$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: 0+/IPTPoOUoDrFRw13BM/WhfPHHaCvl0Uz2GPlkZbyk= Subject key identifier: 21:02:AD:C4:B2:61:09:25:2F:FC:2D:E2:38:B6:A9:2A:A0:C0:8B:D3 Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 08DD Signing time: Tue 22 Sep 2026 20:12:43 +0000 Manifest this update: Tue 22 Sep 2026 20:12:42 +0000 Manifest next update: Tue 29 Sep 2026 20:12:42 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: 2SCEz/d9iTOqLQqueft86Kmdx02f96XfjnhFPI8kQPo=) 2: 178784EC859F11F1AD78299558A30FBC.roa (hash: pSLeoZ7t5PETcNXLPsF3R6tgE6Cd+D9jlWqlvxqJfWA=) 3: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: RUPU3UZyuNqsnZUGAWSji1S8J4XrHxG6gKkU4Fsvigc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: Sep 22 20:12:42 2026 GMT Not After : Sep 29 20:12:42 2026 GMT Subject: CN=6ab2e13b-eeae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:7a:df:63:5d:10:55:9e:6d:1c:bf:7f:43: 5f:b9:25:46:4f:cf:a2:2b:a5:99:c1:bb:33:91:0b: 24:7f:c7:55:1b:3f:d2:1b:66:6e:0f:97:02:e6:76: d3:2c:15:a3:08:09:51:e9:ef:60:d2:5d:35:6d:e2: 3d:41:e8:09:86:aa:c1:6b:57:9d:0c:6e:4b:c4:26: 17:50:f0:40:18:cb:d1:f2:1d:12:4d:cf:d2:db:68: d4:3f:2a:86:4e:f9:03:26:b7:a0:dc:46:bc:47:2b: 3e:a6:bc:a7:b0:4b:53:af:42:3e:fb:c4:af:f7:e5: 05:4d:72:58:31:96:f0:33:2f:96:b1:7d:c6:99:30: 08:66:e0:4e:5a:f2:11:59:71:24:b3:d0:60:42:e2: 3f:e3:62:b8:37:38:0a:d6:1f:22:81:df:03:67:3e: 51:8a:ae:5d:e5:08:43:be:f1:ac:a9:9b:21:28:54: c2:0f:b9:83:97:ae:40:e0:ed:a4:e9:03:4c:1c:cb: 6b:11:a6:2e:4c:f9:d3:c6:d2:8f:f5:a6:f2:70:aa: 47:b5:f9:13:47:8f:93:04:e2:a6:cc:a3:67:55:d0: df:d7:f3:b0:c6:b8:97:59:97:ce:93:7f:6e:b8:eb: ae:d4:17:22:0d:d8:42:1a:1b:80:1a:08:3e:67:a7: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:02:AD:C4:B2:61:09:25:2F:FC:2D:E2:38:B6:A9:2A:A0:C0:8B:D3 X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ff:00:d6:c3:11:ff:4a:18:dc:05:b6:1e:95:bd:da:79:79: 8a:65:fe:a4:e3:51:b3:df:94:1c:18:38:ba:33:96:05:9b:92: 58:01:15:dd:c9:16:e2:51:d9:2d:30:38:e7:d0:cb:52:85:7a: 66:22:b1:b8:0f:c8:5f:a0:94:42:4d:57:42:46:15:98:75:4d: 31:19:0f:2f:ca:43:2f:8f:a5:b1:2a:b5:5d:d9:ed:40:a3:7d: b2:92:13:5f:b6:3f:5d:6e:9f:9e:d8:1c:88:e3:1c:ad:af:1a: e5:54:b6:ba:80:bb:77:62:b4:d4:d7:9b:97:60:45:0d:50:12: 41:15:50:ab:8f:af:51:1b:43:3f:91:90:12:49:6c:17:77:8d: 3d:35:f1:fa:cb:12:fa:e0:27:17:24:c3:75:f0:5e:d6:f7:58: 79:96:7c:bb:a9:df:fd:f0:eb:e0:6a:0c:0e:c2:dc:0e:35:34: 80:3e:0d:e3:bc:d6:70:8c:08:35:49:19:19:9b:09:e2:73:1a: 81:57:6b:90:40:c1:8d:29:e6:0b:a8:81:a2:65:e6:ed:ea:75: b1:c0:20:79:e6:1e:78:f0:bb:f3:5a:ae:7c:c9:2c:5e:fb:4c: 94:1f:01:3b:1b:f1:31:1a:1a:15:5a:16:b9:5f:ca:60:79:b0: 55:42:cf:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjYwOTIyMjAxMjQyWhcNMjYwOTI5MjAxMjQyWjAYMRYwFAYD VQQDEw02YWIyZTEzYi1lZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyid632NdEFWebRy/f0NfuSVGT8+iK6WZwbszkQskf8dVGz/SG2ZuD5cC5nbT LBWjCAlR6e9g0l01beI9QegJhqrBa1edDG5LxCYXUPBAGMvR8h0STc/S22jUPyqG TvkDJreg3Ea8Rys+prynsEtTr0I++8Sv9+UFTXJYMZbwMy+WsX3GmTAIZuBOWvIR WXEks9BgQuI/42K4NzgK1h8igd8DZz5Riq5d5QhDvvGsqZshKFTCD7mDl65A4O2k 6QNMHMtrEaYuTPnTxtKP9abycKpHtfkTR4+TBOKmzKNnVdDf1/OwxriXWZfOk39u uOuu1BciDdhCGhuAGgg+Z6dVSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCECrcSy YQklL/wt4ji2qSqgwIvTMB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY/8A1sMR/0oY3AW2HpW92nl5imX+pONRs9+UHBg4ujOWBZuSWAEV3ckW4lHZ LTA459DLUoV6ZiKxuA/IX6CUQk1XQkYVmHVNMRkPL8pDL4+lsSq1XdntQKN9spIT X7Y/XW6fntgciOMcra8a5VS2uoC7d2K01Nebl2BFDVASQRVQq4+vURtDP5GQEkls F3eNPTXx+ssS+uAnFyTDdfBe1vdYeZZ8u6nf/fDr4GoMDsLcDjU0gD4N47zWcIwI NUkZGZsJ4nMagVdrkEDBjSnmC6iBomXm7ep1scAgeeYeePC781qufMksXvtMlB8B OxvxMRoaFVoWuV/KYHmwVULP7w== -----END CERTIFICATE-----Generated at Tue Sep 22 23:12:31 2026 by rpki-client