$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft File: 2OexX5y5FnTlEn_UBtfZ5xjgirA.mft (raw, json) Hash identifier: KxaO7utq48pmTgV/CkpF92JZ7cN335uaGeVuUsa03N8= Subject key identifier: B9:12:4F:B2:40:C5:31:14:C0:C6:7B:0D:02:C1:AF:B6:01:E7:46:33 Authority key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0 Certificate issuer: /CN=A917E27F/serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft Manifest number: D9 Signing time: Fri 25 Sep 2026 06:44:45 +0000 Manifest this update: Fri 25 Sep 2026 06:44:44 +0000 Manifest next update: Fri 02 Oct 2026 06:44:44 +0000 Files and hashes: 1: 2OexX5y5FnTlEn_UBtfZ5xjgirA.crl (hash: cL0HmLUA27VAC/0xSOOBgkSVJNnc8HiCV5dW/5G1gcM=) 2: 4197AB74735611F080D68151C4F9AE02.roa (hash: kivBXOd2lZU5WJsdaMJuH7XTLp3xzvhG27t6AlFFi0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0 Validity Not Before: Sep 25 06:44:44 2026 GMT Not After : Oct 2 06:44:44 2026 GMT Subject: CN=6ab6185d-acad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3d:21:5c:c1:6d:72:19:66:db:5f:bb:4d:7b: 4d:48:cd:af:bc:74:b2:5b:c5:56:23:99:40:8d:a1: 31:32:7f:e0:c5:61:ba:ca:1b:f1:bb:0a:f1:0d:54: cc:e8:a0:1e:01:7e:60:5d:47:0c:ed:20:60:44:4d: cc:37:bb:b2:28:0c:9b:95:9e:2e:e5:2b:6e:3c:c3: 5c:13:96:ad:01:03:71:0a:85:b8:5c:7a:c6:3c:06: 94:23:63:d0:ec:12:dc:89:07:92:a2:a7:3a:93:57: e4:40:7e:c0:70:3d:e6:d3:30:a1:ee:61:ea:95:3a: 38:7b:a1:ab:04:9a:f9:82:23:e8:4c:5a:c0:05:5f: 74:33:27:58:f5:12:37:7b:7e:7b:5a:83:ad:99:1f: af:60:cb:65:bd:c8:e2:f3:b9:5a:64:f6:bc:ea:ae: 64:ab:32:fc:dd:77:59:a4:26:ad:cc:6f:68:29:fe: 3b:68:96:1c:96:46:af:72:23:73:53:e5:59:b6:85: 56:ec:46:49:3a:9e:89:67:47:fd:d8:ba:db:c5:a5: fc:36:06:0c:fe:de:d3:28:02:7a:6d:04:99:eb:22: 16:25:66:13:32:d1:66:68:69:77:e9:65:ee:52:32: 8b:16:3a:af:b8:a3:b8:3b:9c:68:b4:14:22:c7:6d: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:4F:B2:40:C5:31:14:C0:C6:7B:0D:02:C1:AF:B6:01:E7:46:33 X509v3 Authority Key Identifier: keyid:D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:5d:1a:e0:83:3d:f2:cf:73:50:08:b3:9e:c1:7d:1a:58:12: 38:2b:93:3d:c7:73:5b:2b:27:30:dd:b0:ea:2d:53:69:8f:67: 70:ff:79:fe:4d:9e:64:ee:5b:b9:bd:0c:45:2f:89:a8:ba:9d: eb:8a:a9:02:7b:4b:75:09:70:a8:bc:77:70:54:54:5a:55:f3: c3:ea:35:35:4b:a8:0e:2c:2a:4b:11:d1:6a:c7:75:44:13:cb: 7f:fd:ae:4e:ec:8a:d2:70:34:1e:07:c5:9e:6c:df:5d:35:15: 2f:5c:07:a2:7d:14:8f:56:41:ad:84:e9:f8:9b:29:b0:e3:a2: 2b:f4:57:b6:bc:6e:bc:d8:aa:7e:e1:14:dc:ca:d1:51:37:4f: 79:66:ef:7f:4e:9b:3a:73:f8:86:87:4a:5a:d0:88:20:98:68: 9c:fe:a0:78:00:23:0e:9b:b9:30:c4:e6:b0:e7:5d:e6:a0:8f: 94:96:60:56:92:43:f9:52:4e:0c:9c:cf:9f:1b:3c:7a:64:69: 94:5e:e9:d7:22:bd:a2:f2:92:90:9a:f5:68:4f:0e:0b:eb:e2: 0d:86:ae:5a:b2:1f:11:a9:5e:57:1e:20:83:14:0e:99:16:f7: e0:d3:55:27:8b:47:1b:70:a1:97:f1:5e:1b:6a:0a:03:61:86: 4f:2c:27:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UyN0YxMTAvBgNVBAUTKEQ4RTdCMTVGOUNCOTE2NzRFNTEyN0ZENDA2RDdEOUU3 MThFMDhBQjAwHhcNMjYwOTI1MDY0NDQ0WhcNMjYxMDAyMDY0NDQ0WjAYMRYwFAYD VQQDEw02YWI2MTg1ZC1hY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8T0hXMFtchlm21+7TXtNSM2vvHSyW8VWI5lAjaExMn/gxWG6yhvxuwrxDVTM 6KAeAX5gXUcM7SBgRE3MN7uyKAyblZ4u5StuPMNcE5atAQNxCoW4XHrGPAaUI2PQ 7BLciQeSoqc6k1fkQH7AcD3m0zCh7mHqlTo4e6GrBJr5giPoTFrABV90MydY9RI3 e357WoOtmR+vYMtlvcji87laZPa86q5kqzL83XdZpCatzG9oKf47aJYclkavciNz U+VZtoVW7EZJOp6JZ0f92LrbxaX8NgYM/t7TKAJ6bQSZ6yIWJWYTMtFmaGl36WXu UjKLFjqvuKO4O5xotBQix21zlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkST7JA xTEUwMZ7DQLBr7YB50YzMB8GA1UdIwQYMBaAFNjnsV+cuRZ05RJ/1AbX2ecY4Iqw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTI3Ri83NjlEMkQ2Njcy QjcxMUYwOUMwNDY5MERDNEY5QUUwMi8yT2V4WDV5NUZuVGxFbl9VQnRmWjV4amdp ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJPZXhYNXk1Rm5UbEVuX1VCdGZaNXhqZ2lyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTI3Ri83NjlEMkQ2NjcyQjcxMUYwOUMwNDY5MERDNEY5QUUwMi8yT2V4WDV5NUZu VGxFbl9VQnRmWjV4amdpckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFF0a4IM98s9zUAiznsF9GlgSOCuTPcdzWysnMN2w6i1TaY9ncP95/k2eZO5b ub0MRS+JqLqd64qpAntLdQlwqLx3cFRUWlXzw+o1NUuoDiwqSxHRasd1RBPLf/2u TuyK0nA0HgfFnmzfXTUVL1wHon0Uj1ZBrYTp+JspsOOiK/RXtrxuvNiqfuEU3MrR UTdPeWbvf06bOnP4hodKWtCIIJhonP6geAAjDpu5MMTmsOdd5qCPlJZgVpJD+VJO DJzPnxs8emRplF7p1yK9ovKSkJr1aE8OC+viDYauWrIfEaleVx4ggxQOmRb34NNV J4tHG3Chl/FeG2oKA2GGTywn5Q== -----END CERTIFICATE-----Generated at Fri Sep 25 14:18:01 2026 by rpki-client