$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft File: 2hAmH-_a0BGsriMnCqa_jEHeQpI.mft (raw, json) Hash identifier: jZXefM6uiURX0/C4NVSFl7kEQJ9o6D8fTBAWIzRzTSY= Subject key identifier: B4:E9:0B:D3:F7:81:BD:E7:67:52:41:3D:22:87:F9:67:B8:97:A0:FA Authority key identifier: DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92 Certificate issuer: /CN=A9166D4A/serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft Manifest number: 45 Signing time: Fri 09 Oct 2026 09:14:01 +0000 Manifest this update: Fri 09 Oct 2026 09:14:01 +0000 Manifest next update: Fri 16 Oct 2026 09:14:01 +0000 Files and hashes: 1: 2hAmH-_a0BGsriMnCqa_jEHeQpI.crl (hash: 8zZa1LQQIFsk5XLBMfrE7kuNGkDKGctyjDParN62IGQ=) 2: 4B17E2545C0811F1B8292F4090833773.roa (hash: ZHRlNcAYAA1IcJM0xFQys5A4K8yg67YwwMJ4ch/a0ZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D4A, serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292 Validity Not Before: Oct 9 09:14:01 2026 GMT Not After : Oct 16 09:14:01 2026 GMT Subject: CN=6ac8b059-6c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:a5:34:06:25:ce:f5:08:b2:91:4a:cb:21: cc:aa:20:cd:5e:d6:f3:29:17:ae:b0:2c:4f:11:8a: 71:70:8d:a2:6d:55:e4:4d:a8:ce:36:6d:5d:81:47: 6f:d0:ec:18:bd:88:40:b4:2b:22:72:ad:72:d2:48: 94:04:03:8b:ad:01:5d:d6:cd:af:b6:38:71:1e:f3: e2:de:3d:72:66:d8:cc:ac:7c:04:35:bf:e6:7e:ba: 77:35:d2:8f:da:09:dc:d7:ab:99:6d:aa:95:9a:2e: c3:f5:87:eb:1b:79:55:a9:b2:cf:12:ad:15:39:2c: dd:2c:9e:9e:33:9a:3a:de:2b:b2:93:d0:f7:b8:b7: 87:31:be:33:66:53:0f:4e:fa:cc:a5:df:59:22:81: 9e:9a:54:5f:5f:bf:44:dd:58:12:05:1a:1a:d5:37: 5b:f1:35:09:e2:c4:ed:c6:93:44:87:8b:aa:0f:f1: 49:f7:5c:b8:69:51:9f:96:f1:c2:75:1c:99:0e:d5: 86:e8:dd:8d:be:1a:b4:1c:4e:c1:08:16:47:ca:31: 7e:22:9f:ba:9e:b7:4b:43:94:05:ec:62:f7:b4:23: 04:cf:57:52:ef:ee:01:4d:8b:69:4f:bf:8e:1e:d2: 52:50:ef:35:c0:ad:71:29:bc:38:b8:3b:ae:ae:87: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E9:0B:D3:F7:81:BD:E7:67:52:41:3D:22:87:F9:67:B8:97:A0:FA X509v3 Authority Key Identifier: keyid:DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:65:6c:b2:08:90:3d:a6:69:1d:c2:7e:c1:80:4c:02:1d:d6: e9:26:14:34:6d:5b:e2:ad:d9:86:1a:6d:91:39:06:cd:f4:60: 5d:6b:0d:e3:b8:a6:a6:94:78:e1:7f:e0:51:86:88:22:2b:53: 93:5a:bb:4c:bf:a3:5b:89:57:28:22:d3:80:42:2e:51:12:8e: 41:9a:d8:29:57:05:52:49:e7:00:2e:cf:04:4c:7e:b7:95:55: a8:80:5f:9a:87:63:72:01:10:9e:21:4a:5f:1b:e8:3e:ad:b5: 87:4f:41:43:59:47:91:32:ae:13:6c:e4:12:7f:c0:82:d2:33: 5b:7b:fd:b3:b5:ea:0f:22:fe:9f:27:46:40:0b:7e:4a:eb:1e: 6b:79:18:fa:e6:bb:e7:0c:8d:33:ae:94:ef:6c:5b:b7:61:59: 39:85:82:38:54:70:2c:61:cf:c3:fe:fe:00:7e:b5:5c:5e:90: 18:ff:4e:90:7b:78:06:78:fd:db:d1:b0:1a:a9:0f:fa:1f:65: dd:eb:b6:95:a1:c1:58:66:50:19:9f:4a:1e:e1:c4:b6:dd:cc: ab:d7:36:47:76:a3:f3:32:83:fa:ff:ee:7d:1a:17:48:97:d8: 67:0f:a6:fd:c9:a5:64:56:dc:c2:cc:5e:1b:57:da:da:56:a5: fd:09:77:8b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQ0QTExMC8GA1UEBRMoREExMDI2MUZFRkRBRDAxMUFDQUUyMzI3MEFBNkJGOEM0 MURFNDI5MjAeFw0yNjEwMDkwOTE0MDFaFw0yNjEwMTYwOTE0MDFaMBgxFjAUBgNV BAMTDTZhYzhiMDU5LTZjMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4pKU0BiXO9QiykUrLIcyqIM1e1vMpF66wLE8RinFwjaJtVeRNqM42bV2BR2/Q 7Bi9iEC0KyJyrXLSSJQEA4utAV3Wza+2OHEe8+LePXJm2MysfAQ1v+Z+unc10o/a CdzXq5ltqpWaLsP1h+sbeVWpss8SrRU5LN0snp4zmjreK7KT0Pe4t4cxvjNmUw9O +syl31kigZ6aVF9fv0TdWBIFGhrVN1vxNQnixO3Gk0SHi6oP8Un3XLhpUZ+W8cJ1 HJkO1Ybo3Y2+GrQcTsEIFkfKMX4in7qet0tDlAXsYve0IwTPV1Lv7gFNi2lPv44e 0lJQ7zXArXEpvDi4O66uh17PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtOkL0/eB vednUkE9Iof5Z7iXoPowHwYDVR0jBBgwFoAU2hAmH+/a0BGsriMnCqa/jEHeQpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDRBL0FEMTczN0EyNUI4 MTExRjFBOEU4NDE3N0E3ODMzNzczLzJoQW1ILV9hMEJHc3JpTW5DcWFfakVIZVFw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmhBbUgtX2EwQkdzcmlNbkNxYV9qRUhlUXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDRBL0FEMTczN0EyNUI4MTExRjFBOEU4NDE3N0E3ODMzNzczLzJoQW1ILV9hMEJH c3JpTW5DcWFfakVIZVFwSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBHZWyyCJA9pmkdwn7BgEwCHdbpJhQ0bVvirdmGGm2ROQbN9GBdaw3juKamlHjh f+BRhogiK1OTWrtMv6NbiVcoItOAQi5REo5BmtgpVwVSSecALs8ETH63lVWogF+a h2NyARCeIUpfG+g+rbWHT0FDWUeRMq4TbOQSf8CC0jNbe/2zteoPIv6fJ0ZAC35K 6x5reRj65rvnDI0zrpTvbFu3YVk5hYI4VHAsYc/D/v4AfrVcXpAY/06Qe3gGeP3b 0bAaqQ/6H2Xd67aVocFYZlAZn0oe4cS23cyr1zZHdqPzMoP6/+59GhdIl9hnD6b9 yaVkVtzCzF4bV9raVqX9CXeL -----END CERTIFICATE-----Generated at Sat Oct 10 15:57:32 2026 by rpki-client