$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: 871A15Kyk70LMBr7kfIF/ZR6iESdhOraKkuwTEYe4sM= Subject key identifier: 70:F6:BA:56:72:36:D9:5E:AE:00:5D:C3:1E:55:B6:DF:0E:2E:7E:4C Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 031F Signing time: Mon 21 Sep 2026 00:53:24 +0000 Manifest this update: Mon 21 Sep 2026 00:53:24 +0000 Manifest next update: Mon 28 Sep 2026 00:53:24 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: RGi9l1dDvLW3X4zHzreBwcMtY4hpjEqxb4oEdcanx50=) 2: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: e26HjI6IThHSTcyiS5wewUgNVLH1ZtA87nwKAQOfEN8=) 3: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8=) 4: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Sep 21 00:53:24 2026 GMT Not After : Sep 28 00:53:24 2026 GMT Subject: CN=6ab08004-155b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:be:97:37:00:21:33:aa:86:83:e6:0c:f4: 16:bf:26:cd:41:ba:24:fc:09:e5:d8:26:d2:f1:73: 75:cb:38:98:d4:1d:70:f8:a8:93:77:f6:a0:5c:1c: 2e:dd:71:25:f7:cf:cb:38:bf:c7:be:c9:3d:7c:a3: fc:ac:2e:8f:24:25:a9:59:ba:eb:9b:45:0b:3c:05: 74:07:c1:ed:45:f0:db:c8:60:dc:bb:2e:bc:ac:ea: 67:88:bc:a8:13:f5:6a:a3:ee:bd:c0:5d:d7:eb:5b: cd:09:d8:5b:b1:00:a0:b8:98:57:50:5a:a3:a6:c3: 46:c3:63:97:6f:0d:e4:bb:01:7c:0f:af:e1:6f:9a: 24:3d:bf:af:9f:c7:3a:f5:cd:9c:ff:fb:b9:82:46: 0a:db:c7:72:fa:22:dc:6a:64:05:b3:5d:b1:1b:ee: d5:3b:b8:7e:11:02:0a:2f:e5:d6:50:c4:59:86:f1: 2c:a3:28:13:fb:42:65:81:fd:62:a6:65:e9:a5:f2: 79:00:43:cb:b8:d4:9f:0b:13:4b:b7:e0:cb:17:c2: d1:a6:c0:fa:e2:07:84:1d:ae:37:07:da:ea:98:60: 13:da:03:64:8b:2b:23:a3:2f:b2:99:a8:a4:38:6e: 44:15:f9:5a:a3:b9:68:2d:29:69:56:02:b3:51:ae: fe:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F6:BA:56:72:36:D9:5E:AE:00:5D:C3:1E:55:B6:DF:0E:2E:7E:4C X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:19:58:b2:81:da:27:40:ab:95:11:d9:87:d5:27:ee:c4:6a: da:59:52:1a:93:fc:2b:d5:14:0c:84:a1:24:50:44:2a:f2:70: 68:3d:76:ed:f1:8b:db:6f:db:84:4d:ec:bb:f9:37:94:fd:8f: 94:4b:3c:ec:ac:98:04:b4:30:a1:3d:4e:73:49:0f:01:0b:19: bb:7e:8e:83:d8:6e:75:8f:33:a8:63:1d:ed:d6:a0:73:da:c1: b5:a7:46:cf:7b:a3:9b:4e:f1:d8:d7:57:12:25:7a:a2:b1:6a: a4:10:a8:d9:34:fb:ad:86:a7:e2:0a:e1:19:42:34:3f:19:78: 0f:29:3f:03:8f:96:10:60:60:55:67:45:05:d0:a4:71:fc:a1: ff:fe:45:05:46:e4:01:43:76:67:af:ce:6d:5a:8e:69:ab:47: e2:8f:9e:bc:8b:c2:e6:50:e2:9a:8b:86:0d:75:79:47:4d:ee: 28:1c:cd:c0:24:8c:d4:5c:0b:4d:59:bd:60:96:3f:05:bb:10: 53:8c:a4:20:76:e0:fc:e7:f6:18:38:2c:4c:f9:0f:30:5c:78: 08:2c:19:48:47:7c:d2:a4:99:4e:72:d5:ca:87:a9:2c:f7:66: ae:6f:56:3a:26:6b:75:1c:cf:94:56:08:a0:75:b9:d3:84:8f: cb:99:f5:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYwOTIxMDA1MzI0WhcNMjYwOTI4MDA1MzI0WjAYMRYwFAYD VQQDEw02YWIwODAwNC0xNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNG+lzcAITOqhoPmDPQWvybNQbok/Anl2CbS8XN1yziY1B1w+KiTd/agXBwu 3XEl98/LOL/Hvsk9fKP8rC6PJCWpWbrrm0ULPAV0B8HtRfDbyGDcuy68rOpniLyo E/Vqo+69wF3X61vNCdhbsQCguJhXUFqjpsNGw2OXbw3kuwF8D6/hb5okPb+vn8c6 9c2c//u5gkYK28dy+iLcamQFs12xG+7VO7h+EQIKL+XWUMRZhvEsoygT+0Jlgf1i pmXppfJ5AEPLuNSfCxNLt+DLF8LRpsD64geEHa43B9rqmGAT2gNkiysjoy+ymaik OG5EFflao7loLSlpVgKzUa7++QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHD2ulZy NtlergBdwx5Vtt8OLn5MMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdBlYsoHaJ0CrlRHZh9Un7sRq2llSGpP8K9UUDIShJFBEKvJwaD127fGL22/b hE3su/k3lP2PlEs87KyYBLQwoT1Oc0kPAQsZu36Og9hudY8zqGMd7dagc9rBtadG z3ujm07x2NdXEiV6orFqpBCo2TT7rYan4grhGUI0Pxl4Dyk/A4+WEGBgVWdFBdCk cfyh//5FBUbkAUN2Z6/ObVqOaatH4o+evIvC5lDimouGDXV5R03uKBzNwCSM1FwL TVm9YJY/BbsQU4ykIHbg/Of2GDgsTPkPMFx4CCwZSEd80qSZTnLVyoepLPdmrm9W OiZrdRzPlFYIoHW504SPy5n1GQ== -----END CERTIFICATE-----Generated at Mon Sep 21 10:23:46 2026 by rpki-client