$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: pfQhLGIpDd9NdsdWNFGhQr8CFvfW+aX3lnLUO19RjlA= Subject key identifier: D7:8A:48:98:99:93:56:EF:3C:0D:1E:5E:7E:4D:49:7B:B7:67:47:A8 Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 0A36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 0A2A Signing time: Fri 18 Sep 2026 19:41:55 +0000 Manifest this update: Fri 18 Sep 2026 19:41:55 +0000 Manifest next update: Fri 25 Sep 2026 19:41:55 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: dEgBFX7UE9/S7YRXQbqxadA3Vvv3BrXEzeGVlts6ZAM=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 1jaabUICJy48DuW6hLSy4F/Zdui5Uq8G26iJUdGW7X0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2614 (0xa36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Sep 18 19:41:55 2026 GMT Not After : Sep 25 19:41:55 2026 GMT Subject: CN=6aad9403-623d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:78:60:e1:b7:71:50:92:eb:d2:6b:41:48: f8:7a:1c:d6:5d:2c:87:a3:f2:e8:49:eb:73:39:ed: 33:06:f6:8b:66:84:b6:74:64:7a:f4:7c:08:fc:3d: 4e:95:62:1b:1a:67:33:4a:6a:f2:92:fa:c1:bb:0d: 50:2a:4e:25:d9:45:e8:b8:c7:6e:f5:47:54:8f:3e: a8:41:d8:ea:f0:27:c5:f4:f3:f0:00:05:c6:d9:b4: ce:d6:00:e2:38:6b:d4:d9:d2:5d:52:1b:37:00:4d: 2c:e0:21:90:e8:d3:98:21:b2:8a:5b:60:ec:1a:a6: 0a:4b:0f:3f:a1:07:c0:2b:e9:30:d9:6e:49:79:5f: c0:15:63:4b:74:ee:86:0b:e9:4b:54:d9:d5:75:3e: 49:d3:e3:0d:7e:8a:e0:29:2c:49:a5:8d:27:88:b5: 57:bc:8e:db:65:31:bd:d3:aa:99:96:88:ac:3c:b7: b5:1d:dc:b1:5a:a4:db:48:dd:18:a7:dd:2f:35:71: ed:c9:4b:e8:60:c7:0b:22:da:b0:7c:d4:db:ea:72: 7e:4d:97:70:22:6d:d8:a8:1f:aa:ba:7e:d6:46:f0: a5:11:4a:59:cc:2c:7c:f3:be:21:1a:a6:81:45:b5: 59:9a:fb:f3:3d:83:d4:8f:bb:f3:ad:38:cb:77:da: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8A:48:98:99:93:56:EF:3C:0D:1E:5E:7E:4D:49:7B:B7:67:47:A8 X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f5:a7:78:77:fc:95:ee:df:fd:9e:e9:04:33:96:6c:86:42: ec:d2:85:aa:b8:c4:f6:ff:0a:e3:06:73:a5:ec:23:af:77:96: 07:bf:94:ee:57:b9:93:53:e7:c7:58:dd:5f:18:31:26:0d:e1: 2e:3f:f6:6d:57:22:a3:bb:a8:fb:4e:34:99:5e:76:49:f9:b8: 0c:5f:1d:fa:4e:9e:cd:14:93:01:5d:48:d4:d2:4d:21:11:5b: 05:0a:cb:24:ef:6b:d0:d7:ff:25:67:32:cd:be:1a:d3:52:24: a7:03:31:2e:b6:25:92:07:6c:58:84:b9:fb:9b:12:58:51:80: 73:6c:ab:48:82:a1:d8:03:fd:c2:0b:40:14:0e:cc:a3:e3:bd: 68:1b:95:80:e2:1c:dc:35:99:9c:45:1d:19:b3:0e:9b:30:5a: cc:6e:40:51:11:85:29:26:b2:f6:4a:1e:55:7e:27:69:72:6e: 9d:78:57:36:c7:8a:70:67:ef:11:74:de:ac:06:cf:10:d8:f7: 9e:29:5f:dc:e5:94:ad:fd:4f:4c:22:21:34:0b:35:0c:86:7f: 3b:9f:60:36:d5:37:51:9e:08:e4:f3:a2:db:f8:2e:07:30:99: 4b:3d:a5:fb:a0:67:9a:8c:c2:05:88:f2:eb:92:6f:6a:17:9a: 39:53:03:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjYwOTE4MTk0MTU1WhcNMjYwOTI1MTk0MTU1WjAYMRYwFAYD VQQDEw02YWFkOTQwMy02MjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlft4YOG3cVCS69JrQUj4ehzWXSyHo/LoSetzOe0zBvaLZoS2dGR69HwI/D1O lWIbGmczSmrykvrBuw1QKk4l2UXouMdu9UdUjz6oQdjq8CfF9PPwAAXG2bTO1gDi OGvU2dJdUhs3AE0s4CGQ6NOYIbKKW2DsGqYKSw8/oQfAK+kw2W5JeV/AFWNLdO6G C+lLVNnVdT5J0+MNforgKSxJpY0niLVXvI7bZTG906qZloisPLe1HdyxWqTbSN0Y p90vNXHtyUvoYMcLItqwfNTb6nJ+TZdwIm3YqB+qun7WRvClEUpZzCx8874hGqaB RbVZmvvzPYPUj7vzrTjLd9qg7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeKSJiZ k1bvPA0eXn5NSXu3Z0eoMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY/WneHf8le7f/Z7pBDOWbIZC7NKFqrjE9v8K4wZzpewjr3eWB7+U7le5k1Pn x1jdXxgxJg3hLj/2bVcio7uo+040mV52Sfm4DF8d+k6ezRSTAV1I1NJNIRFbBQrL JO9r0Nf/JWcyzb4a01IkpwMxLrYlkgdsWIS5+5sSWFGAc2yrSIKh2AP9wgtAFA7M o+O9aBuVgOIc3DWZnEUdGbMOmzBazG5AURGFKSay9koeVX4naXJunXhXNseKcGfv EXTerAbPENj3nilf3OWUrf1PTCIhNAs1DIZ/O59gNtU3UZ4I5POi2/guBzCZSz2l +6BnmozCBYjy65JvaheaOVMDZw== -----END CERTIFICATE-----Generated at Sat Sep 19 09:13:33 2026 by rpki-client