$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft File: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft (raw, json) Hash identifier: u3kzxszke8sLiWRM35w0FAKEXNF6ZfbEQG0qsA8BKTs= Subject key identifier: 08:23:2C:AA:3D:0C:F8:B1:07:E2:86:19:A3:5A:AA:F5:FE:DA:77:CA Authority key identifier: D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24 Certificate issuer: /CN=A9159ECD/serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft Manifest number: 019E Signing time: Thu 10 Sep 2026 22:44:24 +0000 Manifest this update: Thu 10 Sep 2026 22:44:23 +0000 Manifest next update: Thu 17 Sep 2026 22:44:23 +0000 Files and hashes: 1: 2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl (hash: BSr904KdXNMnBLXsmFvp2GImHzbtt/tIIbb72B4f22s=) 2: 5A4723DA6F3C11EF8FD45F13C4F9AE02.roa (hash: 2/r4oR0iCi4LexUGtmPzKzEWeEmDyv6SAtyEMBATvFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=D95DA1171412300AB53B3E4870F2F441F06C8124 Validity Not Before: Sep 10 22:44:23 2026 GMT Not After : Sep 17 22:44:23 2026 GMT Subject: CN=6aa332c8-861e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:f5:79:02:e6:9a:99:f1:c6:29:49:e1:c4: e2:6c:b6:c0:27:26:1d:14:c4:9d:ee:ae:e7:c3:63: 86:bd:b0:cc:f2:f9:1f:64:cf:40:cc:dc:85:ce:61: 39:d3:5b:84:3d:99:04:ac:55:8e:b5:5e:f3:ea:2f: 7c:49:2c:48:33:43:e9:9e:38:8b:4e:77:33:e3:f1: 30:34:39:5c:2f:87:a1:65:eb:07:2c:73:ae:bd:b4: f2:4e:a4:2c:8c:e5:05:01:3b:ae:01:46:30:82:df: ae:63:09:85:4e:52:9f:7f:a9:5e:c3:e8:a7:71:10: 67:aa:41:f4:ec:8e:6d:85:9f:b0:b6:b1:a7:9e:ae: 51:fe:e6:d6:b2:ec:da:38:7e:03:70:e6:d8:08:c9: 40:25:75:95:67:79:b8:77:1a:0b:67:2d:f1:e0:cf: 0e:1b:2c:75:4f:7c:25:a7:b7:64:90:0d:32:42:68: bd:98:3c:e7:5b:9b:34:8d:89:9e:ab:40:c7:82:e6: 0b:c7:8a:62:1f:e8:c8:31:cf:d1:19:58:06:f3:23: c1:a3:94:b3:95:6e:d5:5d:01:ce:02:56:64:b5:19: d5:2e:e8:54:55:14:de:50:da:51:c0:02:7b:98:e8: 43:8d:f1:1e:bc:25:00:a2:2e:92:72:7b:6d:9d:9b: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:23:2C:AA:3D:0C:F8:B1:07:E2:86:19:A3:5A:AA:F5:FE:DA:77:CA X509v3 Authority Key Identifier: keyid:D9:5D:A1:17:14:12:30:0A:B5:3B:3E:48:70:F2:F4:41:F0:6C:81:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/EF6383E23D9F11EF99033768C4F9AE02/2V2hFxQSMAq1Oz5IcPL0QfBsgSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e0:76:c3:5f:14:1e:7c:b3:fd:cd:a6:06:db:5d:af:67:89: 61:a7:d6:22:52:01:49:02:d1:24:02:8d:28:43:88:ec:60:f0: d2:57:2b:1a:9d:ee:3e:98:a5:01:02:9d:53:0c:07:5c:a4:7a: 70:9b:cb:7e:03:ce:74:e0:07:b3:2a:b7:17:c6:9b:1c:79:a3: 75:54:83:e1:19:3b:11:3e:8e:fe:e6:5e:94:35:96:ee:71:00: 3a:88:dd:78:b4:aa:97:b3:ab:1c:c9:a8:46:39:4f:35:8d:2e: fe:6f:d5:a9:b8:50:e0:70:3a:8c:6d:69:42:4f:92:85:0a:73: 4c:33:df:a3:f0:b5:11:28:4c:34:ed:52:6b:2f:ab:6b:4e:1c: 10:77:68:7f:97:65:f4:53:b4:3a:f0:8e:63:bc:0c:03:1e:e1: e6:05:35:85:f9:c5:08:23:f8:56:af:b0:cb:89:85:36:db:0a: 34:99:b2:10:02:ce:16:56:af:6d:6e:dc:9a:d0:a8:1d:d5:6b: c3:bd:01:e1:e4:70:ee:1d:3b:04:78:b5:91:ff:dc:37:94:9f: 90:3f:36:ac:c9:65:56:a0:53:6c:0d:2c:92:e4:ea:90:68:e1: 37:47:cd:da:80:b9:83:db:8e:57:ef:79:c1:59:ed:da:37:b3: 0d:ba:26:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEQ5NURBMTE3MTQxMjMwMEFCNTNCM0U0ODcwRjJGNDQx RjA2QzgxMjQwHhcNMjYwOTEwMjI0NDIzWhcNMjYwOTE3MjI0NDIzWjAYMRYwFAYD VQQDEw02YWEzMzJjOC04NjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr631eQLmmpnxxilJ4cTibLbAJyYdFMSd7q7nw2OGvbDM8vkfZM9AzNyFzmE5 01uEPZkErFWOtV7z6i98SSxIM0PpnjiLTncz4/EwNDlcL4ehZesHLHOuvbTyTqQs jOUFATuuAUYwgt+uYwmFTlKff6lew+incRBnqkH07I5thZ+wtrGnnq5R/ubWsuza OH4DcObYCMlAJXWVZ3m4dxoLZy3x4M8OGyx1T3wlp7dkkA0yQmi9mDznW5s0jYme q0DHguYLx4piH+jIMc/RGVgG8yPBo5SzlW7VXQHOAlZktRnVLuhUVRTeUNpRwAJ7 mOhDjfEevCUAoi6ScnttnZslEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgjLKo9 DPixB+KGGaNaqvX+2nfKMB8GA1UdIwQYMBaAFNldoRcUEjAKtTs+SHDy9EHwbIEk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC9FRjYzODNFMjNE OUYxMUVGOTkwMzM3NjhDNEY5QUUwMi8yVjJoRnhRU01BcTFPejVJY1BMMFFmQnNn U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJWMmhGeFFTTUFxMU96NUljUEwwUWZCc2dTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC9FRjYzODNFMjNEOUYxMUVGOTkwMzM3NjhDNEY5QUUwMi8yVjJoRnhRU01B cTFPejVJY1BMMFFmQnNnU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb+B2w18UHnyz/c2mBttdr2eJYafWIlIBSQLRJAKNKEOI7GDw0lcrGp3uPpil AQKdUwwHXKR6cJvLfgPOdOAHsyq3F8abHHmjdVSD4Rk7ET6O/uZelDWW7nEAOojd eLSql7OrHMmoRjlPNY0u/m/VqbhQ4HA6jG1pQk+ShQpzTDPfo/C1EShMNO1Say+r a04cEHdof5dl9FO0OvCOY7wMAx7h5gU1hfnFCCP4Vq+wy4mFNtsKNJmyEALOFlav bW7cmtCoHdVrw70B4eRw7h07BHi1kf/cN5SfkD82rMllVqBTbA0skuTqkGjhN0fN 2oC5g9uOV+95wVnt2jezDbomug== -----END CERTIFICATE-----Generated at Sat Sep 12 09:43:25 2026 by rpki-client