$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json) Hash identifier: VUoRMtZ7oiW2Y0pSI1SA9f1DtU501VWzB0Cdl0BMm7k= Subject key identifier: 1F:C7:61:0F:D0:57:69:EB:5C:2A:2C:CD:BC:8D:A9:57:B2:D3:28:57 Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft Manifest number: 0242 Signing time: Wed 23 Sep 2026 02:29:25 +0000 Manifest this update: Wed 23 Sep 2026 02:29:24 +0000 Manifest next update: Wed 30 Sep 2026 02:29:24 +0000 Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: J4e1eCT39b/qfhD/tVW4b/T/6g1ymxCh7aWmbA8vFPc=) 2: A5C854D2154E11F194E301A5313D8C67.roa (hash: Sh69RjuVo5isx3bFpRX54pmtFrJuRKlGXyX1OLOXytg=) 3: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: ad6aaRvQBIRwUadg53cIGK3wdCZz0dymJ6fgvrLDsYU=) 4: C1FEA2F0154E11F19AE5B8A5313D8C67.roa (hash: cgOd9gJGT0Mu3EgoMhtTnhZe/DtNsKvS05s/KcGa/qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Validity Not Before: Sep 23 02:29:24 2026 GMT Not After : Sep 30 02:29:24 2026 GMT Subject: CN=6ab33985-2e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:f0:f5:39:72:b3:d9:a2:f0:c4:20:fe:a7: cb:69:69:b5:a0:54:ae:77:ce:0e:ba:07:6d:04:77: ed:ce:7f:c2:30:14:69:ee:7c:40:3e:a9:55:53:1f: 95:0a:a7:1f:b6:36:ae:12:08:d8:c1:e0:01:81:75: fc:9e:87:19:88:ae:ec:99:b8:f1:cf:98:59:31:da: e0:71:1d:00:4f:27:40:06:50:57:a8:b1:1c:55:2c: 89:2c:3c:d9:79:87:0c:5b:3f:a5:7e:4b:4b:f1:79: a9:46:67:7a:74:54:9e:fe:9c:6b:1c:47:fd:9c:3b: 3f:c5:23:17:df:80:b3:6b:67:e1:98:51:a3:17:27: f5:db:a0:5c:f4:1b:40:47:92:bd:26:1f:4c:1b:c9: 77:7f:84:bf:1e:a5:e2:45:60:d5:d3:87:99:52:3a: a4:97:1e:25:47:a0:d6:c2:09:80:3c:40:ec:0f:35: ef:c3:bf:2b:2d:07:53:ee:fa:34:24:17:7d:0a:ee: e1:6b:1e:04:53:a7:a9:8c:1a:9d:41:be:bd:ca:47: bf:82:cf:66:a8:a1:b2:95:42:c7:e6:33:00:da:85: d0:07:30:f7:ef:b4:69:89:eb:fe:0b:95:56:f2:94: ff:12:7a:8f:31:32:0b:f8:cf:f9:58:db:81:43:1b: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C7:61:0F:D0:57:69:EB:5C:2A:2C:CD:BC:8D:A9:57:B2:D3:28:57 X509v3 Authority Key Identifier: keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fb:cf:61:ef:71:57:8c:58:91:02:01:a1:6b:07:91:9a:b4: a1:6d:75:c6:a4:1a:3d:78:d3:80:51:18:94:53:36:c0:3f:25: af:59:1d:4f:ed:32:12:d5:bf:30:3c:d8:54:8e:07:7c:3d:46: ba:03:59:97:08:0f:00:57:44:7e:aa:74:e5:59:26:96:90:90: 68:c5:f4:fc:ef:31:2a:25:11:50:d1:c4:28:31:16:c0:47:de: 8f:2b:24:d1:a8:89:3a:92:fa:92:67:54:6f:70:94:d4:e1:c8: 8f:da:8f:24:1a:16:06:9d:82:34:11:b6:b3:ba:2e:ee:1d:6e: 3c:fd:8a:93:7f:e9:60:4c:87:a8:0e:27:37:38:c1:75:db:55: a9:eb:40:87:d6:04:a1:f4:9b:12:d2:42:8d:eb:1b:fa:4c:15: df:23:76:30:83:10:2a:ff:92:62:b4:7c:eb:5d:8a:be:e8:69: a7:29:cb:ff:ca:c4:52:3b:35:01:1d:04:2a:de:86:76:f3:d4: d1:b6:e8:2c:95:4f:3c:92:52:14:26:a9:82:91:96:74:5b:fb: 53:fa:f3:66:72:25:31:44:8e:fc:92:da:bf:d1:00:75:95:e6: 95:71:ed:64:c5:a2:b7:30:47:23:3d:9b:c7:6a:9e:2d:b5:95: c9:c8:f1:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB MDZFQ0E3NDAwHhcNMjYwOTIzMDIyOTI0WhcNMjYwOTMwMDIyOTI0WjAYMRYwFAYD VQQDEw02YWIzMzk4NS0yZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWTw9Tlys9mi8MQg/qfLaWm1oFSud84OugdtBHftzn/CMBRp7nxAPqlVUx+V CqcftjauEgjYweABgXX8nocZiK7smbjxz5hZMdrgcR0ATydABlBXqLEcVSyJLDzZ eYcMWz+lfktL8XmpRmd6dFSe/pxrHEf9nDs/xSMX34Cza2fhmFGjFyf126Bc9BtA R5K9Jh9MG8l3f4S/HqXiRWDV04eZUjqklx4lR6DWwgmAPEDsDzXvw78rLQdT7vo0 JBd9Cu7hax4EU6epjBqdQb69yke/gs9mqKGylULH5jMA2oXQBzD377Rpiev+C5VW 8pT/EnqPMTIL+M/5WNuBQxvqdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/HYQ/Q V2nrXCoszbyNqVey0yhXMB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf RjBxLUVTMUpYdFdnYnNwMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm/vPYe9xV4xYkQIBoWsHkZq0oW11xqQaPXjTgFEYlFM2wD8lr1kdT+0yEtW/ MDzYVI4HfD1GugNZlwgPAFdEfqp05VkmlpCQaMX0/O8xKiURUNHEKDEWwEfejysk 0aiJOpL6kmdUb3CU1OHIj9qPJBoWBp2CNBG2s7ou7h1uPP2Kk3/pYEyHqA4nNzjB ddtVqetAh9YEofSbEtJCjesb+kwV3yN2MIMQKv+SYrR8612KvuhppynL/8rEUjs1 AR0EKt6GdvPU0bboLJVPPJJSFCapgpGWdFv7U/rzZnIlMUSO/JLav9EAdZXmlXHt ZMWitzBHIz2bx2qeLbWVycjxEw== -----END CERTIFICATE-----Generated at Wed Sep 23 04:41:10 2026 by rpki-client