$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: hjh4dTHYbnW+Mbm6/xBMO9XVkUDR4xU1bObE/xlj5Fo= Subject key identifier: F0:B7:35:F9:97:C8:0C:7F:92:8B:68:E0:FA:43:E2:3C:4A:15:9B:55 Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 0111 Signing time: Sun 25 Oct 2026 06:22:09 +0000 Manifest this update: Sun 25 Oct 2026 06:22:09 +0000 Manifest next update: Sun 01 Nov 2026 06:22:09 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: 0k/X6ar1VMMMs1LfRrvSvE/JSt0OXXcq3Qa6LafoEB0=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: /aTSxcHxRkOfKrRCHUaeDVdu5n6tqyMBf2gXf3ZAFRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 06:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Oct 25 06:22:09 2026 GMT Not After : Nov 1 06:22:09 2026 GMT Subject: CN=6adda011-66d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:81:34:4b:15:0c:fa:e0:bc:c7:61:23:ac: 21:66:f8:4a:46:9d:e3:08:73:2a:d0:4a:b6:85:3c: 2d:e2:78:2a:0f:a3:5a:78:53:65:4a:11:12:3c:cc: 12:e1:d1:ea:f5:b3:c8:3b:54:f0:2f:8a:b4:cd:c4: 22:f7:6b:50:d7:ae:78:71:36:55:b1:a6:56:da:bc: b3:c3:eb:e9:34:a6:ff:39:b9:25:f8:3f:ae:68:85: 34:95:47:09:72:b6:35:4c:e8:ae:fc:21:5d:a9:66: f0:e1:d3:bc:7d:b2:36:34:18:ff:00:eb:99:5b:45: c3:8c:0f:54:da:15:03:4d:d3:72:78:2d:05:d6:7e: 23:24:40:44:ae:dd:0d:8e:e0:18:c7:e4:9e:12:8d: 2b:49:b5:b1:58:48:c2:a7:4a:45:26:8f:f1:e6:70: 72:9e:b0:51:b6:21:44:3e:c8:1b:8d:2f:d8:b5:02: 4f:b9:5e:5e:7b:6d:78:6a:28:18:f5:22:c0:cd:b2: a3:0e:d4:37:dc:dd:39:1a:37:34:5e:c1:d8:d1:d2: 3a:5c:c1:bd:d5:d0:2e:62:be:b6:20:b4:1c:33:0a: 20:0b:17:72:d4:c6:f1:2b:d0:55:5c:a3:96:0a:33: 4a:ca:8c:cd:12:e0:16:75:ec:b9:54:b7:fa:7a:90: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B7:35:F9:97:C8:0C:7F:92:8B:68:E0:FA:43:E2:3C:4A:15:9B:55 X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:57:f1:94:03:57:1d:a1:c8:b1:9c:47:d7:42:97:fa:85:80: ce:bb:74:77:81:e2:cc:86:2d:1a:c0:da:07:05:9c:09:43:d7: 65:97:88:af:31:09:a4:04:64:40:0d:a1:26:a4:4c:20:6f:a6: 1b:c5:50:dd:c2:dc:1f:73:ff:b3:d7:f9:2a:d2:c9:f9:c6:c2: 93:b1:14:45:5a:ad:05:a9:ba:16:0d:b5:bb:a9:33:79:c1:bf: 0d:d2:68:e9:a7:b6:c4:4e:81:f9:7e:81:c3:01:2b:84:d4:51: 58:35:5b:02:c7:01:76:92:1a:3d:92:52:5f:31:0a:02:43:9e: 9c:2b:41:cb:35:bb:7b:c6:2f:f6:c7:6a:86:d6:08:52:ad:63: 00:6b:20:48:6e:f3:f3:8f:73:f0:7b:5f:58:6b:e6:53:ff:cb: 5d:6e:72:80:27:23:0d:78:eb:55:26:92:4b:3c:d1:3e:bc:44: cc:42:b1:25:f8:f8:7e:51:f9:36:2c:f5:8c:21:23:07:46:ca: 6e:fd:9e:c4:bd:af:7d:1d:e5:eb:95:17:f4:d0:52:de:e9:4c: d6:ee:0a:9e:42:4f:ab:3d:37:8d:42:03:fb:92:c8:7a:0f:c2: 65:29:94:80:66:9d:b6:4e:b7:5b:5b:f7:6d:33:c1:ae:14:1c: ed:85:fa:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwNDkxMTAvBgNVBAUTKEQ5RDFCMDU1RkVGQzg5RjU4MDNBN0ZBOEUyQjkwMjYx OUYzMzhEOEUwHhcNMjYxMDI1MDYyMjA5WhcNMjYxMTAxMDYyMjA5WjAYMRYwFAYD VQQDEw02YWRkYTAxMS02NmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5GBNEsVDPrgvMdhI6whZvhKRp3jCHMq0Eq2hTwt4ngqD6NaeFNlShESPMwS 4dHq9bPIO1TwL4q0zcQi92tQ1654cTZVsaZW2ryzw+vpNKb/Obkl+D+uaIU0lUcJ crY1TOiu/CFdqWbw4dO8fbI2NBj/AOuZW0XDjA9U2hUDTdNyeC0F1n4jJEBErt0N juAYx+SeEo0rSbWxWEjCp0pFJo/x5nBynrBRtiFEPsgbjS/YtQJPuV5ee214aigY 9SLAzbKjDtQ33N05Gjc0XsHY0dI6XMG91dAuYr62ILQcMwogCxdy1MbxK9BVXKOW CjNKyozNEuAWdey5VLf6epDw9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPC3NfmX yAx/koto4PpD4jxKFZtVMB8GA1UdIwQYMBaAFNnRsFX+/In1gDp/qOK5AmGfM42O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzA0OS9CMDlDQkQ2NjJD NjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlmV0FPbi1vNHJrQ1laOHpq WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzA0OS9CMDlDQkQ2NjJDNjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlm V0FPbi1vNHJrQ1laOHpqWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAglfxlANXHaHIsZxH10KX+oWAzrt0d4HizIYtGsDaBwWcCUPXZZeIrzEJpARk QA2hJqRMIG+mG8VQ3cLcH3P/s9f5KtLJ+cbCk7EURVqtBam6Fg21u6kzecG/DdJo 6ae2xE6B+X6BwwErhNRRWDVbAscBdpIaPZJSXzEKAkOenCtByzW7e8Yv9sdqhtYI Uq1jAGsgSG7z849z8HtfWGvmU//LXW5ygCcjDXjrVSaSSzzRPrxEzEKxJfj4flH5 Niz1jCEjB0bKbv2exL2vfR3l65UX9NBS3ulM1u4KnkJPqz03jUID+5LIeg/CZSmU gGadtk63W1v3bTPBrhQc7YX6Xg== -----END CERTIFICATE-----Generated at Tue Oct 27 06:07:37 2026 by rpki-client