$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: unGSR2pJO6LZq+a4GqTVASLgEfHN+fmh5o3nBnGIuAo= Subject key identifier: 08:EE:7E:2E:A0:61:E2:F7:37:28:EC:BE:36:5E:1A:65:22:FD:1A:35 Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 0106 Signing time: Sat 03 Oct 2026 06:47:31 +0000 Manifest this update: Sat 03 Oct 2026 06:47:30 +0000 Manifest next update: Sat 10 Oct 2026 06:47:30 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: cghElCk+doIqKkg871+p9uJhUTjXuD++xrx+s+j18Io=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: /aTSxcHxRkOfKrRCHUaeDVdu5n6tqyMBf2gXf3ZAFRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Oct 3 06:47:30 2026 GMT Not After : Oct 10 06:47:30 2026 GMT Subject: CN=6ac0a502-2ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:ca:bd:cc:9d:66:af:34:83:aa:ff:18:c7: 87:f6:66:13:04:74:cb:0b:e6:0d:c8:19:ec:b5:ca: ed:4a:16:8b:c1:1a:91:7d:a2:5f:e8:a1:28:ba:57: 91:10:2b:38:16:21:3e:4f:e0:98:bd:45:c3:96:76: b8:c8:18:0e:83:6f:1e:38:d3:1f:3d:21:88:26:6e: 6b:14:b0:d4:d9:b7:6d:cb:59:85:9c:aa:4d:76:35: 6c:5f:d1:c5:30:07:1d:93:aa:ce:35:bb:7f:2a:6d: b1:7c:c4:81:73:73:c2:53:f8:86:6e:87:eb:b0:b0: f4:07:4e:c7:29:3a:57:23:7f:83:60:75:7d:a5:b8: b2:7a:dd:10:0d:90:36:2e:4b:7a:cc:34:42:6c:be: 0f:2d:bc:24:d9:14:27:c8:90:c7:d9:26:19:8f:2b: 01:7a:1a:ba:42:08:0f:77:29:7f:8f:ad:14:d0:b8: 81:9e:35:ad:18:7f:6c:d4:80:c2:f0:70:ff:13:1e: 2e:15:b8:49:0a:45:44:45:54:94:7c:23:12:94:e5: 7a:fe:99:90:44:11:7c:6d:86:2a:32:e0:53:fe:e9: a2:15:eb:87:ed:9b:80:bc:96:69:a3:3f:14:39:39: e1:1c:68:a7:79:3e:0d:ec:3a:12:26:26:a4:59:91: 9a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EE:7E:2E:A0:61:E2:F7:37:28:EC:BE:36:5E:1A:65:22:FD:1A:35 X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:22:23:c6:df:8a:a8:5f:8f:8c:f0:4b:cd:71:dc:95:99:12: c4:b5:95:bd:21:8d:85:98:e4:5c:72:c8:a0:17:d7:d1:9f:ef: 90:99:29:21:0e:25:65:79:07:f1:23:9c:cf:4d:3b:76:cd:67: 6d:35:89:d5:52:1e:c7:78:0b:f2:9a:b6:5b:97:b5:0c:3f:52: 90:66:0b:83:90:38:e3:ea:4b:63:45:98:b4:28:ab:c5:bc:60: 4b:68:fd:44:63:a8:ef:10:06:03:a6:3a:61:a3:90:98:83:ea: bb:7b:aa:b4:ca:18:c4:1f:78:1c:86:f8:58:0a:d9:66:08:21: d0:ec:78:9d:04:45:c5:fa:ea:35:8a:00:bc:83:67:23:d6:9f: a0:77:b3:1b:9e:3a:de:81:7e:95:38:da:8e:7a:0b:79:47:0b: f3:6d:e3:ff:8b:18:6e:9f:13:45:10:79:03:a0:da:fc:58:7a: b3:ad:b1:0e:3a:4e:b8:bf:e2:4b:47:1d:20:1e:49:ae:14:b1: 3e:a9:50:f7:ec:7e:0f:4e:ed:7c:5c:eb:10:80:67:d2:27:a4: 14:b4:81:25:dc:51:a9:a5:fe:bc:c1:d5:c4:24:fe:63:ed:4f: 2f:71:81:9b:72:58:ce:ed:b7:bd:ea:eb:b0:db:07:76:d4:2c: b7:e9:d7:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwNDkxMTAvBgNVBAUTKEQ5RDFCMDU1RkVGQzg5RjU4MDNBN0ZBOEUyQjkwMjYx OUYzMzhEOEUwHhcNMjYxMDAzMDY0NzMwWhcNMjYxMDEwMDY0NzMwWjAYMRYwFAYD VQQDEw02YWMwYTUwMi0yYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFPKvcydZq80g6r/GMeH9mYTBHTLC+YNyBnstcrtShaLwRqRfaJf6KEouleR ECs4FiE+T+CYvUXDlna4yBgOg28eONMfPSGIJm5rFLDU2bdty1mFnKpNdjVsX9HF MAcdk6rONbt/Km2xfMSBc3PCU/iGbofrsLD0B07HKTpXI3+DYHV9pbiyet0QDZA2 Lkt6zDRCbL4PLbwk2RQnyJDH2SYZjysBehq6QggPdyl/j60U0LiBnjWtGH9s1IDC 8HD/Ex4uFbhJCkVERVSUfCMSlOV6/pmQRBF8bYYqMuBT/umiFeuH7ZuAvJZpoz8U OTnhHGineT4N7DoSJiakWZGa2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjufi6g YeL3NyjsvjZeGmUi/Ro1MB8GA1UdIwQYMBaAFNnRsFX+/In1gDp/qOK5AmGfM42O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzA0OS9CMDlDQkQ2NjJD NjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlmV0FPbi1vNHJrQ1laOHpq WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzA0OS9CMDlDQkQ2NjJDNjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlm V0FPbi1vNHJrQ1laOHpqWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmiIjxt+KqF+PjPBLzXHclZkSxLWVvSGNhZjkXHLIoBfX0Z/vkJkpIQ4lZXkH 8SOcz007ds1nbTWJ1VIex3gL8pq2W5e1DD9SkGYLg5A44+pLY0WYtCirxbxgS2j9 RGOo7xAGA6Y6YaOQmIPqu3uqtMoYxB94HIb4WArZZggh0Ox4nQRFxfrqNYoAvINn I9afoHezG5463oF+lTjajnoLeUcL823j/4sYbp8TRRB5A6Da/Fh6s62xDjpOuL/i S0cdIB5JrhSxPqlQ9+x+D07tfFzrEIBn0iekFLSBJdxRqaX+vMHVxCT+Y+1PL3GB m3JYzu23verrsNsHdtQst+nXyg== -----END CERTIFICATE-----Generated at Sat Oct 3 10:44:40 2026 by rpki-client