$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft File: 2y2AYIsrY8vRNmwSQSYnBwBXriY.mft (raw, json) Hash identifier: J1OcrtKBrRmHjG7T3WYV181l4k0A1KW2YsafhBDUZMo= Subject key identifier: 23:B3:23:8D:B9:74:6D:71:B5:20:FE:5A:31:23:45:AE:DB:95:75:2C Authority key identifier: DB:2D:80:60:8B:2B:63:CB:D1:36:6C:12:41:26:27:07:00:57:AE:26 Certificate issuer: /CN=A9170CF8/serialNumber=DB2D80608B2B63CBD1366C12412627070057AE26 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft Manifest number: 11 Signing time: Sat 03 Oct 2026 09:51:25 +0000 Manifest this update: Sat 03 Oct 2026 09:51:24 +0000 Manifest next update: Sat 10 Oct 2026 09:51:24 +0000 Files and hashes: 1: 2y2AYIsrY8vRNmwSQSYnBwBXriY.crl (hash: bZ4rb+oFeUk21GIzGG/pyGbXdAG2xQefnfSwAn6RI3g=) 2: 1B258F1CA85511F19DF91DC93F11F970.roa (hash: O/BxMMF7jDLWlrtoBVDlazWajDdVMN8MU/1yOd79+xA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.crl rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170CF8, serialNumber=DB2D80608B2B63CBD1366C12412627070057AE26 Validity Not Before: Oct 3 09:51:24 2026 GMT Not After : Oct 10 09:51:24 2026 GMT Subject: CN=6ac0d01c-88c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:6a:4c:3a:c6:d1:61:72:97:0c:36:63:7d: db:bb:68:83:f4:7b:09:2e:82:00:d5:08:5f:c9:b5: c8:d4:49:92:37:78:54:2d:80:ce:7f:b9:4f:bd:1e: 5d:7e:9e:c5:b9:b6:42:e6:6b:01:21:8f:25:2f:71: 64:6a:68:62:6b:42:fe:6b:4a:cf:02:ff:48:3c:38: 0d:8a:86:05:6f:7a:16:47:b4:40:73:77:ba:99:99: f9:21:33:0e:e3:2b:02:81:a9:3e:da:34:af:f7:d7: b9:db:2f:bb:86:3d:e6:ed:15:82:f3:a5:23:ae:0c: a1:27:c4:f8:f2:ef:f1:f8:3d:3e:bf:6d:3d:ea:1f: c2:e0:7c:8c:0b:d5:ba:8f:f8:09:6a:36:d1:3c:00: bf:ff:66:a6:f4:ff:8e:0f:20:a6:15:86:71:0d:6b: 7e:12:91:c2:4a:8b:e9:d1:1a:b0:08:70:ae:43:43: 9f:b8:17:ba:e0:29:03:1b:21:7c:cd:d5:c1:da:cf: a1:10:ed:e5:b7:69:cf:e5:84:6c:77:79:c2:d4:21: 71:ee:5e:67:ac:d7:c2:5b:aa:c4:4b:4b:f3:01:17: 60:86:f8:05:d5:67:c2:c9:4a:12:b9:ba:a8:9e:94: 7d:c6:3e:cd:9d:13:bb:20:44:e8:76:20:8a:32:e0: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B3:23:8D:B9:74:6D:71:B5:20:FE:5A:31:23:45:AE:DB:95:75:2C X509v3 Authority Key Identifier: keyid:DB:2D:80:60:8B:2B:63:CB:D1:36:6C:12:41:26:27:07:00:57:AE:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y2AYIsrY8vRNmwSQSYnBwBXriY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170CF8/975B0CFCA85411F1B8734FC33F11F970/2y2AYIsrY8vRNmwSQSYnBwBXriY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f0:a4:c4:0e:59:09:ee:44:11:31:31:25:3c:3d:3d:7e:dc: 2a:c0:fa:6b:c6:fb:73:d9:68:d3:5c:6c:00:74:53:d2:01:b3: 61:76:e4:66:10:f4:e8:51:a9:78:0a:9e:38:a6:79:92:12:5b: e6:16:6d:e4:3e:dc:1f:4c:4d:15:74:8a:43:ee:a9:52:5a:63: 98:ad:9b:65:10:7e:f4:0f:bc:fe:ee:ae:c4:5a:d2:7c:b8:0f: 37:7a:82:ec:5d:0d:77:39:c7:c3:9b:2f:33:4c:49:5c:29:ff: 1a:9f:cb:7a:32:78:2e:0a:68:62:1a:57:5d:78:09:2e:bb:b1: 57:b2:32:e7:57:8c:06:ce:d3:b7:53:74:f9:cd:0d:c1:af:ef: 85:cb:e6:e6:46:0a:53:85:af:33:2f:f1:06:37:9e:79:79:e5: 9b:b7:dd:19:50:e5:06:fe:39:62:4e:25:bc:68:63:62:20:8b: ec:17:90:d9:46:6c:79:48:cd:08:51:16:7f:94:86:b0:52:c0: af:ec:d1:1f:5a:83:f4:8a:6b:bf:f7:20:6a:5e:d5:0a:0a:36: ba:7c:2f:13:93:56:03:c8:c4:82:67:7a:49:6f:e0:31:c6:56: 8b:64:43:84:2c:ea:d9:74:25:2e:ce:2c:62:06:e4:ea:8c:4b: be:6e:7e:53 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MENGODExMC8GA1UEBRMoREIyRDgwNjA4QjJCNjNDQkQxMzY2QzEyNDEyNjI3MDcw MDU3QUUyNjAeFw0yNjEwMDMwOTUxMjRaFw0yNjEwMTAwOTUxMjRaMBgxFjAUBgNV BAMTDTZhYzBkMDFjLTg4YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeq2pMOsbRYXKXDDZjfdu7aIP0ewkuggDVCF/JtcjUSZI3eFQtgM5/uU+9Hl1+ nsW5tkLmawEhjyUvcWRqaGJrQv5rSs8C/0g8OA2KhgVvehZHtEBzd7qZmfkhMw7j KwKBqT7aNK/317nbL7uGPebtFYLzpSOuDKEnxPjy7/H4PT6/bT3qH8LgfIwL1bqP +AlqNtE8AL//Zqb0/44PIKYVhnENa34SkcJKi+nRGrAIcK5DQ5+4F7rgKQMbIXzN 1cHaz6EQ7eW3ac/lhGx3ecLUIXHuXmes18JbqsRLS/MBF2CG+AXVZ8LJShK5uqie lH3GPs2dE7sgROh2IIoy4JkFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI7Mjjbl0 bXG1IP5aMSNFrtuVdSwwHwYDVR0jBBgwFoAU2y2AYIsrY8vRNmwSQSYnBwBXriYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwQ0Y4Lzk3NUIwQ0ZDQTg1 NDExRjFCODczNEZDMzNGMTFGOTcwLzJ5MkFZSXNyWTh2Uk5td1NRU1luQndCWHJp WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnkyQVlJc3JZOHZSTm13U1FTWW5Cd0JYcmlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw Q0Y4Lzk3NUIwQ0ZDQTg1NDExRjFCODczNEZDMzNGMTFGOTcwLzJ5MkFZSXNyWTh2 Uk5td1NRU1luQndCWHJpWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCu8KTEDlkJ7kQRMTElPD09ftwqwPprxvtz2WjTXGwAdFPSAbNhduRmEPToUal4 Cp44pnmSElvmFm3kPtwfTE0VdIpD7qlSWmOYrZtlEH70D7z+7q7EWtJ8uA83eoLs XQ13OcfDmy8zTElcKf8an8t6MnguCmhiGlddeAkuu7FXsjLnV4wGztO3U3T5zQ3B r++Fy+bmRgpTha8zL/EGN555eeWbt90ZUOUG/jliTiW8aGNiIIvsF5DZRmx5SM0I URZ/lIawUsCv7NEfWoP0imu/9yBqXtUKCja6fC8Tk1YDyMSCZ3pJb+AxxlaLZEOE LOrZdCUuzixiBuTqjEu+bn5T -----END CERTIFICATE-----Generated at Sun Oct 4 16:00:51 2026 by rpki-client