$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json) Hash identifier: i9qkFRYR3oTl0SAkgkio6sU+MCrfGwad1oRIQozZeHA= Subject key identifier: 03:F7:59:2B:2D:23:C7:8D:6F:61:07:B6:3B:F8:AC:1A:9E:BA:F7:AE Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft Manifest number: 01B8 Signing time: Sun 27 Sep 2026 04:26:22 +0000 Manifest this update: Sun 27 Sep 2026 04:26:21 +0000 Manifest next update: Sun 04 Oct 2026 04:26:21 +0000 Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: lUuIC8BIH/5pT7t5eEtnZZyhj3gp1Hcfu1Y5tpa2nE0=) 2: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: U+JPeLwDFc/9KD5pjtuqdCZiF9ijWo40ru9xcuKUWDA=) 3: 6923942E252711EF948A5E18C4F9AE02.roa (hash: O1muA/0EJVSd9L8bh/HkeYxU93aOIw8GOb3fRQGF3F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Sep 27 04:26:21 2026 GMT Not After : Oct 4 04:26:21 2026 GMT Subject: CN=6ab89aee-d99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:e6:7e:5a:f3:be:c1:54:b6:f3:1b:8e:7b: bc:69:47:25:2f:7a:98:4f:ee:34:ad:b1:60:28:a0: 26:8f:c8:96:4f:85:90:ee:60:1c:a2:b2:56:a7:06: 83:0a:8c:a8:4a:b6:bc:e9:79:17:25:f0:5f:5f:f0: 69:57:76:fb:76:27:73:59:37:08:79:52:b2:22:ad: 65:95:d9:e9:f4:44:db:b1:1c:ea:ef:e0:e6:ac:80: e3:0d:5b:ae:40:a7:58:3f:2c:5a:3d:66:8c:04:4b: 85:4a:ac:f2:75:cf:a9:16:47:ba:a5:f2:3b:c5:cb: 02:fe:2d:ec:35:98:c6:90:6e:6d:34:59:73:0b:c7: 94:4f:d4:d7:83:cb:a0:e0:d7:6b:14:cd:10:29:68: b9:df:83:5c:d7:16:20:c0:10:f7:84:61:ba:d0:15: 95:da:5d:10:30:f4:d1:f6:c1:95:ba:57:8b:23:bc: 07:66:1a:2a:22:50:7c:f0:1d:e0:cd:e1:f8:4c:17: b9:19:7e:5a:a4:59:a1:1f:8e:b8:5e:0c:2d:db:d3: f1:6d:8d:5b:87:d2:d3:60:d7:ac:67:95:55:e2:26: 28:f1:41:a3:de:a5:10:b2:44:f4:72:d5:2d:00:83: 35:62:7d:1c:b8:f4:52:ee:2d:df:55:0f:0e:46:2f: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F7:59:2B:2D:23:C7:8D:6F:61:07:B6:3B:F8:AC:1A:9E:BA:F7:AE X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d5:2f:ad:a8:80:90:e1:5a:09:10:2d:6a:85:88:4f:be:19: e6:f0:80:5c:34:58:9c:05:1d:ef:13:fa:33:da:f1:b9:90:77: 5d:2a:43:2c:df:c5:5f:10:9a:d8:93:ee:6d:9c:0c:cf:b6:17: de:85:a5:63:f8:5f:c6:72:bf:39:26:f8:51:10:af:01:ab:30: b4:ac:2c:a0:99:39:3e:1e:0f:8d:61:89:db:9f:5b:ad:2b:8e: e8:60:71:d1:7e:e2:64:96:ce:d8:dc:75:d5:14:7b:64:c1:61: c2:b1:20:a1:e2:9c:3c:08:f2:38:e6:e0:37:ba:ec:e6:20:d0: 07:a4:5f:19:f3:af:8a:ae:36:27:85:ed:fa:c4:59:e4:17:64: 2b:3c:2d:f7:2e:f4:5f:b2:d6:43:2e:d5:e4:75:3d:90:04:2e: cb:01:3b:c2:84:63:98:52:68:d3:4d:50:e2:fb:55:39:b5:d4: e5:7a:e9:15:12:e8:b5:4b:97:49:6f:7b:b6:02:32:8c:2c:2c: c8:60:50:c3:eb:9f:9b:8f:8f:de:8f:3b:e0:7c:f9:ad:28:eb: 19:25:4e:12:7c:d0:73:cf:e0:7b:a2:5d:2e:18:ef:72:9b:4a: 3a:55:4c:e9:59:69:74:7d:48:56:aa:a5:94:7a:21:2c:f7:3d: a4:c9:d6:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE OTRGNTBBMUEwHhcNMjYwOTI3MDQyNjIxWhcNMjYxMDA0MDQyNjIxWjAYMRYwFAYD VQQDEw02YWI4OWFlZS1kOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLXmflrzvsFUtvMbjnu8aUclL3qYT+40rbFgKKAmj8iWT4WQ7mAcorJWpwaD CoyoSra86XkXJfBfX/BpV3b7didzWTcIeVKyIq1lldnp9ETbsRzq7+DmrIDjDVuu QKdYPyxaPWaMBEuFSqzydc+pFke6pfI7xcsC/i3sNZjGkG5tNFlzC8eUT9TXg8ug 4NdrFM0QKWi534Nc1xYgwBD3hGG60BWV2l0QMPTR9sGVuleLI7wHZhoqIlB88B3g zeH4TBe5GX5apFmhH464Xgwt29PxbY1bh9LTYNesZ5VV4iYo8UGj3qUQskT0ctUt AIM1Yn0cuPRS7i3fVQ8ORi8BJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAP3WSst I8eNb2EHtjv4rBqeuveuMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1 MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt bDdJb09hOGZwS3paVDFDaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb9UvraiAkOFaCRAtaoWIT74Z5vCAXDRYnAUd7xP6M9rxuZB3XSpDLN/FXxCa 2JPubZwMz7YX3oWlY/hfxnK/OSb4URCvAaswtKwsoJk5Ph4PjWGJ259brSuO6GBx 0X7iZJbO2Nx11RR7ZMFhwrEgoeKcPAjyOObgN7rs5iDQB6RfGfOviq42J4Xt+sRZ 5BdkKzwt9y70X7LWQy7V5HU9kAQuywE7woRjmFJo001Q4vtVObXU5XrpFRLotUuX SW97tgIyjCwsyGBQw+ufm4+P3o874Hz5rSjrGSVOEnzQc8/ge6JdLhjvcptKOlVM 6VlpdH1IVqqllHohLPc9pMnWFw== -----END CERTIFICATE-----Generated at Tue Sep 29 03:50:26 2026 by rpki-client