$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft File: 2y2AYIsrY8vRNmwSQSYnBwBXriY.mft (raw, json) Hash identifier: FuhRTA3rgPYP2xWLf2HfY0HYlo1SJKdBHKUKEyB8Nu8= Subject key identifier: 18:2A:C5:8A:22:9A:31:6C:C2:2F:57:11:12:A5:30:A9:B2:75:01:65 Authority key identifier: DB:2D:80:60:8B:2B:63:CB:D1:36:6C:12:41:26:27:07:00:57:AE:26 Certificate issuer: /CN=A9170CF8/serialNumber=DB2D80608B2B63CBD1366C12412627070057AE26 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft Manifest number: 0C Signing time: Wed 23 Sep 2026 08:55:22 +0000 Manifest this update: Wed 23 Sep 2026 08:55:22 +0000 Manifest next update: Wed 30 Sep 2026 08:55:22 +0000 Files and hashes: 1: 2y2AYIsrY8vRNmwSQSYnBwBXriY.crl (hash: pWGvkGc+4O7iMgulYQUsSyODLMuyKHpjU/WAYMPviSk=) 2: 1B258F1CA85511F19DF91DC93F11F970.roa (hash: O/BxMMF7jDLWlrtoBVDlazWajDdVMN8MU/1yOd79+xA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.crl rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170CF8, serialNumber=DB2D80608B2B63CBD1366C12412627070057AE26 Validity Not Before: Sep 23 08:55:22 2026 GMT Not After : Sep 30 08:55:22 2026 GMT Subject: CN=6ab393fa-432b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:48:3e:a7:7c:1a:52:ee:c6:9c:d6:18:c5: f3:bf:81:da:ba:54:ff:c5:00:72:3a:37:14:5f:56: ce:c5:04:14:99:34:36:1b:4f:f8:7a:6f:d7:88:71: 71:d5:07:c0:a2:6d:22:cb:8f:b7:c1:9c:bb:fa:18: 71:5b:78:96:d8:cb:3a:1a:e1:ae:b4:97:4a:73:33: ac:75:7f:ca:94:b7:77:d9:a4:03:58:a0:3d:1f:d1: 37:3d:90:39:00:12:d8:62:48:0b:88:12:aa:03:8c: 72:57:d4:a5:50:3d:a6:00:05:c1:92:c9:43:99:ec: b5:89:1d:97:86:b2:ef:52:6a:f1:59:d4:9b:06:b9: e5:15:2c:73:36:d9:95:db:1a:16:ec:c3:b6:98:be: ee:a5:b8:8c:1e:f2:dc:de:50:61:1d:e1:3f:6d:6e: 7e:c0:45:67:81:5a:07:9e:2f:d8:d3:90:1f:d7:2b: 1f:10:0a:8f:3b:c1:44:93:71:8f:e7:05:59:c7:f7: 6c:36:ed:7c:39:1d:2d:6e:2a:e2:86:d3:65:c5:54: b1:37:96:00:6b:4d:50:c6:75:ad:66:f7:50:93:45: cd:62:07:8f:33:3a:ec:dd:ce:bd:ce:78:6f:22:b9: a5:5f:1a:73:34:33:f9:ef:59:64:39:f1:47:e2:3f: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2A:C5:8A:22:9A:31:6C:C2:2F:57:11:12:A5:30:A9:B2:75:01:65 X509v3 Authority Key Identifier: keyid:DB:2D:80:60:8B:2B:63:CB:D1:36:6C:12:41:26:27:07:00:57:AE:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e3:36:b8:b0:af:2f:43:4b:34:1c:14:de:9c:0e:52:bf:e9: 3b:67:4f:e2:b9:8f:f8:58:b8:67:8c:51:ab:09:ef:ac:36:bd: ac:f4:24:c0:df:3a:88:b3:73:39:1d:97:00:55:5c:ad:d6:df: e0:3b:74:c0:e4:3c:35:9b:71:46:d2:47:d6:00:bf:2a:7c:65: d5:01:e3:22:9b:d6:5e:9a:25:09:83:fe:f8:b6:2d:d2:52:c4: 0d:65:60:0c:2d:ef:fc:4a:fc:6b:bc:ef:40:3d:f1:22:ab:7a: b9:31:eb:54:b0:93:d9:38:3c:7f:01:5a:2c:a3:89:12:d5:40: 23:1f:27:eb:17:3c:22:fa:ba:5a:7d:a1:4f:db:d1:65:54:94: 33:03:01:87:43:a8:4f:e2:82:d3:fa:c3:ed:2d:6e:b4:c3:47: 0f:0e:29:6a:c3:6a:8b:3a:1d:60:9e:35:df:45:05:bc:c4:e1: 2a:ef:d5:e8:31:11:48:aa:c6:7d:9b:d2:97:dc:70:a0:76:20: ab:0e:46:ed:fd:d2:c4:e6:80:c7:24:7e:54:17:e7:c2:da:cd: 2c:10:98:d3:15:7d:eb:d8:69:10:82:ae:97:92:0a:03:01:e7: 00:94:9b:a4:be:56:b9:6e:c0:08:d6:ea:fc:f3:c7:f2:fc:41: 35:00:fc:e4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MENGODExMC8GA1UEBRMoREIyRDgwNjA4QjJCNjNDQkQxMzY2QzEyNDEyNjI3MDcw MDU3QUUyNjAeFw0yNjA5MjMwODU1MjJaFw0yNjA5MzAwODU1MjJaMBgxFjAUBgNV BAMTDTZhYjM5M2ZhLTQzMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ykg+p3waUu7GnNYYxfO/gdq6VP/FAHI6NxRfVs7FBBSZNDYbT/h6b9eIcXHV B8CibSLLj7fBnLv6GHFbeJbYyzoa4a60l0pzM6x1f8qUt3fZpANYoD0f0Tc9kDkA EthiSAuIEqoDjHJX1KVQPaYABcGSyUOZ7LWJHZeGsu9SavFZ1JsGueUVLHM22ZXb Ghbsw7aYvu6luIwe8tzeUGEd4T9tbn7ARWeBWgeeL9jTkB/XKx8QCo87wUSTcY/n BVnH92w27Xw5HS1uKuKG02XFVLE3lgBrTVDGda1m91CTRc1iB48zOuzdzr3OeG8i uaVfGnM0M/nvWWQ58UfiP4onAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGCrFiiKa MWzCL1cREqUwqbJ1AWUwHwYDVR0jBBgwFoAU2y2AYIsrY8vRNmwSQSYnBwBXriYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwQ0Y4Lzk3NUIwQ0ZDQTg1 NDExRjFCODczNEZDMzNGMTFGOTcwLzJ5MkFZSXNyWTh2Uk5td1NRU1luQndCWHJp WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnkyQVlJc3JZOHZSTm13U1FTWW5Cd0JYcmlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw Q0Y4Lzk3NUIwQ0ZDQTg1NDExRjFCODczNEZDMzNGMTFGOTcwLzJ5MkFZSXNyWTh2 Uk5td1NRU1luQndCWHJpWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCh4za4sK8vQ0s0HBTenA5Sv+k7Z0/iuY/4WLhnjFGrCe+sNr2s9CTA3zqIs3M5 HZcAVVyt1t/gO3TA5Dw1m3FG0kfWAL8qfGXVAeMim9ZemiUJg/74ti3SUsQNZWAM Le/8SvxrvO9APfEiq3q5MetUsJPZODx/AVoso4kS1UAjHyfrFzwi+rpafaFP29Fl VJQzAwGHQ6hP4oLT+sPtLW60w0cPDilqw2qLOh1gnjXfRQW8xOEq79XoMRFIqsZ9 m9KX3HCgdiCrDkbt/dLE5oDHJH5UF+fC2s0sEJjTFX3r2GkQgq6XkgoDAecAlJuk vla5bsAI1ur888fy/EE1APzk -----END CERTIFICATE-----Generated at Fri Sep 25 07:47:33 2026 by rpki-client