$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json) Hash identifier: Jiq/qio1SULzeOildovB6SKFNnYGOl0jbheOQ7PSLr8= Subject key identifier: EA:D3:2E:9D:02:7F:6C:C2:40:DE:DE:F9:09:8D:11:FF:64:22:24:D8 Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft Manifest number: 089A Signing time: Fri 04 Sep 2026 20:17:13 +0000 Manifest this update: Fri 04 Sep 2026 20:17:12 +0000 Manifest next update: Fri 11 Sep 2026 20:17:12 +0000 Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: C7hiKR3t8V4ve8fcwhHQekgU2zBbr4aFAERwBkgwB8I=) 2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: uPVVKDs8FXCGXCVQqQJZYdG3JPqyWcieyoiy4+qFczg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: Sep 4 20:17:12 2026 GMT Not After : Sep 11 20:17:12 2026 GMT Subject: CN=6a9b2749-1066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:90:53:f1:29:8d:75:0a:02:dd:0f:77:32: 2f:30:c9:92:09:01:bf:32:ba:29:f8:b2:b1:1c:ff: 5c:b5:2c:c3:34:a8:be:e2:af:fa:28:f6:42:74:ea: d2:ed:13:0c:a4:e0:6f:ea:58:35:8d:74:c6:ec:e5: 31:b5:fa:67:72:29:8a:a1:10:50:e1:15:7e:12:0a: 05:a1:4c:5d:a9:de:15:b5:6c:e9:af:77:e5:c6:72: 5e:0f:d7:51:65:4b:a5:c0:96:4a:36:ea:59:e7:de: b3:4c:03:16:33:48:04:04:47:f1:26:60:19:07:5d: 29:54:f1:4c:dc:18:25:2b:4c:13:06:df:39:01:1a: 82:62:b2:88:d5:e3:eb:d9:66:df:4d:f1:8c:55:17: fd:53:8c:58:74:70:b9:6f:1c:83:eb:d8:da:98:a7: 6a:2a:15:64:29:2b:37:06:a4:42:f1:f1:21:c5:ba: a5:11:1d:db:bb:c3:60:e9:16:3f:3c:c4:50:61:be: e8:1b:c1:90:24:e2:6a:a7:82:7b:c7:9f:04:70:1e: 5d:8b:bd:f0:87:c1:0d:ea:56:d5:6e:09:63:82:d7: 3b:f4:3c:b1:4e:2c:ce:4a:e7:89:1a:f8:4b:03:b7: 07:8e:a7:16:76:17:93:52:8a:9e:64:3c:1f:77:c0: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D3:2E:9D:02:7F:6C:C2:40:DE:DE:F9:09:8D:11:FF:64:22:24:D8 X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:56:00:f9:7f:be:dc:6a:18:e1:78:8c:a2:2d:b1:af:ee:d9: dd:ad:97:97:b4:e3:a6:c3:ae:10:5f:68:58:50:3c:13:59:82: 04:87:4d:bc:0a:18:10:0d:ba:92:4f:f9:3b:68:56:05:92:96: 43:e4:da:e7:14:93:37:3a:3c:5d:9c:7e:8d:c0:48:fd:b0:fb: b2:b2:7f:b7:4d:f8:8a:d4:3c:5c:d5:3e:7d:4a:80:8c:17:84: 9b:7d:8e:94:1a:d6:8b:aa:0e:67:b9:d8:a5:f5:0e:4d:56:7c: 23:cb:4e:bb:27:ef:42:df:02:09:99:55:d7:ea:00:ac:6d:39: e5:53:59:e3:05:85:91:20:e1:d8:c9:84:14:1e:ae:86:15:8b: 89:97:a2:4b:6d:7e:1b:d3:2d:21:70:c3:85:b2:ae:bb:f3:62: b7:b4:55:be:86:ab:88:db:67:e7:a4:b9:e1:86:e0:9e:a6:d0: f3:0d:ef:78:17:cf:05:29:54:17:f2:0d:04:1d:af:d7:fc:64: de:cb:ac:df:c9:8e:bd:e0:c4:68:6e:76:bb:f4:a8:e7:6f:44: 14:d4:bd:3a:99:32:96:78:89:5c:be:16:2e:25:f1:1f:01:a5: da:96:c9:d9:80:fd:c0:dc:ea:8f:66:c4:c0:c8:af:4f:b6:d3: f1:d1:9c:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjYwOTA0MjAxNzEyWhcNMjYwOTExMjAxNzEyWjAYMRYwFAYD VQQDEw02YTliMjc0OS0xMDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQGQU/EpjXUKAt0PdzIvMMmSCQG/Mrop+LKxHP9ctSzDNKi+4q/6KPZCdOrS 7RMMpOBv6lg1jXTG7OUxtfpncimKoRBQ4RV+EgoFoUxdqd4VtWzpr3flxnJeD9dR ZUulwJZKNupZ596zTAMWM0gEBEfxJmAZB10pVPFM3BglK0wTBt85ARqCYrKI1ePr 2WbfTfGMVRf9U4xYdHC5bxyD69jamKdqKhVkKSs3BqRC8fEhxbqlER3bu8Ng6RY/ PMRQYb7oG8GQJOJqp4J7x58EcB5di73wh8EN6lbVbgljgtc79DyxTizOSueJGvhL A7cHjqcWdheTUoqeZDwfd8A6hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrTLp0C f2zCQN7e+QmNEf9kIiTYMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx NDFvaFd3NGhWRXJsSWpmb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnVYA+X++3GoY4XiMoi2xr+7Z3a2Xl7TjpsOuEF9oWFA8E1mCBIdNvAoYEA26 kk/5O2hWBZKWQ+Ta5xSTNzo8XZx+jcBI/bD7srJ/t034itQ8XNU+fUqAjBeEm32O lBrWi6oOZ7nYpfUOTVZ8I8tOuyfvQt8CCZlV1+oArG055VNZ4wWFkSDh2MmEFB6u hhWLiZeiS21+G9MtIXDDhbKuu/Nit7RVvoariNtn56S54YbgnqbQ8w3veBfPBSlU F/INBB2v1/xk3sus38mOveDEaG52u/So529EFNS9OpkylniJXL4WLiXxHwGl2pbJ 2YD9wNzqj2bEwMivT7bT8dGc1Q== -----END CERTIFICATE-----Generated at Sat Sep 5 08:02:48 2026 by rpki-client