$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: JUwn/oLPmwNk0pixbpffg5eUsk+3G70LA10q+Gd5hl4= Subject key identifier: 0B:BE:B2:96:87:D1:8D:A9:7B:CC:F5:AE:D1:FD:64:ED:9F:29:9C:94 Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: F7 Signing time: Thu 03 Sep 2026 06:26:18 +0000 Manifest this update: Thu 03 Sep 2026 06:26:18 +0000 Manifest next update: Thu 10 Sep 2026 06:26:18 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: Q7GPJylh3NIz33WPzyUkufdyMe+3w+17ymd19xQT9L8=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: /aTSxcHxRkOfKrRCHUaeDVdu5n6tqyMBf2gXf3ZAFRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Sep 3 06:26:18 2026 GMT Not After : Sep 10 06:26:18 2026 GMT Subject: CN=6a99130a-d175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:8c:9b:e8:81:42:5b:45:f2:a1:71:19:cb: 0e:14:c8:bc:72:9c:7a:1b:5b:08:af:e1:c3:42:f2: 33:20:ad:d4:37:e8:8f:2a:51:1a:72:3b:cd:63:3d: 06:40:19:44:53:ca:c0:49:b1:6b:5d:cb:ce:8f:64: cd:ee:43:10:16:55:63:f8:1a:06:5e:4b:ac:91:5f: b6:04:b7:2f:74:e7:ea:c3:8b:e9:c6:2c:6b:56:5e: 13:d7:3c:bc:5a:e3:e3:e6:13:c1:7e:a5:72:93:54: 78:87:91:70:d8:a7:87:f7:89:71:4b:2d:f8:a6:bc: 31:4b:ab:33:d0:e4:08:e0:cb:4d:4a:49:e1:7d:5c: 64:da:f6:44:e0:b0:35:e4:a1:15:52:02:7a:10:36: a5:a5:a0:21:1c:8b:3b:4d:32:2d:84:91:b1:71:e6: dd:71:2a:06:ec:4d:c7:b7:4b:24:51:ba:0f:89:af: 7b:56:39:9f:89:d0:56:06:59:c0:8a:6a:e7:7b:66: bb:59:e4:22:6b:ca:6d:42:88:e6:7a:52:67:74:d4: 38:91:6c:0c:26:48:5e:d4:83:a9:ad:f5:07:1d:41: ea:a2:f6:28:8e:2a:10:02:23:0f:11:a4:e2:0a:09: e6:07:3e:95:6f:f2:58:19:9a:a1:0d:f7:9b:aa:83: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BE:B2:96:87:D1:8D:A9:7B:CC:F5:AE:D1:FD:64:ED:9F:29:9C:94 X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:3b:23:59:87:be:0f:f0:1c:23:65:c6:9e:ee:7d:f9:48:50: dc:d9:73:fe:10:1f:96:ce:59:26:a1:3e:17:a0:ac:2e:69:b4: cc:05:45:cf:46:a3:f8:40:db:5e:4d:81:fa:a3:31:7f:34:a3: 70:7a:f0:69:73:b1:25:0e:3e:e6:8a:08:40:05:da:80:1c:bc: 0c:46:01:43:24:a0:7b:8a:7c:80:30:77:f1:5a:d6:52:a9:6e: 3d:94:14:39:18:7c:65:94:73:54:b6:97:79:b6:0f:ae:da:a9: 56:4e:2f:b4:3b:d3:df:47:d3:82:2f:a9:5a:d9:ec:71:9a:62: 52:1b:37:ab:bf:a0:d4:ec:df:8c:9f:3d:33:95:97:d2:22:60: 29:04:3e:ed:fd:64:7c:a0:ec:6e:32:a0:dc:9b:70:45:8a:90: 0d:45:2d:df:6b:97:35:fd:58:11:76:08:62:b6:99:a9:bd:3a: 0e:87:a8:bc:56:60:e1:e8:23:68:64:77:22:09:62:96:f4:d2: f8:ff:75:64:99:45:ff:27:2a:31:fe:c7:d8:d2:5e:83:4f:a9: 08:88:af:3a:56:45:1c:be:51:6d:e5:42:c5:eb:a5:cd:13:bb: e9:a5:66:68:ca:54:23:ca:43:f2:95:62:e1:62:d2:c7:24:63: 74:0e:cc:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwNDkxMTAvBgNVBAUTKEQ5RDFCMDU1RkVGQzg5RjU4MDNBN0ZBOEUyQjkwMjYx OUYzMzhEOEUwHhcNMjYwOTAzMDYyNjE4WhcNMjYwOTEwMDYyNjE4WjAYMRYwFAYD VQQDEw02YTk5MTMwYS1kMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGSMm+iBQltF8qFxGcsOFMi8cpx6G1sIr+HDQvIzIK3UN+iPKlEacjvNYz0G QBlEU8rASbFrXcvOj2TN7kMQFlVj+BoGXkuskV+2BLcvdOfqw4vpxixrVl4T1zy8 WuPj5hPBfqVyk1R4h5Fw2KeH94lxSy34prwxS6sz0OQI4MtNSknhfVxk2vZE4LA1 5KEVUgJ6EDalpaAhHIs7TTIthJGxcebdcSoG7E3Ht0skUboPia97VjmfidBWBlnA imrne2a7WeQia8ptQojmelJndNQ4kWwMJkhe1IOprfUHHUHqovYojioQAiMPEaTi CgnmBz6Vb/JYGZqhDfebqoN9lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAu+spaH 0Y2pe8z1rtH9ZO2fKZyUMB8GA1UdIwQYMBaAFNnRsFX+/In1gDp/qOK5AmGfM42O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzA0OS9CMDlDQkQ2NjJD NjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlmV0FPbi1vNHJrQ1laOHpq WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzA0OS9CMDlDQkQ2NjJDNjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlm V0FPbi1vNHJrQ1laOHpqWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhjsjWYe+D/AcI2XGnu59+UhQ3Nlz/hAfls5ZJqE+F6CsLmm0zAVFz0aj+EDb Xk2B+qMxfzSjcHrwaXOxJQ4+5ooIQAXagBy8DEYBQySge4p8gDB38VrWUqluPZQU ORh8ZZRzVLaXebYPrtqpVk4vtDvT30fTgi+pWtnscZpiUhs3q7+g1OzfjJ89M5WX 0iJgKQQ+7f1kfKDsbjKg3JtwRYqQDUUt32uXNf1YEXYIYraZqb06DoeovFZg4egj aGR3IglilvTS+P91ZJlF/ycqMf7H2NJeg0+pCIivOlZFHL5RbeVCxeulzRO76aVm aMpUI8pD8pVi4WLSxyRjdA7Mqw== -----END CERTIFICATE-----Generated at Sat Sep 5 07:35:18 2026 by rpki-client