$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft File: D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft (raw, json) Hash identifier: tf35uYOmoX1xb7pofZBjLm+9YWYYAlWFEoBEpr9A4ec= Subject key identifier: 03:4D:94:73:F0:6D:4F:4C:C2:4A:C2:3D:F7:69:24:0B:37:44:25:00 Authority key identifier: 0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58 Certificate issuer: /CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258 Certificate serial: 026D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft Manifest number: 0267 Signing time: Mon 21 Sep 2026 02:09:28 +0000 Manifest this update: Mon 21 Sep 2026 02:09:27 +0000 Manifest next update: Mon 28 Sep 2026 02:09:27 +0000 Files and hashes: 1: D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl (hash: a0L49uEUctXXuiK1aVTeRb7g2jHi0NlevTeMV3uY7Lg=) 2: 075B4CC80AC511EEB25A152AC4F9AE02.roa (hash: +UwT5EuzqCMtcr13ivyOvHZ5BUB5y0RPoEF85OdZpKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134BB0, serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258 Validity Not Before: Sep 21 02:09:27 2026 GMT Not After : Sep 28 02:09:27 2026 GMT Subject: CN=6ab091d8-e40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:00:ab:69:8b:11:fd:b8:0e:c6:a7:76:3c: a5:c6:f0:47:f7:f0:f8:8b:97:96:bf:11:cd:84:36: 17:58:b8:a7:f9:59:35:1d:83:7a:05:11:0b:c0:ae: ae:78:03:07:aa:47:97:e4:5e:13:24:f1:f2:49:ae: 90:e0:db:a0:7a:b3:c4:80:53:2d:85:de:91:b5:98: 0f:75:d4:3d:dc:00:3a:65:b6:69:56:4f:8e:60:7c: 59:dc:27:92:02:29:84:50:cd:0f:36:c3:77:2d:66: 73:e9:fb:6d:4e:3f:e2:08:49:49:f1:ef:b7:5e:87: 9f:d7:4e:b8:01:d0:b5:9e:09:e1:41:af:79:4f:d4: 45:74:50:ec:0e:1d:1c:a9:85:0f:64:09:91:1a:72: 12:b3:1d:c0:1b:3c:c4:78:cc:cb:29:a2:38:38:16: b2:9f:d7:0c:95:42:3a:56:0a:ce:1c:ac:66:2a:19: c3:52:d4:7e:2b:b0:aa:31:c8:c3:0e:60:9d:7f:17: 14:ba:1b:1d:90:ed:ff:aa:3e:d6:0b:55:67:08:26: 9d:16:df:7d:7b:60:e2:85:bc:bf:3e:ba:30:be:d8: b4:b9:45:3d:3a:d0:1b:49:13:22:7e:d0:86:13:ba: 30:d2:2e:1c:04:75:b6:da:99:48:df:30:66:5f:c9: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4D:94:73:F0:6D:4F:4C:C2:4A:C2:3D:F7:69:24:0B:37:44:25:00 X509v3 Authority Key Identifier: keyid:0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:7c:5b:d9:dc:18:92:ce:87:2f:cb:8f:d4:66:02:e4:6a:28: 43:5c:2d:da:0d:56:6c:c7:12:cb:af:51:4c:1d:31:4a:17:d4: 0d:0e:f7:4f:bb:6f:24:19:eb:34:dc:e6:97:fb:52:20:4b:d6: 97:91:ac:d1:af:48:96:2b:77:99:8f:25:4c:2a:e5:92:b9:4c: a4:e4:32:26:61:05:1f:de:34:5a:2a:1b:86:8b:d5:cd:2d:39: 9a:5c:85:51:99:5a:cd:a1:cf:a6:f4:4b:1f:7e:da:3f:a3:50: 79:b4:78:8b:24:f3:e7:17:62:0e:ca:72:5b:f5:e2:e0:4a:e8: 33:c6:0f:65:14:df:8d:90:eb:6b:2d:5b:e2:3a:e4:1d:d8:c0: f7:11:68:e3:8d:ef:04:23:e8:57:88:e5:91:80:01:16:a3:6f: cf:88:dd:30:aa:ad:41:01:e4:fa:54:4f:ba:ac:3a:66:00:68: 5f:e9:b2:fa:ee:65:ae:1d:96:7f:e0:d2:66:5c:ee:0a:4e:a8: 7e:39:2b:61:b9:18:b8:f0:20:64:d2:14:d2:89:ac:46:7d:59: 45:42:de:ed:cf:2c:15:b4:09:95:b7:66:37:63:b4:cc:1d:e0: e4:a3:82:a5:ab:b6:1a:a8:6b:e6:c0:cd:22:a3:4f:19:f8:54: 1c:aa:03:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCQjAxMTAvBgNVBAUTKDBGNjE0MkFFNDE2OERGMEIxODA1RkE1ODFEMjAzOTQ3 NjdBQTIyNTgwHhcNMjYwOTIxMDIwOTI3WhcNMjYwOTI4MDIwOTI3WjAYMRYwFAYD VQQDEw02YWIwOTFkOC1lNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSUAq2mLEf24DsandjylxvBH9/D4i5eWvxHNhDYXWLin+Vk1HYN6BRELwK6u eAMHqkeX5F4TJPHySa6Q4NugerPEgFMthd6RtZgPddQ93AA6ZbZpVk+OYHxZ3CeS AimEUM0PNsN3LWZz6fttTj/iCElJ8e+3Xoef1064AdC1ngnhQa95T9RFdFDsDh0c qYUPZAmRGnISsx3AGzzEeMzLKaI4OBayn9cMlUI6VgrOHKxmKhnDUtR+K7CqMcjD DmCdfxcUuhsdkO3/qj7WC1VnCCadFt99e2Dihby/Prowvti0uUU9OtAbSRMiftCG E7ow0i4cBHW22plI3zBmX8mBqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANNlHPw bU9MwkrCPfdpJAs3RCUAMB8GA1UdIwQYMBaAFA9hQq5BaN8LGAX6WB0gOUdnqiJY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEJCMC9ERDQ3MzhFMDBB QkQxMUVFOTE3REE2NTVDNEY5QUUwMi9EMkZDcmtGbzN3c1lCZnBZSFNBNVIyZXFJ bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QyRkNya0ZvM3dzWUJmcFlIU0E1UjJlcUlsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEJCMC9ERDQ3MzhFMDBBQkQxMUVFOTE3REE2NTVDNEY5QUUwMi9EMkZDcmtGbzN3 c1lCZnBZSFNBNVIyZXFJbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYnxb2dwYks6HL8uP1GYC5GooQ1wt2g1WbMcSy69RTB0xShfUDQ73T7tvJBnr NNzml/tSIEvWl5Gs0a9Ilit3mY8lTCrlkrlMpOQyJmEFH940WiobhovVzS05mlyF UZlazaHPpvRLH37aP6NQebR4iyTz5xdiDspyW/Xi4EroM8YPZRTfjZDray1b4jrk HdjA9xFo443vBCPoV4jlkYABFqNvz4jdMKqtQQHk+lRPuqw6ZgBoX+my+u5lrh2W f+DSZlzuCk6ofjkrYbkYuPAgZNIU0omsRn1ZRULe7c8sFbQJlbdmN2O0zB3g5KOC pau2Gqhr5sDNIqNPGfhUHKoDtw== -----END CERTIFICATE-----Generated at Mon Sep 21 13:28:00 2026 by rpki-client