$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft File: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft (raw, json) Hash identifier: 6FLanuM/YMaladqNZtI2i3k+MxAIAlO64byZqObSyWE= Subject key identifier: 82:20:CF:64:C0:43:03:16:08:1D:CE:34:4D:AE:04:DA:21:80:3E:87 Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B Certificate issuer: /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft Manifest number: 01FC Signing time: Wed 23 Sep 2026 03:06:47 +0000 Manifest this update: Wed 23 Sep 2026 03:06:46 +0000 Manifest next update: Wed 30 Sep 2026 03:06:46 +0000 Files and hashes: 1: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl (hash: psF/DFCSz28NWK5LKSrdtchIv0Yxt5kenUvqV6YwB2U=) 2: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (hash: Olet7/jMKDbPX9itUim3LSNIHYA8fTbBo6f7YD0v+zg=) 3: 6F5F30B8B56111EE91C72951C4F9AE02.roa (hash: NKqxNV8ZTNMr3HZ7qohnaVPukBEy2IxhkEY74xhVUp4=) 4: 2DCC0688B57211EEBB68526DC4F9AE02.roa (hash: yJFPpL7wE2GdaICTMgXge87NbgvFqYn4RExlPALcImA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Validity Not Before: Sep 23 03:06:46 2026 GMT Not After : Sep 30 03:06:46 2026 GMT Subject: CN=6ab34247-280d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:a9:ee:05:a7:90:4c:ec:a7:16:96:9a:74: 44:54:31:2f:66:dd:2f:67:04:44:f1:a9:31:c3:78: 56:fd:9b:f9:22:31:8e:9b:3d:75:e5:8a:67:a1:80: c6:df:0a:71:76:d5:60:b8:a9:45:67:fb:33:bd:ed: eb:8b:39:7f:9b:0e:5a:20:ff:04:97:f5:7f:ef:11: 00:39:d0:2f:22:a2:f7:21:9e:a2:74:bf:17:28:02: a8:6d:fb:f7:96:39:2c:27:a0:bc:10:96:70:d7:da: a2:66:87:2b:a6:bd:b8:b6:52:bc:8b:fb:27:c8:76: 32:a3:97:72:08:36:f2:7c:32:5b:f0:47:ec:96:2c: 10:2d:4f:da:ef:7b:02:80:70:ab:e5:bd:f3:06:0a: 40:52:bf:66:41:f0:e6:d4:6a:50:65:d3:5e:99:45: 02:40:0c:87:a2:4d:c2:56:96:02:a3:fc:eb:3e:74: 08:4b:cf:52:cf:95:3e:38:ef:2a:a6:7e:b2:e1:1b: 75:2a:c7:95:49:e3:d6:bc:79:66:6f:3f:db:75:f1: f1:b6:d2:55:a6:79:aa:9e:ab:3a:4f:f1:2e:20:6d: 89:89:9a:0f:e1:69:05:97:7e:2f:37:ee:8b:29:78: 1c:a9:8f:8b:f8:bc:3f:08:df:76:a1:77:f9:7a:5d: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:20:CF:64:C0:43:03:16:08:1D:CE:34:4D:AE:04:DA:21:80:3E:87 X509v3 Authority Key Identifier: keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:73:1f:1c:f4:14:1d:db:f3:aa:94:2e:30:39:d0:9f:2a:48: f6:57:e0:43:47:8e:c2:76:c8:cc:27:47:03:92:bb:18:9b:94: 74:8b:9d:e2:d1:a0:9c:ea:2f:22:ec:f2:22:70:52:be:ae:98: 97:cd:ab:e3:67:de:25:7b:d3:c1:bf:b4:12:5b:be:ab:d5:8d: 4a:b4:34:18:10:33:85:2f:80:37:7d:e8:1a:b6:0c:da:84:d2: 61:70:e5:1c:b8:ea:6d:d9:98:23:9f:92:60:5b:74:85:9f:54: 5f:7e:9c:d9:c6:61:a5:cc:ad:c6:54:59:b8:21:94:6d:54:d9: f5:58:64:a8:80:72:9b:78:3a:a5:8b:23:af:51:ec:e5:eb:8a: 4e:ca:cd:d1:88:1d:f1:24:21:64:16:05:bd:b9:1a:b8:cd:a5: 28:74:4d:8d:4e:ae:08:92:4d:87:86:4b:6a:11:35:74:01:cc: a4:40:68:8b:8e:62:c8:69:e9:14:d8:3c:27:68:98:13:c5:05: b5:69:c8:4f:10:bc:27:da:05:b5:68:27:c1:c5:58:d6:8e:f8: 01:ea:06:df:79:0e:30:ef:cd:ac:e9:27:98:8a:b5:17:e3:a3: bf:ee:86:b6:77:14:a5:96:a5:61:0b:1b:d3:90:fb:84:b8:22: 23:5f:f4:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyNzcxMTAvBgNVBAUTKEQ4M0I5M0UzMUU5Mzk5MzdEOENCMTVGRTM5Q0E1RTZF OEZFQUZBOUIwHhcNMjYwOTIzMDMwNjQ2WhcNMjYwOTMwMDMwNjQ2WjAYMRYwFAYD VQQDEw02YWIzNDI0Ny0yODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9ap7gWnkEzspxaWmnREVDEvZt0vZwRE8akxw3hW/Zv5IjGOmz115YpnoYDG 3wpxdtVguKlFZ/szve3rizl/mw5aIP8El/V/7xEAOdAvIqL3IZ6idL8XKAKobfv3 ljksJ6C8EJZw19qiZocrpr24tlK8i/snyHYyo5dyCDbyfDJb8EfsliwQLU/a73sC gHCr5b3zBgpAUr9mQfDm1GpQZdNemUUCQAyHok3CVpYCo/zrPnQIS89Sz5U+OO8q pn6y4Rt1KseVSePWvHlmbz/bdfHxttJVpnmqnqs6T/EuIG2JiZoP4WkFl34vN+6L KXgcqY+L+Lw/CN92oXf5el3n0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIIgz2TA QwMWCB3ONE2uBNohgD6HMB8GA1UdIwQYMBaAFNg7k+Mek5k32MsV/jnKXm6P6vqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzI3Ny80M0E3RTg5NEI1 NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1UZll5eFgtT2NwZWJvX3Et cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJEdVQ0eDZUbVRmWXl4WC1PY3BlYm9fcS1wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzI3Ny80M0E3RTg5NEI1NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1U Zll5eFgtT2NwZWJvX3EtcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv3MfHPQUHdvzqpQuMDnQnypI9lfgQ0eOwnbIzCdHA5K7GJuUdIud4tGgnOov IuzyInBSvq6Yl82r42feJXvTwb+0Elu+q9WNSrQ0GBAzhS+AN33oGrYM2oTSYXDl HLjqbdmYI5+SYFt0hZ9UX36c2cZhpcytxlRZuCGUbVTZ9VhkqIBym3g6pYsjr1Hs 5euKTsrN0Ygd8SQhZBYFvbkauM2lKHRNjU6uCJJNh4ZLahE1dAHMpEBoi45iyGnp FNg8J2iYE8UFtWnITxC8J9oFtWgnwcVY1o74AeoG33kOMO/NrOknmIq1F+Ojv+6G tncUpZalYQsb05D7hLgiI1/00Q== -----END CERTIFICATE-----Generated at Thu Sep 24 01:53:19 2026 by rpki-client