$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft File: 2HXmPHNQjdifas3MBgFEoIwIZtw.mft (raw, json) Hash identifier: /49EDh7cd7UbRh5B8e+DqS8eW/TgC5FAEzzEVaTMfjI= Subject key identifier: CB:56:E8:7F:1E:8F:56:F0:7A:98:BB:88:35:F4:30:B5:DF:F7:F6:A7 Authority key identifier: D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC Certificate issuer: /CN=A914E950/serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft Manifest number: 04B4 Signing time: Sun 20 Sep 2026 23:41:07 +0000 Manifest this update: Sun 20 Sep 2026 23:41:06 +0000 Manifest next update: Sun 27 Sep 2026 23:41:06 +0000 Files and hashes: 1: 2HXmPHNQjdifas3MBgFEoIwIZtw.crl (hash: TNsvI8aujEIH07Qv9bejCOvRT9kby6xKo/C8FZgr2qY=) 2: 6199B5668DE011ECB9F9C06EC4F9AE02.roa (hash: gXnStk1MwegllJpHCk0mKvppBMmur0BRxsppyW6UBsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E950, serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC Validity Not Before: Sep 20 23:41:06 2026 GMT Not After : Sep 27 23:41:06 2026 GMT Subject: CN=6ab06f13-4a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:dd:72:2a:57:69:2c:16:dc:3d:7a:95:5b: b6:3a:32:90:02:5e:ea:aa:95:7a:9d:12:63:56:0e: 84:9c:a3:c9:da:7f:89:7c:bb:9b:7f:07:95:11:67: e5:52:0c:cc:f6:af:b2:17:89:07:91:8a:90:44:fb: 12:e0:87:46:54:b5:8d:93:7d:e6:99:28:b3:69:ef: 1c:45:cf:8a:c6:17:2c:c0:77:24:a5:cf:d3:0a:59: fc:8a:c9:6f:e8:d0:f1:fa:37:5d:5e:3f:c5:11:11: ef:78:4d:5d:b7:61:07:b5:4b:c7:9d:f3:39:10:e1: 97:39:85:c7:7a:f3:17:93:ac:71:5d:b5:20:05:f6: c8:f0:36:53:fb:cf:29:b2:2f:7d:e9:6f:1b:c8:89: 58:70:8e:b1:26:f1:9f:87:08:8b:3b:b1:c5:20:74: ca:54:2c:a6:ae:42:58:d4:1e:a8:2e:21:89:fe:f6: ec:07:2e:00:d0:b3:8f:e7:7d:d8:99:63:db:64:b6: 8c:b8:2e:88:85:83:b8:e7:84:13:7c:1a:13:c6:03: c2:e5:93:b6:34:dd:b6:38:c9:86:44:c3:f1:1c:d9: 9c:7d:64:55:ef:2e:86:7a:bc:29:78:a2:f7:00:da: bb:d7:d7:91:96:eb:30:db:83:6e:a5:f6:0d:d8:b1: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:56:E8:7F:1E:8F:56:F0:7A:98:BB:88:35:F4:30:B5:DF:F7:F6:A7 X509v3 Authority Key Identifier: keyid:D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:00:8a:30:bf:66:b6:1d:67:07:d7:2a:5f:d1:ba:9f:4c:ed: 91:d9:5a:04:d1:20:07:ee:36:50:1a:ef:04:df:4c:0d:0f:76: 8a:19:76:a8:2f:a8:71:ee:88:39:68:72:29:ba:5a:7a:47:5b: db:1a:1d:a4:c7:56:6b:db:cb:6b:a7:2e:c7:21:2d:06:b5:e6: bc:90:6b:d7:58:c7:91:b9:31:0d:a2:4f:b4:4a:24:12:64:17: b3:1a:06:61:a8:ca:85:29:fc:7e:ce:88:d2:d2:a5:f4:05:53: 38:32:e9:53:66:19:6d:ce:1e:55:ab:a1:37:4d:80:7e:ed:01: 22:2c:70:0a:70:44:f7:7a:be:1f:69:21:e4:06:27:f3:1f:96: 8c:cb:99:e8:7b:aa:59:c1:7d:bc:c3:86:c7:c8:2d:dc:fb:78: f0:2f:00:c4:73:04:43:98:c3:61:5e:62:c8:cf:03:95:f1:d1: 19:f2:6b:bb:c3:e7:f2:57:56:04:f1:7d:9e:69:30:ee:09:56: 1a:2b:23:a0:72:27:1e:ad:32:e4:17:79:9d:99:94:66:00:be: cd:76:99:86:2f:1c:b5:1b:a2:63:09:8e:49:02:fe:e2:3d:ac: 31:8e:4b:9d:06:04:22:e2:43:15:5d:be:68:c2:ce:21:6e:0f: ad:b9:0b:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5NTAxMTAvBgNVBAUTKEQ4NzVFNjNDNzM1MDhERDg5RjZBQ0RDQzA2MDE0NEEw OEMwODY2REMwHhcNMjYwOTIwMjM0MTA2WhcNMjYwOTI3MjM0MTA2WjAYMRYwFAYD VQQDEw02YWIwNmYxMy00YTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7TdcipXaSwW3D16lVu2OjKQAl7qqpV6nRJjVg6EnKPJ2n+JfLubfweVEWfl UgzM9q+yF4kHkYqQRPsS4IdGVLWNk33mmSizae8cRc+KxhcswHckpc/TCln8islv 6NDx+jddXj/FERHveE1dt2EHtUvHnfM5EOGXOYXHevMXk6xxXbUgBfbI8DZT+88p si996W8byIlYcI6xJvGfhwiLO7HFIHTKVCymrkJY1B6oLiGJ/vbsBy4A0LOP533Y mWPbZLaMuC6IhYO454QTfBoTxgPC5ZO2NN22OMmGRMPxHNmcfWRV7y6GerwpeKL3 ANq719eRlusw24NupfYN2LHZVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtW6H8e j1bwepi7iDX0MLXf9/anMB8GA1UdIwQYMBaAFNh15jxzUI3Yn2rNzAYBRKCMCGbc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTk1MC9DQkYwNkYzMDhE REMxMUVDQTE0MDBDNjlDNEY5QUUwMi8ySFhtUEhOUWpkaWZhczNNQmdGRW9Jd0la dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJIWG1QSE5RamRpZmFzM01CZ0ZFb0l3SVp0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTk1MC9DQkYwNkYzMDhEREMxMUVDQTE0MDBDNjlDNEY5QUUwMi8ySFhtUEhOUWpk aWZhczNNQmdGRW9Jd0ladHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALACKML9mth1nB9cqX9G6n0ztkdlaBNEgB+42UBrvBN9MDQ92ihl2qC+oce6I OWhyKbpaekdb2xodpMdWa9vLa6cuxyEtBrXmvJBr11jHkbkxDaJPtEokEmQXsxoG YajKhSn8fs6I0tKl9AVTODLpU2YZbc4eVauhN02Afu0BIixwCnBE93q+H2kh5AYn 8x+WjMuZ6HuqWcF9vMOGx8gt3Pt48C8AxHMEQ5jDYV5iyM8DlfHRGfJru8Pn8ldW BPF9nmkw7glWGisjoHInHq0y5Bd5nZmUZgC+zXaZhi8ctRuiYwmOSQL+4j2sMY5L nQYEIuJDFV2+aMLOIW4PrbkLDA== -----END CERTIFICATE-----Generated at Mon Sep 21 19:03:43 2026 by rpki-client