$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: +V9eiC1TZpIJq8h4BLW9mOgXHJshuzbiIY1x/CLppTA= Subject key identifier: F6:BE:70:35:5C:C3:A9:9D:70:56:AF:CB:3C:14:C2:7C:2D:8E:99:C4 Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: 029A Signing time: Mon 05 Oct 2026 01:57:48 +0000 Manifest this update: Mon 05 Oct 2026 01:57:48 +0000 Manifest next update: Mon 12 Oct 2026 01:57:48 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: 5/uOR6M+1RT/w+W8Xnp2QaM26iEhSbAals1KAONQsAc=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: ZjWTn7RPw7EchMonKVaN+HGBpWShBdJZb78EKus3MRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701, serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Validity Not Before: Oct 5 01:57:48 2026 GMT Not After : Oct 12 01:57:48 2026 GMT Subject: CN=6ac3041c-a734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a7:19:50:04:c5:1c:35:e3:07:e8:73:9a:52: d2:9d:4b:1f:6e:2f:bd:3c:95:b8:38:31:2f:4f:92: 13:97:9d:c7:d4:43:bd:7d:2f:33:48:54:8b:6c:a3: 0d:94:de:be:b0:77:e2:9a:e4:26:9e:ee:3e:bc:4c: ec:f0:0d:d3:ef:56:00:cf:85:63:67:a6:1e:eb:97: f1:f6:80:8a:dc:3a:3c:f4:80:66:67:6e:40:16:8c: a1:85:98:04:f9:ff:ba:a8:98:c6:34:60:f5:45:36: cf:0c:15:6d:4e:86:5d:05:7e:34:5f:9b:7f:ba:77: dd:f7:c1:0b:f1:08:17:7b:e9:b1:d0:e8:7b:85:18: 99:35:75:a1:3d:9c:6a:6f:9d:e4:43:46:af:90:33: 7c:10:c7:c1:40:4e:88:90:38:a5:c2:9c:e4:dd:1b: 1a:fa:8e:61:74:60:62:61:4d:6c:b7:ba:bc:96:aa: b2:c7:c9:4c:51:7a:98:d5:5c:36:26:bc:94:f7:95: 23:ad:08:8c:1b:bf:36:1d:3e:91:95:9f:3b:68:21: f5:20:f8:61:04:de:fd:d8:ca:90:e8:c3:77:a3:e2: 88:f1:41:42:b5:b6:85:29:bd:53:cb:12:67:04:3e: a0:8f:40:63:a6:e0:1a:d3:f6:bc:e6:56:80:1f:27: 31:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BE:70:35:5C:C3:A9:9D:70:56:AF:CB:3C:14:C2:7C:2D:8E:99:C4 X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:43:63:d3:c4:aa:52:6d:b9:fa:01:83:98:46:2f:2f:f9:f3: da:93:7e:02:2f:3d:fc:4d:fa:91:0e:bb:0a:e0:fe:8f:b5:9f: ed:67:e7:fa:2e:c1:67:06:c5:81:b0:be:76:28:03:45:2e:16: a8:54:da:71:30:15:db:68:e0:22:14:5e:f1:37:e6:b8:c4:fe: d8:3d:ef:cd:86:ae:b7:45:62:fa:77:4e:21:0b:3f:8e:cc:45: 0e:29:fe:41:f3:cb:59:62:1b:46:3d:a3:ba:00:0f:02:e7:a2: 52:57:15:b9:ba:4b:43:37:36:79:85:09:c3:d0:19:ed:81:f2: f8:cd:4c:5e:e2:c0:25:48:d1:ca:cf:86:a8:bb:f5:e7:85:a0: ca:6b:7d:d0:6b:1f:26:00:eb:e0:26:aa:54:a7:0d:9f:02:fa: 25:eb:36:c2:b3:ff:dc:3c:e6:73:be:15:54:7a:59:a7:ba:06: 2f:94:bb:42:9c:1c:12:a2:da:f1:77:a2:08:bc:2b:6f:ed:df: 01:ac:32:23:aa:0d:d3:3f:1f:c0:c6:bd:cc:66:9f:e9:74:86: d6:17:47:7b:cc:86:8e:30:e2:9d:ec:7d:88:ab:64:1e:c0:a3: 1f:d8:c4:e5:f7:f0:20:25:39:64:ee:6b:b1:3b:90:3d:0e:3d: 04:e6:0e:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjYxMDA1MDE1NzQ4WhcNMjYxMDEyMDE1NzQ4WjAYMRYwFAYD VQQDEw02YWMzMDQxYy1hNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhacZUATFHDXjB+hzmlLSnUsfbi+9PJW4ODEvT5ITl53H1EO9fS8zSFSLbKMN lN6+sHfimuQmnu4+vEzs8A3T71YAz4VjZ6Ye65fx9oCK3Do89IBmZ25AFoyhhZgE +f+6qJjGNGD1RTbPDBVtToZdBX40X5t/unfd98EL8QgXe+mx0Oh7hRiZNXWhPZxq b53kQ0avkDN8EMfBQE6IkDilwpzk3Rsa+o5hdGBiYU1st7q8lqqyx8lMUXqY1Vw2 JryU95UjrQiMG782HT6RlZ87aCH1IPhhBN792MqQ6MN3o+KI8UFCtbaFKb1TyxJn BD6gj0BjpuAa0/a85laAHycxjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPa+cDVc w6mdcFavyzwUwnwtjpnEMB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALkNj08SqUm25+gGDmEYvL/nz2pN+Ai89/E36kQ67CuD+j7Wf7Wfn+i7BZwbF gbC+digDRS4WqFTacTAV22jgIhRe8TfmuMT+2D3vzYaut0Vi+ndOIQs/jsxFDin+ QfPLWWIbRj2jugAPAueiUlcVubpLQzc2eYUJw9AZ7YHy+M1MXuLAJUjRys+GqLv1 54Wgymt90GsfJgDr4CaqVKcNnwL6Jes2wrP/3Dzmc74VVHpZp7oGL5S7QpwcEqLa 8XeiCLwrb+3fAawyI6oN0z8fwMa9zGaf6XSG1hdHe8yGjjDinex9iKtkHsCjH9jE 5ffwICU5ZO5rsTuQPQ49BOYOGA== -----END CERTIFICATE-----Generated at Tue Oct 6 21:40:25 2026 by rpki-client