$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft File: 2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json) Hash identifier: lDNocicbgEnxvHi/Msbl1gXtrT2hVu+aZIsZye551rI= Subject key identifier: FB:3A:4B:9D:6B:6B:CE:F9:C5:52:17:51:67:AC:68:82:E2:54:68:F8 Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft Manifest number: 0ABB Signing time: Sat 10 Oct 2026 19:32:34 +0000 Manifest this update: Sat 10 Oct 2026 19:32:34 +0000 Manifest next update: Sat 17 Oct 2026 19:32:34 +0000 Files and hashes: 1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: EwIm30QKbugpM2GGQ1Kn+U+HEgXattIRHN+b37oMstU=) 2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: gfXrnN3jQkJVV0wj646OBjzyC1W/Dpnz2lbxL1Z1Wig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Validity Not Before: Oct 10 19:32:34 2026 GMT Not After : Oct 17 19:32:34 2026 GMT Subject: CN=6aca92d2-0228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:73:5f:8b:8c:04:64:a1:7a:21:f5:81:85: 41:f9:b5:51:87:23:11:c5:62:cc:30:dd:6a:d2:9d: 22:da:4b:10:22:75:23:ec:6d:26:3a:51:be:54:fa: ca:0f:12:92:4c:8a:ab:47:ed:8e:3f:37:78:e1:54: 2d:ef:8a:d9:20:78:cb:0c:b4:1b:e9:3b:40:1b:1c: d8:bd:42:dc:b2:cf:ae:1b:02:d3:22:9b:cb:11:f3: 6d:de:ca:aa:1f:3f:81:7b:5b:ae:ed:55:6c:cf:39: 64:c9:5d:da:db:0f:16:c8:67:0e:24:1b:b1:43:68: 6a:f8:6e:3a:2f:c5:20:d9:1a:f7:bc:78:24:00:ad: bb:7d:cc:a3:03:47:03:4e:80:b2:dc:24:7c:8e:00: 0c:86:0a:0c:8a:c2:01:7c:a4:df:d1:6c:fe:d0:2d: c6:91:59:4d:6b:ad:b9:52:ad:3e:f2:cf:58:0d:74: ca:0e:8f:f4:85:c0:96:2b:3a:9f:9f:28:92:9d:fa: ca:ba:2a:87:1b:1e:a6:2b:93:92:f4:62:8b:25:5c: 72:cf:17:21:9d:a8:6f:53:6e:2e:25:b2:5a:44:17: 12:4a:c7:21:9e:3d:ac:bc:84:31:49:c1:6d:24:52: 5f:61:87:6f:f8:b3:8e:3f:65:4a:8e:cf:43:53:c0: 73:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3A:4B:9D:6B:6B:CE:F9:C5:52:17:51:67:AC:68:82:E2:54:68:F8 X509v3 Authority Key Identifier: keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:97:51:60:92:37:80:45:67:e7:2f:65:90:79:10:0b:eb:49: 3c:68:fc:1b:e9:5b:1a:b5:87:b4:dc:01:82:bd:6a:4d:ca:5e: a8:de:e4:e7:9a:ba:e8:5a:be:58:13:0c:45:f2:c5:3a:bc:75: 53:1a:0a:61:9c:a7:98:ad:3f:14:04:e3:d3:f6:61:d4:f7:78: 56:5d:0b:64:d9:71:c1:9f:c9:16:b3:44:06:f6:5b:fb:c9:5c: 5a:4f:db:dd:9e:d4:56:01:40:9a:5e:b9:83:2a:3a:9c:03:58: 7f:07:21:d2:3d:e4:85:85:ce:d7:7e:1f:4c:dc:14:0f:8b:89: 20:c4:91:a9:b0:73:dc:c3:b2:e9:ba:11:15:7c:0c:c0:4c:93: 79:3f:aa:64:0f:bf:ba:85:0b:9d:b1:51:da:a1:03:a3:a7:83: 17:44:2e:3c:b3:b6:45:98:54:4c:d7:f9:1a:7d:f9:1e:1d:2b: 73:e6:65:e8:0d:13:4b:6d:ed:5d:50:fc:a8:f7:60:d7:67:30: 56:fe:8c:5d:5b:19:e1:0d:a1:53:d6:e9:f1:50:d2:21:0c:01: ea:70:6e:d8:99:48:57:ab:83:96:1b:32:6e:da:89:03:67:31: 3d:7d:dc:a5:96:88:1c:80:04:d3:de:ba:73:77:b8:ae:71:fc: c3:91:03:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3MTcxMTAvBgNVBAUTKERBNTAzRjk3MkNCQzkzQThDODFERjk1RjU0QTJDQjJB MzhGMTNDNzcwHhcNMjYxMDEwMTkzMjM0WhcNMjYxMDE3MTkzMjM0WjAYMRYwFAYD VQQDEw02YWNhOTJkMi0wMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnU1zX4uMBGSheiH1gYVB+bVRhyMRxWLMMN1q0p0i2ksQInUj7G0mOlG+VPrK DxKSTIqrR+2OPzd44VQt74rZIHjLDLQb6TtAGxzYvULcss+uGwLTIpvLEfNt3sqq Hz+Be1uu7VVszzlkyV3a2w8WyGcOJBuxQ2hq+G46L8Ug2Rr3vHgkAK27fcyjA0cD ToCy3CR8jgAMhgoMisIBfKTf0Wz+0C3GkVlNa625Uq0+8s9YDXTKDo/0hcCWKzqf nyiSnfrKuiqHGx6mK5OS9GKLJVxyzxchnahvU24uJbJaRBcSSschnj2svIQxScFt JFJfYYdv+LOOP2VKjs9DU8BzKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPs6S51r a875xVIXUWesaILiVGj4MB8GA1UdIwQYMBaAFNpQP5csvJOoyB35X1Siyyo48Tx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDcxNy8zOTg4OTAwMDgz RTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2aklIZmxmVktMTEtqanhQ SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsQV9seXk4azZqSUhmbGZWS0xMS2pqeFBIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDcxNy8zOTg4OTAwMDgzRTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2 aklIZmxmVktMTEtqanhQSGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI5dRYJI3gEVn5y9lkHkQC+tJPGj8G+lbGrWHtNwBgr1qTcpeqN7k55q66Fq+ WBMMRfLFOrx1UxoKYZynmK0/FATj0/Zh1Pd4Vl0LZNlxwZ/JFrNEBvZb+8lcWk/b 3Z7UVgFAml65gyo6nANYfwch0j3khYXO134fTNwUD4uJIMSRqbBz3MOy6boRFXwM wEyTeT+qZA+/uoULnbFR2qEDo6eDF0QuPLO2RZhUTNf5Gn35Hh0rc+Zl6A0TS23t XVD8qPdg12cwVv6MXVsZ4Q2hU9bp8VDSIQwB6nBu2JlIV6uDlhsybtqJA2cxPX3c pZaIHIAE0966c3e4rnH8w5EDQg== -----END CERTIFICATE-----Generated at Sun Oct 11 11:19:27 2026 by rpki-client