$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: WwYF12GD5pSDN4xFBovFauuljhvb9ppiczITR87bUw4= Subject key identifier: 15:9E:4D:32:EF:C9:E9:F6:DE:2A:9B:A7:4A:25:C8:D0:A0:80:87:D3 Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: 0162 Signing time: Mon 05 Oct 2026 05:24:24 +0000 Manifest this update: Mon 05 Oct 2026 05:24:23 +0000 Manifest next update: Mon 12 Oct 2026 05:24:23 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: 5xZf267eAQNLneXfB7OIsXeNulPM/cWHN+CUkTT/OfU=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: Mbaq1JxQwVcFP87z4eBI+1tbhFSk65AD4tx8mWL3NcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 05:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: Oct 5 05:24:23 2026 GMT Not After : Oct 12 05:24:23 2026 GMT Subject: CN=6ac33488-41d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:04:a8:a4:20:f7:37:de:2a:ec:88:ed:87: d6:d3:03:ec:d2:46:46:fe:db:08:12:bd:aa:8b:e7: 79:11:1b:0f:cf:05:83:b4:fc:7f:de:21:5c:3f:53: 66:78:17:c0:c8:d3:49:30:15:e6:12:80:f2:1b:3f: 96:5c:86:c1:1e:46:17:75:c9:c9:26:c5:f2:44:b3: 32:ad:bf:39:24:2c:0d:c2:1b:45:d7:2c:1d:65:e7: ae:ac:ae:68:63:2e:54:8b:72:a1:02:dc:fb:2e:be: 22:44:dd:71:ec:72:9b:90:a7:25:ee:80:1a:44:1e: 0d:b2:d3:9e:96:93:84:bf:f8:44:2b:94:b9:46:b7: 16:3a:6d:37:24:93:1f:e2:ce:78:a0:f0:75:f8:5b: ff:28:46:fc:4a:a4:c9:34:41:6c:d4:b1:dc:dc:2a: 26:64:de:5b:80:d9:25:d1:20:1d:9e:b2:17:6c:74: 0e:d3:61:11:83:34:36:6c:16:c6:fe:d8:0f:4a:d7: eb:83:8e:1d:8f:a5:0f:27:6f:8d:6e:d9:c5:e0:db: cf:75:55:b1:d2:41:a8:ea:5f:3e:cc:ca:ca:56:9f: 80:8b:a7:e4:78:ac:65:87:1d:b9:85:40:6d:11:57: 94:0e:ff:32:05:c4:d1:17:7d:a3:08:32:8e:5d:ae: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9E:4D:32:EF:C9:E9:F6:DE:2A:9B:A7:4A:25:C8:D0:A0:80:87:D3 X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:20:00:89:3b:25:cf:4f:10:24:9b:26:81:d1:54:6e:52:e4: 6e:2c:18:b5:a7:fc:76:4b:07:35:2f:ad:c6:7c:15:2b:97:9a: 54:51:07:2e:18:75:31:f3:74:48:b0:39:31:2a:0b:8d:b6:d1: f4:3c:d7:23:70:15:74:2b:b3:a8:4f:d8:80:67:12:52:f4:3d: 47:cd:ef:ad:a4:99:73:11:dd:a0:9b:a6:20:aa:15:c7:56:b9: f0:bb:ff:08:a1:3d:39:fa:56:76:54:7c:88:ce:91:ae:24:58: 47:90:84:21:89:f2:b0:e4:be:21:f6:32:c4:dc:35:59:ef:59: 8f:3e:06:6a:86:94:bf:b6:d6:39:ab:8f:08:36:04:81:36:32: f3:3d:2b:c5:39:fa:07:24:3f:f4:86:9c:c6:fe:96:a1:d8:c5: 1d:0e:8c:58:42:40:0e:8a:68:17:8d:50:54:86:a2:be:6f:a1: ac:39:b5:82:fa:ce:21:ef:e9:bc:28:65:3d:b7:0e:5d:e2:cf: 0b:83:14:1b:35:0d:d4:6e:cb:d7:cc:ed:ec:94:af:a0:1e:54: bb:5b:e1:3c:9b:3f:50:9e:be:f7:77:22:06:1b:56:5b:b2:35: b2:89:2a:f4:3a:25:94:7f:f5:ab:eb:97:e3:2a:09:49:2c:ad: a1:03:c1:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKERCM0RGRDg2Q0VCRkVBRUQzQUFGMTVERUFFRTY5NjUy MzQ3NDZBMjkwHhcNMjYxMDA1MDUyNDIzWhcNMjYxMDEyMDUyNDIzWjAYMRYwFAYD VQQDEw02YWMzMzQ4OC00MWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstYEqKQg9zfeKuyI7YfW0wPs0kZG/tsIEr2qi+d5ERsPzwWDtPx/3iFcP1Nm eBfAyNNJMBXmEoDyGz+WXIbBHkYXdcnJJsXyRLMyrb85JCwNwhtF1ywdZeeurK5o Yy5Ui3KhAtz7Lr4iRN1x7HKbkKcl7oAaRB4NstOelpOEv/hEK5S5RrcWOm03JJMf 4s54oPB1+Fv/KEb8SqTJNEFs1LHc3ComZN5bgNkl0SAdnrIXbHQO02ERgzQ2bBbG /tgPStfrg44dj6UPJ2+NbtnF4NvPdVWx0kGo6l8+zMrKVp+Ai6fkeKxlhx25hUBt EVeUDv8yBcTRF32jCDKOXa6n9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWeTTLv yen23iqbp0olyNCggIfTMB8GA1UdIwQYMBaAFNs9/YbOv+rtOq8V3q7mllI0dGop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC9BNzhGMUIxMkE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1MDZyeFhlcnVhV1VqUjBh aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC9BNzhGMUIxMkE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1 MDZyeFhlcnVhV1VqUjBhaWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIiAAiTslz08QJJsmgdFUblLkbiwYtaf8dksHNS+txnwVK5eaVFEHLhh1MfN0 SLA5MSoLjbbR9DzXI3AVdCuzqE/YgGcSUvQ9R83vraSZcxHdoJumIKoVx1a58Lv/ CKE9OfpWdlR8iM6RriRYR5CEIYnysOS+IfYyxNw1We9Zjz4GaoaUv7bWOauPCDYE gTYy8z0rxTn6ByQ/9Iacxv6WodjFHQ6MWEJADopoF41QVIaivm+hrDm1gvrOIe/p vChlPbcOXeLPC4MUGzUN1G7L18zt7JSvoB5Uu1vhPJs/UJ6+93ciBhtWW7I1sokq 9DollH/1q+uX4yoJSSytoQPBqQ== -----END CERTIFICATE-----Generated at Tue Oct 6 22:15:57 2026 by rpki-client