$ rpki-client -vvvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: a2I1e9ebMgtSxSB4sl7/Xh8hmndk4Z2AzEsozGDdZSo= Subject key identifier: 09:A3:41:4C:D3:77:9D:C5:F6:F7:E9:96:CA:F9:90:08:89:3E:BD:B8 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 0289 Signing time: Wed 23 Sep 2026 01:42:49 +0000 Manifest this update: Wed 23 Sep 2026 01:42:49 +0000 Manifest next update: Wed 30 Sep 2026 01:42:49 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: 5zdc9jIk7B0oNDH50abjDg7SaZQOf/VDoKEP1K4H5tI=) 2: C9E93DD2266E11F187DDE8D8AB833773.roa (hash: D8WTG4tbDTeoMZlkxpx4f43f9ls73L2XMbZYJ85TZSo=) 3: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: 2uRHbuQZyvJLJo7BIY+LG/5h7fEj3/MdPnTnEg8uVjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Sep 23 01:42:49 2026 GMT Not After : Sep 30 01:42:49 2026 GMT Subject: CN=6ab32e99-0cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:91:9e:b6:9e:12:be:44:42:21:19:db:d6: 05:4d:e5:5f:4e:93:c9:0a:d4:ea:a8:38:9c:9e:60: e8:de:64:20:d6:5a:f2:5f:fa:c6:28:43:92:e2:f9: 7e:39:58:e1:ed:ac:77:05:19:0e:95:89:ee:cb:50: 49:48:2b:c9:bb:38:b2:98:f0:26:8f:6d:d9:ad:1f: 6e:6a:2f:02:c8:45:62:60:91:73:07:a6:01:fc:74: 69:87:0e:48:d3:69:84:aa:8c:d8:e0:04:3c:f0:e0: f5:3c:c1:71:1c:03:68:18:71:d2:da:9b:ee:54:35: 14:d9:9e:44:ea:a1:d4:f4:72:62:ec:75:ef:b8:73: 5e:c3:f8:ee:5b:d4:75:b9:9d:98:a7:7d:db:21:ee: 56:7c:c7:9a:19:96:54:0f:77:32:3a:2f:a3:66:cd: 64:70:1e:43:4e:2f:d3:cd:a2:1f:b1:fb:2e:1d:cd: 91:84:3a:79:82:92:dc:65:e0:96:96:f4:df:45:93: cd:82:f0:12:b0:2d:85:9d:5c:ab:48:e4:13:a0:40: f2:be:0f:77:c8:83:9b:dd:7c:b2:85:ea:bc:34:e1: 2c:6f:e2:84:3e:36:f7:bb:ca:35:dd:da:d4:81:23: a2:58:98:91:be:1a:76:c5:c4:75:b4:61:41:39:b7: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A3:41:4C:D3:77:9D:C5:F6:F7:E9:96:CA:F9:90:08:89:3E:BD:B8 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:47:c5:c7:68:99:7d:e5:7b:12:fb:f8:5c:6a:70:b6:b5:5e: 42:2e:ca:90:7d:6b:33:ba:bd:7f:c6:f8:e7:82:aa:7a:4a:b0: d1:33:dd:a9:33:77:7b:6a:8e:1b:86:8a:e8:1c:17:f3:fd:e8: 39:30:8e:8e:e9:ae:5a:8d:e5:fb:31:a2:04:07:f2:a8:e3:f9: 8d:6e:2a:27:4c:1d:33:50:45:cb:d4:1a:35:72:1f:09:8f:35: 34:d6:fc:b6:9d:ff:94:2f:9f:7a:a8:2c:cd:f0:4a:87:8a:33: bb:9f:99:66:39:11:65:29:cd:aa:74:df:6f:ba:66:55:d7:69: 1f:f7:38:10:8d:b4:e9:8f:9b:24:ed:ee:4b:02:91:e8:d4:c1: a0:15:cd:12:71:f2:17:30:39:8d:b2:eb:c4:6d:20:0c:27:5b: 95:f5:54:71:02:db:6d:0d:8c:7e:a6:60:4d:d8:3c:4c:3b:82: 96:ed:d9:96:b5:98:f0:17:d4:a1:15:a4:9c:12:ef:e1:84:5e: 23:7a:3b:3b:62:45:4f:d7:71:4a:3e:82:6a:70:d3:a4:9e:27: 18:84:08:b3:88:cd:3f:e2:0e:6a:ae:27:18:87:31:6f:72:27: bd:b7:33:30:fc:83:9c:14:d6:de:9d:ab:87:18:87:e6:ce:43: 69:96:cd:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjYwOTIzMDE0MjQ5WhcNMjYwOTMwMDE0MjQ5WjAYMRYwFAYD VQQDEw02YWIzMmU5OS0wY2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF+RnraeEr5EQiEZ29YFTeVfTpPJCtTqqDicnmDo3mQg1lryX/rGKEOS4vl+ OVjh7ax3BRkOlYnuy1BJSCvJuziymPAmj23ZrR9uai8CyEViYJFzB6YB/HRphw5I 02mEqozY4AQ88OD1PMFxHANoGHHS2pvuVDUU2Z5E6qHU9HJi7HXvuHNew/juW9R1 uZ2Yp33bIe5WfMeaGZZUD3cyOi+jZs1kcB5DTi/TzaIfsfsuHc2RhDp5gpLcZeCW lvTfRZPNgvASsC2FnVyrSOQToEDyvg93yIOb3Xyyheq8NOEsb+KEPjb3u8o13drU gSOiWJiRvhp2xcR1tGFBObeRlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAmjQUzT d53F9vfplsr5kAiJPr24MB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsEfFx2iZfeV7Evv4XGpwtrVeQi7KkH1rM7q9f8b454Kqekqw0TPdqTN3e2qO G4aK6BwX8/3oOTCOjumuWo3l+zGiBAfyqOP5jW4qJ0wdM1BFy9QaNXIfCY81NNb8 tp3/lC+feqgszfBKh4ozu5+ZZjkRZSnNqnTfb7pmVddpH/c4EI206Y+bJO3uSwKR 6NTBoBXNEnHyFzA5jbLrxG0gDCdblfVUcQLbbQ2MfqZgTdg8TDuClu3ZlrWY8BfU oRWknBLv4YReI3o7O2JFT9dxSj6CanDTpJ4nGIQIs4jNP+IOaq4nGIcxb3Invbcz MPyDnBTW3p2rhxiH5s5DaZbNRQ== -----END CERTIFICATE-----Generated at Wed Sep 23 08:07:57 2026 by rpki-client