$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft File: 2QhrDfk0LcKwkbrobLd5_GJZvXs.mft (raw, json) Hash identifier: SSllGTWoBuaVuV/wZe2P94yaH5i5vtF4+V9HiovyjH8= Subject key identifier: 44:9E:A7:DE:F5:E7:4E:DA:9F:ED:90:02:80:9C:0B:49:26:8A:6B:28 Authority key identifier: D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B Certificate issuer: /CN=A914F2EC/serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B Certificate serial: 3592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft Manifest number: 3587 Signing time: Tue 22 Sep 2026 14:56:45 +0000 Manifest this update: Tue 22 Sep 2026 14:56:44 +0000 Manifest next update: Tue 29 Sep 2026 14:56:44 +0000 Files and hashes: 1: 2QhrDfk0LcKwkbrobLd5_GJZvXs.crl (hash: 1zt5+pftCu/uAsXr9L/LbnyjCwO6q0Y3+Hjxvt2qB1A=) 2: 588BD7269A1211E8B97A623AC4F9AE02.roa (hash: WIHf/g57A92kBt+M1v/6HUGwLpZi39D8KAuOlAkvShg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13714 (0x3592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F2EC, serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B Validity Not Before: Sep 22 14:56:44 2026 GMT Not After : Sep 29 14:56:44 2026 GMT Subject: CN=6ab2972d-2aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a1:08:c0:5a:ed:6e:5d:1f:90:e4:0e:9c:c2: 17:f2:5a:6f:cb:27:cf:e3:33:56:46:05:46:d5:bb: e3:7a:81:b4:50:06:32:3b:1d:f3:a5:23:8c:b3:f2: 1e:90:f0:1b:c9:61:ef:d8:68:f6:35:e7:0b:1b:9c: f7:6c:65:00:e1:62:52:1e:10:82:95:97:1f:67:db: 12:c2:60:9d:55:1c:98:70:57:96:fd:28:f9:33:12: b4:0b:48:7a:41:1e:49:3a:37:a6:77:9f:6b:2f:b6: 63:86:fe:56:eb:d8:29:21:d9:ca:f3:2e:71:f0:ae: fd:74:15:9d:17:25:08:d2:5b:19:66:d6:12:54:34: a1:f1:e0:f4:5d:18:26:37:7e:be:c3:8e:cb:52:0c: 55:f5:fa:3a:b2:0c:82:f0:e9:84:2a:5e:c4:65:9d: d4:a5:65:02:2e:e9:79:3a:f5:59:44:5f:2b:c8:05: 95:0b:d0:2b:33:6c:89:cc:1f:0e:ca:1e:d5:ba:5c: 3b:15:0c:8e:f1:e5:cd:44:f3:6c:b4:46:d7:e7:e3: 02:ea:9b:dc:86:ca:f0:ea:4d:f5:c2:1a:17:24:bb: ce:64:ea:2f:7b:3f:91:a4:54:ba:d3:a4:75:62:7a: d7:e0:8e:a2:93:9f:4f:48:a9:af:f6:82:dc:5c:f0: 9c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9E:A7:DE:F5:E7:4E:DA:9F:ED:90:02:80:9C:0B:49:26:8A:6B:28 X509v3 Authority Key Identifier: keyid:D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c3:ab:6d:f8:5c:c1:a9:0a:02:9e:18:45:b9:83:99:36:20: 50:ac:65:0f:61:b5:68:66:e2:b6:2f:16:a5:c5:10:06:38:d7: 5b:71:eb:3e:61:b6:71:05:55:e1:a9:16:1f:69:97:07:db:58: 00:ee:07:a6:fd:0c:2f:2d:f6:1e:12:10:c1:dd:3a:f6:13:5e: b2:86:86:45:45:cd:4f:66:ba:d0:95:02:2c:5d:71:7c:f5:c3: 72:03:bf:a2:d2:5a:a3:9d:ee:12:e0:5d:db:1b:85:bd:57:59: 08:16:56:26:39:8b:67:8e:08:9a:18:6f:9c:fc:5b:2d:95:19: ee:22:d3:96:70:47:bb:f9:af:bf:57:57:60:54:08:ac:29:96: 14:fb:0b:b6:27:28:a1:1f:91:41:65:f6:d1:df:d5:bb:4a:f8: f7:b3:9c:b4:06:7d:11:c7:f1:61:df:a8:ca:97:d6:ca:90:d6: 85:4f:68:7e:30:82:c1:ca:74:0a:80:4b:77:7e:b9:ff:53:ce: 21:77:b2:9b:35:9c:5d:e6:92:29:7a:61:94:cf:29:1f:64:7e: 22:38:cf:11:08:b0:b7:e0:0c:e2:a7:f6:fc:ce:92:7c:d3:ef: 75:b6:70:08:99:76:f6:fe:37:d4:cc:12:b2:ca:b7:9f:5e:3f: ed:89:89:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyRUMxMTAvBgNVBAUTKEQ5MDg2QjBERjkzNDJEQzJCMDkxQkFFODZDQjc3OUZD NjI1OUJEN0IwHhcNMjYwOTIyMTQ1NjQ0WhcNMjYwOTI5MTQ1NjQ0WjAYMRYwFAYD VQQDEw02YWIyOTcyZC0yYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4aEIwFrtbl0fkOQOnMIX8lpvyyfP4zNWRgVG1bvjeoG0UAYyOx3zpSOMs/Ie kPAbyWHv2Gj2NecLG5z3bGUA4WJSHhCClZcfZ9sSwmCdVRyYcFeW/Sj5MxK0C0h6 QR5JOjemd59rL7Zjhv5W69gpIdnK8y5x8K79dBWdFyUI0lsZZtYSVDSh8eD0XRgm N36+w47LUgxV9fo6sgyC8OmEKl7EZZ3UpWUCLul5OvVZRF8ryAWVC9ArM2yJzB8O yh7Vulw7FQyO8eXNRPNstEbX5+MC6pvchsrw6k31whoXJLvOZOovez+RpFS606R1 YnrX4I6ik59PSKmv9oLcXPCc1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESep971 507an+2QAoCcC0kmimsoMB8GA1UdIwQYMBaAFNkIaw35NC3CsJG66Gy3efxiWb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjJFQy9ENThBMjI2QzFE OUMxMUUyOUJDM0IyOEIwOEIwMkNEMi8yUWhyRGZrMExjS3drYnJvYkxkNV9HSlp2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaHJEZmswTGNLd2ticm9iTGQ1X0dKWnZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjJFQy9ENThBMjI2QzFEOUMxMUUyOUJDM0IyOEIwOEIwMkNEMi8yUWhyRGZrMExj S3drYnJvYkxkNV9HSlp2WHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfcOrbfhcwakKAp4YRbmDmTYgUKxlD2G1aGbiti8WpcUQBjjXW3HrPmG2cQVV 4akWH2mXB9tYAO4Hpv0MLy32HhIQwd069hNesoaGRUXNT2a60JUCLF1xfPXDcgO/ otJao53uEuBd2xuFvVdZCBZWJjmLZ44ImhhvnPxbLZUZ7iLTlnBHu/mvv1dXYFQI rCmWFPsLticooR+RQWX20d/Vu0r497OctAZ9EcfxYd+oypfWypDWhU9ofjCCwcp0 CoBLd365/1POIXeymzWcXeaSKXphlM8pH2R+IjjPEQiwt+AM4qf2/M6SfNPvdbZw CJl29v431MwSssq3n14/7YmJpg== -----END CERTIFICATE-----Generated at Wed Sep 23 11:46:31 2026 by rpki-client