$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: 138yB0A5cfC7GftloMFEZhY4Lonh1xVmzoViFOKSfoM= Subject key identifier: 68:3F:93:63:6C:BD:1D:D4:1F:F7:F1:65:1E:3D:22:15:26:83:11:7D Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0AA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0A80 Signing time: Sun 20 Sep 2026 19:35:17 +0000 Manifest this update: Sun 20 Sep 2026 19:35:16 +0000 Manifest next update: Sun 27 Sep 2026 19:35:16 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: +M8Zl5WBY4bmPXNmIi8jBaIj90k3BFtXxt9kYC3Lrk0=) 2: 7AAA81CC97A211F1B4CCDFD05411F970.roa (hash: ehD/IdSO6obCGGX3OBULfP/M0Zb6tSmU7+GXTV+zo0I=) 3: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=) 4: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=) 5: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Sep 20 19:35:16 2026 GMT Not After : Sep 27 19:35:16 2026 GMT Subject: CN=6ab03575-39c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:2b:aa:bc:f7:18:eb:3c:9d:8f:14:f3:73: 6e:11:ce:87:b2:43:67:45:71:93:5a:b1:dd:21:2a: 86:d9:44:24:29:3f:14:94:6e:f6:0c:10:88:45:05: 19:57:73:e3:8e:e5:f3:a8:cb:59:ac:80:6d:e2:bf: ff:2d:04:c4:f3:fd:a5:66:95:b8:cd:31:27:b2:d6: c3:63:94:33:23:9e:39:a4:fe:63:ec:e6:65:41:de: a4:4f:06:51:ad:47:dd:0d:18:81:01:d3:a9:f8:5a: 3b:c9:26:f3:7c:84:26:7f:81:72:d7:f2:e4:32:d8: 31:99:d9:c3:35:6b:3b:a8:79:f3:03:12:42:ab:a2: 4e:3b:bb:4b:92:aa:c2:f4:c9:4c:7b:74:28:d0:7d: ea:80:6f:cf:a0:34:9f:ab:fd:53:c5:14:bb:c2:6a: 1e:ec:7d:8e:98:f8:85:9d:2a:79:57:df:2e:e4:f9: f5:2c:e8:ec:f6:0f:25:df:63:e7:d6:78:a9:16:8f: 12:39:df:bc:df:8b:d9:4a:23:73:ac:a6:dc:7c:95: 7f:d4:c8:7f:07:90:cd:cd:3c:e3:81:d9:c9:00:41: 5f:f1:92:84:40:e1:30:94:27:ba:62:4f:bf:37:da: c0:c3:7b:18:4a:6a:4e:c3:29:87:c3:ad:ed:0e:eb: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3F:93:63:6C:BD:1D:D4:1F:F7:F1:65:1E:3D:22:15:26:83:11:7D X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:61:72:4a:85:75:66:79:20:47:d8:88:6c:c8:3c:56:3a:0f: 67:3b:12:d2:e8:0f:78:ab:1b:11:33:65:bb:df:a3:26:62:40: fa:c5:c2:10:dc:26:15:b9:06:7b:51:cf:3e:ce:08:51:8d:22: ab:8b:8e:2f:18:56:71:a9:4f:ba:f0:06:cf:d8:31:b8:87:1b: 29:be:f6:6e:d4:58:4f:04:8c:43:91:98:59:c8:49:8f:3e:58: 49:bc:98:61:80:60:50:f1:61:db:d1:dc:b5:0a:ea:c6:03:76: 42:f8:09:4a:d9:96:0c:16:ec:b3:20:ed:aa:bd:07:e3:eb:9b: c1:7c:04:6d:d7:4b:a2:e6:c0:df:db:22:a4:e4:34:24:31:58: 77:75:ab:61:26:96:2d:e1:2a:a5:de:dc:f7:1e:f4:e4:05:fb: 29:f8:10:f5:45:ae:8e:d2:32:b4:bc:3b:78:1a:2d:a5:20:6b: ab:f4:f9:79:b3:41:11:ea:46:b0:b7:e5:e2:45:3f:ea:78:5c: 7e:0f:9f:f0:3c:3f:ea:2c:48:1a:47:ed:26:c1:dd:1a:5a:f8: 47:c5:8c:23:1f:7d:e8:bb:7a:50:46:23:9a:f1:94:79:a0:34: 3a:ab:e3:c7:e6:12:6c:28:2d:c5:1a:a4:eb:b4:25:e0:60:f8: 82:23:39:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjYwOTIwMTkzNTE2WhcNMjYwOTI3MTkzNTE2WjAYMRYwFAYD VQQDEw02YWIwMzU3NS0zOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSkrqrz3GOs8nY8U83NuEc6HskNnRXGTWrHdISqG2UQkKT8UlG72DBCIRQUZ V3PjjuXzqMtZrIBt4r//LQTE8/2lZpW4zTEnstbDY5QzI545pP5j7OZlQd6kTwZR rUfdDRiBAdOp+Fo7ySbzfIQmf4Fy1/LkMtgxmdnDNWs7qHnzAxJCq6JOO7tLkqrC 9MlMe3Qo0H3qgG/PoDSfq/1TxRS7wmoe7H2OmPiFnSp5V98u5Pn1LOjs9g8l32Pn 1nipFo8SOd+834vZSiNzrKbcfJV/1Mh/B5DNzTzjgdnJAEFf8ZKEQOEwlCe6Yk+/ N9rAw3sYSmpOwymHw63tDutuFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGg/k2Ns vR3UH/fxZR49IhUmgxF9MB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ2FySoV1ZnkgR9iIbMg8VjoPZzsS0ugPeKsbETNlu9+jJmJA+sXCENwmFbkG e1HPPs4IUY0iq4uOLxhWcalPuvAGz9gxuIcbKb72btRYTwSMQ5GYWchJjz5YSbyY YYBgUPFh29HctQrqxgN2QvgJStmWDBbssyDtqr0H4+ubwXwEbddLoubA39sipOQ0 JDFYd3WrYSaWLeEqpd7c9x705AX7KfgQ9UWujtIytLw7eBotpSBrq/T5ebNBEepG sLfl4kU/6nhcfg+f8Dw/6ixIGkftJsHdGlr4R8WMIx996Lt6UEYjmvGUeaA0Oqvj x+YSbCgtxRqk67Ql4GD4giM5Lg== -----END CERTIFICATE-----Generated at Tue Sep 22 20:18:37 2026 by rpki-client