$ rpki-client -vvvf rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft File: h2Q49-A2DORsAHz91IHDH05WCHs.mft (raw, json) Hash identifier: Z9v9seUuRthhJr3/tbNnr0bftw2aTwlpFTjx+h8AkT4= Subject key identifier: 64:B2:F4:36:2F:D6:04:52:E5:24:AE:1D:42:E5:AA:74:FC:C4:45:FC Authority key identifier: 87:64:38:F7:E0:36:0C:E4:6C:00:7C:FD:D4:81:C3:1F:4E:56:08:7B Certificate issuer: /CN=A917286F/serialNumber=876438F7E0360CE46C007CFDD481C31F4E56087B Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2Q49-A2DORsAHz91IHDH05WCHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft Manifest number: 49 Signing time: Wed 07 Oct 2026 08:58:57 +0000 Manifest this update: Wed 07 Oct 2026 08:58:56 +0000 Manifest next update: Wed 14 Oct 2026 08:58:56 +0000 Files and hashes: 1: h2Q49-A2DORsAHz91IHDH05WCHs.crl (hash: HZzikP66af0SO34BD42ADKgNsj+u8T6/61Yd7Sknef8=) 2: 5257F21E53C211F19F1FA923BC833773.roa (hash: CKg/cSeBRG6ufQaILezJ2kDTbCeuVdt5eddE5iZ+RX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.crl rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2Q49-A2DORsAHz91IHDH05WCHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 08:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917286F, serialNumber=876438F7E0360CE46C007CFDD481C31F4E56087B Validity Not Before: Oct 7 08:58:56 2026 GMT Not After : Oct 14 08:58:56 2026 GMT Subject: CN=6ac609d1-a2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:d7:65:4f:7e:ad:3b:cb:aa:d6:96:2d:56: ca:c0:83:00:4f:a7:ed:1c:bb:6f:d2:62:4a:64:b8: 22:a8:61:f8:ab:dc:de:ad:6f:16:d2:90:d2:b9:6a: a9:3c:34:6c:34:71:92:71:ac:d2:22:49:31:33:1d: 92:f2:9a:c4:81:84:c4:cb:dd:d2:2b:0d:49:0f:99: 8d:c8:c1:f6:91:7f:39:1b:88:0a:02:34:0a:9f:90: 2c:87:60:ff:da:c4:2b:b3:02:62:04:24:00:f9:4e: c4:bd:0c:08:a8:7f:5e:83:86:4a:4d:96:9e:ee:ae: cc:bd:cf:64:32:09:11:7c:14:0f:e0:c5:f3:24:80: 36:ce:ca:97:c8:e3:33:97:b2:74:53:29:e3:65:89: f7:0b:e9:e6:46:92:7d:0f:b2:ea:2d:0a:ed:9c:57: 31:c7:0b:0c:22:7b:73:3f:1f:40:c1:d2:0f:1e:fe: e6:fa:e5:8e:0e:b3:23:9c:6b:9a:96:b7:c2:78:e2: bf:98:1b:64:cd:29:a8:11:58:07:23:1a:0b:08:ce: c5:b4:b6:8a:4a:7e:d7:07:80:32:99:41:cb:d4:34: b4:0a:28:8d:2b:45:d9:ea:98:2c:cb:51:42:94:93: fe:6a:1f:9e:d2:24:1c:b0:70:e9:df:f7:4f:88:7d: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B2:F4:36:2F:D6:04:52:E5:24:AE:1D:42:E5:AA:74:FC:C4:45:FC X509v3 Authority Key Identifier: keyid:87:64:38:F7:E0:36:0C:E4:6C:00:7C:FD:D4:81:C3:1F:4E:56:08:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2Q49-A2DORsAHz91IHDH05WCHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ef:29:92:1d:1c:1f:f9:74:6e:f8:48:a1:ab:f1:1a:c4:36: 2b:61:86:d3:aa:89:04:69:de:03:c2:cc:87:7e:42:da:31:67: 33:04:ec:74:88:ef:a3:b9:a6:49:52:e4:73:15:2d:50:d8:8b: 5d:dd:52:5e:d4:72:66:d9:aa:24:54:46:72:42:7d:ee:d1:69: 2d:30:67:42:f9:d2:a5:99:70:3f:85:fa:82:74:9a:55:47:eb: 8e:34:49:64:03:d6:de:b6:cc:4b:54:86:8f:7b:a2:3a:48:fc: 45:39:33:14:69:d7:1a:5f:65:70:0b:aa:06:be:6d:08:c5:79: 51:86:ec:2a:50:af:77:c5:eb:9a:ea:b6:3a:ef:8d:e0:29:b5: 8e:0f:da:b2:ab:a6:3d:4a:6b:b5:5b:9b:18:5f:a9:40:aa:2d: 31:9f:ec:f5:53:91:bf:1b:fa:94:86:49:0f:7b:dd:18:07:91: f9:28:00:3b:b9:72:79:e3:fb:7d:c4:01:57:b6:40:97:89:0d: 82:c4:0e:5c:e2:d6:00:2e:6b:fa:8c:0d:ed:b3:d7:d3:97:a6: 01:98:9c:35:ed:ce:c0:2c:3e:7b:80:3b:51:cb:58:8f:ed:11: 69:1f:c7:46:ec:0e:36:df:e4:39:de:c7:a3:10:4a:4f:14:00: 31:4b:46:ab -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Mjg2RjExMC8GA1UEBRMoODc2NDM4RjdFMDM2MENFNDZDMDA3Q0ZERDQ4MUMzMUY0 RTU2MDg3QjAeFw0yNjEwMDcwODU4NTZaFw0yNjEwMTQwODU4NTZaMBgxFjAUBgNV BAMTDTZhYzYwOWQxLWEyYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVhtdlT36tO8uq1pYtVsrAgwBPp+0cu2/SYkpkuCKoYfir3N6tbxbSkNK5aqk8 NGw0cZJxrNIiSTEzHZLymsSBhMTL3dIrDUkPmY3IwfaRfzkbiAoCNAqfkCyHYP/a xCuzAmIEJAD5TsS9DAiof16DhkpNlp7ursy9z2QyCRF8FA/gxfMkgDbOypfI4zOX snRTKeNlifcL6eZGkn0PsuotCu2cVzHHCwwie3M/H0DB0g8e/ub65Y4OsyOca5qW t8J44r+YG2TNKagRWAcjGgsIzsW0topKftcHgDKZQcvUNLQKKI0rRdnqmCzLUUKU k/5qH57SJBywcOnf90+IfWwNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZLL0Ni/W BFLlJK4dQuWqdPzERfwwHwYDVR0jBBgwFoAUh2Q49+A2DORsAHz91IHDH05WCHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyODZGLzE0MjcyQThDNTNC RDExRjFCNjU5MkE1NkI5ODMzNzczL2gyUTQ5LUEyRE9Sc0FIejkxSUhESDA1V0NI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDJRNDktQTJET1JzQUh6OTFJSERIMDVXQ0hzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy ODZGLzE0MjcyQThDNTNCRDExRjFCNjU5MkE1NkI5ODMzNzczL2gyUTQ5LUEyRE9S c0FIejkxSUhESDA1V0NIcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAT7ymSHRwf+XRu+Eihq/EaxDYrYYbTqokEad4DwsyHfkLaMWczBOx0iO+juaZJ UuRzFS1Q2Itd3VJe1HJm2aokVEZyQn3u0WktMGdC+dKlmXA/hfqCdJpVR+uONElk A9betsxLVIaPe6I6SPxFOTMUadcaX2VwC6oGvm0IxXlRhuwqUK93xeua6rY6743g KbWOD9qyq6Y9Smu1W5sYX6lAqi0xn+z1U5G/G/qUhkkPe90YB5H5KAA7uXJ54/t9 xAFXtkCXiQ2CxA5c4tYALmv6jA3ts9fTl6YBmJw17c7ALD57gDtRy1iP7RFpH8dG 7A423+Q53sejEEpPFAAxS0ar -----END CERTIFICATE-----Generated at Wed Oct 7 19:29:48 2026 by rpki-client