$ rpki-client -vvvf rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft File: 2GhqpteQQFqfGbGIICyuBDWGCWE.mft (raw, json) Hash identifier: rbZwZALNPhgfi8V8Fc0vb77MqdklM3Ns9LpmRJLdeiw= Subject key identifier: 80:FF:09:B2:87:BB:30:56:C7:97:54:A7:75:E8:A7:AA:AF:97:08:49 Authority key identifier: D8:68:6A:A6:D7:90:40:5A:9F:19:B1:88:20:2C:AE:04:35:86:09:61 Certificate issuer: /CN=A915651D/serialNumber=D8686AA6D790405A9F19B188202CAE0435860961 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft Manifest number: 06 Signing time: Mon 21 Sep 2026 09:13:46 +0000 Manifest this update: Mon 21 Sep 2026 09:13:46 +0000 Manifest next update: Mon 28 Sep 2026 09:13:46 +0000 Files and hashes: 1: 2GhqpteQQFqfGbGIICyuBDWGCWE.crl (hash: z7xTQwUWoX/mTIk3D1nfPmsSs2LafJW8101vNL5kGfw=) 2: 023DC3A2B03911F1AE1EC8CE3E11F970.roa (hash: G06NnHMX2WuVcev4nQuCxyrbcAxR0mS9/vCckCp/Ykc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.crl rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915651D, serialNumber=D8686AA6D790405A9F19B188202CAE0435860961 Validity Not Before: Sep 21 09:13:46 2026 GMT Not After : Sep 28 09:13:46 2026 GMT Subject: CN=6ab0f54a-cabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:34:e3:5e:46:20:d7:14:69:51:6d:c0:93: d2:24:95:7b:70:10:81:09:ae:c3:cf:14:7d:5f:ed: a5:ae:da:f8:2e:b7:e5:c7:f8:1b:64:02:a4:aa:61: e2:15:27:05:fa:36:93:2a:d2:cf:32:5d:03:c8:93: 38:50:d5:0a:ee:8d:8d:f7:2b:96:1d:07:2b:6f:85: a0:32:fd:38:59:0d:fa:35:50:77:56:7b:26:bb:3f: 43:db:65:83:cf:24:01:a5:0c:41:ab:87:a2:cb:c7: 25:fd:31:d5:81:f7:02:0a:cb:2b:6c:f4:ed:f3:fb: d4:67:54:a8:7c:d1:d9:d3:bf:49:c0:93:03:c1:af: be:4f:fe:63:42:c6:1c:e2:b7:df:c3:0b:e7:cb:ba: d3:bf:66:a6:3a:0b:98:51:a4:ed:4c:00:fc:69:23: 01:59:90:12:31:07:79:2d:8e:42:cc:61:d5:19:57: 2b:fc:e3:75:44:6b:23:fb:9c:0b:6d:d2:9a:7d:8a: 7a:2b:87:3d:3b:b9:2b:ef:a8:db:32:83:fa:46:4e: 24:34:27:67:1d:7c:98:9b:4e:e4:39:be:ba:aa:35: 7e:96:40:22:cb:05:76:43:e4:20:72:79:13:46:1d: 9d:e1:2b:de:f1:db:70:03:8d:b6:2f:1b:f9:cd:63: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FF:09:B2:87:BB:30:56:C7:97:54:A7:75:E8:A7:AA:AF:97:08:49 X509v3 Authority Key Identifier: keyid:D8:68:6A:A6:D7:90:40:5A:9F:19:B1:88:20:2C:AE:04:35:86:09:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:61:c4:75:a3:fb:8e:f1:54:6a:e4:50:25:bd:0e:68:d7:ac: 33:a0:7d:6c:ce:c6:79:2a:66:6d:65:f6:85:4a:29:4e:ad:12: fe:d0:94:49:ad:1e:cc:81:b3:c3:cf:50:5e:37:dd:af:21:6d: 97:eb:26:70:30:66:f4:88:cc:bd:08:53:5f:26:77:24:dc:b6: 59:a4:b1:c7:c3:9b:45:5b:b2:c0:59:44:42:15:5d:80:d2:89: c1:a8:f7:a4:79:50:74:b1:56:08:88:88:c8:1d:5f:1b:34:13: f9:7d:d7:57:5c:c9:a2:88:36:03:4d:17:11:2b:71:4a:53:11: 78:53:54:a7:3d:a1:34:47:fd:75:e6:21:35:b6:f6:58:f2:38: 3d:dd:2c:cd:58:85:18:8d:3d:12:aa:40:0a:4a:3b:fa:3e:37: 07:b3:b6:e1:46:ef:70:33:68:08:4b:3d:b5:1a:43:4a:17:00: c0:14:cd:6e:0c:45:17:e6:37:7e:75:93:4e:b0:c9:ea:b4:46: f6:4c:f1:18:4e:40:2c:af:8b:4e:81:23:d4:8f:a3:a2:60:22: 70:51:5d:fe:65:0b:53:fb:3d:9d:e4:48:88:ad:c2:42:70:2d: fe:d9:7a:8a:bc:72:e6:cd:b9:42:14:d4:ae:85:3b:1e:8a:0a: 80:9a:ba:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjUxRDExMC8GA1UEBRMoRDg2ODZBQTZENzkwNDA1QTlGMTlCMTg4MjAyQ0FFMDQz NTg2MDk2MTAeFw0yNjA5MjEwOTEzNDZaFw0yNjA5MjgwOTEzNDZaMBgxFjAUBgNV BAMTDTZhYjBmNTRhLWNhYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCZjTjXkYg1xRpUW3Ak9IklXtwEIEJrsPPFH1f7aWu2vgut+XH+BtkAqSqYeIV JwX6NpMq0s8yXQPIkzhQ1QrujY33K5YdBytvhaAy/ThZDfo1UHdWeya7P0PbZYPP JAGlDEGrh6LLxyX9MdWB9wIKyyts9O3z+9RnVKh80dnTv0nAkwPBr75P/mNCxhzi t9/DC+fLutO/ZqY6C5hRpO1MAPxpIwFZkBIxB3ktjkLMYdUZVyv843VEayP7nAtt 0pp9inorhz07uSvvqNsyg/pGTiQ0J2cdfJibTuQ5vrqqNX6WQCLLBXZD5CByeRNG HZ3hK97x23ADjbYvG/nNYybHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgP8Jsoe7 MFbHl1Sndeinqq+XCEkwHwYDVR0jBBgwFoAU2GhqpteQQFqfGbGIICyuBDWGCWEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NTFELzE1OTBEOUMyQjAz ODExRjFCNTFCQ0Q4MTNFMTFGOTcwLzJHaHFwdGVRUUZxZkdiR0lJQ3l1QkRXR0NX RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMkdocXB0ZVFRRnFmR2JHSUlDeXVCRFdHQ1dFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NTFELzE1OTBEOUMyQjAzODExRjFCNTFCQ0Q4MTNFMTFGOTcwLzJHaHFwdGVRUUZx ZkdiR0lJQ3l1QkRXR0NXRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAtYcR1o/uO8VRq5FAlvQ5o16wzoH1szsZ5KmZtZfaFSilOrRL+0JRJrR7MgbPD z1BeN92vIW2X6yZwMGb0iMy9CFNfJnck3LZZpLHHw5tFW7LAWURCFV2A0onBqPek eVB0sVYIiIjIHV8bNBP5fddXXMmiiDYDTRcRK3FKUxF4U1SnPaE0R/115iE1tvZY 8jg93SzNWIUYjT0SqkAKSjv6PjcHs7bhRu9wM2gISz21GkNKFwDAFM1uDEUX5jd+ dZNOsMnqtEb2TPEYTkAsr4tOgSPUj6OiYCJwUV3+ZQtT+z2d5EiIrcJCcC3+2XqK vHLmzblCFNSuhTseigqAmrrw -----END CERTIFICATE-----Generated at Tue Sep 22 11:20:13 2026 by rpki-client