$ rpki-client -vvvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: b5HFCuU1Xly4LT0zmxvhbZfRloXiUhvu9qfsBythYgw= Subject key identifier: 5A:C2:A2:91:06:6B:35:B0:77:2F:E5:EB:20:5E:4D:EF:64:36:CA:D7 Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 014D Signing time: Sun 20 Sep 2026 14:27:45 +0000 Manifest this update: Sun 20 Sep 2026 14:27:45 +0000 Manifest next update: Sun 27 Sep 2026 14:27:45 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: zt4Xex57tnE2owFjBCUTjgc8jPXlCHh6SA8h8BWYRNQ=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: qHE12pZJwFpe8wyPzOgoide5sDGoFWiN9Bd/hNLVIe4=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: yVchdU3xVWj31ewZ5w80+tHH4ZJNPmu+JLTdmSt6IhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Sep 20 14:27:45 2026 GMT Not After : Sep 27 14:27:45 2026 GMT Subject: CN=6aafed61-7760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:e7:1e:80:b4:6a:35:61:92:30:fe:b9:70: ce:9c:c8:fd:7c:74:b5:8a:5c:24:85:66:56:e6:1d: 17:c5:1f:9b:c7:0b:8a:40:2c:d9:ec:30:1e:22:c1: a4:c0:7a:4d:a0:13:53:4d:36:e0:20:a5:26:df:d4: ad:1b:77:41:44:04:44:af:2e:5b:e1:d6:4c:e3:2d: 97:74:e7:b1:36:b6:b2:aa:50:c4:cd:37:69:88:c3: 61:e2:f7:ed:04:98:b4:80:9d:21:37:c7:bd:f2:50: ef:df:e6:7a:c3:82:49:bc:21:e1:c8:e5:4e:ce:64: ee:24:53:06:24:f2:1b:a9:66:87:c1:92:9a:c8:2d: c9:83:c3:19:5e:9c:f7:a2:9b:3e:eb:33:da:dd:1f: 6c:41:f7:91:9e:c9:a5:0b:97:34:36:b4:db:69:26: 2a:ea:b1:77:ae:05:db:4d:cf:96:f6:b6:8d:13:c3: 53:33:4e:3b:00:90:72:27:97:89:9a:1f:af:01:83: 61:3e:1d:f3:b0:dd:c2:e2:7d:8f:2f:0a:08:e1:d9: 69:23:50:6e:03:e1:c4:b6:ab:70:88:c3:cd:02:15: ba:e8:34:db:23:6c:fe:45:bd:b4:26:9f:d6:7b:b5: d6:0f:9d:85:8f:08:6d:30:44:82:18:ec:17:57:dc: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C2:A2:91:06:6B:35:B0:77:2F:E5:EB:20:5E:4D:EF:64:36:CA:D7 X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f7:62:73:e6:cc:06:f5:62:2e:56:f3:eb:0a:94:39:b6:cc: 21:b2:d3:3d:09:03:23:00:af:cb:f1:7a:8d:6d:6f:5e:ab:e2: 8d:ba:73:4b:47:31:d9:12:26:2f:c6:87:00:7c:81:74:0b:f1: 86:37:58:08:76:7a:3a:c1:45:fe:33:f7:e6:9b:b2:36:00:54: cb:5c:ec:6a:fd:87:14:4c:ad:f7:a2:cc:d8:2b:f1:79:2b:4b: 9c:1e:61:8b:3a:95:42:40:63:70:f5:bb:14:fe:ad:be:8d:3d: c5:81:f4:b4:83:da:cb:b9:02:17:23:f9:a9:fc:22:03:1d:59: ce:87:99:f5:ff:2a:98:e8:b9:aa:32:17:15:ba:c2:3e:b9:7b: 1e:2d:9f:25:21:f3:f6:75:30:b9:bf:0c:90:d5:bf:63:30:ab: 97:60:ad:b2:56:00:01:c6:27:e3:13:36:b7:a8:3e:d9:bb:6a: f7:99:dd:7a:da:fb:f1:3a:16:e2:c3:03:35:5e:b0:3f:c2:90: c9:94:24:b4:a7:e3:9c:a0:fa:99:9d:8e:0b:bc:af:41:bd:b4: f9:c1:0b:4e:96:5f:9e:eb:81:12:43:90:ce:94:59:0a:d7:e5: c8:2b:97:05:9e:0a:b5:d6:51:f8:f3:e0:7d:d3:29:8f:de:98: 61:a8:77:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEVDMDJDRDA2Qjc0NzM3OEIyQzFDQzVBMjIxRTZFMDg2 NjFEQTgyMjUwHhcNMjYwOTIwMTQyNzQ1WhcNMjYwOTI3MTQyNzQ1WjAYMRYwFAYD VQQDEw02YWFmZWQ2MS03NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrjnHoC0ajVhkjD+uXDOnMj9fHS1ilwkhWZW5h0XxR+bxwuKQCzZ7DAeIsGk wHpNoBNTTTbgIKUm39StG3dBRAREry5b4dZM4y2XdOexNrayqlDEzTdpiMNh4vft BJi0gJ0hN8e98lDv3+Z6w4JJvCHhyOVOzmTuJFMGJPIbqWaHwZKayC3Jg8MZXpz3 ops+6zPa3R9sQfeRnsmlC5c0NrTbaSYq6rF3rgXbTc+W9raNE8NTM047AJByJ5eJ mh+vAYNhPh3zsN3C4n2PLwoI4dlpI1BuA+HEtqtwiMPNAhW66DTbI2z+Rb20Jp/W e7XWD52FjwhtMESCGOwXV9xehQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrCopEG azWwdy/l6yBeTe9kNsrXMB8GA1UdIwQYMBaAFOwCzQa3RzeLLBzFoiHm4IZh2oIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yQzJGNkU1MENF RTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40c3NITVdpSWViZ2htSGFn aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yQzJGNkU1MENFRTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40 c3NITVdpSWViZ2htSGFnaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASfdic+bMBvViLlbz6wqUObbMIbLTPQkDIwCvy/F6jW1vXqvijbpzS0cx2RIm L8aHAHyBdAvxhjdYCHZ6OsFF/jP35puyNgBUy1zsav2HFEyt96LM2CvxeStLnB5h izqVQkBjcPW7FP6tvo09xYH0tIPay7kCFyP5qfwiAx1ZzoeZ9f8qmOi5qjIXFbrC Prl7Hi2fJSHz9nUwub8MkNW/YzCrl2CtslYAAcYn4xM2t6g+2btq95ndetr78ToW 4sMDNV6wP8KQyZQktKfjnKD6mZ2OC7yvQb20+cELTpZfnuuBEkOQzpRZCtflyCuX BZ4KtdZR+PPgfdMpj96YYah3jw== -----END CERTIFICATE-----Generated at Mon Sep 21 10:40:52 2026 by rpki-client