$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft File: 2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json) Hash identifier: cpkJwLPAMD7gLUeFX890ZJpRV5K1+AMPrvq8c3ICT5Y= Subject key identifier: 60:74:DC:D8:92:F9:24:36:E0:48:85:40:C8:51:05:EF:2F:6D:88:FD Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 Certificate issuer: /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft Manifest number: 01A8 Signing time: Mon 21 Sep 2026 04:05:41 +0000 Manifest this update: Mon 21 Sep 2026 04:05:41 +0000 Manifest next update: Mon 28 Sep 2026 04:05:41 +0000 Files and hashes: 1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: lGtNjCtxPgTBerHKWDLm2hIF3H57u582t6ZTXb7Z2kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Validity Not Before: Sep 21 04:05:41 2026 GMT Not After : Sep 28 04:05:41 2026 GMT Subject: CN=6ab0ad15-53d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:07:d5:32:1e:6e:48:cf:52:fa:8c:c2:9f: ae:cd:02:c6:2e:59:12:50:84:36:06:1f:11:88:8f: 17:66:1d:27:28:ab:e3:8d:52:d6:1d:56:5c:c1:b8: 5c:f5:35:05:65:f3:b6:f5:39:d8:dd:ba:47:3f:57: 31:7d:32:31:dc:d9:ce:1d:4c:2d:e9:b2:b4:9c:fd: 3e:b2:83:8d:7d:e0:5b:8d:91:96:56:9a:0e:1e:e4: e9:39:47:d4:08:4c:ba:8c:90:04:7e:66:79:04:66: 5c:86:78:cb:77:e2:4a:02:78:d7:7f:c5:16:ec:3b: f2:43:53:d6:ec:ae:4d:4e:66:0f:22:2c:75:91:9b: e1:6e:9f:02:fc:93:9a:9f:78:9d:97:c7:cd:c2:aa: 03:4f:bd:3b:f4:aa:58:ab:3b:dc:b9:ee:5b:08:7c: aa:b7:41:8a:a4:a4:3b:0a:a2:2d:ae:c2:c4:fb:b3: c5:1e:4e:e4:7a:58:80:33:59:b4:39:df:b3:df:9e: d7:d9:71:61:83:9c:98:18:73:e2:9f:40:22:a6:89: 63:cc:7a:cc:43:59:0b:5e:b0:6c:34:04:64:d1:b6: 5e:81:04:d9:bd:47:e6:29:e1:ba:aa:80:71:ea:b7: 7a:86:ab:5c:71:39:bf:ec:54:62:63:6f:bd:a0:8c: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:74:DC:D8:92:F9:24:36:E0:48:85:40:C8:51:05:EF:2F:6D:88:FD X509v3 Authority Key Identifier: keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:bd:2a:b2:0f:e2:8c:43:65:73:43:3c:41:88:91:d6:c1:e2: 13:2c:73:71:80:64:fc:d1:f3:0e:eb:cb:88:47:66:f2:7a:96: 09:27:c6:ab:29:63:e0:97:16:f7:66:cd:71:57:7d:9e:59:e6: 4d:df:f1:fc:d8:19:88:d7:aa:6d:67:59:11:75:47:68:62:a2: 38:95:cc:5a:03:aa:cd:36:27:ef:5d:06:0d:ea:9a:d8:66:90: d8:0d:c7:09:79:ec:c8:65:b1:f6:d1:74:3a:76:48:77:17:01: e9:c4:45:e4:dc:fa:cc:8e:49:1c:e1:95:0e:bb:42:f7:ad:03: 23:2b:55:03:3f:23:1d:b4:a1:ec:a2:17:f9:dd:2c:50:3e:88: a2:22:88:31:c2:6d:f6:f9:53:f6:a3:b1:96:af:3b:19:60:21: 28:24:bf:7c:fc:8a:95:f1:1f:59:3a:0c:27:03:93:f8:0f:a1: 95:9a:6a:61:b3:1f:ce:9b:15:92:92:32:4b:47:01:3c:d6:78: d6:e5:80:5d:de:0e:01:1c:e7:dd:bf:ff:e3:4e:fc:53:de:62: db:20:b2:4d:a5:a1:68:ac:5b:93:9e:83:53:c2:03:9c:64:bb: 6e:36:bd:b1:0c:27:6c:3a:77:be:66:54:13:8c:19:be:6b:bb: 83:63:6d:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKEQ4MzNDNTE1MkUzRjJEMjc5Qjg5MDRGODNEMDBERDkw QUNBNjJCRDUwHhcNMjYwOTIxMDQwNTQxWhcNMjYwOTI4MDQwNTQxWjAYMRYwFAYD VQQDEw02YWIwYWQxNS01M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwswH1TIebkjPUvqMwp+uzQLGLlkSUIQ2Bh8RiI8XZh0nKKvjjVLWHVZcwbhc 9TUFZfO29TnY3bpHP1cxfTIx3NnOHUwt6bK0nP0+soONfeBbjZGWVpoOHuTpOUfU CEy6jJAEfmZ5BGZchnjLd+JKAnjXf8UW7DvyQ1PW7K5NTmYPIix1kZvhbp8C/JOa n3idl8fNwqoDT7079KpYqzvcue5bCHyqt0GKpKQ7CqItrsLE+7PFHk7keliAM1m0 Od+z357X2XFhg5yYGHPin0AipoljzHrMQ1kLXrBsNARk0bZegQTZvUfmKeG6qoBx 6rd6hqtccTm/7FRiY2+9oIyyPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGB03NiS +SQ24EiFQMhRBe8vbYj9MB8GA1UdIwQYMBaAFNgzxRUuPy0nm4kE+D0A3ZCspivV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9CMjkwQTM0NjJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xTZWJpUVQ0UFFEZGtLeW1L OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEUEZGUzRfTFNlYmlRVDRQUURka0t5bUs5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9CMjkwQTM0NjJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xT ZWJpUVQ0UFFEZGtLeW1LOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlL0qsg/ijENlc0M8QYiR1sHiEyxzcYBk/NHzDuvLiEdm8nqWCSfGqylj4JcW 92bNcVd9nlnmTd/x/NgZiNeqbWdZEXVHaGKiOJXMWgOqzTYn710GDeqa2GaQ2A3H CXnsyGWx9tF0OnZIdxcB6cRF5Nz6zI5JHOGVDrtC960DIytVAz8jHbSh7KIX+d0s UD6IoiKIMcJt9vlT9qOxlq87GWAhKCS/fPyKlfEfWToMJwOT+A+hlZpqYbMfzpsV kpIyS0cBPNZ41uWAXd4OARzn3b//4078U95i2yCyTaWhaKxbk56DU8IDnGS7bja9 sQwnbDp3vmZUE4wZvmu7g2Ntuw== -----END CERTIFICATE-----Generated at Tue Sep 22 05:35:07 2026 by rpki-client