$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json) Hash identifier: ACwY/bsBEOMm1tIuzpoqhfhpYuRGKXF7Js9v3U2quPA= Subject key identifier: 71:3F:3D:70:20:89:B9:28:A7:FF:F7:FF:05:43:DA:93:B0:9C:48:29 Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft Manifest number: 0251 Signing time: Fri 25 Sep 2026 02:35:03 +0000 Manifest this update: Fri 25 Sep 2026 02:35:02 +0000 Manifest next update: Fri 02 Oct 2026 02:35:02 +0000 Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: eW33ozEMFtHw2kgxnSScAulCAZIf+f+inhLC5QIBY/k=) 2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: k/wrk+71dTC2xpAfXzlheReLA9aT4ZuDhkK6xEFQumE=) 3: 585745526BC111EEA163E774C4F9AE02.roa (hash: jWFAA3hjLn4/pUtGRdYAlT0inc3UozSJNCSTFiimgaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: Sep 25 02:35:02 2026 GMT Not After : Oct 2 02:35:02 2026 GMT Subject: CN=6ab5ddd7-0488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:46:f0:15:04:74:bc:09:99:93:4f:0d:78: 24:ef:35:72:4f:94:27:c1:fb:1e:37:2e:d9:40:46: 11:dc:5d:e8:f2:e7:4a:6a:68:95:55:d9:49:ae:7f: d2:15:11:87:e4:e0:82:bd:fd:2b:ad:39:12:ae:c7: ce:3a:70:3d:9e:75:f6:9b:9c:ab:87:f9:ce:6e:cf: 62:14:4d:3b:35:75:e9:86:22:ef:7a:65:0b:f0:cd: 08:56:20:45:55:41:6e:e7:10:38:b5:2a:a8:3a:8c: 6e:3f:e9:58:86:63:8b:ce:12:8b:a8:17:66:c1:df: 22:43:30:cb:71:da:c4:dc:cb:29:9a:14:13:5d:29: fc:1e:e3:31:36:3f:80:74:c6:e9:7e:0d:c0:b3:ac: 74:84:1d:d3:7f:fe:9d:06:61:9e:22:5f:25:b4:81: ea:28:ab:c2:03:81:9f:b7:41:fa:7c:04:4f:29:e5: 8f:b4:ad:26:77:f9:ee:5d:47:e5:d3:4b:2d:78:05: 24:af:6c:c0:7f:67:72:ce:5f:3e:8a:9f:1a:b2:5c: 17:91:dd:9b:49:a1:a3:2d:a5:ea:d1:e1:34:0b:4a: ca:25:22:36:b0:38:b1:6f:74:1e:08:e7:f8:b3:90: b3:84:09:77:3d:c4:4e:3b:50:32:78:e7:da:41:12: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3F:3D:70:20:89:B9:28:A7:FF:F7:FF:05:43:DA:93:B0:9C:48:29 X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:9d:59:52:68:94:8a:88:54:38:22:df:c8:5c:90:9f:32:50: 6c:6c:73:9e:7e:c0:02:7b:27:7b:11:8d:90:e5:d7:fb:4d:c9: f1:3d:33:a6:c0:7b:f7:e4:c9:7c:d8:4a:80:4c:19:34:1f:4c: 36:8a:23:56:d3:3b:64:0a:6c:08:d4:d3:de:72:40:17:f5:0a: 5b:c5:07:d6:03:8a:e9:59:f2:8c:70:b2:f1:26:c3:58:f7:e7: c8:e8:c7:42:57:38:56:1e:17:56:e4:14:43:90:14:8c:fb:47: b6:77:34:48:c0:0e:f7:e0:fb:e5:c0:8d:23:e3:88:f5:44:55: 5a:03:4d:95:a6:b8:bb:b6:aa:2a:a5:1f:2f:b5:97:33:bd:2f: 47:ba:f2:4a:4e:d8:f7:60:9d:78:99:f1:69:d6:32:4c:67:3a: 16:67:a6:35:b2:50:c4:cc:fb:9d:12:e1:bf:ae:ad:87:51:eb: 19:23:79:98:04:16:4c:e4:30:90:1c:f9:e5:de:bd:cc:28:ae: 05:c5:4f:ba:45:36:68:52:60:f4:dc:34:51:b2:28:30:0d:c4: d3:41:85:dc:1b:47:b5:14:60:29:63:31:ed:a2:6a:4e:8a:84: 94:76:14:d0:7b:d6:21:15:82:6a:ee:c3:14:8b:29:09:cf:9c: ec:f4:f4:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC REJCMzVGM0QwHhcNMjYwOTI1MDIzNTAyWhcNMjYxMDAyMDIzNTAyWjAYMRYwFAYD VQQDEw02YWI1ZGRkNy0wNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDhG8BUEdLwJmZNPDXgk7zVyT5QnwfseNy7ZQEYR3F3o8udKamiVVdlJrn/S FRGH5OCCvf0rrTkSrsfOOnA9nnX2m5yrh/nObs9iFE07NXXphiLvemUL8M0IViBF VUFu5xA4tSqoOoxuP+lYhmOLzhKLqBdmwd8iQzDLcdrE3MspmhQTXSn8HuMxNj+A dMbpfg3As6x0hB3Tf/6dBmGeIl8ltIHqKKvCA4Gft0H6fARPKeWPtK0md/nuXUfl 00steAUkr2zAf2dyzl8+ip8aslwXkd2bSaGjLaXq0eE0C0rKJSI2sDixb3QeCOf4 s5CzhAl3PcROO1AyeOfaQRIrNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHE/PXAg ibkop//3/wVD2pOwnEgpMB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo T2JlMkR6bklpMG05dXpYejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApp1ZUmiUiohUOCLfyFyQnzJQbGxznn7AAnsnexGNkOXX+03J8T0zpsB79+TJ fNhKgEwZNB9MNoojVtM7ZApsCNTT3nJAF/UKW8UH1gOK6VnyjHCy8SbDWPfnyOjH Qlc4Vh4XVuQUQ5AUjPtHtnc0SMAO9+D75cCNI+OI9URVWgNNlaa4u7aqKqUfL7WX M70vR7rySk7Y92CdeJnxadYyTGc6FmemNbJQxMz7nRLhv66th1HrGSN5mAQWTOQw kBz55d69zCiuBcVPukU2aFJg9Nw0UbIoMA3E00GF3BtHtRRgKWMx7aJqToqElHYU 0HvWIRWCau7DFIspCc+c7PT02A== -----END CERTIFICATE-----Generated at Fri Sep 25 18:16:15 2026 by rpki-client