$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft File: r2oY2zoHHvGMylvos1Qz31RPD7I.mft (raw, json) Hash identifier: pYz6c8oHu/nfAQSZgsOZKFjpvqENhVSot2MgrBQ89R4= Subject key identifier: 92:DE:AC:E3:49:55:5D:7A:18:BC:2E:A1:3E:F2:3C:F9:40:85:16:C4 Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2 Certificate issuer: /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2 Certificate serial: 0CBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft Manifest number: 0CB2 Signing time: Tue 22 Sep 2026 18:26:16 +0000 Manifest this update: Tue 22 Sep 2026 18:26:16 +0000 Manifest next update: Tue 29 Sep 2026 18:26:16 +0000 Files and hashes: 1: r2oY2zoHHvGMylvos1Qz31RPD7I.crl (hash: O913IOQi6MOew37A4qrbJfQ7xJemZpw/PNiIeZudSws=) 2: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (hash: MmjI1qOgCQW0MQsR9FuyWf1ShP4bmGGOftpuFS2VuLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E20E, serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2 Validity Not Before: Sep 22 18:26:16 2026 GMT Not After : Sep 29 18:26:16 2026 GMT Subject: CN=6ab2c848-11ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:38:ec:38:c8:7c:2a:b3:db:19:3e:68:1b: 32:cb:f3:88:ba:b5:bd:d6:ef:9b:2d:18:0d:33:1e: 6f:fa:d4:6c:30:3b:69:5f:54:75:24:f0:56:4f:8a: be:1d:53:f1:89:45:db:52:13:29:4b:25:4b:cd:a9: 69:97:f4:c2:49:fc:6c:b8:00:bd:be:9a:be:ba:5c: 6f:0b:00:ed:9f:e1:c6:83:11:f0:44:aa:62:c5:21: 12:65:f2:1b:89:50:31:74:58:6a:89:7b:cb:24:d4: 6a:4a:7c:c3:7e:d9:f8:3f:bc:ee:51:d7:0b:5d:77: 76:5e:a9:c7:d0:72:6b:0b:61:ae:f1:9f:ea:db:c1: 1c:bb:cf:a7:af:e2:f3:28:74:45:7e:5d:e3:2b:c2: 9e:e4:fa:3b:d2:41:21:66:29:8a:d3:e7:2a:e6:01: 20:cc:6b:cc:7d:2d:4d:9a:a3:35:3a:45:0b:cb:1f: c5:8e:f1:08:7f:5d:07:a1:18:72:3f:9f:07:05:6d: a1:32:b1:91:ef:7a:a9:17:8f:2f:64:66:da:5b:ee: 5f:53:02:a2:70:90:ca:52:da:ce:a9:4e:72:37:80: d4:4f:16:75:f4:d4:cc:57:55:c3:37:51:92:fe:95: bf:42:0a:6d:bb:f5:5d:41:8c:96:e8:c0:c3:cc:d9: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DE:AC:E3:49:55:5D:7A:18:BC:2E:A1:3E:F2:3C:F9:40:85:16:C4 X509v3 Authority Key Identifier: keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a4:6b:ff:5b:4a:7a:1e:df:d0:dd:55:43:bc:af:03:ea:ed: 88:7c:d7:52:f9:5c:cf:74:d5:84:fb:d3:00:fd:44:52:eb:f1: 8b:76:65:ad:cf:1c:d7:26:18:c3:64:7e:26:0a:c3:58:08:a3: 6a:94:7a:c0:ec:7a:b8:5d:f2:67:2f:b0:9f:3f:fb:28:31:cf: 0c:87:8b:09:2f:40:77:44:d8:5f:b5:5e:83:8e:a8:a8:13:bd: 0f:fe:54:65:3b:d2:01:84:08:5a:a5:0a:89:8e:34:e5:0b:27: 88:2d:19:9f:4e:1e:ab:d0:68:b8:25:e4:d9:c1:63:51:4c:42: c9:0b:87:61:4e:32:7d:46:a1:0c:cb:dd:45:41:2a:a8:01:42: 90:5f:c3:d6:b9:eb:c6:cd:d1:c5:0d:ea:ed:65:1c:c9:78:d0: 6b:6f:8f:23:e6:b6:56:82:1a:be:31:ba:e0:36:6b:8f:0e:f4: 62:69:9c:f2:96:28:b9:cd:36:2a:f9:89:c7:9b:05:5b:bf:e8: a1:9d:bf:54:5f:5f:89:41:c0:37:c9:3d:d4:a2:6a:3e:01:30: 81:ec:6c:5c:18:4b:49:f9:cb:cc:32:6a:6e:b3:a3:55:e7:1e: f1:72:85:6d:ca:c0:82:79:27:4c:9a:d5:5b:74:f9:a7:19:13: 69:68:5c:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyMEUxMTAvBgNVBAUTKEFGNkExOERCM0EwNzFFRjE4Q0NBNUJFOEIzNTQzM0RG NTQ0RjBGQjIwHhcNMjYwOTIyMTgyNjE2WhcNMjYwOTI5MTgyNjE2WjAYMRYwFAYD VQQDEw02YWIyYzg0OC0xMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEA47DjIfCqz2xk+aBsyy/OIurW91u+bLRgNMx5v+tRsMDtpX1R1JPBWT4q+ HVPxiUXbUhMpSyVLzalpl/TCSfxsuAC9vpq+ulxvCwDtn+HGgxHwRKpixSESZfIb iVAxdFhqiXvLJNRqSnzDftn4P7zuUdcLXXd2XqnH0HJrC2Gu8Z/q28Ecu8+nr+Lz KHRFfl3jK8Ke5Po70kEhZimK0+cq5gEgzGvMfS1NmqM1OkULyx/FjvEIf10HoRhy P58HBW2hMrGR73qpF48vZGbaW+5fUwKicJDKUtrOqU5yN4DUTxZ19NTMV1XDN1GS /pW/Qgptu/VdQYyW6MDDzNlEWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJLerONJ VV16GLwuoT7yPPlAhRbEMB8GA1UdIwQYMBaAFK9qGNs6Bx7xjMpb6LNUM99UTw+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTIwRS8yM0FBRDk4RTFG QzgxMUVBODQ1OTRGNUVDNEY5QUUwMi9yMm9ZMnpvSEh2R015bHZvczFRejMxUlBE N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Iyb1kyem9ISHZHTXlsdm9zMVF6MzFSUEQ3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTIwRS8yM0FBRDk4RTFGQzgxMUVBODQ1OTRGNUVDNEY5QUUwMi9yMm9ZMnpvSEh2 R015bHZvczFRejMxUlBEN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF6Rr/1tKeh7f0N1VQ7yvA+rtiHzXUvlcz3TVhPvTAP1EUuvxi3Zlrc8c1yYY w2R+JgrDWAijapR6wOx6uF3yZy+wnz/7KDHPDIeLCS9Ad0TYX7Veg46oqBO9D/5U ZTvSAYQIWqUKiY405QsniC0Zn04eq9BouCXk2cFjUUxCyQuHYU4yfUahDMvdRUEq qAFCkF/D1rnrxs3RxQ3q7WUcyXjQa2+PI+a2VoIavjG64DZrjw70Ymmc8pYouc02 KvmJx5sFW7/ooZ2/VF9fiUHAN8k91KJqPgEwgexsXBhLSfnLzDJqbrOjVece8XKF bcrAgnknTJrVW3T5pxkTaWhcYg== -----END CERTIFICATE-----Generated at Thu Sep 24 05:45:43 2026 by rpki-client