$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft File: 2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json) Hash identifier: NUHv5oWe2zzIfDw3Trh6MlndFm8M0oZ5KJEMn+Xp4WI= Subject key identifier: 70:F9:62:0F:09:26:56:28:40:CC:99:BF:5F:C3:81:91:FA:3D:97:2C Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 Certificate issuer: /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft Manifest number: 01AF Signing time: Sat 03 Oct 2026 04:40:46 +0000 Manifest this update: Sat 03 Oct 2026 04:40:45 +0000 Manifest next update: Sat 10 Oct 2026 04:40:45 +0000 Files and hashes: 1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: XDruOtxA0JO7FCXIhxVdwef1pVKIAkjn6R/ifrkR7sA=) 2: 8B522F68BBC211F1895EADC35E11F970.roa (hash: AhB7WvHRV7ok/97SSEqFPujRtQjz5hVNns7djnKfKrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Validity Not Before: Oct 3 04:40:45 2026 GMT Not After : Oct 10 04:40:45 2026 GMT Subject: CN=6ac0874e-32a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:25:2d:1b:ce:d1:56:c4:c3:e9:80:e4:3d: 5d:66:96:7c:cf:a5:cf:83:d0:a3:34:be:04:0d:2b: c1:e3:8f:82:2d:fe:09:ff:87:c3:d9:ce:c8:c0:02: 8d:29:7f:5e:4b:c9:64:2f:11:42:b6:d4:eb:d1:90: 8a:bb:bc:65:cb:68:b5:b1:3b:c9:0c:dc:31:e4:ea: 1a:16:72:e8:fd:ca:25:44:44:08:04:22:e4:c7:80: 8d:0e:f2:0b:8b:b2:e6:3a:ed:e6:b3:d4:f4:87:f4: 17:9a:08:85:0a:90:80:91:d1:a3:0b:65:47:90:c4: 79:7e:27:ca:aa:44:b1:f1:26:92:a8:fb:23:15:ff: 7a:e2:39:63:75:19:24:45:67:69:4f:38:86:f9:19: f4:10:08:67:40:39:9b:bf:91:e1:e1:f5:bf:ef:22: d6:96:9c:86:12:9c:a1:e9:7b:c9:c5:5b:b8:13:b6: bc:bc:d1:8c:05:60:08:a7:db:6d:6e:a0:59:70:3e: e6:22:b5:6c:5e:69:83:ce:b1:22:99:6d:0f:50:8a: 9e:57:bd:15:91:56:ed:85:9f:58:a0:b6:4c:5b:a9: 2a:23:25:0c:0e:5c:4e:01:2d:18:e3:42:64:02:f2: e6:2d:4b:1d:99:70:48:eb:c3:11:c7:7d:85:8d:7c: 9c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F9:62:0F:09:26:56:28:40:CC:99:BF:5F:C3:81:91:FA:3D:97:2C X509v3 Authority Key Identifier: keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:75:53:67:23:77:a8:bf:2e:cf:30:90:34:db:af:03:48:c5: 98:0a:47:5d:01:d0:39:54:46:4a:0e:e3:99:a9:96:00:50:13: a5:dd:28:98:1f:66:2a:37:c2:fd:c5:21:56:82:b2:a4:44:8d: 6c:19:42:ea:82:04:04:a8:0b:a2:0d:ec:1e:4a:fa:15:9b:e9: 41:6c:3d:f6:34:25:f2:af:24:0c:4c:96:57:1e:81:2b:18:f3: b6:8d:a1:c6:66:e5:21:ca:34:33:a8:66:00:d7:9e:c9:b0:ce: e3:c5:33:96:db:ef:3f:cd:54:c6:25:82:6c:2e:74:44:ec:9c: 29:da:75:45:d4:03:34:5f:1a:2c:f7:0d:aa:51:38:9f:5e:6e: b7:90:06:66:e7:e6:12:78:38:7b:67:36:27:8a:cc:ea:64:23: 7b:05:0e:2c:5f:a3:a0:50:85:b2:ea:23:3b:96:40:a2:9b:06: 0f:78:ff:b8:37:98:10:f7:d2:f9:e0:2f:73:00:80:b5:0e:f7: fb:93:fb:1c:2f:92:c7:c5:d6:76:78:2f:2f:b5:54:79:f1:9f: 0c:25:2b:80:50:c9:55:3b:59:27:71:59:62:3c:33:9f:3b:c4: 0b:57:75:8a:1a:cf:b0:43:6a:ea:e3:48:6b:f9:ad:f6:55:6b: a5:09:b2:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKEQ4MzNDNTE1MkUzRjJEMjc5Qjg5MDRGODNEMDBERDkw QUNBNjJCRDUwHhcNMjYxMDAzMDQ0MDQ1WhcNMjYxMDEwMDQ0MDQ1WjAYMRYwFAYD VQQDEw02YWMwODc0ZS0zMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvAlLRvO0VbEw+mA5D1dZpZ8z6XPg9CjNL4EDSvB44+CLf4J/4fD2c7IwAKN KX9eS8lkLxFCttTr0ZCKu7xly2i1sTvJDNwx5OoaFnLo/colREQIBCLkx4CNDvIL i7LmOu3ms9T0h/QXmgiFCpCAkdGjC2VHkMR5fifKqkSx8SaSqPsjFf964jljdRkk RWdpTziG+Rn0EAhnQDmbv5Hh4fW/7yLWlpyGEpyh6XvJxVu4E7a8vNGMBWAIp9tt bqBZcD7mIrVsXmmDzrEimW0PUIqeV70VkVbthZ9YoLZMW6kqIyUMDlxOAS0Y40Jk AvLmLUsdmXBI68MRx32FjXycxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHD5Yg8J JlYoQMyZv1/DgZH6PZcsMB8GA1UdIwQYMBaAFNgzxRUuPy0nm4kE+D0A3ZCspivV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9CMjkwQTM0NjJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xTZWJpUVQ0UFFEZGtLeW1L OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEUEZGUzRfTFNlYmlRVDRQUURka0t5bUs5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9CMjkwQTM0NjJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xT ZWJpUVQ0UFFEZGtLeW1LOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATnVTZyN3qL8uzzCQNNuvA0jFmApHXQHQOVRGSg7jmamWAFATpd0omB9mKjfC /cUhVoKypESNbBlC6oIEBKgLog3sHkr6FZvpQWw99jQl8q8kDEyWVx6BKxjzto2h xmblIco0M6hmANeeybDO48UzltvvP81UxiWCbC50ROycKdp1RdQDNF8aLPcNqlE4 n15ut5AGZufmEng4e2c2J4rM6mQjewUOLF+joFCFsuojO5ZAopsGD3j/uDeYEPfS +eAvcwCAtQ73+5P7HC+Sx8XWdngvL7VUefGfDCUrgFDJVTtZJ3FZYjwznzvEC1d1 ihrPsENq6uNIa/mt9lVrpQmyhw== -----END CERTIFICATE-----Generated at Sun Oct 4 17:37:38 2026 by rpki-client