$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft File: 2WQZRdW0z31j_JExr89yeuNtkCA.mft (raw, json) Hash identifier: WDspSpFRtDm9sn/qv1yaCOVOeBfTfAU1KYCPmeG0+cM= Subject key identifier: C5:D5:79:12:E9:DF:2F:3D:29:61:8D:76:E7:89:1E:DA:68:8D:A3:F8 Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20 Certificate issuer: /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft Manifest number: 02C8 Signing time: Mon 21 Sep 2026 01:18:26 +0000 Manifest this update: Mon 21 Sep 2026 01:18:26 +0000 Manifest next update: Mon 28 Sep 2026 01:18:26 +0000 Files and hashes: 1: 2WQZRdW0z31j_JExr89yeuNtkCA.crl (hash: Ln9OTPKsztSLBciXIN/ndnMhoVxSzUJm4RstUNbt27Q=) 2: 590A6A9A792E11EEA5AAB840C4F9AE02.roa (hash: /sj3JZ3p1665YJRvSUXz4i11ey7ZoPynVcwKSHS8SnQ=) 3: 77490C9A792F11EEBF849942C4F9AE02.roa (hash: MpcjQVs1Jc1cjgEQDQ1xjrNe8yr/lbGI3mI0RqgvaQ8=) 4: 15714ED2776A11ED98AF7341C4F9AE02.roa (hash: GVyHO9aPtU+XPsp7j3IVen2mhZWFCWup91n2kBUjWV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F316, serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020 Validity Not Before: Sep 21 01:18:26 2026 GMT Not After : Sep 28 01:18:26 2026 GMT Subject: CN=6ab085e2-297c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:3b:99:6f:bc:11:33:79:6e:3b:df:e4:f6: f1:01:34:b0:71:8f:ff:9e:63:1c:a1:46:f8:ab:93: ad:c8:96:8c:31:9b:64:1f:af:ab:24:8b:63:7f:21: b8:3e:3d:db:05:3d:47:ae:a4:a8:63:28:17:08:b3: d7:1f:75:55:97:b1:f7:61:19:a6:a1:a9:3e:aa:e5: dc:e9:db:d9:34:6a:46:ae:4d:e2:8f:4b:a4:4a:15: 2c:0b:0d:9a:71:96:73:e6:55:c7:ac:6d:40:9a:04: 1b:3a:3e:1d:1b:20:c9:ff:2d:60:54:09:15:9e:1c: 1a:87:c6:86:3e:19:d6:ce:19:57:1b:ed:e0:49:8f: 1c:86:e8:07:cc:d7:60:94:70:3a:9f:14:fc:62:d4: 3a:82:55:4e:c5:7a:e1:69:31:23:5b:20:39:1d:52: 19:8b:46:3d:12:a5:6a:7f:c6:cc:78:72:ef:81:30: 7a:5a:ef:22:10:5a:da:29:91:70:5b:0a:eb:44:48: bf:b3:2c:63:8f:6a:a3:22:87:19:78:7c:40:5c:cd: fb:15:10:20:8d:eb:30:e5:e8:27:29:0a:9f:32:cb: 37:81:50:86:f8:7a:bf:89:04:00:cd:36:8b:3e:5b: e4:04:ed:52:4d:ba:98:8f:e6:5b:71:dc:6f:d2:9e: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D5:79:12:E9:DF:2F:3D:29:61:8D:76:E7:89:1E:DA:68:8D:A3:F8 X509v3 Authority Key Identifier: keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ff:d0:c8:a5:e1:43:ba:40:3a:50:ba:6b:a5:a4:56:04:f3: 92:00:4e:3c:48:02:22:e5:18:4f:10:63:62:c6:77:18:95:af: 75:a9:7c:99:f5:32:70:6b:fb:9b:6a:d5:05:b5:2c:5a:80:fb: 17:8d:65:cd:bf:bf:aa:9c:df:a9:d4:b4:96:a0:c7:bf:df:61: 3f:14:fd:7e:53:9b:3b:fe:83:28:bb:6a:85:8f:bc:87:bc:13: 55:ef:3a:f8:03:33:9a:7a:b4:44:c9:d1:ad:fe:9e:f8:f8:c3: 06:d3:e8:83:62:3b:ca:6b:4e:ac:d6:f0:aa:63:a4:26:67:d3: 24:e4:ba:29:a1:e5:98:81:0c:6a:1b:9d:be:a5:cd:31:73:8e: 98:f8:d1:f8:c5:03:8f:f8:de:b6:e9:d0:05:14:db:b2:d5:2c: b7:3e:e3:3c:e0:76:0e:6c:13:49:54:0a:ef:43:10:4b:d5:8f: 46:db:56:3f:c6:e9:8c:47:4f:85:43:b9:5e:07:4d:e5:e7:17: e9:99:5e:dd:bc:92:66:93:61:92:91:70:9f:ef:47:ef:f3:29: cb:93:ca:0c:61:e0:63:77:c5:ef:3d:b4:51:cb:5c:a3:42:6f: 8f:cb:49:b1:bc:68:94:fb:6f:57:d3:e9:1c:90:10:48:3a:a5: d7:b4:18:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYzMTYxMTAvBgNVBAUTKEQ5NjQxOTQ1RDVCNENGN0Q2M0ZDOTEzMUFGQ0Y3MjdB RTM2RDkwMjAwHhcNMjYwOTIxMDExODI2WhcNMjYwOTI4MDExODI2WjAYMRYwFAYD VQQDEw02YWIwODVlMi0yOTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO47mW+8ETN5bjvf5PbxATSwcY//nmMcoUb4q5OtyJaMMZtkH6+rJItjfyG4 Pj3bBT1HrqSoYygXCLPXH3VVl7H3YRmmoak+quXc6dvZNGpGrk3ij0ukShUsCw2a cZZz5lXHrG1AmgQbOj4dGyDJ/y1gVAkVnhwah8aGPhnWzhlXG+3gSY8chugHzNdg lHA6nxT8YtQ6glVOxXrhaTEjWyA5HVIZi0Y9EqVqf8bMeHLvgTB6Wu8iEFraKZFw WwrrREi/syxjj2qjIocZeHxAXM37FRAgjesw5egnKQqfMss3gVCG+Hq/iQQAzTaL PlvkBO1STbqYj+Zbcdxv0p6HWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXVeRLp 3y89KWGNdueJHtpojaP4MB8GA1UdIwQYMBaAFNlkGUXVtM99Y/yRMa/PcnrjbZAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjMxNi9BMURGMTUyMDc3 NEMxMUVEQjgyNkJDMEJDNEY5QUUwMi8yV1FaUmRXMHozMWpfSkV4cjg5eWV1TnRr Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXUVpSZFcwejMxal9KRXhyODl5ZXVOdGtDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjMxNi9BMURGMTUyMDc3NEMxMUVEQjgyNkJDMEJDNEY5QUUwMi8yV1FaUmRXMHoz MWpfSkV4cjg5eWV1TnRrQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ//QyKXhQ7pAOlC6a6WkVgTzkgBOPEgCIuUYTxBjYsZ3GJWvdal8mfUycGv7 m2rVBbUsWoD7F41lzb+/qpzfqdS0lqDHv99hPxT9flObO/6DKLtqhY+8h7wTVe86 +AMzmnq0RMnRrf6e+PjDBtPog2I7ymtOrNbwqmOkJmfTJOS6KaHlmIEMahudvqXN MXOOmPjR+MUDj/jetunQBRTbstUstz7jPOB2DmwTSVQK70MQS9WPRttWP8bpjEdP hUO5XgdN5ecX6Zle3bySZpNhkpFwn+9H7/Mpy5PKDGHgY3fF7z20Uctco0Jvj8tJ sbxolPtvV9PpHJAQSDql17QYeQ== -----END CERTIFICATE-----Generated at Tue Sep 22 20:04:35 2026 by rpki-client