$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: XiPOcDMzhzGbrxzDpds2QS/P5mkPXtm2dqG++Wu6EjA= Subject key identifier: 4D:B6:3C:09:C5:D4:38:A8:E5:BC:93:2B:58:E0:F0:07:C3:19:3F:AA Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 032F Signing time: Mon 19 Oct 2026 01:10:43 +0000 Manifest this update: Mon 19 Oct 2026 01:10:42 +0000 Manifest next update: Mon 26 Oct 2026 01:10:42 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: kPup4NE1zWaGjqUZG/xzoDRwjneVQk/PzOH/lM1IBmk=) 2: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: Ag/WSAJg1umaGwKzFAK19hHyc1cKPo16yiWol4G9PIY=) 3: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: 4cOxFtUj/f+VqXW3XeSAxJn3qdSwOmHu+hPFst7NTB0=) 4: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: 4JSxAQIunOBygnnclEHW/aZY/r5nkwq9OMPvfsT6+0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 01:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Oct 19 01:10:42 2026 GMT Not After : Oct 26 01:10:42 2026 GMT Subject: CN=6ad56e13-2b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:f4:67:60:0b:96:f8:e0:30:ef:e6:b5:07: 59:d8:81:f5:ae:65:03:93:9e:ce:7b:22:37:20:d3: 7c:20:fd:aa:01:c9:f1:3a:62:f3:ff:1a:cf:93:bb: 51:80:b0:9a:52:cd:bc:b1:7f:88:c7:32:a7:86:a5: 19:a2:cb:ee:98:fa:15:07:ff:2f:99:46:56:57:27: e7:65:2b:d9:9a:db:a8:08:67:74:75:23:bc:95:3d: 79:73:66:74:96:69:35:2e:6b:6e:f5:43:93:fd:93: 66:e3:ca:16:14:c0:c3:e3:4b:6e:aa:4c:93:45:f1: 52:5d:00:0f:88:e7:10:eb:01:fc:19:58:d5:fd:a4: 39:be:32:6c:f9:1a:e5:79:13:49:10:7f:9d:99:d3: be:47:26:70:51:cc:ce:20:9f:24:87:52:7d:71:1e: a4:2e:af:2b:bf:9d:a0:1a:84:8e:b4:a1:6f:64:6d: 34:84:59:8a:9d:7d:e6:f6:12:59:83:92:8f:e7:d1: 71:77:bb:e5:18:c5:5d:6c:be:19:62:9d:e2:55:43: 6c:e8:6f:37:ec:63:1e:bd:a4:84:5d:5c:2b:59:da: 34:ca:3c:62:e2:79:c6:aa:16:a1:19:f8:bf:da:cb: 34:0a:60:8f:95:81:bd:13:8d:7c:6d:56:01:90:c5: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B6:3C:09:C5:D4:38:A8:E5:BC:93:2B:58:E0:F0:07:C3:19:3F:AA X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:02:2f:7b:8b:24:5f:da:d9:b2:bb:4b:1f:d8:d1:e7:63:60: 00:00:ba:40:55:03:2a:0c:9b:6b:ab:7d:07:7e:d3:54:19:c7: b9:fd:91:ab:70:11:d4:2f:13:26:c3:dd:1c:bb:17:c1:35:a3: 3b:a9:36:e8:95:fd:d0:73:d5:1e:d4:52:a5:c0:95:f2:6e:a7: 69:18:d6:d0:fd:ea:71:33:42:70:35:44:30:a9:30:4b:fb:ab: 88:95:d3:6b:0f:f6:2c:77:84:1f:b5:44:ab:18:85:28:ed:20: 1e:a0:4f:df:49:77:e5:0d:b0:05:42:56:39:d5:59:35:63:3a: a0:80:c7:8d:67:2e:99:7d:0d:f9:bb:27:e0:72:7c:47:02:e6: 10:c7:39:00:32:51:d6:87:72:33:36:4b:79:ce:dc:cf:1e:b5: 15:1f:0d:e3:5c:4f:01:0e:a8:2c:db:10:3f:85:be:18:f6:92: fe:e7:16:96:7f:16:b9:da:17:df:c5:7d:ef:3d:ba:be:05:3d: e5:2b:ea:cb:e4:44:c1:19:61:9c:b9:e1:4f:c6:88:be:16:75: d6:ff:01:67:74:06:cf:c6:35:aa:6b:60:3f:75:91:d7:b7:57: 26:9b:6d:b8:e0:fe:ad:6b:0b:65:ba:8c:ff:98:9b:86:a9:d0: 0e:3b:cb:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYxMDE5MDExMDQyWhcNMjYxMDI2MDExMDQyWjAYMRYwFAYD VQQDEw02YWQ1NmUxMy0yYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCr0Z2ALlvjgMO/mtQdZ2IH1rmUDk57OeyI3INN8IP2qAcnxOmLz/xrPk7tR gLCaUs28sX+IxzKnhqUZosvumPoVB/8vmUZWVyfnZSvZmtuoCGd0dSO8lT15c2Z0 lmk1Lmtu9UOT/ZNm48oWFMDD40tuqkyTRfFSXQAPiOcQ6wH8GVjV/aQ5vjJs+Rrl eRNJEH+dmdO+RyZwUczOIJ8kh1J9cR6kLq8rv52gGoSOtKFvZG00hFmKnX3m9hJZ g5KP59Fxd7vlGMVdbL4ZYp3iVUNs6G837GMevaSEXVwrWdo0yjxi4nnGqhahGfi/ 2ss0CmCPlYG9E418bVYBkMWVBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE22PAnF 1Dio5byTK1jg8AfDGT+qMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtgIve4skX9rZsrtLH9jR52NgAAC6QFUDKgyba6t9B37TVBnHuf2Rq3AR1C8T JsPdHLsXwTWjO6k26JX90HPVHtRSpcCV8m6naRjW0P3qcTNCcDVEMKkwS/uriJXT aw/2LHeEH7VEqxiFKO0gHqBP30l35Q2wBUJWOdVZNWM6oIDHjWcumX0N+bsn4HJ8 RwLmEMc5ADJR1odyMzZLec7czx61FR8N41xPAQ6oLNsQP4W+GPaS/ucWln8WudoX 38V97z26vgU95Svqy+REwRlhnLnhT8aIvhZ11v8BZ3QGz8Y1qmtgP3WR17dXJptt uOD+rWsLZbqM/5ibhqnQDjvL1Q== -----END CERTIFICATE-----Generated at Mon Oct 19 19:37:40 2026 by rpki-client