$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft File: 2-ETC8fG27LbfLvxTgH2GG_9vRA.mft (raw, json) Hash identifier: bA/WPmQAqS8SUfI338+W1g/3ZDdoEcV+6pcdEC/NOwg= Subject key identifier: BB:9C:C9:4C:AC:5F:D5:32:4C:43:94:0B:01:88:EE:3F:22:B2:47:84 Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 Certificate issuer: /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Certificate serial: 0366 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft Manifest number: 035F Signing time: Sat 05 Sep 2026 00:36:04 +0000 Manifest this update: Sat 05 Sep 2026 00:36:04 +0000 Manifest next update: Sat 12 Sep 2026 00:36:04 +0000 Files and hashes: 1: 2-ETC8fG27LbfLvxTgH2GG_9vRA.crl (hash: CiLEvdRZ/Jt3b7v9C2aOKV1a0H7V7LeqJLv7n2Nly1Q=) 2: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (hash: a2w/nBaSOFVCnyEX9As7G1AQDs2X3EerPQVXSLGjS1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 870 (0x366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Validity Not Before: Sep 5 00:36:04 2026 GMT Not After : Sep 12 00:36:04 2026 GMT Subject: CN=6a9b63f4-5421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:57:4a:ec:88:d2:9a:32:e7:11:88:60:af:47: f1:9e:ae:60:5a:a2:74:aa:06:53:be:58:7c:ae:c8: 24:dc:14:b5:c5:01:6b:7e:95:98:75:44:e0:ef:6c: 25:2d:7f:a5:3b:83:aa:d4:f9:5d:fd:49:4c:6c:26: 3c:6e:a7:04:5a:04:df:cd:c5:f7:42:8a:dc:4e:0f: 87:bb:c7:2b:af:c5:54:d6:1b:17:4d:f0:8e:79:6a: 69:07:34:8d:44:47:ce:36:7c:9c:38:99:2c:40:5f: 9b:c2:29:22:f0:c0:9c:58:26:1e:c8:d6:08:b6:21: ce:04:cd:89:6c:c0:2e:d3:ce:e7:9d:cf:83:0c:be: 08:1b:c0:5f:ef:b8:13:b1:d2:63:27:be:03:aa:64: a8:8b:01:3c:2d:63:11:ad:23:ab:ef:a9:82:de:31: 84:a0:28:80:fa:7e:5a:4c:2e:d1:a2:16:68:c3:00: 3d:f2:cd:11:c3:25:c4:c8:23:14:89:4b:b5:6b:6e: 90:af:d7:3b:da:cd:77:4f:2d:8e:cb:4f:2e:8c:df: 55:92:63:1b:2a:a6:1d:3f:86:65:82:76:96:2b:66: e6:c9:73:87:70:4d:05:d4:68:3e:18:e6:67:fb:14: 75:be:6f:5f:d9:d6:74:a4:8a:5a:a0:88:09:fc:b5: e6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9C:C9:4C:AC:5F:D5:32:4C:43:94:0B:01:88:EE:3F:22:B2:47:84 X509v3 Authority Key Identifier: keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:21:2f:98:16:e2:e7:d6:6b:ee:e9:26:cf:44:bf:88:51:0a: 73:76:9b:0c:0a:58:b1:37:53:d6:69:bb:00:c9:8f:c0:b8:1a: b6:bb:8e:f2:3e:81:c0:cd:e0:3b:a4:ac:b3:77:9b:6f:91:58: 3b:98:8e:60:3e:9f:33:a4:9b:ac:ec:ea:83:44:fc:5f:ed:21: 5d:c9:0a:b8:8e:83:68:49:5e:a2:4f:e1:0e:d4:cd:2a:67:06: 86:a4:1a:f7:0a:77:f0:5e:ac:80:da:f3:be:a9:2a:52:41:f9: 73:1c:01:d1:df:2a:67:7b:82:c2:94:d5:3a:6e:0b:9b:a0:96: e0:2a:14:10:af:59:e0:38:d5:bb:c5:77:8a:6c:d1:ba:26:ac: 13:d8:d8:5c:bd:3f:bc:df:2c:b2:df:fe:d8:8d:01:8b:b3:a7: 68:ef:c2:56:d5:a2:a7:a5:f6:28:f3:1c:0a:95:a9:20:c8:51: 99:e8:4d:a6:2f:e0:92:3f:c3:01:62:68:b7:90:40:da:b5:52: de:b2:54:72:66:8f:65:a2:cf:18:b4:da:c9:4d:a2:b1:4f:25: 0d:df:07:d6:be:04:82:73:07:53:27:81:c1:bd:2d:ee:5d:04: ea:72:5c:99:9e:97:50:1f:c1:ab:94:4b:99:9d:ee:80:a4:bf: 30:db:be:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0ODAxMTAvBgNVBAUTKERCRTExMzBCQzdDNkRCQjJEQjdDQkJGMTRFMDFGNjE4 NkZGREJEMTAwHhcNMjYwOTA1MDAzNjA0WhcNMjYwOTEyMDAzNjA0WjAYMRYwFAYD VQQDEw02YTliNjNmNC01NDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ldK7IjSmjLnEYhgr0fxnq5gWqJ0qgZTvlh8rsgk3BS1xQFrfpWYdUTg72wl LX+lO4Oq1Pld/UlMbCY8bqcEWgTfzcX3QorcTg+Hu8crr8VU1hsXTfCOeWppBzSN REfONnycOJksQF+bwiki8MCcWCYeyNYItiHOBM2JbMAu087nnc+DDL4IG8Bf77gT sdJjJ74DqmSoiwE8LWMRrSOr76mC3jGEoCiA+n5aTC7RohZowwA98s0RwyXEyCMU iUu1a26Qr9c72s13Ty2Oy08ujN9VkmMbKqYdP4ZlgnaWK2bmyXOHcE0F1Gg+GOZn +xR1vm9f2dZ0pIpaoIgJ/LXmSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLucyUys X9UyTEOUCwGI7j8iskeEMB8GA1UdIwQYMBaAFNvhEwvHxtuy23y78U4B9hhv/b0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ4MC85NkYyOEFDNjEw REExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3TGJmTHZ4VGdIMkdHXzl2 UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItRVRDOGZHMjdMYmZMdnhUZ0gyR0dfOXZSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ4MC85NkYyOEFDNjEwREExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3 TGJmTHZ4VGdIMkdHXzl2UkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuSEvmBbi59Zr7ukmz0S/iFEKc3abDApYsTdT1mm7AMmPwLgatruO8j6BwM3g O6Sss3ebb5FYO5iOYD6fM6SbrOzqg0T8X+0hXckKuI6DaEleok/hDtTNKmcGhqQa 9wp38F6sgNrzvqkqUkH5cxwB0d8qZ3uCwpTVOm4Lm6CW4CoUEK9Z4DjVu8V3imzR uiasE9jYXL0/vN8sst/+2I0Bi7OnaO/CVtWip6X2KPMcCpWpIMhRmehNpi/gkj/D AWJot5BA2rVS3rJUcmaPZaLPGLTayU2isU8lDd8H1r4EgnMHUyeBwb0t7l0E6nJc mZ6XUB/Bq5RLmZ3ugKS/MNu+gA== -----END CERTIFICATE-----Generated at Sat Sep 5 08:31:05 2026 by rpki-client