$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft File: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft (raw, json) Hash identifier: xWrOkePH8IzW1ErMRoKtELy46l0cTb8YsioiKtuEP8I= Subject key identifier: F4:48:6F:05:87:F2:F2:48:33:C9:C7:60:CE:47:A3:AE:D4:75:13:7F Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B Certificate issuer: /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft Manifest number: 0201 Signing time: Sat 03 Oct 2026 03:50:13 +0000 Manifest this update: Sat 03 Oct 2026 03:50:13 +0000 Manifest next update: Sat 10 Oct 2026 03:50:13 +0000 Files and hashes: 1: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl (hash: NomqInTZb4mxvCU2sHmYBR3vxjIvuSfjPNs5aQaQntA=) 2: 6F5F30B8B56111EE91C72951C4F9AE02.roa (hash: NKqxNV8ZTNMr3HZ7qohnaVPukBEy2IxhkEY74xhVUp4=) 3: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (hash: Olet7/jMKDbPX9itUim3LSNIHYA8fTbBo6f7YD0v+zg=) 4: 2DCC0688B57211EEBB68526DC4F9AE02.roa (hash: yJFPpL7wE2GdaICTMgXge87NbgvFqYn4RExlPALcImA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Validity Not Before: Oct 3 03:50:13 2026 GMT Not After : Oct 10 03:50:13 2026 GMT Subject: CN=6ac07b75-c1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:82:35:79:dd:c0:cd:61:cf:df:5a:a5:0a: e5:2b:d0:a5:c3:cc:8e:e1:46:84:ce:e0:0b:7d:12: 9f:fd:47:ec:dd:e3:55:1c:bb:5b:2c:0e:cc:62:4d: 56:b2:9a:7c:f4:af:79:61:99:fc:f4:5f:73:bf:c6: c2:7b:c8:11:3e:f8:34:e9:7b:23:07:94:7a:65:f0: 1c:02:f4:23:90:7e:1f:1e:d8:d9:5d:9a:e3:ed:07: b0:9c:04:c7:f4:17:37:37:00:37:c2:d2:67:f9:e7: ed:9a:2c:3f:b4:9e:ad:cf:ee:c9:0c:45:d0:c9:1e: d3:23:75:4a:05:69:ac:0f:12:68:b8:f2:43:0d:40: 48:a3:37:fa:1c:6b:16:60:62:04:93:34:3d:04:5e: 48:fc:c6:80:aa:75:89:33:2f:94:9b:3c:33:e0:f8: 81:6b:5d:e1:f4:c4:d6:22:2a:84:3e:e1:ec:e7:82: be:30:21:9f:bb:11:d3:09:32:b7:bb:10:8c:db:c6: a4:a7:cc:cf:91:36:e9:7b:18:1d:a4:34:a6:f7:3a: d2:ad:5f:8b:53:9e:a4:1e:46:79:7c:7f:e2:f9:aa: f5:b9:ca:b1:3c:4d:e0:31:95:a7:97:1c:d2:d8:18: fd:c8:1e:1b:b6:03:20:ba:c1:86:28:e9:e3:21:e7: 58:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:48:6F:05:87:F2:F2:48:33:C9:C7:60:CE:47:A3:AE:D4:75:13:7F X509v3 Authority Key Identifier: keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:92:68:de:08:6a:b8:fa:2f:48:90:57:90:46:ea:24:2c:ba: 5f:13:7d:26:63:21:47:c5:78:b5:28:b2:bd:13:91:40:97:fb: da:4d:02:19:55:b4:e0:17:92:ac:4b:1b:6e:75:fe:a9:33:b0: f3:11:bb:fc:87:6e:49:dc:d7:7c:24:09:70:7b:47:a2:5e:24: d1:ed:ae:72:b0:3d:d6:29:9a:80:73:a3:61:d2:78:b6:d7:a1: fc:32:71:d8:7d:72:44:a0:2c:7d:fd:d9:70:f0:10:c5:c3:3f: 37:5d:e4:cb:ed:5a:0e:02:a7:db:3b:76:7c:dc:83:4d:be:5d: 1d:05:26:9c:3b:af:05:55:51:c3:39:0b:c3:b4:79:ea:7f:16: bb:0d:70:b3:bf:5f:7e:84:0b:2d:75:f8:77:4a:fb:83:45:7a: 75:03:e3:d3:45:67:28:e0:3a:84:c8:23:2b:af:cc:93:27:60: 7a:d1:43:c4:ee:80:76:31:02:60:a3:64:e9:99:c5:62:e5:50: f4:18:b6:2e:37:1b:cf:fb:0f:f7:f7:6f:cf:bf:52:f6:eb:c0: f9:0f:ff:26:bf:5f:8f:c2:ae:17:93:67:8d:25:f8:67:b9:76: 19:06:b2:4d:e1:f7:1f:0d:56:68:7b:74:d6:35:85:67:6a:fd: ee:b6:a6:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyNzcxMTAvBgNVBAUTKEQ4M0I5M0UzMUU5Mzk5MzdEOENCMTVGRTM5Q0E1RTZF OEZFQUZBOUIwHhcNMjYxMDAzMDM1MDEzWhcNMjYxMDEwMDM1MDEzWjAYMRYwFAYD VQQDEw02YWMwN2I3NS1jMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6yCNXndwM1hz99apQrlK9Clw8yO4UaEzuALfRKf/Ufs3eNVHLtbLA7MYk1W spp89K95YZn89F9zv8bCe8gRPvg06XsjB5R6ZfAcAvQjkH4fHtjZXZrj7QewnATH 9Bc3NwA3wtJn+eftmiw/tJ6tz+7JDEXQyR7TI3VKBWmsDxJouPJDDUBIozf6HGsW YGIEkzQ9BF5I/MaAqnWJMy+Umzwz4PiBa13h9MTWIiqEPuHs54K+MCGfuxHTCTK3 uxCM28akp8zPkTbpexgdpDSm9zrSrV+LU56kHkZ5fH/i+ar1ucqxPE3gMZWnlxzS 2Bj9yB4btgMgusGGKOnjIedYfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRIbwWH 8vJIM8nHYM5Ho67UdRN/MB8GA1UdIwQYMBaAFNg7k+Mek5k32MsV/jnKXm6P6vqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzI3Ny80M0E3RTg5NEI1 NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1UZll5eFgtT2NwZWJvX3Et cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJEdVQ0eDZUbVRmWXl4WC1PY3BlYm9fcS1wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzI3Ny80M0E3RTg5NEI1NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1U Zll5eFgtT2NwZWJvX3EtcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH5Jo3ghquPovSJBXkEbqJCy6XxN9JmMhR8V4tSiyvRORQJf72k0CGVW04BeS rEsbbnX+qTOw8xG7/IduSdzXfCQJcHtHol4k0e2ucrA91imagHOjYdJ4tteh/DJx 2H1yRKAsff3ZcPAQxcM/N13ky+1aDgKn2zt2fNyDTb5dHQUmnDuvBVVRwzkLw7R5 6n8Wuw1ws79ffoQLLXX4d0r7g0V6dQPj00VnKOA6hMgjK6/MkydgetFDxO6AdjEC YKNk6ZnFYuVQ9Bi2Ljcbz/sP9/dvz79S9uvA+Q//Jr9fj8KuF5NnjSX4Z7l2GQay TeH3Hw1WaHt01jWFZ2r97ramfA== -----END CERTIFICATE-----Generated at Sun Oct 4 18:08:03 2026 by rpki-client