$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: Gv6+vLtb2au3wnMxWcvwWyyd0duRBh260IZn4Ft46Og= Subject key identifier: F5:6E:0D:B2:3B:85:A0:14:FD:D3:6E:5F:07:A8:81:4C:2C:37:F8:EF Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 025B Signing time: Wed 23 Sep 2026 02:07:06 +0000 Manifest this update: Wed 23 Sep 2026 02:07:05 +0000 Manifest next update: Wed 30 Sep 2026 02:07:05 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: 6Q3Ygut9HHenFuM/74FnH5r3wlYIyGIJpLRey4OV9Ek=) 2: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: rkU50GhDXfA75Ey44jTzfhYBTmuiCkN9RKfLyY3jdes=) 3: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: PEc8Q36ZmFJmCyC4ydlSensDrscyZNlNt/tGuMlxL2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: Sep 23 02:07:05 2026 GMT Not After : Sep 30 02:07:05 2026 GMT Subject: CN=6ab33449-4fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:f9:c0:76:6b:d0:28:b3:86:a3:28:e6:be: 09:ae:0a:71:b3:76:aa:9a:2b:6e:f5:d1:21:05:02: c4:83:17:d1:31:a6:02:89:f9:bd:96:79:96:7d:2f: 51:e1:5a:a3:ee:90:dc:db:f3:68:ce:04:65:29:99: f1:c4:1f:2d:37:8d:c8:b9:b0:e3:25:34:f2:c0:4c: 9f:a0:6a:d9:d3:d4:29:73:c4:85:6d:d7:d3:c7:1c: 5d:08:37:5a:64:c5:cf:15:cd:5c:67:09:aa:91:c6: 29:4c:9f:4d:22:08:50:83:5e:76:f9:f1:0a:b9:1b: 49:c8:bc:c8:13:f2:8d:fb:19:bf:c6:45:4f:02:0d: df:90:a2:db:7e:15:4d:6a:27:d6:c7:56:1a:32:4b: 38:28:0a:92:a3:e0:6e:c7:87:58:44:85:b0:35:29: c5:e8:f7:0a:d1:1c:96:9e:83:12:44:8e:06:d0:f2: ea:07:4d:04:80:3c:25:e3:6a:fa:94:01:dd:c9:52: c8:22:e0:d4:0c:3e:02:4f:ca:a6:1b:62:21:04:9d: 35:81:75:fa:ab:47:f1:34:82:3f:f1:f3:a1:99:eb: af:23:23:9c:4f:7d:02:51:23:d6:13:af:4a:13:48: f2:d3:4f:d8:29:90:76:42:21:d0:46:4f:7c:6a:78: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6E:0D:B2:3B:85:A0:14:FD:D3:6E:5F:07:A8:81:4C:2C:37:F8:EF X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c2:6c:eb:f2:0c:63:6f:08:a3:2f:53:35:7d:75:4a:4c:fd: f1:a1:e9:ed:b0:18:90:dc:57:6e:db:04:3b:8c:8c:d6:9d:ce: 79:96:a9:74:04:24:bf:31:6f:ee:7d:1b:6b:6a:4e:81:ce:69: 79:f3:7c:72:2b:04:03:f8:db:97:5d:d0:99:10:a6:dc:a0:f1: 0d:3c:cb:46:15:4f:c7:9d:2d:8a:06:c9:ed:c3:5e:a5:95:64: 13:3c:4d:2b:d2:89:c0:b6:22:b8:3c:ad:35:3f:4d:5f:d2:85: 60:67:1c:06:c8:05:03:1e:44:6e:62:8f:f7:3b:f3:a2:a4:bf: 77:69:d1:7d:c7:77:a4:14:2a:88:ac:74:86:51:be:ac:b1:22: bc:ee:f0:20:df:a0:e4:3b:a1:e3:8f:67:74:c4:45:51:4d:2f: 50:f1:d2:bf:6d:51:fb:3e:62:8c:4c:e2:07:ed:da:2c:3f:65: 52:44:4e:af:81:6d:bf:97:88:47:c4:e4:bf:15:7d:5b:f8:6b: a2:57:db:b6:bb:bf:cc:7b:8e:12:34:cb:93:03:fe:49:1e:ff: 56:54:17:52:9c:b7:91:26:d0:8b:2f:f5:bf:5c:f5:40:25:e2: ca:cf:ab:fe:a7:38:19:f7:60:a0:f9:77:32:c5:f4:44:d1:85: cf:0f:0d:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjYwOTIzMDIwNzA1WhcNMjYwOTMwMDIwNzA1WjAYMRYwFAYD VQQDEw02YWIzMzQ0OS00ZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySD5wHZr0CizhqMo5r4Jrgpxs3aqmitu9dEhBQLEgxfRMaYCifm9lnmWfS9R 4Vqj7pDc2/NozgRlKZnxxB8tN43IubDjJTTywEyfoGrZ09Qpc8SFbdfTxxxdCDda ZMXPFc1cZwmqkcYpTJ9NIghQg152+fEKuRtJyLzIE/KN+xm/xkVPAg3fkKLbfhVN aifWx1YaMks4KAqSo+Bux4dYRIWwNSnF6PcK0RyWnoMSRI4G0PLqB00EgDwl42r6 lAHdyVLIIuDUDD4CT8qmG2IhBJ01gXX6q0fxNII/8fOhmeuvIyOcT30CUSPWE69K E0jy00/YKZB2QiHQRk98ang7MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVuDbI7 haAU/dNuXweogUwsN/jvMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATMJs6/IMY28Ioy9TNX11Skz98aHp7bAYkNxXbtsEO4yM1p3OeZapdAQkvzFv 7n0ba2pOgc5pefN8cisEA/jbl13QmRCm3KDxDTzLRhVPx50tigbJ7cNepZVkEzxN K9KJwLYiuDytNT9NX9KFYGccBsgFAx5EbmKP9zvzoqS/d2nRfcd3pBQqiKx0hlG+ rLEivO7wIN+g5Duh449ndMRFUU0vUPHSv21R+z5ijEziB+3aLD9lUkROr4Ftv5eI R8TkvxV9W/hrolfbtru/zHuOEjTLkwP+SR7/VlQXUpy3kSbQiy/1v1z1QCXiys+r /qc4GfdgoPl3MsX0RNGFzw8N2g== -----END CERTIFICATE-----Generated at Wed Sep 23 22:27:18 2026 by rpki-client