$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: rMF+YFiMkyZhLcuewjOKtlvELgtVz0N3tRcElUtRkfE= Subject key identifier: 4A:93:9E:55:D0:2A:AE:1B:8A:4F:CC:45:01:AB:39:01:72:C1:FF:2C Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0AA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0A81 Signing time: Tue 22 Sep 2026 19:28:44 +0000 Manifest this update: Tue 22 Sep 2026 19:28:43 +0000 Manifest next update: Tue 29 Sep 2026 19:28:43 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: /h1mokWQAZyEoqv5G0TJcuCTABXmHGUswdHsMLrvS7M=) 2: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=) 3: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=) 4: 7AAA81CC97A211F1B4CCDFD05411F970.roa (hash: ehD/IdSO6obCGGX3OBULfP/M0Zb6tSmU7+GXTV+zo0I=) 5: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2729 (0xaa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Sep 22 19:28:43 2026 GMT Not After : Sep 29 19:28:43 2026 GMT Subject: CN=6ab2d6ec-e0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:ce:f2:7e:f2:d8:fc:cf:98:da:7a:1d:bb: f1:9f:75:10:06:1e:ab:69:d5:51:1b:e3:d8:fb:da: 6d:ff:68:de:16:7d:43:b5:ec:07:d5:95:a6:16:ba: 6f:a9:f2:68:75:d9:97:5e:70:87:af:87:d6:b7:a3: 35:6a:ef:78:64:15:a4:6f:08:dd:38:43:91:f6:12: bc:9f:4f:0f:1c:51:4c:e8:79:f4:38:5b:8d:f6:f9: b8:52:7a:48:4c:5f:dc:82:0c:30:33:a3:56:25:0a: 46:3b:51:b1:8e:81:8e:75:74:37:bd:b7:61:f4:2f: 76:13:22:e4:0e:98:00:8d:50:75:e6:db:20:cc:51: 73:66:a5:f4:89:de:4f:62:46:8a:4f:1a:a3:3e:6c: 9e:89:63:57:06:49:e0:7b:ce:e8:65:8f:e2:3f:e9: eb:e7:e1:43:4a:26:ab:bf:5c:c3:00:68:10:cf:b9: 8e:a6:bf:db:30:74:a9:e1:71:3f:b6:68:c8:0a:72: 0f:40:cc:72:de:5b:d7:01:f0:59:9d:17:1d:c7:51: 6c:12:2c:02:87:cb:25:bc:42:44:d0:f1:6e:5f:77: 99:84:b1:2d:c8:50:d8:ee:94:d8:bb:f8:9b:d7:85: 68:0d:dc:ed:d0:a4:19:60:92:8a:be:69:52:f2:4f: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:93:9E:55:D0:2A:AE:1B:8A:4F:CC:45:01:AB:39:01:72:C1:FF:2C X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:42:6a:62:ec:9b:74:d6:b3:01:4b:e7:82:20:84:f1:5d:b9: 0d:30:16:ed:06:f4:5f:88:61:b7:69:59:98:13:7c:3b:25:4d: d8:03:a1:24:56:e3:c9:33:14:60:4f:ad:13:cd:d4:c3:9b:a1: 2e:be:da:b8:ec:12:66:fe:b5:47:72:8d:43:df:b0:d0:3a:14: 2b:a5:f0:72:dc:0e:88:17:81:fb:22:22:2a:9d:29:80:34:06: 28:fe:94:80:65:ed:24:dc:f2:85:3e:1a:a0:60:1c:cd:46:68: e5:2a:1a:c6:da:5f:9c:34:29:74:36:cd:83:73:a9:fb:f8:18: 51:d5:c2:a8:67:d7:2f:33:a5:18:21:d7:9a:ce:8b:57:64:44: 5a:f0:ea:3a:c6:46:42:b3:d5:bc:a1:0a:e8:31:da:7d:e3:f8: 48:de:bd:46:1d:71:f4:b6:b5:68:cb:16:d1:d5:4d:2c:e1:88: 4c:56:1b:a9:45:d8:be:6c:4e:cd:f6:38:c7:b1:dd:41:bd:4e: ac:05:eb:79:cc:c2:c5:89:39:b5:4c:57:a0:76:7f:7e:15:f7: ff:9b:80:68:9a:c9:c5:c0:cf:69:7c:ec:cd:0b:c2:95:c8:aa: 35:8b:70:6e:a6:5d:99:f6:66:66:27:9c:78:d7:c8:06:3e:d3: 22:20:23:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjYwOTIyMTkyODQzWhcNMjYwOTI5MTkyODQzWjAYMRYwFAYD VQQDEw02YWIyZDZlYy1lMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfHO8n7y2PzPmNp6Hbvxn3UQBh6radVRG+PY+9pt/2jeFn1DtewH1ZWmFrpv qfJoddmXXnCHr4fWt6M1au94ZBWkbwjdOEOR9hK8n08PHFFM6Hn0OFuN9vm4UnpI TF/cggwwM6NWJQpGO1GxjoGOdXQ3vbdh9C92EyLkDpgAjVB15tsgzFFzZqX0id5P YkaKTxqjPmyeiWNXBknge87oZY/iP+nr5+FDSiarv1zDAGgQz7mOpr/bMHSp4XE/ tmjICnIPQMxy3lvXAfBZnRcdx1FsEiwCh8slvEJE0PFuX3eZhLEtyFDY7pTYu/ib 14VoDdzt0KQZYJKKvmlS8k+P7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqTnlXQ Kq4bik/MRQGrOQFywf8sMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUkJqYuybdNazAUvngiCE8V25DTAW7Qb0X4hht2lZmBN8OyVN2AOhJFbjyTMU YE+tE83Uw5uhLr7auOwSZv61R3KNQ9+w0DoUK6XwctwOiBeB+yIiKp0pgDQGKP6U gGXtJNzyhT4aoGAczUZo5SoaxtpfnDQpdDbNg3Op+/gYUdXCqGfXLzOlGCHXms6L V2REWvDqOsZGQrPVvKEK6DHafeP4SN69Rh1x9La1aMsW0dVNLOGITFYbqUXYvmxO zfY4x7HdQb1OrAXreczCxYk5tUxXoHZ/fhX3/5uAaJrJxcDPaXzszQvClciqNYtw bqZdmfZmZieceNfIBj7TIiAjag== -----END CERTIFICATE-----Generated at Tue Sep 22 21:58:44 2026 by rpki-client