$ rpki-client -vvvf rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft File: 2GhqpteQQFqfGbGIICyuBDWGCWE.mft (raw, json) Hash identifier: PFSOKjb5/WmwuBVJzZFvef61Jt3Jul3pCrczgVE0ROE= Subject key identifier: C3:8D:8F:36:0E:CA:14:2A:E9:9A:1C:50:9A:FB:BE:58:BD:C3:26:8E Authority key identifier: D8:68:6A:A6:D7:90:40:5A:9F:19:B1:88:20:2C:AE:04:35:86:09:61 Certificate issuer: /CN=A915651D/serialNumber=D8686AA6D790405A9F19B188202CAE0435860961 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft Manifest number: 14 Signing time: Mon 19 Oct 2026 09:50:26 +0000 Manifest this update: Mon 19 Oct 2026 09:50:25 +0000 Manifest next update: Mon 26 Oct 2026 09:50:25 +0000 Files and hashes: 1: 2GhqpteQQFqfGbGIICyuBDWGCWE.crl (hash: PZ0DrJWodu6c0g2LZgqzqg/YG2HNFbE5HnHV5Tycly4=) 2: 023DC3A2B03911F1AE1EC8CE3E11F970.roa (hash: G06NnHMX2WuVcev4nQuCxyrbcAxR0mS9/vCckCp/Ykc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.crl rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915651D, serialNumber=D8686AA6D790405A9F19B188202CAE0435860961 Validity Not Before: Oct 19 09:50:25 2026 GMT Not After : Oct 26 09:50:25 2026 GMT Subject: CN=6ad5e7e2-466f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:4a:da:3a:a0:9e:0c:27:5c:31:c2:d9:df: bc:ab:9d:3b:54:dc:59:04:7d:eb:44:33:76:28:51: cf:7b:d5:98:ab:bd:47:45:8c:03:ec:9a:c0:68:2b: a1:79:b1:30:67:ef:1f:b4:10:53:33:2b:29:60:22: f4:b4:0f:1d:c3:61:10:a8:c3:35:60:02:0b:9f:e1: 15:5f:cd:25:57:7e:1f:de:b9:2b:16:48:db:12:90: 8a:cf:d8:69:10:36:e6:11:e4:ed:da:cc:65:36:14: bd:3f:1e:02:ed:ed:76:dc:07:b8:7c:52:61:b6:15: 29:7c:8a:21:ad:48:53:ba:f3:5f:34:c6:55:71:06: 9f:e0:46:14:b8:c1:8a:4d:ee:58:e5:c6:53:7c:63: dc:82:23:82:9b:da:fd:f4:05:3c:5d:4f:d9:94:38: 51:29:2a:12:32:54:1d:87:6c:18:81:02:a5:43:26: aa:51:06:dd:11:ba:53:61:db:3d:46:83:b0:6c:37: 2b:55:a1:c8:f8:a6:73:11:b1:fe:1a:71:f4:8c:c6: 32:55:ce:f0:31:c0:a9:60:c6:dd:fe:36:a1:84:bd: f5:92:68:f8:c1:c2:63:21:15:7b:5a:d5:34:70:5c: 81:32:49:d6:c4:b3:d2:52:6c:7e:f7:c0:e8:a5:1b: fd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8D:8F:36:0E:CA:14:2A:E9:9A:1C:50:9A:FB:BE:58:BD:C3:26:8E X509v3 Authority Key Identifier: keyid:D8:68:6A:A6:D7:90:40:5A:9F:19:B1:88:20:2C:AE:04:35:86:09:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:68:9b:a9:0d:aa:7c:07:d9:15:1c:68:40:4a:e9:5d:2d:42: f8:dc:c6:92:be:40:a9:6c:70:fe:5f:7f:ea:5b:76:26:01:f0: a8:d2:91:dc:1c:d5:3c:15:66:fa:07:fe:c7:67:80:7d:76:8b: 8f:3b:54:a3:31:7c:bb:17:7f:b1:46:80:91:69:1d:79:81:6e: ed:64:30:ae:88:37:4e:cb:e8:17:50:aa:15:41:f9:5b:5f:29: 3b:6a:25:af:25:7d:0c:ad:f7:77:ae:2a:f5:de:54:ea:9e:72: 50:96:29:78:7a:4b:08:81:7c:41:dd:1d:f7:80:8e:68:61:3b: af:93:b4:48:f3:aa:dc:ec:82:57:fa:7c:48:00:45:13:73:60: 02:92:26:41:6a:63:2c:d5:37:de:21:75:54:e9:f7:87:52:19: a4:a8:4b:c3:14:a5:60:33:11:e5:5c:15:bb:93:82:ea:da:99: e7:9d:9a:97:40:48:a7:a3:45:08:ba:db:99:9a:9d:d9:8f:93: b9:5d:95:c6:4a:86:27:8f:74:0f:28:59:f8:3a:04:61:9e:2b: 30:8d:af:db:68:b6:c9:57:5b:65:51:99:5d:ec:8f:9d:58:b9: d0:85:b3:5e:31:0e:bb:62:93:ca:21:09:ed:c7:55:4b:37:ef: 9b:74:50:06 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjUxRDExMC8GA1UEBRMoRDg2ODZBQTZENzkwNDA1QTlGMTlCMTg4MjAyQ0FFMDQz NTg2MDk2MTAeFw0yNjEwMTkwOTUwMjVaFw0yNjEwMjYwOTUwMjVaMBgxFjAUBgNV BAMTDTZhZDVlN2UyLTQ2NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3MEraOqCeDCdcMcLZ37yrnTtU3FkEfetEM3YoUc971ZirvUdFjAPsmsBoK6F5 sTBn7x+0EFMzKylgIvS0Dx3DYRCowzVgAguf4RVfzSVXfh/euSsWSNsSkIrP2GkQ NuYR5O3azGU2FL0/HgLt7XbcB7h8UmG2FSl8iiGtSFO68180xlVxBp/gRhS4wYpN 7ljlxlN8Y9yCI4Kb2v30BTxdT9mUOFEpKhIyVB2HbBiBAqVDJqpRBt0RulNh2z1G g7BsNytVocj4pnMRsf4acfSMxjJVzvAxwKlgxt3+NqGEvfWSaPjBwmMhFXta1TRw XIEySdbEs9JSbH73wOilG/1DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw42PNg7K FCrpmhxQmvu+WL3DJo4wHwYDVR0jBBgwFoAU2GhqpteQQFqfGbGIICyuBDWGCWEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NTFELzE1OTBEOUMyQjAz ODExRjFCNTFCQ0Q4MTNFMTFGOTcwLzJHaHFwdGVRUUZxZkdiR0lJQ3l1QkRXR0NX RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMkdocXB0ZVFRRnFmR2JHSUlDeXVCRFdHQ1dFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NTFELzE1OTBEOUMyQjAzODExRjFCNTFCQ0Q4MTNFMTFGOTcwLzJHaHFwdGVRUUZx ZkdiR0lJQ3l1QkRXR0NXRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0aJupDap8B9kVHGhASuldLUL43MaSvkCpbHD+X3/qW3YmAfCo0pHcHNU8FWb6 B/7HZ4B9douPO1SjMXy7F3+xRoCRaR15gW7tZDCuiDdOy+gXUKoVQflbXyk7aiWv JX0Mrfd3rir13lTqnnJQlil4eksIgXxB3R33gI5oYTuvk7RI86rc7IJX+nxIAEUT c2ACkiZBamMs1TfeIXVU6feHUhmkqEvDFKVgMxHlXBW7k4Lq2pnnnZqXQEino0UI utuZmp3Zj5O5XZXGSoYnj3QPKFn4OgRhniswja/baLbJV1tlUZld7I+dWLnQhbNe MQ67YpPKIQntx1VLN++bdFAG -----END CERTIFICATE-----Generated at Mon Oct 19 22:27:47 2026 by rpki-client