$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft File: H2wzTrxkYqJkUoZ6u1-E72itwCw.mft (raw, json) Hash identifier: PPUxfGWFFnq7c9A1CWv4/Z/TTr2+1A41MTSLjZDJ9a8= Subject key identifier: 1F:8C:3F:DA:C9:CF:6A:5E:B0:16:1B:5A:0F:5C:4B:6D:F3:05:DC:0B Authority key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C Certificate issuer: /CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C Certificate serial: 09F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft Manifest number: 09E2 Signing time: Mon 12 Oct 2026 20:00:25 +0000 Manifest this update: Mon 12 Oct 2026 20:00:25 +0000 Manifest next update: Mon 19 Oct 2026 20:00:24 +0000 Files and hashes: 1: H2wzTrxkYqJkUoZ6u1-E72itwCw.crl (hash: 46Wl+VwRJf7hbFG94fHyljAvO2OwknmW1RN/GuwRFX8=) 2: 46F4E81842B611F1BDBC0B88BD833773.roa (hash: kRpPpGlJ8I0/+ZwIGr7snXVvHIdZiK+7MPbuAUSeFqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 20:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2549 (0x9f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138447, serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C Validity Not Before: Oct 12 20:00:25 2026 GMT Not After : Oct 19 20:00:24 2026 GMT Subject: CN=6acd3c59-6648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:dc:aa:ae:fa:5f:7b:8e:5f:fd:af:69:6a: 2f:01:59:fe:8e:29:cd:20:05:4d:75:9d:5a:81:b2: 30:bd:b9:11:9c:2d:da:6f:96:a8:eb:81:4b:c6:f6: 53:23:46:14:c0:41:9a:1f:1f:6e:1e:1e:31:e8:0e: e0:65:d0:4e:04:9b:16:71:23:60:2a:c1:ee:97:b0: 8b:80:b0:96:a3:c7:74:c1:8c:5e:b7:91:2c:79:9a: 31:c7:90:bb:0d:b9:d5:1a:a2:19:0d:aa:ca:29:40: b4:be:74:d6:96:bb:db:ed:5f:64:fe:2d:4a:bd:f8: 49:8c:05:7c:97:09:58:a6:11:ef:80:00:f9:80:51: 70:2b:ae:be:20:ad:11:b7:9c:ee:69:4a:a0:bc:5b: 97:fe:58:d5:f8:1f:3e:c8:24:eb:04:f7:d1:de:dc: 73:94:8c:cb:8e:d5:ee:79:15:f1:98:cf:1c:cc:a3: a9:44:d8:2a:b1:20:ea:1e:ef:4c:62:87:9c:3d:62: 4d:b1:9d:b7:d2:ba:dc:01:a0:d7:f5:87:e5:ef:a1: 44:8a:76:39:76:06:04:cb:bd:13:24:98:65:a6:61: bd:f0:b1:89:46:c3:b4:e4:72:a1:6d:96:76:b4:92: cf:e3:2b:18:27:6b:e4:03:f1:39:53:5d:9d:c9:f2: 5f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8C:3F:DA:C9:CF:6A:5E:B0:16:1B:5A:0F:5C:4B:6D:F3:05:DC:0B X509v3 Authority Key Identifier: keyid:1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:94:a8:5a:b6:97:c7:ee:a7:fa:b8:75:b2:ac:4a:b8:04:4a: f4:63:20:2b:de:f8:41:0d:0d:e6:8c:8e:c9:89:0a:fb:bd:77: c6:51:19:7b:2f:68:af:d4:53:c9:7b:09:bd:ea:4c:0e:28:00: ed:d0:04:eb:03:75:66:45:fd:39:11:a2:f7:3b:e1:83:1b:bb: f5:4a:cd:eb:07:cd:dc:3f:60:fd:69:13:29:fa:7d:17:91:82: 12:e6:d3:c1:51:5e:9a:6c:8e:3e:f9:69:fb:1a:8f:33:d0:8a: 33:6d:a0:f4:44:b2:cc:39:b5:da:d5:4c:d3:2f:6f:76:ab:44: 90:c7:5f:e9:69:9b:e1:d4:08:7e:d7:11:af:3a:5d:1b:3c:d8: c8:41:48:ec:98:3d:74:75:c2:19:88:25:5a:a5:aa:f2:f8:4f: 20:e1:31:91:a7:20:3b:4e:52:7e:1b:03:9a:57:0f:7e:55:af: 7c:77:be:4b:fc:d1:b6:6b:8a:f3:c3:bf:c1:ec:fa:4a:e4:63: 0b:78:8e:b9:6c:69:b7:23:fe:6d:33:de:d2:d5:ec:d4:59:86: 01:cb:af:7b:43:2e:19:02:5c:28:e5:e8:e6:58:7e:7e:fb:d2: 93:f9:58:a4:75:e7:ba:fd:32:d2:2d:8b:c6:9e:e7:16:8d:4e: 0c:e6:2d:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NDcxMTAvBgNVBAUTKDFGNkMzMzRFQkM2NDYyQTI2NDUyODY3QUJCNUY4NEVG NjhBREMwMkMwHhcNMjYxMDEyMjAwMDI1WhcNMjYxMDE5MjAwMDI0WjAYMRYwFAYD VQQDEw02YWNkM2M1OS02NjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHvcqq76X3uOX/2vaWovAVn+jinNIAVNdZ1agbIwvbkRnC3ab5ao64FLxvZT I0YUwEGaHx9uHh4x6A7gZdBOBJsWcSNgKsHul7CLgLCWo8d0wYxet5EseZoxx5C7 DbnVGqIZDarKKUC0vnTWlrvb7V9k/i1KvfhJjAV8lwlYphHvgAD5gFFwK66+IK0R t5zuaUqgvFuX/ljV+B8+yCTrBPfR3txzlIzLjtXueRXxmM8czKOpRNgqsSDqHu9M YoecPWJNsZ230rrcAaDX9Yfl76FEinY5dgYEy70TJJhlpmG98LGJRsO05HKhbZZ2 tJLP4ysYJ2vkA/E5U12dyfJf5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+MP9rJ z2pesBYbWg9cS23zBdwLMB8GA1UdIwQYMBaAFB9sM068ZGKiZFKGertfhO9orcAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ0Ny80Q0VCM0MzQ0Iw RkQxMUVBOEEwOTkyNDJDNEY5QUUwMi9IMnd6VHJ4a1lxSmtVb1o2dTEtRTcyaXR3 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyd3pUcnhrWXFKa1VvWjZ1MS1FNzJpdHdDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ0Ny80Q0VCM0MzQ0IwRkQxMUVBOEEwOTkyNDJDNEY5QUUwMi9IMnd6VHJ4a1lx SmtVb1o2dTEtRTcyaXR3Q3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdJSoWraXx+6n+rh1sqxKuARK9GMgK974QQ0N5oyOyYkK+713xlEZey9or9RT yXsJvepMDigA7dAE6wN1ZkX9ORGi9zvhgxu79UrN6wfN3D9g/WkTKfp9F5GCEubT wVFemmyOPvlp+xqPM9CKM22g9ESyzDm12tVM0y9vdqtEkMdf6Wmb4dQIftcRrzpd GzzYyEFI7Jg9dHXCGYglWqWq8vhPIOExkacgO05SfhsDmlcPflWvfHe+S/zRtmuK 88O/wez6SuRjC3iOuWxptyP+bTPe0tXs1FmGAcuve0MuGQJcKOXo5lh+fvvSk/lY pHXnuv0y0i2Lxp7nFo1ODOYtBw== -----END CERTIFICATE-----Generated at Wed Oct 14 21:41:30 2026 by rpki-client