$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft File: 2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft (raw, json) Hash identifier: cqBvqT93SV5sIEcPuTeYHdQuYjVMKG4oEX2Xm/fXYuI= Subject key identifier: 9D:D5:FB:D7:E9:07:52:15:92:7A:F9:A6:E3:CB:63:1E:53:2F:F8:7C Authority key identifier: D9:21:C0:18:F2:84:F2:57:4B:67:18:34:A8:48:DD:93:42:47:FA:00 Certificate issuer: /CN=A9138A44/serialNumber=D921C018F284F2574B671834A848DD934247FA00 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft Manifest number: 1F Signing time: Mon 19 Oct 2026 09:41:29 +0000 Manifest this update: Mon 19 Oct 2026 09:41:28 +0000 Manifest next update: Mon 26 Oct 2026 09:41:28 +0000 Files and hashes: 1: 2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl (hash: vRvBnl7/T4hJ4KHonMEggs5AiSYlJi3VPEdh2vPA3xs=) 2: 53F5B3FAA11911F1AA6D5C983C11F970.roa (hash: W6FAy14Qs/4IBAuF6r/C27RQuwXDjcTuwQ+QiTmoY9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A44, serialNumber=D921C018F284F2574B671834A848DD934247FA00 Validity Not Before: Oct 19 09:41:28 2026 GMT Not After : Oct 26 09:41:28 2026 GMT Subject: CN=6ad5e5c9-7a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:ec:7b:8a:48:69:a0:15:ac:28:f6:f7:50: 1d:59:9e:b1:86:f7:14:3a:0a:80:39:c0:bf:2f:42: 9a:13:ab:7c:bd:a5:ee:46:94:dd:1e:1a:e1:b2:ca: e6:ab:f7:b3:c2:c7:21:41:14:97:93:56:de:41:0a: b6:ec:2f:94:78:f3:88:b5:c3:79:38:c3:ef:b6:8a: 5e:f0:10:9c:d2:29:50:c3:16:38:33:3d:d5:a3:5b: ab:36:05:90:6c:6f:0a:50:1c:a1:da:b9:c8:1e:c2: 41:87:0a:3c:d8:1d:eb:6a:18:c8:1c:e6:1f:81:20: 3c:80:93:c5:76:de:a7:cb:4d:61:60:da:6a:76:ab: 40:34:4b:04:78:91:89:e7:a5:a4:10:bd:d4:54:e8: cd:a8:e6:a5:1c:35:da:b1:e0:db:7c:52:ef:32:68: d6:b5:d7:ef:6b:ea:e1:43:0c:4a:96:b6:ab:a1:86: 23:66:8f:c2:94:81:5b:79:1f:8e:33:11:b9:6b:9e: 2e:f9:51:02:0d:a9:a6:bd:7a:4a:73:74:e5:4b:5f: d1:6f:a9:72:5c:f7:ef:d1:5b:00:c4:70:fa:6a:29: 42:db:35:84:f6:fd:5b:d0:f0:60:e0:04:29:c5:d0: c2:fc:31:d9:db:44:07:01:9f:03:6c:6a:e2:83:84: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D5:FB:D7:E9:07:52:15:92:7A:F9:A6:E3:CB:63:1E:53:2F:F8:7C X509v3 Authority Key Identifier: keyid:D9:21:C0:18:F2:84:F2:57:4B:67:18:34:A8:48:DD:93:42:47:FA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:ed:d7:58:26:ce:fc:c1:0c:15:db:23:95:86:42:93:e1:54: 82:5f:29:9c:a2:8e:dd:bb:76:32:17:89:52:be:de:e6:c5:31: 3f:df:5b:8f:84:46:03:4c:96:62:81:01:b2:fa:c1:94:f2:70: 6a:e9:bb:88:e3:a2:84:a3:81:2c:4e:27:ef:77:c3:d9:11:db: 4d:63:43:7d:72:55:8e:c2:e9:32:fd:9c:59:d6:fa:5f:27:f0: 87:8e:23:a9:c5:3e:92:24:e1:9d:33:34:a7:07:ba:8a:89:34: a3:0e:4f:10:08:9f:8d:da:84:9b:e2:8b:1f:8d:3f:14:6f:bb: 63:21:58:83:6b:69:e2:ce:ec:10:50:32:92:75:d0:a5:f2:87: e6:e3:cf:e9:8b:05:41:30:3e:c9:67:4d:f7:1d:1b:a2:1e:cf: 99:8c:96:b1:82:95:5b:b2:44:f7:87:df:3b:2c:fc:4f:e7:90: 7f:4d:50:df:ad:26:64:55:51:89:e4:b0:da:37:ef:74:ac:a8: 05:ee:0f:a3:2b:60:dc:8b:0a:f5:cc:84:8f:46:f7:d6:8f:2b: 98:9e:d3:91:af:45:b3:d6:85:e4:64:b9:27:da:2a:2f:bc:cc: f8:df:27:5d:85:98:e7:20:c6:5b:1b:0b:a5:0b:27:5f:f2:00: 3a:d7:e4:4e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEE0NDExMC8GA1UEBRMoRDkyMUMwMThGMjg0RjI1NzRCNjcxODM0QTg0OEREOTM0 MjQ3RkEwMDAeFw0yNjEwMTkwOTQxMjhaFw0yNjEwMjYwOTQxMjhaMBgxFjAUBgNV BAMTDTZhZDVlNWM5LTdhNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmNOx7ikhpoBWsKPb3UB1ZnrGG9xQ6CoA5wL8vQpoTq3y9pe5GlN0eGuGyyuar 97PCxyFBFJeTVt5BCrbsL5R484i1w3k4w++2il7wEJzSKVDDFjgzPdWjW6s2BZBs bwpQHKHaucgewkGHCjzYHetqGMgc5h+BIDyAk8V23qfLTWFg2mp2q0A0SwR4kYnn paQQvdRU6M2o5qUcNdqx4Nt8Uu8yaNa11+9r6uFDDEqWtquhhiNmj8KUgVt5H44z Eblrni75UQINqaa9ekpzdOVLX9FvqXJc9+/RWwDEcPpqKULbNYT2/VvQ8GDgBCnF 0ML8MdnbRAcBnwNsauKDhJeHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUndX71+kH UhWSevmm48tjHlMv+HwwHwYDVR0jBBgwFoAU2SHAGPKE8ldLZxg0qEjdk0JH+gAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QTQ0LzZERkU0QkQ2QTEw NTExRjE4MENFQjZFRjM1MTFGOTcwLzJTSEFHUEtFOGxkTFp4ZzBxRWpkazBKSC1n QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlNIQUdQS0U4bGRMWnhnMHFFamRrMEpILWdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QTQ0LzZERkU0QkQ2QTEwNTExRjE4MENFQjZFRjM1MTFGOTcwLzJTSEFHUEtFOGxk TFp4ZzBxRWpkazBKSC1nQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAJ7ddYJs78wQwV2yOVhkKT4VSCXymcoo7du3YyF4lSvt7mxTE/31uPhEYDTJZi gQGy+sGU8nBq6buI46KEo4EsTifvd8PZEdtNY0N9clWOwuky/ZxZ1vpfJ/CHjiOp xT6SJOGdMzSnB7qKiTSjDk8QCJ+N2oSb4osfjT8Ub7tjIViDa2nizuwQUDKSddCl 8ofm48/piwVBMD7JZ033HRuiHs+ZjJaxgpVbskT3h987LPxP55B/TVDfrSZkVVGJ 5LDaN+90rKgF7g+jK2Dciwr1zISPRvfWjyuYntORr0Wz1oXkZLkn2iovvMz43ydd hZjnIMZbGwulCydf8gA61+RO -----END CERTIFICATE-----Generated at Tue Oct 20 00:39:57 2026 by rpki-client