$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: FZ7ZKtEMqvStKpNrikY1+EpWPtd9kN5OCs2CNMkCiv8= Subject key identifier: 27:25:B0:D0:61:2B:6E:AB:71:1F:A2:E9:B5:05:05:F3:82:28:69:16 Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 022C Signing time: Sat 03 Oct 2026 03:21:13 +0000 Manifest this update: Sat 03 Oct 2026 03:21:13 +0000 Manifest next update: Sat 10 Oct 2026 03:21:13 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: gEe+A0J+iBW4WLV0JTWtUX4jSb0BOFZGO6n/OW9ES78=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: uvnuFfPHDz8klL7miM6941+tnPJCsl1Yqm1R/ZCMe6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: Oct 3 03:21:13 2026 GMT Not After : Oct 10 03:21:13 2026 GMT Subject: CN=6ac074a9-586e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:63:d4:90:5f:d8:10:4e:a3:93:a9:e4:f2: 7f:ff:c4:52:04:d8:14:d9:f0:33:d1:c3:39:31:e4: 78:f8:d0:26:44:fe:61:f8:f8:f5:d8:a7:cd:e2:34: 76:8f:69:cf:2a:95:d7:5c:65:b6:dc:c0:b3:14:34: a1:5b:e8:fd:db:47:f5:8d:bb:e9:a6:4a:51:e1:ec: e9:c7:84:30:34:13:2c:e4:ca:34:05:2f:a9:41:3b: fa:3a:2d:46:b3:53:44:ae:e9:21:ab:ba:4f:aa:a7: 8d:19:38:4d:0f:a2:0b:31:a2:6b:ad:be:68:2b:94: e0:30:2a:d2:33:00:23:72:bf:14:9f:96:a2:73:3a: ce:f3:ca:83:62:47:52:3d:17:c6:bd:6e:55:70:83: 1d:cc:cd:e2:fb:85:ea:47:c9:69:93:16:55:ad:9b: 81:77:7c:46:20:0f:bb:32:f9:db:63:f0:a9:75:a9: 09:c5:53:4e:6b:78:2d:a8:5e:04:0d:08:36:f0:ef: 10:ec:65:d8:bb:7d:ba:f6:ea:d6:61:95:63:8a:71: 55:8a:eb:f2:a3:52:dd:2d:cc:4d:dd:5c:4f:32:15: a5:24:c1:81:8e:dd:80:18:bb:19:b6:ac:f1:34:4c: c2:90:be:3d:34:6e:ce:1a:1a:ad:71:75:ee:48:60: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:25:B0:D0:61:2B:6E:AB:71:1F:A2:E9:B5:05:05:F3:82:28:69:16 X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:6e:23:7a:20:26:2e:04:b7:e6:48:88:84:a3:e4:55:07:d5: 3f:07:53:bd:c9:b7:ad:d6:7d:b6:db:b1:8b:9c:d8:cb:d2:8a: e5:fc:24:86:d7:a3:33:11:74:35:75:ce:43:73:a4:d7:ae:d9: c7:0a:97:81:8a:07:80:52:f1:5a:01:87:2f:8a:a7:76:9b:20: cc:1f:a6:3c:7c:d6:a1:30:a8:cb:af:09:c3:cb:3d:d9:3d:c6: aa:e3:7e:60:4e:72:9d:d3:33:e4:47:a1:0e:ac:db:7e:cc:9c: 72:75:69:ee:d2:f2:d0:ab:66:15:75:7e:b9:ba:12:22:2a:3a: 71:84:8c:68:49:62:90:1b:87:7b:7d:e0:df:55:7e:42:32:dd: 74:4d:59:23:a8:c4:49:89:75:ed:e8:f6:be:8f:60:af:66:05: 6c:ad:b4:e3:83:24:f1:57:8b:ca:f5:41:5b:74:c1:28:61:53: a0:a1:1b:1f:be:c7:ee:e8:64:45:b4:86:10:b4:e7:ce:d4:a9: 61:fd:cb:2e:5f:7c:f3:ce:04:0f:94:f4:9d:d3:05:b1:f9:ed: 80:14:69:33:06:3d:03:ed:d4:8d:63:ce:f1:33:91:45:80:9f: bb:64:0f:e3:2a:67:42:7c:16:73:64:4c:e5:54:0a:be:2f:ba: bb:42:bc:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjYxMDAzMDMyMTEzWhcNMjYxMDEwMDMyMTEzWjAYMRYwFAYD VQQDEw02YWMwNzRhOS01ODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqW5j1JBf2BBOo5Op5PJ//8RSBNgU2fAz0cM5MeR4+NAmRP5h+Pj12KfN4jR2 j2nPKpXXXGW23MCzFDShW+j920f1jbvppkpR4ezpx4QwNBMs5Mo0BS+pQTv6Oi1G s1NErukhq7pPqqeNGThND6ILMaJrrb5oK5TgMCrSMwAjcr8Un5aiczrO88qDYkdS PRfGvW5VcIMdzM3i+4XqR8lpkxZVrZuBd3xGIA+7MvnbY/CpdakJxVNOa3gtqF4E DQg28O8Q7GXYu3269urWYZVjinFViuvyo1LdLcxN3VxPMhWlJMGBjt2AGLsZtqzx NEzCkL49NG7OGhqtcXXuSGAz4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCclsNBh K26rcR+i6bUFBfOCKGkWMB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsW4jeiAmLgS35kiIhKPkVQfVPwdTvcm3rdZ9ttuxi5zYy9KK5fwkhtejMxF0 NXXOQ3Ok167ZxwqXgYoHgFLxWgGHL4qndpsgzB+mPHzWoTCoy68Jw8s92T3GquN+ YE5yndMz5EehDqzbfsyccnVp7tLy0KtmFXV+uboSIio6cYSMaElikBuHe33g31V+ QjLddE1ZI6jESYl17ej2vo9gr2YFbK2044Mk8VeLyvVBW3TBKGFToKEbH77H7uhk RbSGELTnztSpYf3LLl98884ED5T0ndMFsfntgBRpMwY9A+3UjWPO8TORRYCfu2QP 4ypnQnwWc2RM5VQKvi+6u0K8RA== -----END CERTIFICATE-----Generated at Sun Oct 4 01:02:49 2026 by rpki-client