$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft File: 2hAmH-_a0BGsriMnCqa_jEHeQpI.mft (raw, json) Hash identifier: jL/4LMdUSBdUAyu007SizczjgpS5jBHp9xmbexsm4Vs= Subject key identifier: 21:5A:FF:6C:72:A5:69:2D:31:D9:F3:C2:C1:38:44:D7:87:BD:47:38 Authority key identifier: DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92 Certificate issuer: /CN=A9166D4A/serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft Manifest number: 47 Signing time: Tue 13 Oct 2026 09:11:40 +0000 Manifest this update: Tue 13 Oct 2026 09:11:40 +0000 Manifest next update: Tue 20 Oct 2026 09:11:40 +0000 Files and hashes: 1: 2hAmH-_a0BGsriMnCqa_jEHeQpI.crl (hash: 4qOOeF8zuzCKevfczJcza9Q33Xmc55V8sVK4Sxy0iFE=) 2: 4B17E2545C0811F1B8292F4090833773.roa (hash: ZHRlNcAYAA1IcJM0xFQys5A4K8yg67YwwMJ4ch/a0ZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 09:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D4A, serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292 Validity Not Before: Oct 13 09:11:40 2026 GMT Not After : Oct 20 09:11:40 2026 GMT Subject: CN=6acdf5cc-88e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:d7:c1:59:19:c1:34:da:4b:a2:c6:f4:42: 1e:d2:16:88:c3:0c:51:48:6e:c9:86:6b:b3:a3:e6: cc:8c:00:0b:e9:34:3d:96:a2:ea:03:29:69:2e:61: 87:a5:d9:47:66:84:c1:35:97:f8:b5:56:f9:42:a8: 3d:89:01:ff:40:d7:ec:92:82:2f:92:da:43:56:d1: 3a:5a:2c:82:f0:7a:fb:39:72:ee:bf:0b:75:a4:fd: 3d:8c:02:3e:71:5f:fe:63:26:d4:e8:40:bd:2c:b2: 53:77:8d:68:93:55:5a:fe:5f:75:9a:ab:ee:94:58: ab:4b:2c:f2:32:73:1b:89:fb:83:d7:c8:d5:68:c1: 3d:cd:79:dc:e1:e7:e0:2a:2c:55:a6:a3:f0:91:11: 57:35:df:0b:3f:d4:ca:43:69:16:c8:9a:81:a1:68: f9:e0:cd:01:79:b6:49:d5:f6:7e:6b:fe:87:84:c1: 49:a4:3a:90:01:d0:ee:9b:27:11:d7:66:65:44:6f: 0a:f9:ae:3f:f8:16:57:14:06:84:9d:98:96:c7:ad: d2:ba:ba:2f:3b:18:eb:ba:98:e7:bf:71:7a:c5:b7: f4:5f:c6:dd:03:2f:f9:06:f9:b2:5d:18:c5:a2:eb: e5:b2:8b:95:21:e9:71:5d:a4:32:1f:22:c6:57:36: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5A:FF:6C:72:A5:69:2D:31:D9:F3:C2:C1:38:44:D7:87:BD:47:38 X509v3 Authority Key Identifier: keyid:DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:39:1b:b0:c0:ea:fa:8f:da:e3:6e:75:29:c3:54:ac:95:9b: 65:2e:8b:e8:ae:f0:13:8b:51:2f:99:71:c4:07:6d:0d:97:e2: e1:1f:c9:e7:2d:c8:a8:43:23:01:13:ad:f1:3b:df:c2:eb:e9: d5:4b:78:08:bc:53:34:df:24:9d:c0:2f:4c:d1:53:64:71:14: db:61:04:a9:4f:9e:43:e1:03:15:71:96:a8:4b:85:58:5a:97: 68:e7:85:53:0e:ed:f5:b1:b9:b1:8d:9a:ae:28:f9:f0:b8:cd: 05:eb:58:cf:e2:89:6b:56:4c:10:85:63:29:34:3b:53:e3:6b: 55:9b:5e:00:54:10:2c:c8:8b:f1:2a:9d:0b:94:58:fd:82:d7: d4:4e:58:86:02:8f:0c:db:7b:f2:78:70:20:9e:a8:98:58:84: 79:68:15:2b:11:b9:9c:12:b2:c3:11:3a:ac:a6:1f:3b:b8:c6: 7d:4e:14:26:36:0e:20:85:8d:16:d8:bc:76:ab:6b:b8:9c:26: 7d:f5:72:46:33:2d:b6:21:b0:b2:ca:68:45:3b:3d:da:b3:c2: 08:d5:db:d2:e4:59:8c:1a:a9:f7:a8:aa:0d:ad:dc:59:65:77: 5a:39:89:71:a3:75:3f:ab:20:6e:24:fc:25:52:eb:b2:1f:79: 24:58:8e:2f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQ0QTExMC8GA1UEBRMoREExMDI2MUZFRkRBRDAxMUFDQUUyMzI3MEFBNkJGOEM0 MURFNDI5MjAeFw0yNjEwMTMwOTExNDBaFw0yNjEwMjAwOTExNDBaMBgxFjAUBgNV BAMTDTZhY2RmNWNjLTg4ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVNNfBWRnBNNpLosb0Qh7SFojDDFFIbsmGa7Oj5syMAAvpND2WouoDKWkuYYel 2UdmhME1l/i1VvlCqD2JAf9A1+ySgi+S2kNW0TpaLILwevs5cu6/C3Wk/T2MAj5x X/5jJtToQL0sslN3jWiTVVr+X3Waq+6UWKtLLPIycxuJ+4PXyNVowT3Nedzh5+Aq LFWmo/CREVc13ws/1MpDaRbImoGhaPngzQF5tknV9n5r/oeEwUmkOpAB0O6bJxHX ZmVEbwr5rj/4FlcUBoSdmJbHrdK6ui87GOu6mOe/cXrFt/Rfxt0DL/kG+bJdGMWi 6+Wyi5Uh6XFdpDIfIsZXNmd1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIVr/bHKl aS0x2fPCwThE14e9RzgwHwYDVR0jBBgwFoAU2hAmH+/a0BGsriMnCqa/jEHeQpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDRBL0FEMTczN0EyNUI4 MTExRjFBOEU4NDE3N0E3ODMzNzczLzJoQW1ILV9hMEJHc3JpTW5DcWFfakVIZVFw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmhBbUgtX2EwQkdzcmlNbkNxYV9qRUhlUXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDRBL0FEMTczN0EyNUI4MTExRjFBOEU4NDE3N0E3ODMzNzczLzJoQW1ILV9hMEJH c3JpTW5DcWFfakVIZVFwSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxORuwwOr6j9rjbnUpw1SslZtlLovorvATi1EvmXHEB20Nl+LhH8nnLcioQyMB E63xO9/C6+nVS3gIvFM03ySdwC9M0VNkcRTbYQSpT55D4QMVcZaoS4VYWpdo54VT Du31sbmxjZquKPnwuM0F61jP4olrVkwQhWMpNDtT42tVm14AVBAsyIvxKp0LlFj9 gtfUTliGAo8M23vyeHAgnqiYWIR5aBUrEbmcErLDETqsph87uMZ9ThQmNg4ghY0W 2Lx2q2u4nCZ99XJGMy22IbCyymhFOz3as8II1dvS5FmMGqn3qKoNrdxZZXdaOYlx o3U/qyBuJPwlUuuyH3kkWI4v -----END CERTIFICATE-----Generated at Wed Oct 14 10:10:29 2026 by rpki-client