:2A:15:D0:50:19:5E:D8:86:07:2F:18:7B:47:EA Authority key identifier: DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92 Certificate issuer: /CN=A9166D4A/serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft Manifest number: 42 Signing time: Sat 03 Oct 2026 09:13:57 +0000 Manifest this update: Sat 03 Oct 2026 09:13:56 +0000 Manifest next update: Sat 10 Oct 2026 09:13:56 +0000 Files and hashes: 1: 2hAmH-_a0BGsriMnCqa_jEHeQpI.crl (hash: 2kC6DncXnMX+mI8yYvaSaGeFT0UbN1hJtsCLbXaFlhI=) 2: 4B17E2545C0811F1B8292F4090833773.roa (hash: ZHRlNcAYAA1IcJM0xFQys5A4K8yg67YwwMJ4ch/a0ZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D4A, serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292 Validity Not Before: Oct 3 09:13:56 2026 GMT Not After : Oct 10 09:13:56 2026 GMT Subject: CN=6ac0c754-d3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:a7:c0:b6:98:f5:5e:a6:03:1c:7c:2c:84: 01:33:32:44:13:33:ea:ee:45:7b:e6:8a:d9:03:53: 4d:1c:8f:0c:9f:c2:3a:12:a6:6b:f4:b0:48:48:4e: 39:a9:b4:3a:29:c7:cf:79:ac:c6:95:18:0c:f6:71: 48:be:23:19:79:13:a2:bd:c1:c2:ad:84:e0:c1:80: ad:23:1e:98:48:68:9c:5d:ee:87:b3:6e:2e:2b:ea: dc:5a:9f:a3:91:83:55:31:5f:14:94:db:f7:d1:80: 78:d5:f0:0b:fc:de:b9:b4:ea:d6:8f:41:47:c3:ed: 87:0d:73:07:ad:0c:18:c5:dc:a7:46:27:e6:21:37: d5:75:c4:d9:4b:30:0a:84:0c:5e:65:42:79:89:e6: 46:fb:5e:b8:4b:0a:f1:c7:48:cf:22:7a:36:d4:c6: 97:2a:e7:71:31:b4:66:e4:e7:7e:17:08:3f:3d:c9: d4:e1:9a:8d:b0:68:eb:35:50:b9:6b:c2:f4:e3:89: 12:b8:c2:54:8b:dd:18:28:1c:8c:a3:6b:61:74:85: ce:c0:40:ee:e4:96:82:f7:17:3e:35:21:52:b8:e7: 0b:a0:5e:01:54:ef:03:f4:e7:9c:c4:f1:24:d0:dc: f0:83:69:09:1f:a2:14:f5:fb:13:f3:f0:64:99:a1: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E8:F5:F7:71:F7:2A:15:D0:50:19:5E:D8:86:07:2F:18:7B:47:EA X509v3 Authority Key Identifier: keyid:DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:27:a4:f3:dd:4a:60:e8:4b:5d:c0:cc:25:7e:eb:64:02:1b: 8a:35:e3:2b:24:ff:fe:bd:bf:70:a7:b6:be:5e:e3:0a:3e:a0: 7a:6d:a3:9e:21:21:d0:e5:29:25:54:36:ba:68:f9:15:ff:ae: 0f:04:28:fc:59:27:a0:1f:f9:4f:3f:aa:68:0c:59:39:5a:c4: 57:91:1c:a7:39:50:c0:9d:1b:54:dc:14:e0:cc:2f:c2:bd:0e: 89:f7:48:c8:99:ba:67:89:dd:bc:d7:25:2d:ac:1d:51:cd:00: b3:1c:fb:72:e3:47:45:a5:8c:6c:a9:c4:ac:0e:dc:db:25:89: 0d:14:e1:98:27:30:e0:29:da:ec:0a:1d:08:7f:fc:67:a7:71: a1:71:79:bd:74:61:38:57:62:64:66:a7:2e:f9:de:8d:2b:b8: 8c:e2:36:66:0c:23:40:c0:86:d1:ed:5c:25:fb:9a:14:16:bf: 0b:60:d2:01:37:02:8d:aa:f4:a7:0b:96:8f:5d:b7:08:61:51: e1:70:0d:8b:fb:aa:f9:1e:c1:a1:44:fb:78:5f:0d:dc:fd:39: a9:ec:13:f0:92:83:7b:ca:ca:ab:45:db:5b:cf:4f:d2:72:31: 15:d8:55:98:74:11:01:58:c0:82:86:12:ac:b5:1a:bb:3e:9f: cd:7a:5b:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQ0QTExMC8GA1UEBRMoREExMDI2MUZFRkRBRDAxMUFDQUUyMzI3MEFBNkJGOEM0 MURFNDI5MjAeFw0yNjEwMDMwOTEzNTZaFw0yNjEwMTAwOTEzNTZaMBgxFjAUBgNV BAMTDTZhYzBjNzU0LWQzZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqNqfAtpj1XqYDHHwshAEzMkQTM+ruRXvmitkDU00cjwyfwjoSpmv0sEhITjmp tDopx895rMaVGAz2cUi+Ixl5E6K9wcKthODBgK0jHphIaJxd7oezbi4r6txan6OR g1UxXxSU2/fRgHjV8Av83rm06taPQUfD7YcNcwetDBjF3KdGJ+YhN9V1xNlLMAqE DF5lQnmJ5kb7XrhLCvHHSM8iejbUxpcq53ExtGbk534XCD89ydThmo2waOs1ULlr wvTjiRK4wlSL3RgoHIyja2F0hc7AQO7kloL3Fz41IVK45wugXgFU7wP055zE8STQ 3PCDaQkfohT1+xPz8GSZoRdnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf+j193H3 KhXQUBle2IYHLxh7R+owHwYDVR0jBBgwFoAU2hAmH+/a0BGsriMnCqa/jEHeQpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDRBL0FEMTczN0EyNUI4 MTExRjFBOEU4NDE3N0E3ODMzNzczLzJoQW1ILV9hMEJHc3JpTW5DcWFfakVIZVFw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmhBbUgtX2EwQkdzcmlNbkNxYV9qRUhlUXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDRBL0FEMTczN0EyNUI4MTExRjFBOEU4NDE3N0E3ODMzNzczLzJoQW1ILV9hMEJH c3JpTW5DcWFfakVIZVFwSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQABJ6Tz3Upg6EtdwMwlfutkAhuKNeMrJP/+vb9wp7a+XuMKPqB6baOeISHQ5Skl VDa6aPkV/64PBCj8WSegH/lPP6poDFk5WsRXkRynOVDAnRtU3BTgzC/CvQ6J90jI mbpnid281yUtrB1RzQCzHPty40dFpYxsqcSsDtzbJYkNFOGYJzDgKdrsCh0If/xn p3GhcXm9dGE4V2JkZqcu+d6NK7iM4jZmDCNAwIbR7Vwl+5oUFr8LYNIBNwKNqvSn C5aPXbcIYVHhcA2L+6r5HsGhRPt4Xw3c/Tmp7BPwkoN7ysqrRdtbz0/ScjEV2FWY dBEBWMCChhKstRq7Pp/Neluy -----END CERTIFICATE-----Generated at Sat Oct 3 23:00:16 2026 by rpki-client