$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json) Hash identifier: GjTp1oHGc1D9bgUW6BMiRRPO64GuMsmoJ0mTFObyOig= Subject key identifier: DA:85:2E:46:A9:E3:93:12:A9:25:A8:19:60:AC:F0:D1:9E:D1:B9:69 Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft Manifest number: D2 Signing time: Mon 21 Sep 2026 01:55:19 +0000 Manifest this update: Mon 21 Sep 2026 01:55:18 +0000 Manifest next update: Mon 28 Sep 2026 01:55:18 +0000 Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: ysgLY60KZAD/Aq7+bOWZRszkbzcAN17SAclmuJ88N0g=) 2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: u0M66qh4o7knuILMykFw4eLMQQ390tee1LvBxu3LBIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Validity Not Before: Sep 21 01:55:18 2026 GMT Not After : Sep 28 01:55:18 2026 GMT Subject: CN=6ab08e87-962b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:b6:ad:56:09:4c:d9:1b:89:47:55:12:61: 79:f2:57:5f:70:b9:44:d4:3a:86:93:2e:36:2a:5e: b4:e7:44:ba:d6:4b:1b:79:47:4a:de:ff:f9:9e:6b: d2:e5:1d:97:bd:9b:83:17:50:29:58:0f:bb:90:55: 19:0a:2a:39:d7:24:8f:0e:1a:99:9f:16:74:47:30: 65:2a:c6:91:fd:45:1f:44:29:bd:ec:73:fa:83:09: 92:65:fc:a4:8b:d6:aa:87:1f:d2:f5:6d:75:16:b1: 66:fa:db:cb:8c:11:20:ff:18:55:ef:bb:c0:ba:8e: d8:c2:5f:b4:71:68:70:f3:06:04:cd:9f:09:bd:fd: 22:a8:ac:96:53:a7:a3:50:97:f7:a6:46:7d:2b:28: 6b:54:51:9c:f9:63:94:dc:82:8e:31:b6:9e:90:bc: 82:33:03:b7:fb:e4:f6:ac:09:f8:f1:2d:dd:dc:3d: 77:06:e5:fa:68:6a:3a:78:11:fc:b5:7b:f5:fe:f3: 5d:80:03:9f:56:09:fe:9f:b2:00:40:c8:fe:92:16: 02:48:69:7e:e0:64:93:84:4a:e9:9e:c0:e6:77:2d: 26:1d:f5:03:8c:57:5e:55:64:aa:13:a3:87:10:99: 0d:4f:a1:54:75:dd:53:65:dd:7f:e1:5d:cd:de:32: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:2E:46:A9:E3:93:12:A9:25:A8:19:60:AC:F0:D1:9E:D1:B9:69 X509v3 Authority Key Identifier: keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:61:5d:6b:ed:f0:f5:30:3e:e5:30:65:19:9f:18:29:c8:42: 8c:75:a1:cb:f7:b5:bb:dc:e5:01:99:5a:90:3f:00:ed:84:02: 8d:e1:82:d4:e0:47:5d:b0:3b:5b:70:ad:70:3d:8e:fa:28:8e: d5:41:05:82:5b:a0:14:0b:db:ae:47:17:8f:81:1d:5e:ec:7f: 98:ef:7a:61:e9:2b:6e:4a:14:26:ba:b7:16:2e:83:35:d5:d3: 81:8c:e1:a4:e6:83:b9:9a:74:20:95:ff:2d:6b:e7:e5:95:3f: 95:d8:85:8c:d1:50:24:c4:29:c3:9f:40:a3:8c:43:60:96:7c: 65:f2:62:35:17:88:cc:63:f1:a2:fc:77:4f:45:53:f7:1b:5d: 12:52:c4:17:bf:74:4b:e5:d0:d8:09:1d:9f:d2:86:9f:3c:f8: 86:a5:21:12:6f:c1:01:fe:ea:91:9a:7c:68:e6:d7:3f:9c:48: c4:ec:ef:fc:ac:c2:d5:e9:27:3b:c9:d4:c7:e0:18:0c:4d:a9: fc:be:c5:a8:22:67:ff:28:ae:2c:f4:0b:02:98:9c:60:00:fe: b7:df:1e:10:4f:46:af:63:ce:89:52:33:f1:56:62:53:07:90: 21:67:d8:ef:60:fa:a4:ac:ac:6d:02:81:24:0f:24:39:11:78: ac:e2:34:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDAyNEQ4RjE1QUEzOTc3MjE3NTg4M0EyRURDMTY1MDE0 RTE5MjhBMUEwHhcNMjYwOTIxMDE1NTE4WhcNMjYwOTI4MDE1NTE4WjAYMRYwFAYD VQQDEw02YWIwOGU4Ny05NjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGq2rVYJTNkbiUdVEmF58ldfcLlE1DqGky42Kl6050S61ksbeUdK3v/5nmvS 5R2XvZuDF1ApWA+7kFUZCio51ySPDhqZnxZ0RzBlKsaR/UUfRCm97HP6gwmSZfyk i9aqhx/S9W11FrFm+tvLjBEg/xhV77vAuo7Ywl+0cWhw8wYEzZ8Jvf0iqKyWU6ej UJf3pkZ9KyhrVFGc+WOU3IKOMbaekLyCMwO3++T2rAn48S3d3D13BuX6aGo6eBH8 tXv1/vNdgAOfVgn+n7IAQMj+khYCSGl+4GSThErpnsDmdy0mHfUDjFdeVWSqE6OH EJkNT6FUdd1TZd1/4V3N3jIPUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqFLkap 45MSqSWoGWCs8NGe0blpMB8GA1UdIwQYMBaAFAJNjxWqOXchdYg6LtwWUBThkooa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80QTEyQTMzQzgy RjQxMUYwOUI3NDM1NEVDNEY5QUUwMi9BazJQRmFvNWR5RjFpRG91M0JaUUZPR1Np aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2loby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC80QTEyQTMzQzgyRjQxMUYwOUI3NDM1NEVDNEY5QUUwMi9BazJQRmFvNWR5 RjFpRG91M0JaUUZPR1NpaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPGFda+3w9TA+5TBlGZ8YKchCjHWhy/e1u9zlAZlakD8A7YQCjeGC1OBHXbA7 W3CtcD2O+iiO1UEFglugFAvbrkcXj4EdXux/mO96YekrbkoUJrq3Fi6DNdXTgYzh pOaDuZp0IJX/LWvn5ZU/ldiFjNFQJMQpw59Ao4xDYJZ8ZfJiNReIzGPxovx3T0VT 9xtdElLEF790S+XQ2Akdn9KGnzz4hqUhEm/BAf7qkZp8aObXP5xIxOzv/KzC1ekn O8nUx+AYDE2p/L7FqCJn/yiuLPQLApicYAD+t98eEE9Gr2POiVIz8VZiUweQIWfY 72D6pKysbQKBJA8kORF4rOI0bg== -----END CERTIFICATE-----Generated at Mon Sep 21 13:52:07 2026 by rpki-client