$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: bU1rywre6wpqFH+mtKeejl153yb+WEFbAY2kCWZMAP4= Subject key identifier: 59:8A:04:66:CD:BA:DF:6F:B0:BA:40:DD:82:99:85:FF:CD:42:4B:ED Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 0102 Signing time: Sat 03 Oct 2026 06:53:09 +0000 Manifest this update: Sat 03 Oct 2026 06:53:09 +0000 Manifest next update: Sat 10 Oct 2026 06:53:09 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: sZc/medz1/vUcEM60GyZS/HwknCIXBBfwy3x8ufMnkE=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: gIIumWSAkBw+/Kf2c0p6PpwOKZCEtqNskG3XhcLL5aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Oct 3 06:53:09 2026 GMT Not After : Oct 10 06:53:09 2026 GMT Subject: CN=6ac0a655-dec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:fa:19:2e:04:69:eb:65:ad:28:06:11:3d: d4:44:f8:7e:b1:82:a6:b9:05:75:6f:34:95:88:f8: 5a:2e:96:d5:68:fe:ac:e2:17:22:5b:cd:8a:74:f1: 19:0a:60:61:e6:bd:f5:61:57:d0:c8:fb:8d:15:08: a0:77:21:52:da:2b:7f:05:0e:23:cd:92:3c:df:08: f6:f8:c8:09:9e:e5:ea:f8:86:5f:ca:16:ef:62:4f: fe:a6:c7:bc:1a:5a:2b:9e:ed:07:d7:c2:12:14:dc: b8:75:dd:c0:e9:9b:b1:e3:dc:14:48:c0:2c:8b:f6: 92:d5:b8:7d:56:ac:e7:bc:18:3f:6b:6c:de:36:20: 4e:7c:88:bb:d1:1c:84:68:25:7e:33:75:db:f6:14: 30:a8:92:42:77:f1:a1:88:29:80:3d:5a:c1:0f:3b: 26:4d:38:93:c0:19:55:1b:dc:f7:c3:d0:82:18:00: 5a:6d:71:06:fe:e0:f7:f5:d4:cd:d2:cc:71:5b:62: 01:97:66:7b:e3:3e:f7:de:e6:cf:a5:86:4a:51:15: 29:be:f3:72:d2:0a:49:7a:01:a5:0b:5d:56:20:2b: a3:b9:8d:ae:0c:7b:20:22:9d:11:ed:2b:c6:f8:56: 10:4f:dd:b2:f6:b6:fe:ed:59:a4:da:a3:95:03:30: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8A:04:66:CD:BA:DF:6F:B0:BA:40:DD:82:99:85:FF:CD:42:4B:ED X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f0:b5:73:95:cf:57:64:be:dd:56:68:0d:e8:6c:91:95:a9: df:91:23:11:12:3e:4e:04:1d:bd:0f:4a:1e:15:23:66:be:79: 4b:81:b8:be:0a:57:c6:43:9f:d9:f4:52:ee:ff:4b:be:8d:0d: 84:63:34:13:43:1a:40:86:9e:b7:8a:89:34:d5:86:95:da:46: e1:90:09:1b:ae:76:90:e7:4d:e0:93:ee:00:ac:31:18:11:91: 02:dd:97:85:ea:2b:96:8c:41:6a:2e:25:62:32:99:07:41:5e: 89:d1:5a:e1:0f:02:a7:d4:f1:e0:3d:71:72:02:cd:36:7a:10: 7d:74:ab:c6:b2:a0:c2:e9:eb:a5:c2:9b:b8:d9:2b:b4:72:0a: 87:c1:58:f8:b3:bd:c9:5a:29:bc:21:2d:b4:8e:18:e8:98:ac: 80:05:64:43:00:5d:4a:bd:34:c3:3e:3b:ee:05:f5:cf:3c:21: e3:46:eb:00:e5:32:10:fa:7b:ac:dc:0e:bf:e7:f9:86:6c:90: 36:01:f5:18:c2:5e:c2:a1:a8:fc:4a:fd:00:05:72:47:5d:95: 93:19:f5:61:ef:12:d7:85:f2:a1:88:94:34:3d:6e:05:af:35: 42:9d:be:8e:ac:25:71:0f:14:63:a9:64:cb:e6:f1:a5:76:da: 3c:11:13:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGODcxMTAvBgNVBAUTKDBCNkNEMTI3RDA0RUVDM0U4RUU0MTgzOTE5NDE0RkQ3 RUYzOUQ5MjQwHhcNMjYxMDAzMDY1MzA5WhcNMjYxMDEwMDY1MzA5WjAYMRYwFAYD VQQDEw02YWMwYTY1NS1kZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQb6GS4EaetlrSgGET3URPh+sYKmuQV1bzSViPhaLpbVaP6s4hciW82KdPEZ CmBh5r31YVfQyPuNFQigdyFS2it/BQ4jzZI83wj2+MgJnuXq+IZfyhbvYk/+pse8 Glornu0H18ISFNy4dd3A6Zux49wUSMAsi/aS1bh9VqznvBg/a2zeNiBOfIi70RyE aCV+M3Xb9hQwqJJCd/GhiCmAPVrBDzsmTTiTwBlVG9z3w9CCGABabXEG/uD39dTN 0sxxW2IBl2Z74z733ubPpYZKURUpvvNy0gpJegGlC11WICujuY2uDHsgIp0R7SvG +FYQT92y9rb+7Vmk2qOVAzDxfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmKBGbN ut9vsLpA3YKZhf/NQkvtMB8GA1UdIwQYMBaAFAts0SfQTuw+juQYORlBT9fvOdkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY4Ny8zQ0JFMzlBMjM4 QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMnpSSjlCTzdENk81Qmc1R1VGUDEtODUy U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY4Ny8zQ0JFMzlBMjM4QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMnpSSjlCTzdE Nk81Qmc1R1VGUDEtODUyU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALPC1c5XPV2S+3VZoDehskZWp35EjERI+TgQdvQ9KHhUjZr55S4G4vgpXxkOf 2fRS7v9Lvo0NhGM0E0MaQIaet4qJNNWGldpG4ZAJG652kOdN4JPuAKwxGBGRAt2X heorloxBai4lYjKZB0FeidFa4Q8Cp9Tx4D1xcgLNNnoQfXSrxrKgwunrpcKbuNkr tHIKh8FY+LO9yVopvCEttI4Y6JisgAVkQwBdSr00wz477gX1zzwh40brAOUyEPp7 rNwOv+f5hmyQNgH1GMJewqGo/Er9AAVyR12Vkxn1Ye8S14XyoYiUND1uBa81Qp2+ jqwlcQ8UY6lky+bxpXbaPBETEQ== -----END CERTIFICATE-----Generated at Mon Oct 5 06:53:58 2026 by rpki-client