$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: uu1wB/NQtG0HTNSUC+0kaNyRtpCtzsz7Ugt1PxSAx20= Subject key identifier: 5A:6F:9B:30:57:E2:0F:B4:F2:65:C6:14:96:50:01:25:F7:87:88:2D Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 0315 Signing time: Tue 01 Sep 2026 01:01:46 +0000 Manifest this update: Tue 01 Sep 2026 01:01:45 +0000 Manifest next update: Tue 08 Sep 2026 01:01:45 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: j4Cgxe4cjTdL5D4XXKSgiaV7SYQPRClg5LTnK/F2n0g=) 2: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo=) 3: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8=) 4: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: e26HjI6IThHSTcyiS5wewUgNVLH1ZtA87nwKAQOfEN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Sep 2026 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Sep 1 01:01:45 2026 GMT Not After : Sep 8 01:01:45 2026 GMT Subject: CN=6a9623f9-23e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:a7:e2:ab:32:d8:a1:57:da:6e:51:33:19: c8:3a:95:19:78:ef:0d:24:f0:d2:88:71:ac:25:8f: 0c:da:f9:d6:07:f1:0f:15:54:ea:89:12:f8:a8:d5: 8d:bc:7e:da:e4:d8:c3:fa:2a:ed:54:09:c4:6b:05: 53:60:16:6c:e9:a1:34:e1:fc:22:80:34:0a:59:2d: e1:4b:c6:be:fe:00:51:74:b5:84:a2:d2:9f:1e:9d: b1:ca:6c:a3:68:bd:d3:6f:04:ed:3c:40:0a:c2:1d: fb:50:cc:b5:fd:13:5a:b6:aa:23:c0:91:f6:ae:1f: 79:d6:4e:bb:c1:4e:f9:56:b2:aa:fb:de:9a:9f:d2: d9:41:52:25:54:d3:fc:b6:c1:62:81:82:14:36:e6: f6:10:de:e3:11:e4:4b:a5:03:33:1e:4f:59:cc:4a: 23:1f:26:1c:a9:e9:77:7a:32:0e:cb:7c:d2:61:e9: 88:2f:2b:1a:aa:ce:d8:59:9b:16:31:2e:4b:e8:94: 71:a3:57:bc:36:06:15:1c:c3:ec:8f:8b:46:56:76: 34:85:09:94:38:44:a4:38:cc:44:d3:b7:ab:24:8c: 50:e3:06:84:57:98:2c:77:93:e9:92:7d:4b:52:08: ff:6f:47:7f:39:00:e5:c2:b5:a9:7e:54:14:43:84: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6F:9B:30:57:E2:0F:B4:F2:65:C6:14:96:50:01:25:F7:87:88:2D X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:2c:8d:78:f8:2e:0f:03:59:0b:55:fb:b7:a5:8e:44:a7:81: 3a:f1:0d:1c:0c:03:57:f4:31:a2:ea:47:d8:28:cf:00:0a:0b: c7:6a:48:a8:de:12:48:36:bb:70:c8:b2:cc:da:e0:f9:2a:6e: 4a:a0:38:00:36:6a:f6:11:2b:90:ee:d6:86:ef:3d:97:f7:8c: 7b:e6:fd:ad:28:1b:4d:ee:72:8f:a1:9e:c9:08:c4:a5:6c:6b: 38:54:18:2c:3f:be:21:c2:a9:8a:78:f1:5a:84:a9:7a:d3:c9: 0a:e1:f9:51:18:74:f8:0f:db:b8:ce:f8:ac:dd:c2:e5:98:fa: 36:26:4f:a6:b9:be:e7:53:fb:0e:a5:0f:73:93:3b:f2:c2:0a: 9f:3d:4b:00:9d:18:72:b0:65:47:76:11:99:a5:0c:90:3e:70: f5:83:30:0b:29:09:e4:68:b6:b8:37:3f:2b:e6:4e:08:0a:c0: 41:d4:7b:e5:6e:bc:62:bf:b3:23:9f:da:b3:07:d9:31:c5:c9: 77:71:9e:17:65:58:ed:c1:dd:8a:28:2d:63:5d:40:4c:b8:98: aa:fa:1d:64:e1:d3:ac:75:95:9b:10:96:cf:58:4b:57:86:e7: 3b:e1:07:e4:db:f3:ab:ca:55:0c:16:57:28:17:e1:ae:bb:d5: 7f:a3:14:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYwOTAxMDEwMTQ1WhcNMjYwOTA4MDEwMTQ1WjAYMRYwFAYD VQQDEw02YTk2MjNmOS0yM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zin4qsy2KFX2m5RMxnIOpUZeO8NJPDSiHGsJY8M2vnWB/EPFVTqiRL4qNWN vH7a5NjD+irtVAnEawVTYBZs6aE04fwigDQKWS3hS8a+/gBRdLWEotKfHp2xymyj aL3TbwTtPEAKwh37UMy1/RNatqojwJH2rh951k67wU75VrKq+96an9LZQVIlVNP8 tsFigYIUNub2EN7jEeRLpQMzHk9ZzEojHyYcqel3ejIOy3zSYemILysaqs7YWZsW MS5L6JRxo1e8NgYVHMPsj4tGVnY0hQmUOESkOMxE07erJIxQ4waEV5gsd5Ppkn1L Ugj/b0d/OQDlwrWpflQUQ4RdowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpvmzBX 4g+08mXGFJZQASX3h4gtMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARyyNePguDwNZC1X7t6WORKeBOvENHAwDV/QxoupH2CjPAAoLx2pIqN4SSDa7 cMiyzNrg+SpuSqA4ADZq9hErkO7Whu89l/eMe+b9rSgbTe5yj6GeyQjEpWxrOFQY LD++IcKpinjxWoSpetPJCuH5URh0+A/buM74rN3C5Zj6NiZPprm+51P7DqUPc5M7 8sIKnz1LAJ0YcrBlR3YRmaUMkD5w9YMwCykJ5Gi2uDc/K+ZOCArAQdR75W68Yr+z I5/aswfZMcXJd3GeF2VY7cHdiigtY11ATLiYqvodZOHTrHWVmxCWz1hLV4bnO+EH 5Nvzq8pVDBZXKBfhrrvVf6MU2g== -----END CERTIFICATE-----Generated at Tue Sep 1 03:41:06 2026 by rpki-client