$ rpki-client -vvvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft File: 2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json) Hash identifier: he5LoxtQ3XdZ7UGuIgH3JCRUM7xluly0aWM/zKXSBvg= Subject key identifier: 9E:0A:6D:2C:01:83:90:88:FB:CD:F4:84:66:CD:12:EE:44:B9:D3:76 Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA Certificate issuer: /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA Certificate serial: 1848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft Manifest number: 1822 Signing time: Sun 20 Sep 2026 16:30:36 +0000 Manifest this update: Sun 20 Sep 2026 16:30:36 +0000 Manifest next update: Sun 27 Sep 2026 16:30:36 +0000 Files and hashes: 1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: c+CZFT8/2AP4gd7fjZ8w2E5JRWAu+zoWXXs6BkYww0E=) 2: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6216 (0x1848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA Validity Not Before: Sep 20 16:30:36 2026 GMT Not After : Sep 27 16:30:36 2026 GMT Subject: CN=6ab00a2c-0189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:8a:55:73:2c:5b:58:98:3e:3d:fe:7f:41: a7:4c:ed:3f:d8:de:a6:ce:6c:9f:cd:e2:98:be:c2: 84:cc:44:09:b2:b3:56:f6:f3:d4:04:0a:c7:d5:5d: ac:28:84:aa:95:7c:0d:22:33:8a:de:b4:cd:21:b2: 1e:ea:71:96:ea:b9:e5:7f:e0:a6:95:77:ac:92:49: df:16:d6:92:c0:30:1b:5c:25:c3:5b:2a:ad:51:fb: 8c:7f:f9:85:56:12:2f:55:13:8e:44:1e:70:d0:7c: fb:84:60:df:ab:0e:2b:98:06:75:71:f5:44:16:30: 21:ef:66:bb:dd:76:af:b7:db:9d:8c:bc:81:37:59: c9:c9:4b:01:40:29:a6:a9:36:83:25:30:15:14:31: ef:cf:7c:c0:d4:82:a9:79:25:6b:49:84:08:ce:d3: b6:f6:42:16:aa:5b:5f:8c:44:c9:72:98:f8:a7:39: 4b:bc:f7:f2:32:51:9f:94:dc:70:2c:67:68:41:8f: 74:e8:54:ae:75:c8:2b:16:41:a9:58:ca:7e:0f:9d: 62:e9:62:6e:65:c4:9e:f6:06:36:5a:6b:12:ca:53: e4:43:38:d4:49:fc:72:64:cd:b2:7e:e5:60:94:53: bc:27:b2:70:8b:8b:82:9e:6a:80:59:91:ed:4d:5b: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0A:6D:2C:01:83:90:88:FB:CD:F4:84:66:CD:12:EE:44:B9:D3:76 X509v3 Authority Key Identifier: keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6a:47:d8:44:53:ca:bf:d4:e8:8f:f6:4c:8c:a5:b7:fa:3b: b5:af:f1:b3:1b:dc:e5:54:4b:b1:f5:98:2b:54:04:01:a1:8b: 10:ea:55:d3:7e:90:41:f6:26:5e:4d:9a:3f:f7:44:d9:7f:f6: a5:4f:39:92:3b:00:98:d2:45:38:a2:82:cc:3a:05:78:89:2f: 8c:a6:22:2c:4d:11:85:fe:7a:83:00:03:4b:15:de:45:ba:49: 3f:ad:08:6c:e3:0b:51:51:17:ca:e0:c4:92:64:bf:92:64:32: de:84:ef:e5:50:30:21:ba:35:46:97:50:63:f0:69:b9:98:09: 5c:ee:3e:ab:bf:24:0c:71:70:2e:8d:ae:b5:15:e3:00:43:68: a9:a9:34:32:93:07:5e:11:0d:b8:fe:24:0e:ef:e0:8c:f5:c7: 3b:5f:bf:60:7f:80:40:14:51:2a:df:cd:78:c8:44:44:eb:6b: 58:84:94:c6:5a:ad:58:31:a0:29:50:57:df:72:92:de:e0:cc: f5:fc:f3:c6:b0:c2:77:66:08:b1:ac:2a:90:ee:32:a2:8d:b9: 63:25:3c:b9:06:37:dc:e6:b8:a6:f7:ae:ce:e9:e2:4a:b7:07: 77:d2:1a:1f:65:46:4e:10:7d:a3:a2:80:03:c5:1d:10:2b:c2: 33:f7:72:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg2MkQxMTAvBgNVBAUTKEQ4QzY3MzA5NUU4MkE5QjdFN0RGQ0Q0NjU4MEY3ODMx QThEMThBQ0EwHhcNMjYwOTIwMTYzMDM2WhcNMjYwOTI3MTYzMDM2WjAYMRYwFAYD VQQDEw02YWIwMGEyYy0wMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX6KVXMsW1iYPj3+f0GnTO0/2N6mzmyfzeKYvsKEzEQJsrNW9vPUBArH1V2s KISqlXwNIjOK3rTNIbIe6nGW6rnlf+CmlXeskknfFtaSwDAbXCXDWyqtUfuMf/mF VhIvVROORB5w0Hz7hGDfqw4rmAZ1cfVEFjAh72a73Xavt9udjLyBN1nJyUsBQCmm qTaDJTAVFDHvz3zA1IKpeSVrSYQIztO29kIWqltfjETJcpj4pzlLvPfyMlGflNxw LGdoQY906FSudcgrFkGpWMp+D51i6WJuZcSe9gY2WmsSylPkQzjUSfxyZM2yfuVg lFO8J7Jwi4uCnmqAWZHtTVs0nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4KbSwB g5CI+830hGbNEu5EudN2MB8GA1UdIwQYMBaAFNjGcwlegqm359/NRlgPeDGo0YrK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODYyRC8zMjg3OUQzQUU4 QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3FiZm4zODFHV0E5NE1halJp c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJNWnpDVjZDcWJmbjM4MUdXQTk0TWFqUmlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODYyRC8zMjg3OUQzQUU4QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3Fi Zm4zODFHV0E5NE1halJpc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC2pH2ERTyr/U6I/2TIylt/o7ta/xsxvc5VRLsfWYK1QEAaGLEOpV036QQfYm Xk2aP/dE2X/2pU85kjsAmNJFOKKCzDoFeIkvjKYiLE0Rhf56gwADSxXeRbpJP60I bOMLUVEXyuDEkmS/kmQy3oTv5VAwIbo1RpdQY/BpuZgJXO4+q78kDHFwLo2utRXj AENoqak0MpMHXhENuP4kDu/gjPXHO1+/YH+AQBRRKt/NeMhEROtrWISUxlqtWDGg KVBX33KS3uDM9fzzxrDCd2YIsawqkO4yoo25YyU8uQY33Oa4pveuzuniSrcHd9Ia H2VGThB9o6KAA8UdECvCM/dySw== -----END CERTIFICATE-----Generated at Mon Sep 21 09:38:54 2026 by rpki-client