$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: lFaohYm1Ym4/aXlPyO2aEDHZcPDc4L8+VEI6aN9n0Gc= Subject key identifier: F4:B8:F0:9A:6A:6D:0A:5F:D1:12:43:1C:D0:35:D9:A7:53:14:A4:A2 Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: 016A Signing time: Wed 21 Oct 2026 05:28:18 +0000 Manifest this update: Wed 21 Oct 2026 05:28:17 +0000 Manifest next update: Wed 28 Oct 2026 05:28:17 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: GnnIc4V1nm18wQZ0P29MjgofDK2ROUKme5Twz6N2yT8=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: Mbaq1JxQwVcFP87z4eBI+1tbhFSk65AD4tx8mWL3NcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: Oct 21 05:28:17 2026 GMT Not After : Oct 28 05:28:17 2026 GMT Subject: CN=6ad84d71-189c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:65:72:2a:6e:99:9c:da:df:24:ab:64:96:15: 35:7b:df:6b:44:05:d5:ea:67:9c:76:3e:4a:58:b5: 22:c7:93:4e:42:ec:30:de:00:be:33:fb:07:4d:a5: 9a:9a:bd:8c:d6:d7:d7:a6:0a:f8:bf:5b:7f:3f:ee: ca:f2:e0:c3:1c:e2:bf:3e:42:48:82:f7:23:ac:4e: ec:04:df:cb:60:04:57:a2:75:46:52:0f:fe:21:5c: 11:44:0d:52:80:66:b8:e2:04:a6:c1:5f:50:a6:b9: e9:45:ee:f3:ab:66:24:d1:57:f6:9f:d0:73:18:71: 21:2e:8e:96:98:2c:a5:9e:38:5b:dd:e7:34:5d:bd: 57:8a:86:fc:ec:dd:08:37:e0:aa:93:01:97:6a:96: a5:ca:e0:7e:7b:6a:7d:e4:40:3b:c5:04:60:89:4d: 80:e1:6c:32:6c:ef:0e:66:1d:74:b9:2c:59:2f:67: 85:62:f7:59:58:75:38:a3:aa:77:9f:23:cd:ff:92: 67:fa:68:c3:c3:8f:a0:60:a8:aa:f2:29:37:67:f8: cd:6b:88:86:2e:30:ed:b1:32:44:a3:82:b6:ea:e6: 59:00:3c:8d:75:41:27:4b:25:ea:ba:91:c4:bc:ba: a6:b5:e6:89:33:23:15:1d:d2:43:0a:0a:59:02:e6: 3c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B8:F0:9A:6A:6D:0A:5F:D1:12:43:1C:D0:35:D9:A7:53:14:A4:A2 X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:dc:92:d3:55:ab:08:0a:e6:60:ec:9a:31:93:1b:9b:42:04: b6:61:14:0d:24:5c:49:1d:b8:a9:fa:29:95:28:d2:0e:58:e0: d8:45:eb:b1:1a:bd:66:51:39:f4:b5:b6:43:12:88:e3:13:dd: 36:06:37:0d:f9:bc:c9:67:89:ea:24:32:f1:2e:cf:58:89:a1: 28:da:5d:a2:1b:a3:39:61:ae:b9:c2:64:8c:29:1a:9e:38:ad: 73:64:96:d0:7a:c1:8f:3c:d6:ee:86:02:fd:de:f6:5d:e5:a1: 46:e5:3e:e3:e3:1a:66:73:ad:6e:71:b4:fb:f4:f5:e6:5e:67: 5e:51:43:e7:db:8a:5c:83:44:60:22:9f:03:89:3c:20:a1:c5: 79:53:82:fe:2a:45:00:0a:ca:e9:a2:1e:cb:ef:7f:84:72:25: 2e:41:83:2e:04:95:f2:3b:f6:52:56:73:2c:82:9d:3c:6b:37: f4:4f:43:60:cf:f8:76:00:e4:7b:1f:e9:51:8b:e4:8e:9d:99: 24:e5:e0:07:3e:91:72:c3:4b:95:f7:f2:f3:52:9b:71:78:95: 14:26:b0:15:1e:a2:1c:4c:0d:9b:4c:d7:04:1e:ad:42:16:ee: 7c:c1:17:75:61:2d:ff:dc:e0:97:12:fe:a3:96:2e:30:18:02: 75:6d:34:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKERCM0RGRDg2Q0VCRkVBRUQzQUFGMTVERUFFRTY5NjUy MzQ3NDZBMjkwHhcNMjYxMDIxMDUyODE3WhcNMjYxMDI4MDUyODE3WjAYMRYwFAYD VQQDEw02YWQ4NGQ3MS0xODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GVyKm6ZnNrfJKtklhU1e99rRAXV6mecdj5KWLUix5NOQuww3gC+M/sHTaWa mr2M1tfXpgr4v1t/P+7K8uDDHOK/PkJIgvcjrE7sBN/LYARXonVGUg/+IVwRRA1S gGa44gSmwV9QprnpRe7zq2Yk0Vf2n9BzGHEhLo6WmCylnjhb3ec0Xb1Xiob87N0I N+CqkwGXapalyuB+e2p95EA7xQRgiU2A4WwybO8OZh10uSxZL2eFYvdZWHU4o6p3 nyPN/5Jn+mjDw4+gYKiq8ik3Z/jNa4iGLjDtsTJEo4K26uZZADyNdUEnSyXqupHE vLqmteaJMyMVHdJDCgpZAuY8mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPS48Jpq bQpf0RJDHNA12adTFKSiMB8GA1UdIwQYMBaAFNs9/YbOv+rtOq8V3q7mllI0dGop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC9BNzhGMUIxMkE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1MDZyeFhlcnVhV1VqUjBh aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC9BNzhGMUIxMkE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1 MDZyeFhlcnVhV1VqUjBhaWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe9yS01WrCArmYOyaMZMbm0IEtmEUDSRcSR24qfoplSjSDljg2EXrsRq9ZlE5 9LW2QxKI4xPdNgY3Dfm8yWeJ6iQy8S7PWImhKNpdohujOWGuucJkjCkanjitc2SW 0HrBjzzW7oYC/d72XeWhRuU+4+MaZnOtbnG0+/T15l5nXlFD59uKXINEYCKfA4k8 IKHFeVOC/ipFAArK6aIey+9/hHIlLkGDLgSV8jv2UlZzLIKdPGs39E9DYM/4dgDk ex/pUYvkjp2ZJOXgBz6RcsNLlffy81KbcXiVFCawFR6iHEwNm0zXBB6tQhbufMEX dWEt/9zglxL+o5YuMBgCdW00MA== -----END CERTIFICATE-----Generated at Thu Oct 22 11:38:27 2026 by rpki-client