$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft File: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft (raw, json) Hash identifier: SYbIXU6FvnXY8niLeH893p8Ufz9eWahx8k4UvVGhM6w= Subject key identifier: C5:19:FE:F8:CF:47:1B:2C:FA:3A:F6:65:0A:08:C0:5E:2E:11:2E:59 Authority key identifier: D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24 Certificate issuer: /CN=A9159ECD/serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft Manifest number: 01A5 Signing time: Sun 20 Sep 2026 22:42:29 +0000 Manifest this update: Sun 20 Sep 2026 22:42:28 +0000 Manifest next update: Sun 27 Sep 2026 22:42:28 +0000 Files and hashes: 1: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl (hash: m3eVnlMHN8UUI/C5B3iGVwxjoZhgrXOTYhnCS+c16CI=) 2: 5A4723DA6F3C11EF8FD45F13C4F9AE02.roa (hash: A2Y8chFVpYb5vk94svWPpEYN0FYqWX853YEFkRpE6HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124 Validity Not Before: Sep 20 22:42:28 2026 GMT Not After : Sep 27 22:42:28 2026 GMT Subject: CN=6ab06154-c1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:9e:48:3b:73:bf:f7:13:be:e6:7d:16:48: 5e:bc:4f:45:fb:15:80:00:e1:08:4e:48:c6:9b:41: 13:f1:a7:4c:f6:ce:d1:05:1a:ee:bb:f2:1a:e8:b6: c8:97:10:c7:45:9e:ad:ad:19:f2:d2:56:4b:f5:ef: 8d:8a:d5:d3:5b:10:d1:09:c1:c5:84:d7:83:0d:15: bf:58:96:01:8f:c7:18:86:41:12:ce:6d:65:8f:e7: 21:aa:a7:48:3f:12:b2:ff:9e:8d:f5:9b:ae:4e:6c: 5a:bf:63:d2:30:76:2d:e6:1b:d6:4b:63:aa:cb:f4: 32:7b:82:eb:24:15:85:90:95:e4:c8:28:2b:12:6c: 77:e5:19:07:f1:ce:78:ec:1c:95:3d:48:c6:bc:e0: 24:07:f5:8a:3a:9c:cb:ef:6f:fc:16:ab:22:7e:91: 41:94:d8:84:16:9c:fa:4f:d5:66:7d:70:db:06:90: ab:54:f3:3f:d8:87:f6:f8:a0:fb:94:1e:33:2b:7b: ae:5d:10:92:15:e7:5d:87:fb:4c:79:43:c9:bf:27: 3b:c1:f9:3e:c1:85:f7:ea:0b:73:b9:26:4e:ea:9c: 12:b8:55:3e:8a:a9:19:a9:d9:d5:87:c6:6b:a0:42: 54:3b:5c:91:ba:c2:b0:06:0f:fc:55:61:13:85:f9: f1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:19:FE:F8:CF:47:1B:2C:FA:3A:F6:65:0A:08:C0:5E:2E:11:2E:59 X509v3 Authority Key Identifier: keyid:D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e2:29:7b:83:86:89:2e:c8:90:2b:9f:d7:d7:ab:2d:08:8d: 27:58:90:77:a2:f0:3d:ee:d8:44:71:38:81:0b:12:d6:12:91: 61:96:0f:f4:f5:3d:1c:c3:71:7d:46:28:fe:51:a0:69:fa:0d: e6:6a:3d:cd:95:58:8e:08:3e:66:57:87:fb:16:38:b8:13:26: 26:44:d2:d2:dd:9d:26:78:2d:53:d3:6d:37:86:8a:c3:e5:5b: 3e:53:85:da:86:a8:ca:f2:69:b1:4e:70:28:cc:31:c6:ac:3f: 9c:6e:e5:53:89:d0:cb:cd:a4:8c:cf:6a:df:94:3b:40:e4:bc: f0:70:5c:96:d2:e7:90:c6:18:bb:5a:b1:55:85:67:f4:75:1f: 9d:5c:7f:c6:54:c9:59:db:da:c4:56:99:fb:94:3b:a1:5c:ba: ad:40:bf:b0:db:44:dd:89:21:ef:2b:59:86:85:c2:23:63:3e: c5:e5:79:e6:16:ce:dc:79:51:f8:32:cb:f8:a2:0c:43:13:b2: c4:52:ec:6b:7b:0f:eb:f1:02:17:a0:7b:e8:66:8b:81:f8:c6: e2:08:52:91:4c:e2:71:a7:18:4b:25:2c:a0:7f:67:64:0b:ba: cc:83:b6:b2:5a:73:7f:91:ff:c7:c6:4d:72:9a:7d:cd:5e:7a: 91:74:68:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEQ5NURBMTE3MTQxMjMwMEFCNTNCM0U0ODcwRjJGNDQx RjA2QzgxMjQwHhcNMjYwOTIwMjI0MjI4WhcNMjYwOTI3MjI0MjI4WjAYMRYwFAYD VQQDEw02YWIwNjE1NC1jMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+CeSDtzv/cTvuZ9FkhevE9F+xWAAOEITkjGm0ET8adM9s7RBRruu/Ia6LbI lxDHRZ6trRny0lZL9e+NitXTWxDRCcHFhNeDDRW/WJYBj8cYhkESzm1lj+chqqdI PxKy/56N9ZuuTmxav2PSMHYt5hvWS2Oqy/Qye4LrJBWFkJXkyCgrEmx35RkH8c54 7ByVPUjGvOAkB/WKOpzL72/8FqsifpFBlNiEFpz6T9VmfXDbBpCrVPM/2If2+KD7 lB4zK3uuXRCSFeddh/tMeUPJvyc7wfk+wYX36gtzuSZO6pwSuFU+iqkZqdnVh8Zr oEJUO1yRusKwBg/8VWEThfnx7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUZ/vjP Rxss+jr2ZQoIwF4uES5ZMB8GA1UdIwQYMBaAFNldoRcUEjAKtTs+SHDy9EHwbIEk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC9FRjYzODNFMjNE OUYxMUVGOTkwMzM3NjhDNEY5QUUwMi8yVjJoRnhRU01BcTFPejVJY1BMMFFmQnNn U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJWMmhGeFFTTUFxMU96NUljUEwwUWZCc2dTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC9FRjYzODNFMjNEOUYxMUVGOTkwMzM3NjhDNEY5QUUwMi8yVjJoRnhRU01B cTFPejVJY1BMMFFmQnNnU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVuIpe4OGiS7IkCuf19erLQiNJ1iQd6LwPe7YRHE4gQsS1hKRYZYP9PU9HMNx fUYo/lGgafoN5mo9zZVYjgg+ZleH+xY4uBMmJkTS0t2dJngtU9NtN4aKw+VbPlOF 2oaoyvJpsU5wKMwxxqw/nG7lU4nQy82kjM9q35Q7QOS88HBcltLnkMYYu1qxVYVn 9HUfnVx/xlTJWdvaxFaZ+5Q7oVy6rUC/sNtE3Ykh7ytZhoXCI2M+xeV55hbO3HlR +DLL+KIMQxOyxFLsa3sP6/ECF6B76GaLgfjG4ghSkUzicacYSyUsoH9nZAu6zIO2 slpzf5H/x8ZNcpp9zV56kXRo0w== -----END CERTIFICATE-----Generated at Tue Sep 22 15:00:40 2026 by rpki-client