$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft File: 2CIvXKRzliJE_BNBFXEOvtXjlWA.mft (raw, json) Hash identifier: RSDzUqskq+/yhzz2+auAQ2chWs2N0GvX2vp6QCUHx9k= Subject key identifier: 72:5E:30:8F:0A:91:18:B5:D0:CB:D4:60:C3:EE:1F:BD:42:C3:17:7E Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0D0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft Manifest number: 0D06 Signing time: Thu 08 Oct 2026 17:51:54 +0000 Manifest this update: Thu 08 Oct 2026 17:51:54 +0000 Manifest next update: Thu 15 Oct 2026 17:51:54 +0000 Files and hashes: 1: 2CIvXKRzliJE_BNBFXEOvtXjlWA.crl (hash: 9usIvtETJKitLB6sHw6BWvUqyoMWZpR3BaUC/VrEjUQ=) 2: A4049C06213E11EAAA89A95DC4F9AE02.roa (hash: UbwOi9U9kZof7b43F/HRMpxGF4fX5ioRAi/qvaW/Bgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 17:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Oct 8 17:51:54 2026 GMT Not After : Oct 15 17:51:54 2026 GMT Subject: CN=6ac7d83a-8b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:c6:16:62:8b:d1:30:de:a3:2a:d0:57:0f: 65:bf:6c:39:e1:33:38:ff:45:7a:89:30:78:ad:2e: 48:0f:bf:3e:f8:06:60:55:92:4b:92:89:89:21:db: 12:4f:fe:5f:02:6b:b4:c2:d8:87:46:fb:a8:e5:12: 26:81:44:d8:52:3a:f6:9c:fb:cd:8a:54:eb:a3:04: eb:5f:ec:55:19:90:d7:ec:f9:89:49:c3:d1:56:31: 25:2f:b2:17:58:1f:7f:7e:7a:74:22:61:6a:97:a8: ea:85:4e:98:08:1b:63:ff:26:96:ee:b4:3b:bc:01: 12:8d:8f:19:15:12:dc:9d:76:66:64:89:58:6f:a4: f0:4f:7d:c3:b2:30:f5:e0:d9:e2:58:9f:59:0b:c0: dd:eb:91:7a:17:23:0c:9d:22:67:f0:48:95:0e:24: a5:df:33:70:c1:4e:1b:eb:66:5e:f9:20:8e:84:ea: a2:c9:27:9e:66:40:6d:ef:81:42:6e:3e:a9:97:09: ac:1f:78:dc:a9:e3:79:c3:4b:5d:17:2a:aa:71:60: 09:1b:73:a9:b9:48:49:6f:0d:77:e4:65:67:fc:7b: c2:9b:9f:ec:6b:9a:f8:f1:f1:b7:12:2e:f5:81:32: b3:d7:02:e8:2a:3c:04:c1:30:db:1c:74:87:83:bf: 5a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:30:8F:0A:91:18:B5:D0:CB:D4:60:C3:EE:1F:BD:42:C3:17:7E X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:88:d1:da:19:f4:e8:e8:dd:79:a6:f6:b0:9f:4c:9a:01:2c: 5f:ce:f9:fc:a7:a8:d7:e2:af:32:c6:31:0d:5e:49:e6:a7:07: 16:0c:a8:d3:f0:46:74:17:d6:4d:d4:b9:22:83:97:76:a1:3d: a4:1f:d6:bc:81:ee:6e:7b:64:e0:5b:04:8c:9e:76:c9:48:78: 73:8e:c9:4a:e7:9f:6d:96:1e:42:f1:46:67:7a:19:5b:a1:d5: 92:72:6b:2c:ff:8e:70:4d:a3:97:79:92:46:c6:dd:f8:bd:cd: dc:74:33:98:fc:c8:7e:b4:2e:72:f8:2f:a6:31:3e:92:4d:8d: c0:b8:b7:c4:94:ab:83:ce:f6:26:e0:94:13:b9:72:c0:cd:6d: 64:17:e8:ba:3c:db:cb:06:81:d1:f8:54:c3:0f:08:05:08:86: c9:c2:72:68:b5:47:5a:94:23:6f:5f:ac:62:dc:af:f4:27:e6: 1b:3a:5c:12:72:3c:d7:23:fe:be:ed:a1:90:db:2e:60:41:6e: 99:ce:3f:ce:68:51:16:8f:18:8a:6b:48:fb:43:db:a5:2c:0d: 75:c7:ad:57:51:d0:46:7d:1a:f6:27:b6:f1:de:df:82:8c:db: e1:5e:cd:54:d2:5b:be:0b:e3:ba:8a:51:95:e7:da:1f:1d:ff: 8f:20:0d:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjYxMDA4MTc1MTU0WhcNMjYxMDE1MTc1MTU0WjAYMRYwFAYD VQQDEw02YWM3ZDgzYS04YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRXGFmKL0TDeoyrQVw9lv2w54TM4/0V6iTB4rS5ID78++AZgVZJLkomJIdsS T/5fAmu0wtiHRvuo5RImgUTYUjr2nPvNilTrowTrX+xVGZDX7PmJScPRVjElL7IX WB9/fnp0ImFql6jqhU6YCBtj/yaW7rQ7vAESjY8ZFRLcnXZmZIlYb6TwT33DsjD1 4NniWJ9ZC8Dd65F6FyMMnSJn8EiVDiSl3zNwwU4b62Ze+SCOhOqiySeeZkBt74FC bj6plwmsH3jcqeN5w0tdFyqqcWAJG3OpuUhJbw135GVn/HvCm5/sa5r48fG3Ei71 gTKz1wLoKjwEwTDbHHSHg79azQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJeMI8K kRi10MvUYMPuH71Cwxd+MB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC9DNjk0ODIzNjEwRTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxp SkVfQk5CRlhFT3Z0WGpsV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXojR2hn06Ojdeab2sJ9MmgEsX875/Keo1+KvMsYxDV5J5qcHFgyo0/BGdBfW TdS5IoOXdqE9pB/WvIHubntk4FsEjJ52yUh4c47JSuefbZYeQvFGZ3oZW6HVknJr LP+OcE2jl3mSRsbd+L3N3HQzmPzIfrQucvgvpjE+kk2NwLi3xJSrg872JuCUE7ly wM1tZBfoujzbywaB0fhUww8IBQiGycJyaLVHWpQjb1+sYtyv9CfmGzpcEnI81yP+ vu2hkNsuYEFumc4/zmhRFo8YimtI+0PbpSwNdcetV1HQRn0a9ie28d7fgozb4V7N VNJbvgvjuopRlefaHx3/jyANyw== -----END CERTIFICATE-----Generated at Sat Oct 10 11:08:38 2026 by rpki-client