$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json) Hash identifier: /d91I66P3+Og0QrvZQQxEk9WW8EfwK/QkqScBHM5NUA= Subject key identifier: 83:B6:76:E5:D5:AD:9F:F0:6F:C5:32:1B:31:DD:A1:FC:7D:CE:50:04 Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 0777 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft Manifest number: 08A2 Signing time: Sun 20 Sep 2026 20:18:08 +0000 Manifest this update: Sun 20 Sep 2026 20:18:07 +0000 Manifest next update: Sun 27 Sep 2026 20:18:07 +0000 Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: zj4ioW6CUbcConH8KLqGcVQRrUFlopuFYcXHkDC52b0=) 2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: uPVVKDs8FXCGXCVQqQJZYdG3JPqyWcieyoiy4+qFczg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1911 (0x777) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: Sep 20 20:18:07 2026 GMT Not After : Sep 27 20:18:07 2026 GMT Subject: CN=6ab03f7f-5b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:95:dc:8c:08:ae:93:c0:f2:07:86:14:28: 86:6b:fa:c7:c6:7b:a5:18:6b:61:7b:71:96:0c:b6: f1:8c:31:15:65:92:3c:1c:52:e4:71:e5:40:af:3d: 85:ff:6f:0b:43:ef:8b:90:67:17:36:4b:2f:40:2b: 20:24:9f:06:90:4d:27:56:55:c3:0c:86:8e:91:d5: 6d:6b:31:c1:8f:c5:ac:97:40:f6:fb:71:d5:51:d6: b4:46:57:b6:0a:ef:21:75:82:3a:8a:63:02:07:c9: 1a:f9:74:56:e5:b7:61:d0:2e:9e:21:a4:f5:74:96: 80:d5:e9:fe:80:bf:cd:0f:86:17:49:b7:1a:43:12: 53:ca:1b:28:03:d1:91:26:9d:59:f9:4f:d9:2b:84: 36:ae:90:45:56:11:e1:d3:36:d8:51:80:81:d5:9c: 2f:b5:85:30:ef:c9:ed:5e:75:e9:1f:99:1a:f8:55: c3:d7:c5:b4:9a:b2:f1:13:13:e4:90:af:41:9d:42: 05:d2:c2:18:eb:a7:f0:27:53:bf:4c:3a:7f:ca:fd: 47:f9:f3:2c:90:cb:7e:ed:96:d2:f4:ad:34:32:5b: 2b:a0:36:b8:ed:b4:be:b1:09:56:50:54:2d:19:7c: 2f:9c:36:4c:db:f3:58:27:20:ee:ec:19:1d:21:fe: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B6:76:E5:D5:AD:9F:F0:6F:C5:32:1B:31:DD:A1:FC:7D:CE:50:04 X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:24:1e:cc:34:26:a2:c5:a4:59:39:a6:3a:f2:45:ab:81:d2: de:2c:f4:64:8b:82:4a:59:ff:6d:d8:18:b2:b0:cd:89:c4:93: de:4f:65:ed:7d:df:17:3a:d1:cc:c5:d0:1f:9a:46:5e:18:b2: 13:f3:5a:d6:80:1a:e0:59:33:38:de:f8:31:5d:29:b6:df:c4: 77:2e:9d:6a:56:05:9b:ed:24:d7:15:a7:f7:27:4b:35:c8:f0: 94:da:dd:84:c7:9c:c3:16:95:76:2d:83:86:5f:fd:2d:12:24: 1e:c7:d4:db:3d:b9:db:4a:f3:0d:d6:d0:be:a7:bb:bb:83:ec: 25:f6:0a:e1:88:fb:af:ba:df:7a:dc:60:56:0b:d1:2f:52:37: 88:01:6d:42:0d:41:96:cf:8c:75:8e:3e:ee:da:d3:fb:44:2d: aa:c0:e8:09:d3:9e:92:c9:91:6a:06:60:01:94:cc:d6:66:80: bc:c6:fd:ff:e9:a7:8d:b6:64:7e:23:f3:af:5d:0f:90:c5:5e: 83:ba:11:c8:89:a8:70:2f:fc:bc:b0:10:bd:75:18:d0:95:34: ae:54:a0:15:69:02:77:7e:28:22:c0:d9:e8:82:ea:10:98:01: 11:68:55:f4:7e:ad:5f:e8:84:92:d2:77:31:e3:9e:70:92:68: db:be:e4:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjYwOTIwMjAxODA3WhcNMjYwOTI3MjAxODA3WjAYMRYwFAYD VQQDEw02YWIwM2Y3Zi01YjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOeV3IwIrpPA8geGFCiGa/rHxnulGGthe3GWDLbxjDEVZZI8HFLkceVArz2F /28LQ++LkGcXNksvQCsgJJ8GkE0nVlXDDIaOkdVtazHBj8Wsl0D2+3HVUda0Rle2 Cu8hdYI6imMCB8ka+XRW5bdh0C6eIaT1dJaA1en+gL/ND4YXSbcaQxJTyhsoA9GR Jp1Z+U/ZK4Q2rpBFVhHh0zbYUYCB1ZwvtYUw78ntXnXpH5ka+FXD18W0mrLxExPk kK9BnUIF0sIY66fwJ1O/TDp/yv1H+fMskMt+7ZbS9K00MlsroDa47bS+sQlWUFQt GXwvnDZM2/NYJyDu7BkdIf6kFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIO2duXV rZ/wb8UyGzHdofx9zlAEMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx NDFvaFd3NGhWRXJsSWpmb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFSQezDQmosWkWTmmOvJFq4HS3iz0ZIuCSln/bdgYsrDNicST3k9l7X3fFzrR zMXQH5pGXhiyE/Na1oAa4FkzON74MV0ptt/Edy6dalYFm+0k1xWn9ydLNcjwlNrd hMecwxaVdi2Dhl/9LRIkHsfU2z2520rzDdbQvqe7u4PsJfYK4Yj7r7rfetxgVgvR L1I3iAFtQg1Bls+MdY4+7trT+0QtqsDoCdOeksmRagZgAZTM1maAvMb9/+mnjbZk fiPzr10PkMVeg7oRyImocC/8vLAQvXUY0JU0rlSgFWkCd34oIsDZ6ILqEJgBEWhV 9H6tX+iEktJ3MeOecJJo277keQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:28:34 2026 by rpki-client