$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft File: 2OexX5y5FnTlEn_UBtfZ5xjgirA.mft (raw, json) Hash identifier: eB36xk2HJ3uvj16NV0cKmdVIlo0sNN7wui07bwJ9kJc= Subject key identifier: C5:15:FB:77:F4:33:B9:7F:9A:DE:74:AF:3E:6E:97:52:44:DD:2B:79 Authority key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0 Certificate issuer: /CN=A917E27F/serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft Manifest number: D8 Signing time: Wed 23 Sep 2026 06:28:10 +0000 Manifest this update: Wed 23 Sep 2026 06:28:10 +0000 Manifest next update: Wed 30 Sep 2026 06:28:10 +0000 Files and hashes: 1: 2OexX5y5FnTlEn_UBtfZ5xjgirA.crl (hash: f65NcHP3D8xi+unKRathttiSyvErnoJuTPnOLxYdleI=) 2: 4197AB74735611F080D68151C4F9AE02.roa (hash: kivBXOd2lZU5WJsdaMJuH7XTLp3xzvhG27t6AlFFi0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0 Validity Not Before: Sep 23 06:28:10 2026 GMT Not After : Sep 30 06:28:10 2026 GMT Subject: CN=6ab3717a-60f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:15:2a:1f:fa:c7:18:28:8d:dd:8b:85:46:f2: ce:e5:76:6d:b1:7b:e8:8d:1a:f2:18:be:33:eb:c4: 2c:f8:a6:26:0b:cb:59:b0:6e:b8:aa:83:f0:4e:50: be:92:5f:1a:3f:b3:c4:af:61:01:90:41:e1:b7:b3: 7b:78:44:88:16:f1:4d:16:48:d0:c4:4a:c5:4e:a5: 13:2b:76:5a:ac:96:81:63:a9:e8:ec:af:98:23:9f: 3d:56:9d:07:77:09:0c:2f:59:23:b3:da:37:5e:3b: 68:52:d1:67:66:a7:ea:f0:9c:4a:3b:ec:ae:7b:02: 58:d0:ba:1e:82:42:ea:68:75:1e:1c:6f:27:20:da: 3d:77:d8:e9:9a:64:52:03:5d:be:b4:85:8e:56:7f: f8:e0:d8:9d:90:2c:24:18:ff:53:b8:21:5f:2f:bc: 5a:c7:f8:8d:8e:51:a8:6a:76:87:46:b7:58:32:0f: ff:99:3b:69:ca:b6:65:e3:4d:bc:10:88:52:68:cb: b8:fb:e0:f6:41:72:0a:83:8a:9c:bd:96:e9:cd:c8: be:fe:2f:06:0d:c4:0f:14:42:d8:23:6d:13:a0:ee: c4:3d:7b:b8:b0:1e:68:33:27:fe:5c:95:56:ac:83: 84:f9:32:70:37:88:9d:20:09:aa:59:67:a7:00:fc: cf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:15:FB:77:F4:33:B9:7F:9A:DE:74:AF:3E:6E:97:52:44:DD:2B:79 X509v3 Authority Key Identifier: keyid:D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:fb:d8:50:d4:65:ff:b8:71:03:8a:0e:cb:30:42:67:24:b0: fd:18:c3:74:0b:e9:b5:98:68:23:cd:e8:4b:80:c3:af:64:b9: 0f:5f:8b:3b:b6:b2:73:58:95:e6:23:6f:23:96:ab:4f:1c:9f: 99:10:a6:e7:65:64:82:59:8e:25:b4:c5:08:aa:7c:f6:cd:86: 82:57:a7:ea:d2:55:4a:7c:63:a7:ea:ee:c8:91:85:6a:2a:b4: 2c:95:6c:e1:ca:19:67:65:33:75:13:2b:ca:65:f3:72:5a:87: 2a:16:e0:8b:64:09:16:98:89:71:c9:81:c2:cd:4b:2a:14:68: ff:1c:7e:35:77:ab:0a:3a:b5:94:3c:ee:41:49:8c:66:1e:b5: a8:65:b7:ae:80:ac:20:81:1a:51:72:7f:7a:c0:88:ac:0a:7e: 79:23:a4:72:51:08:e0:58:9d:d1:d8:1e:11:4b:5c:52:02:00: ef:b0:d9:82:cc:43:20:0b:b2:3f:4c:3c:d1:5f:0a:e9:ee:09: b3:48:ce:f8:88:05:b4:86:76:b9:b1:73:a7:b0:02:0f:c6:55: c2:f5:02:fa:93:80:9d:fb:71:93:b4:f6:7c:8e:b8:88:84:41: 2a:86:ec:c1:0e:cf:41:6d:18:57:2e:ea:61:89:73:c0:30:75: dd:57:ae:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UyN0YxMTAvBgNVBAUTKEQ4RTdCMTVGOUNCOTE2NzRFNTEyN0ZENDA2RDdEOUU3 MThFMDhBQjAwHhcNMjYwOTIzMDYyODEwWhcNMjYwOTMwMDYyODEwWjAYMRYwFAYD VQQDEw02YWIzNzE3YS02MGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xUqH/rHGCiN3YuFRvLO5XZtsXvojRryGL4z68Qs+KYmC8tZsG64qoPwTlC+ kl8aP7PEr2EBkEHht7N7eESIFvFNFkjQxErFTqUTK3ZarJaBY6no7K+YI589Vp0H dwkML1kjs9o3XjtoUtFnZqfq8JxKO+yuewJY0LoegkLqaHUeHG8nINo9d9jpmmRS A12+tIWOVn/44NidkCwkGP9TuCFfL7xax/iNjlGoanaHRrdYMg//mTtpyrZl4028 EIhSaMu4++D2QXIKg4qcvZbpzci+/i8GDcQPFELYI20ToO7EPXu4sB5oMyf+XJVW rIOE+TJwN4idIAmqWWenAPzPHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUV+3f0 M7l/mt50rz5ul1JE3St5MB8GA1UdIwQYMBaAFNjnsV+cuRZ05RJ/1AbX2ecY4Iqw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTI3Ri83NjlEMkQ2Njcy QjcxMUYwOUMwNDY5MERDNEY5QUUwMi8yT2V4WDV5NUZuVGxFbl9VQnRmWjV4amdp ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJPZXhYNXk1Rm5UbEVuX1VCdGZaNXhqZ2lyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTI3Ri83NjlEMkQ2NjcyQjcxMUYwOUMwNDY5MERDNEY5QUUwMi8yT2V4WDV5NUZu VGxFbl9VQnRmWjV4amdpckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr/vYUNRl/7hxA4oOyzBCZySw/RjDdAvptZhoI83oS4DDr2S5D1+LO7ayc1iV 5iNvI5arTxyfmRCm52VkglmOJbTFCKp89s2Gglen6tJVSnxjp+ruyJGFaiq0LJVs 4coZZ2UzdRMrymXzclqHKhbgi2QJFpiJccmBws1LKhRo/xx+NXerCjq1lDzuQUmM Zh61qGW3roCsIIEaUXJ/esCIrAp+eSOkclEI4Fid0dgeEUtcUgIA77DZgsxDIAuy P0w80V8K6e4Js0jO+IgFtIZ2ubFzp7ACD8ZVwvUC+pOAnftxk7T2fI64iIRBKobs wQ7PQW0YVy7qYYlzwDB13Veuvg== -----END CERTIFICATE-----Generated at Thu Sep 24 23:41:29 2026 by rpki-client