$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft File: 2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft (raw, json) Hash identifier: ytSFPWsJiU8cRGQcZ32SjevlmmUU6sRXEsYfGKCGdb8= Subject key identifier: 3F:11:22:FA:4E:F3:6F:53:B7:20:6D:99:E0:A3:16:47:35:D6:4A:4F Authority key identifier: D9:21:C0:18:F2:84:F2:57:4B:67:18:34:A8:48:DD:93:42:47:FA:00 Certificate issuer: /CN=A9138A44/serialNumber=D921C018F284F2574B671834A848DD934247FA00 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft Manifest number: 1B Signing time: Sun 11 Oct 2026 09:39:51 +0000 Manifest this update: Sun 11 Oct 2026 09:39:51 +0000 Manifest next update: Sun 18 Oct 2026 09:39:51 +0000 Files and hashes: 1: 2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl (hash: Gq74uNN5VRqLaG3RzYD41S4asWmcASotQVKC6/DCjgs=) 2: 53F5B3FAA11911F1AA6D5C983C11F970.roa (hash: W6FAy14Qs/4IBAuF6r/C27RQuwXDjcTuwQ+QiTmoY9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A44, serialNumber=D921C018F284F2574B671834A848DD934247FA00 Validity Not Before: Oct 11 09:39:51 2026 GMT Not After : Oct 18 09:39:51 2026 GMT Subject: CN=6acb5967-e8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:95:05:d3:65:86:35:fb:66:69:b6:44:94: 3c:5c:b2:5a:48:15:ef:ef:39:c9:ba:57:c5:2f:76: 02:a1:4a:a2:43:7f:d0:dd:13:93:01:fb:a6:69:cf: 2d:90:b4:46:77:fd:ee:21:6b:53:3a:2e:dc:b1:5f: e6:19:1a:e4:72:35:3a:e0:cf:ba:bb:11:19:c4:18: 3c:14:7d:9c:33:24:ed:78:37:6c:8b:8d:31:c2:0f: 0e:e9:14:01:4c:40:4b:08:0d:2c:44:9d:a3:91:53: 2d:3a:69:86:66:0c:92:b1:27:71:dc:d2:34:7f:2b: 38:01:11:e7:02:39:8f:ac:fd:03:d8:92:77:1c:cb: 33:4c:d8:e1:31:04:c0:fb:c9:8f:8b:a4:c5:99:e9: 55:8e:13:5d:aa:ee:f0:51:15:4d:fb:eb:f6:f8:f1: ea:ff:18:20:55:50:3a:fb:f3:ed:3b:28:20:5f:ce: ec:34:4f:2f:46:35:05:f1:1a:af:16:5d:63:9d:7b: d5:d7:96:a7:fd:d9:1d:de:64:79:85:7d:1c:79:fe: 13:50:fa:ca:aa:04:29:40:60:af:af:c7:e4:58:57: 86:01:0e:c1:01:31:fa:11:c0:76:10:97:75:6c:5f: 77:34:dd:dc:9c:49:ac:76:a5:05:2f:6a:0c:6d:26: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:11:22:FA:4E:F3:6F:53:B7:20:6D:99:E0:A3:16:47:35:D6:4A:4F X509v3 Authority Key Identifier: keyid:D9:21:C0:18:F2:84:F2:57:4B:67:18:34:A8:48:DD:93:42:47:FA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:da:14:80:49:1f:1b:43:99:ee:30:5c:82:e7:3c:d1:44:34: 72:7d:3b:1d:e3:9f:1f:ab:d1:87:b8:77:1a:ec:d5:da:c3:a7: 9e:38:a0:c2:69:5c:76:3a:56:65:14:36:8f:74:d6:22:f2:3f: e7:7c:f2:3f:7f:51:5c:52:03:41:90:47:81:15:20:56:d7:ce: 1d:55:91:b4:af:b6:5e:16:16:17:be:17:57:08:ae:d4:7d:61: 3e:5e:c1:1c:41:93:ec:e5:9b:80:d7:4f:66:69:b9:7a:35:b1: 41:97:af:47:46:14:98:32:85:d5:45:b6:16:a2:88:0d:e5:bb: 47:23:e5:86:83:52:e4:85:db:10:4b:17:bd:13:2b:35:16:d0: 85:07:0f:cd:12:96:8e:f4:d5:42:f3:99:be:01:d6:95:9d:51: 41:6a:bb:62:1d:b7:b8:16:bc:ab:bc:88:73:e3:c8:91:ee:a1: 5a:d4:af:58:d0:8a:ee:cb:dd:15:45:8d:04:c9:58:4b:29:aa: 1e:c3:2e:15:e2:82:83:ba:82:58:c3:44:17:2c:af:7a:2e:62: 8d:57:70:70:f8:1e:18:05:65:75:a8:2e:00:ce:82:32:ce:22: 28:1d:20:73:da:f3:b6:8f:0b:f5:58:0f:98:b0:cf:21:d8:2d: 6b:80:2b:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEE0NDExMC8GA1UEBRMoRDkyMUMwMThGMjg0RjI1NzRCNjcxODM0QTg0OEREOTM0 MjQ3RkEwMDAeFw0yNjEwMTEwOTM5NTFaFw0yNjEwMTgwOTM5NTFaMBgxFjAUBgNV BAMTDTZhY2I1OTY3LWU4ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEsZUF02WGNftmabZElDxcslpIFe/vOcm6V8UvdgKhSqJDf9DdE5MB+6Zpzy2Q tEZ3/e4ha1M6LtyxX+YZGuRyNTrgz7q7ERnEGDwUfZwzJO14N2yLjTHCDw7pFAFM QEsIDSxEnaORUy06aYZmDJKxJ3Hc0jR/KzgBEecCOY+s/QPYknccyzNM2OExBMD7 yY+LpMWZ6VWOE12q7vBRFU376/b48er/GCBVUDr78+07KCBfzuw0Ty9GNQXxGq8W XWOde9XXlqf92R3eZHmFfRx5/hNQ+sqqBClAYK+vx+RYV4YBDsEBMfoRwHYQl3Vs X3c03dycSax2pQUvagxtJhwXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPxEi+k7z b1O3IG2Z4KMWRzXWSk8wHwYDVR0jBBgwFoAU2SHAGPKE8ldLZxg0qEjdk0JH+gAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QTQ0LzZERkU0QkQ2QTEw NTExRjE4MENFQjZFRjM1MTFGOTcwLzJTSEFHUEtFOGxkTFp4ZzBxRWpkazBKSC1n QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlNIQUdQS0U4bGRMWnhnMHFFamRrMEpILWdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QTQ0LzZERkU0QkQ2QTEwNTExRjE4MENFQjZFRjM1MTFGOTcwLzJTSEFHUEtFOGxk TFp4ZzBxRWpkazBKSC1nQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBD2hSASR8bQ5nuMFyC5zzRRDRyfTsd458fq9GHuHca7NXaw6eeOKDCaVx2OlZl FDaPdNYi8j/nfPI/f1FcUgNBkEeBFSBW184dVZG0r7ZeFhYXvhdXCK7UfWE+XsEc QZPs5ZuA109mabl6NbFBl69HRhSYMoXVRbYWoogN5btHI+WGg1LkhdsQSxe9Eys1 FtCFBw/NEpaO9NVC85m+AdaVnVFBartiHbe4FryrvIhz48iR7qFa1K9Y0Iruy90V RY0EyVhLKaoewy4V4oKDuoJYw0QXLK96LmKNV3Bw+B4YBWV1qC4AzoIyziIoHSBz 2vO2jwv1WA+YsM8h2C1rgCsW -----END CERTIFICATE-----Generated at Mon Oct 12 22:53:38 2026 by rpki-client