$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: nX7WLarDvD0M4YKkywGMWPpG3FjpvIzkAbaL+3Wtv+s= Subject key identifier: 1A:E3:6C:39:6B:B3:0E:F5:AF:6D:88:16:5A:CE:D6:32:7D:1A:CE:D2 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 0320 Signing time: Wed 23 Sep 2026 00:41:13 +0000 Manifest this update: Wed 23 Sep 2026 00:41:13 +0000 Manifest next update: Wed 30 Sep 2026 00:41:13 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: 03EwVBC5Rfow756Nl2di4ZPXIGJXWry6AJ8TFTBB+cE=) 2: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: e26HjI6IThHSTcyiS5wewUgNVLH1ZtA87nwKAQOfEN8=) 3: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8=) 4: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Sep 23 00:41:13 2026 GMT Not After : Sep 30 00:41:13 2026 GMT Subject: CN=6ab32029-1a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:ef:e0:6b:33:34:f8:1b:9e:ba:d0:09:9a: 2c:70:d1:cc:1e:82:09:ca:66:be:82:a6:38:88:c9: 05:b7:b8:46:39:f0:69:48:7f:95:a5:0f:ae:36:0f: 3b:07:35:f1:ba:12:a7:59:4d:1e:61:5e:a5:1b:92: 14:fc:d9:a9:11:14:6e:ad:85:9b:57:0d:de:48:84: 6a:9e:60:b9:61:13:52:ea:98:29:9b:a3:40:de:3d: 4c:44:6d:26:56:d0:1a:3e:b3:96:6e:c3:b8:51:c1: 02:db:79:7f:ba:f6:aa:b7:52:c8:42:2d:23:8f:37: 10:0f:3e:c4:f4:71:b5:7d:a7:08:9a:05:a2:9d:9d: e7:40:1b:a9:2a:17:a5:80:c6:a6:e0:25:5c:68:27: b4:6a:2d:df:08:9c:dd:41:c1:fe:47:db:d0:46:5a: f6:48:dc:dc:23:6e:28:f3:2b:0f:cc:47:78:45:38: 45:51:82:ed:02:e5:46:c9:08:34:2c:28:c7:be:c8: 26:ce:20:f3:9e:d5:d1:e5:ca:1c:e4:0a:8f:bc:c2: 17:54:72:ba:f1:f6:5f:6c:b0:e5:fa:3c:ac:d9:b6: 82:9c:bc:6f:ef:42:b6:33:3c:92:f3:85:78:67:2a: 14:ba:c1:ee:6a:55:7a:4a:53:21:f0:58:a8:71:b5: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E3:6C:39:6B:B3:0E:F5:AF:6D:88:16:5A:CE:D6:32:7D:1A:CE:D2 X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:33:61:5f:a3:89:aa:d3:9a:01:de:e4:e1:1e:30:d6:8d:7f: 5b:0b:94:b9:5f:1c:10:54:3e:16:c1:80:07:5c:09:67:24:58: fa:34:8a:fd:74:41:55:22:a8:42:6d:b2:0e:32:9b:e4:b8:b5: 00:95:85:e9:0a:5e:6f:b2:ec:7c:07:20:89:06:f6:af:c5:6c: 6e:73:f9:b4:59:43:a1:63:bd:20:16:c7:92:a8:fb:7c:4c:77: 0c:84:ce:b7:40:d4:f9:de:05:af:ca:a7:17:50:7d:96:60:a7: f6:ec:f0:ff:db:fc:10:8e:32:b6:db:2e:0b:b9:10:6d:6b:b1: 89:b8:53:0c:d3:ed:7d:9d:55:40:3b:70:c8:db:95:99:14:33: 24:d9:40:ea:d9:df:42:89:f3:92:1f:93:a1:20:55:d2:33:b8: f4:12:71:29:05:20:07:00:d1:f4:90:99:1f:81:d3:47:93:84: f6:42:80:ed:00:3e:3b:a4:32:09:76:f9:a4:fb:68:63:01:24: be:72:a5:e1:bf:b6:5b:64:87:85:75:d8:ef:ea:61:19:02:ed: 9a:7d:a8:15:37:c2:85:85:b1:10:ff:ea:8c:ec:8a:75:3c:1f: 19:0d:72:3f:d9:71:7f:14:d2:6b:fb:65:08:e0:6a:b9:58:7e: b1:33:f6:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYwOTIzMDA0MTEzWhcNMjYwOTMwMDA0MTEzWjAYMRYwFAYD VQQDEw02YWIzMjAyOS0xYTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvHv4GszNPgbnrrQCZoscNHMHoIJyma+gqY4iMkFt7hGOfBpSH+VpQ+uNg87 BzXxuhKnWU0eYV6lG5IU/NmpERRurYWbVw3eSIRqnmC5YRNS6pgpm6NA3j1MRG0m VtAaPrOWbsO4UcEC23l/uvaqt1LIQi0jjzcQDz7E9HG1facImgWinZ3nQBupKhel gMam4CVcaCe0ai3fCJzdQcH+R9vQRlr2SNzcI24o8ysPzEd4RThFUYLtAuVGyQg0 LCjHvsgmziDzntXR5coc5AqPvMIXVHK68fZfbLDl+jys2baCnLxv70K2MzyS84V4 ZyoUusHualV6SlMh8FiocbV0XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrjbDlr sw71r22IFlrO1jJ9Gs7SMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUzNhX6OJqtOaAd7k4R4w1o1/WwuUuV8cEFQ+FsGAB1wJZyRY+jSK/XRBVSKo Qm2yDjKb5Li1AJWF6Qpeb7LsfAcgiQb2r8VsbnP5tFlDoWO9IBbHkqj7fEx3DITO t0DU+d4Fr8qnF1B9lmCn9uzw/9v8EI4yttsuC7kQbWuxibhTDNPtfZ1VQDtwyNuV mRQzJNlA6tnfQonzkh+ToSBV0jO49BJxKQUgBwDR9JCZH4HTR5OE9kKA7QA+O6Qy CXb5pPtoYwEkvnKl4b+2W2SHhXXY7+phGQLtmn2oFTfChYWxEP/qjOyKdTwfGQ1y P9lxfxTSa/tlCOBquVh+sTP2RQ== -----END CERTIFICATE-----Generated at Wed Sep 23 03:38:49 2026 by rpki-client