$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft File: 2y2AYIsrY8vRNmwSQSYnBwBXriY.mft (raw, json) Hash identifier: lywTl9V3JlG6QmjhXjEhSdVD27RTqNaCJbJ1jyEh9jg= Subject key identifier: 98:12:DF:D8:FF:98:E4:FE:22:DA:72:DD:E1:86:03:3B:64:23:12:86 Authority key identifier: DB:2D:80:60:8B:2B:63:CB:D1:36:6C:12:41:26:27:07:00:57:AE:26 Certificate issuer: /CN=A9170CF8/serialNumber=DB2D80608B2B63CBD1366C12412627070057AE26 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft Manifest number: 0D Signing time: Fri 25 Sep 2026 09:20:05 +0000 Manifest this update: Fri 25 Sep 2026 09:20:05 +0000 Manifest next update: Fri 02 Oct 2026 09:20:05 +0000 Files and hashes: 1: 2y2AYIsrY8vRNmwSQSYnBwBXriY.crl (hash: L/9CIyQ/jwLwE1e5o5LmWxGuvr5l69gV1576p3K0JPA=) 2: 1B258F1CA85511F19DF91DC93F11F970.roa (hash: O/BxMMF7jDLWlrtoBVDlazWajDdVMN8MU/1yOd79+xA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.crl rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170CF8, serialNumber=DB2D80608B2B63CBD1366C12412627070057AE26 Validity Not Before: Sep 25 09:20:05 2026 GMT Not After : Oct 2 09:20:05 2026 GMT Subject: CN=6ab63cc5-6ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dc:00:ec:74:b6:a2:10:4c:33:c7:98:2d:14: 12:7b:fd:fd:93:4a:c9:19:90:b3:e9:e6:19:cb:1d: 73:a2:41:a1:dc:6e:73:89:79:41:c2:42:e7:9c:6d: a7:b6:87:99:3d:4e:6c:bb:69:bc:30:e5:92:30:a4: 92:52:3d:3c:bf:bf:48:1a:e5:8a:cf:0f:89:a2:1e: e4:57:db:b3:13:06:a6:2d:d7:f8:56:95:70:ba:99: 0b:ed:58:91:03:4b:4d:07:3d:93:c7:b7:f8:0f:a4: f7:52:92:a2:40:2c:75:e5:08:27:3a:76:9f:84:36: 05:88:15:fb:b5:8d:6f:8d:5e:80:9f:0b:3c:20:01: 42:e2:26:cb:c1:84:b4:22:b7:f7:e0:c2:7f:02:f3: f5:f3:df:bf:85:4d:36:a5:d0:80:98:fe:e8:d0:b4: 76:7d:0c:76:2d:40:7a:9c:5e:c1:5f:e7:9b:ee:8e: bd:27:9e:ce:c0:e6:ab:29:44:0b:1f:58:9a:2d:f2: 18:98:84:a8:6c:00:de:c5:dd:16:c3:22:c5:61:f4: c2:03:46:32:a9:09:d1:be:39:02:35:b2:2b:b6:1f: a1:7f:c1:03:7f:f9:fd:77:e8:d5:b2:51:d3:88:6c: 2d:cb:98:7d:8f:ac:c5:9e:5c:81:84:d8:7b:e6:33: 94:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:12:DF:D8:FF:98:E4:FE:22:DA:72:DD:E1:86:03:3B:64:23:12:86 X509v3 Authority Key Identifier: keyid:DB:2D:80:60:8B:2B:63:CB:D1:36:6C:12:41:26:27:07:00:57:AE:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:8d:c7:1b:f1:d4:9a:e6:89:06:2f:4b:59:f6:6c:55:52:9d: 99:4f:33:a9:f5:7f:f4:ac:9a:b2:52:ae:cf:b0:36:15:ab:9c: c6:8a:e6:15:38:04:19:a7:a1:c0:36:0f:2d:3a:15:a6:99:95: de:15:71:bd:fb:ec:dd:5a:13:e4:d4:94:00:eb:db:59:ff:51: bd:93:f6:43:46:9c:cf:a7:a9:cf:9b:b3:d8:62:81:ce:ce:5e: 71:05:4e:9c:e8:6e:2e:ab:0e:c3:91:6b:1c:cd:3e:1f:e4:b6: d9:db:8e:d0:0a:06:a8:b0:e6:f3:63:e0:16:7d:65:0a:80:2a: 61:82:e3:d5:d9:c8:1b:77:c1:b9:2a:80:0a:8a:53:7e:ec:f0: 1f:67:4a:f9:8d:bf:71:15:9d:e4:0f:b7:b9:b4:ec:6e:19:09: de:a8:a1:4a:68:0f:81:07:42:b7:7a:d2:46:6f:8f:93:8a:e2: 3f:f8:c2:00:3d:99:21:12:3d:c8:cf:a0:76:3c:02:48:81:14: d4:60:90:71:8a:8f:b0:5d:65:cd:e2:7b:a9:29:7f:db:bc:c8: 9a:84:d7:35:49:67:d5:6e:90:ed:17:49:27:9b:de:ec:f2:19: 27:a1:77:f2:0d:67:57:3b:19:d5:d9:1d:13:40:4d:52:4b:d8: 78:9d:da:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MENGODExMC8GA1UEBRMoREIyRDgwNjA4QjJCNjNDQkQxMzY2QzEyNDEyNjI3MDcw MDU3QUUyNjAeFw0yNjA5MjUwOTIwMDVaFw0yNjEwMDIwOTIwMDVaMBgxFjAUBgNV BAMTDTZhYjYzY2M1LTZhYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe3ADsdLaiEEwzx5gtFBJ7/f2TSskZkLPp5hnLHXOiQaHcbnOJeUHCQuecbae2 h5k9Tmy7abww5ZIwpJJSPTy/v0ga5YrPD4miHuRX27MTBqYt1/hWlXC6mQvtWJED S00HPZPHt/gPpPdSkqJALHXlCCc6dp+ENgWIFfu1jW+NXoCfCzwgAULiJsvBhLQi t/fgwn8C8/Xz37+FTTal0ICY/ujQtHZ9DHYtQHqcXsFf55vujr0nns7A5qspRAsf WJot8hiYhKhsAN7F3RbDIsVh9MIDRjKpCdG+OQI1siu2H6F/wQN/+f136NWyUdOI bC3LmH2PrMWeXIGE2HvmM5SrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmBLf2P+Y 5P4i2nLd4YYDO2QjEoYwHwYDVR0jBBgwFoAU2y2AYIsrY8vRNmwSQSYnBwBXriYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwQ0Y4Lzk3NUIwQ0ZDQTg1 NDExRjFCODczNEZDMzNGMTFGOTcwLzJ5MkFZSXNyWTh2Uk5td1NRU1luQndCWHJp WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnkyQVlJc3JZOHZSTm13U1FTWW5Cd0JYcmlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw Q0Y4Lzk3NUIwQ0ZDQTg1NDExRjFCODczNEZDMzNGMTFGOTcwLzJ5MkFZSXNyWTh2 Uk5td1NRU1luQndCWHJpWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBIjccb8dSa5okGL0tZ9mxVUp2ZTzOp9X/0rJqyUq7PsDYVq5zGiuYVOAQZp6HA Ng8tOhWmmZXeFXG9++zdWhPk1JQA69tZ/1G9k/ZDRpzPp6nPm7PYYoHOzl5xBU6c 6G4uqw7DkWsczT4f5LbZ247QCgaosObzY+AWfWUKgCphguPV2cgbd8G5KoAKilN+ 7PAfZ0r5jb9xFZ3kD7e5tOxuGQneqKFKaA+BB0K3etJGb4+TiuI/+MIAPZkhEj3I z6B2PAJIgRTUYJBxio+wXWXN4nupKX/bvMiahNc1SWfVbpDtF0knm97s8hknoXfy DWdXOxnV2R0TQE1SS9h4ndrT -----END CERTIFICATE-----Generated at Sun Sep 27 10:18:13 2026 by rpki-client