$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: bkh8PIiQYfs1fMW9Mmrvma52kB08TObF2J29rk2BrS8= Subject key identifier: FA:C3:DF:55:A7:C4:AF:3A:3C:68:35:2D:A2:A1:73:85:68:69:A3:6A Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0F16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0EF9 Signing time: Tue 20 Oct 2026 17:43:21 +0000 Manifest this update: Tue 20 Oct 2026 17:43:21 +0000 Manifest next update: Tue 27 Oct 2026 17:43:21 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: ZKaSfZe9ctDAfReKn6B1ZVMePkLJYF9nfvHVEBNaaNM=) 2: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 8cuyoSN28q4uL8xy1DF6fDKydmWDLPM+OObCbWczh0k=) 3: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: otCvD2+70hExeG7UwhAKqvYl8H+cUijlEBEY7BdlZms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 17:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3862 (0xf16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Oct 20 17:43:21 2026 GMT Not After : Oct 27 17:43:21 2026 GMT Subject: CN=6ad7a839-1627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:c1:ef:38:28:e0:28:fc:b0:85:ed:a8:e6: cd:6d:cd:89:2e:0a:f2:7a:04:dc:7f:40:e3:d6:1d: ed:80:dd:90:0c:8d:c3:d9:c9:60:c1:62:84:d0:4a: 18:71:26:33:c6:86:73:ac:4f:cf:f9:88:2e:b3:18: f6:be:30:d9:30:c8:b5:ac:df:56:bd:db:b8:70:73: 7e:4b:09:24:9c:89:42:49:66:c8:67:60:b7:99:30: ed:2b:f8:c7:10:99:72:86:50:7a:55:65:ce:a7:20: 90:d7:a8:ca:81:e2:c2:c3:af:4b:bd:b8:a4:37:c9: eb:b7:2a:59:85:8e:87:61:18:8c:c5:9e:22:6b:76: 22:b2:d2:b6:17:97:f9:69:d2:e7:1f:79:8e:a7:a1: 9c:5a:14:b1:3c:23:dc:28:55:3d:45:fb:1a:8b:ef: 68:ff:75:3b:38:4f:7a:60:eb:06:e4:3b:a6:ed:db: 3b:bc:a9:0d:21:9b:ef:dc:73:32:dc:c4:48:ad:03: c3:9a:98:c7:b0:15:c2:88:9b:2c:43:39:09:ea:ff: ad:a4:c2:24:ef:52:f6:b3:72:97:45:34:ba:78:e4: ae:6f:d8:f6:f7:1d:59:ed:29:e1:9f:61:06:1b:79: 87:ea:f9:78:38:cf:9e:a6:e8:5a:2a:46:70:ad:4f: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C3:DF:55:A7:C4:AF:3A:3C:68:35:2D:A2:A1:73:85:68:69:A3:6A X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:9d:61:2e:f0:3b:bc:ea:86:8a:60:74:13:8e:c0:b6:ee:d5: 80:7b:8e:f0:e2:46:1f:9b:c1:b2:09:05:bf:c3:69:16:33:d0: ed:b0:0e:7e:9f:81:ba:a8:3e:d1:77:f0:81:c5:7d:98:a2:44: c7:97:f9:3f:70:9b:ff:18:35:f1:6c:45:f1:41:c6:1c:b6:db: b9:37:21:c2:41:25:ae:ba:e6:09:33:3d:5e:14:33:98:88:77: 9d:55:ae:a9:91:8d:4a:a4:a7:da:3a:fd:3d:74:2d:c6:24:35: 5f:fb:d9:53:df:39:dd:ba:41:96:96:00:98:26:88:9c:e7:dd: f4:c3:e1:a0:34:f5:0e:f2:52:78:86:2f:10:6a:7a:f4:28:d6: 18:f6:04:24:70:45:cc:d9:cc:e0:4a:d9:29:3b:02:66:cb:36: 6a:c8:77:13:a3:ff:2e:f8:80:ef:89:84:d1:84:9c:e6:cb:1b: fd:47:fd:39:85:35:6f:1b:e7:08:83:29:44:0b:31:b8:20:94: c3:77:2e:12:cb:9c:aa:05:92:8b:b0:15:0e:83:61:65:4e:2d: fe:5e:8e:79:19:f9:91:e5:5c:54:cf:82:d7:41:1c:e5:a9:76: b2:e3:86:1c:82:62:a6:cc:dc:5d:a2:e1:76:30:b5:ed:11:36: 6f:5b:62:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjYxMDIwMTc0MzIxWhcNMjYxMDI3MTc0MzIxWjAYMRYwFAYD VQQDEw02YWQ3YTgzOS0xNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8HB7zgo4Cj8sIXtqObNbc2JLgryegTcf0Dj1h3tgN2QDI3D2clgwWKE0EoY cSYzxoZzrE/P+Ygusxj2vjDZMMi1rN9Wvdu4cHN+SwkknIlCSWbIZ2C3mTDtK/jH EJlyhlB6VWXOpyCQ16jKgeLCw69LvbikN8nrtypZhY6HYRiMxZ4ia3YistK2F5f5 adLnH3mOp6GcWhSxPCPcKFU9Rfsai+9o/3U7OE96YOsG5Dum7ds7vKkNIZvv3HMy 3MRIrQPDmpjHsBXCiJssQzkJ6v+tpMIk71L2s3KXRTS6eOSub9j29x1Z7Snhn2EG G3mH6vl4OM+epuhaKkZwrU/VDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrD31Wn xK86PGg1LaKhc4VoaaNqMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANJ1hLvA7vOqGimB0E47Atu7VgHuO8OJGH5vBsgkFv8NpFjPQ7bAOfp+Buqg+ 0XfwgcV9mKJEx5f5P3Cb/xg18WxF8UHGHLbbuTchwkElrrrmCTM9XhQzmIh3nVWu qZGNSqSn2jr9PXQtxiQ1X/vZU9853bpBlpYAmCaInOfd9MPhoDT1DvJSeIYvEGp6 9CjWGPYEJHBFzNnM4ErZKTsCZss2ash3E6P/LviA74mE0YSc5ssb/Uf9OYU1bxvn CIMpRAsxuCCUw3cuEsucqgWSi7AVDoNhZU4t/l6OeRn5keVcVM+C10Ec5al2suOG HIJipszcXaLhdjC17RE2b1tiMw== -----END CERTIFICATE-----Generated at Thu Oct 22 02:55:40 2026 by rpki-client