$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft File: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft (raw, json) Hash identifier: xzlZS2awOwVizZcv2hEUZpxNTG3xC2cT2vgFXDR/fdY= Subject key identifier: CC:4B:5E:DC:B5:F9:D5:F5:5D:A9:8D:53:38:C0:69:96:41:21:9A:92 Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B Certificate issuer: /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft Manifest number: 020B Signing time: Fri 23 Oct 2026 03:34:32 +0000 Manifest this update: Fri 23 Oct 2026 03:34:31 +0000 Manifest next update: Fri 30 Oct 2026 03:34:31 +0000 Files and hashes: 1: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl (hash: FOXNmpX2jcwySYtGSvGYigRAXK6oimeXc1rtq1i/UMo=) 2: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (hash: Olet7/jMKDbPX9itUim3LSNIHYA8fTbBo6f7YD0v+zg=) 3: 6F5F30B8B56111EE91C72951C4F9AE02.roa (hash: NKqxNV8ZTNMr3HZ7qohnaVPukBEy2IxhkEY74xhVUp4=) 4: 2DCC0688B57211EEBB68526DC4F9AE02.roa (hash: yJFPpL7wE2GdaICTMgXge87NbgvFqYn4RExlPALcImA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 03:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Validity Not Before: Oct 23 03:34:31 2026 GMT Not After : Oct 30 03:34:31 2026 GMT Subject: CN=6adad5c8-b629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:23:d1:fd:21:80:3d:71:7a:58:08:b8:b9: 65:d3:1a:b8:b7:82:ff:f4:9b:d7:dc:42:56:e9:61: e9:71:2b:e2:7c:6f:1f:5b:d7:e1:c2:1f:ba:8a:19: 9c:22:f0:55:00:c0:66:02:fb:e3:35:54:d0:ee:65: 92:43:83:cc:29:bc:04:37:e4:99:38:ec:07:c1:e3: e2:d5:d3:53:79:18:f3:05:c2:7f:d6:bb:1e:af:33: dd:4f:1d:3d:8c:f6:40:1d:7c:92:d8:24:b0:7c:68: f1:09:89:f4:dc:91:a6:5b:db:12:e2:9b:a7:76:d5: c6:6e:89:ed:51:e3:2c:de:7e:6d:98:ae:cf:7c:e1: bb:ea:51:9d:3e:75:2b:3e:7c:be:d2:97:66:ba:de: 00:f9:6e:70:c1:65:be:c1:c1:64:a9:5f:5e:7b:a8: 9f:37:4b:2a:2c:48:ed:1c:12:59:ae:ae:a8:70:eb: db:6c:c0:00:c2:30:83:3b:bb:77:e0:a3:3a:78:d8: 4c:0a:b8:ee:b1:22:06:f9:50:1d:85:20:bc:d0:a4: c2:69:f0:91:8a:6b:d1:48:f2:2a:b2:c7:c6:88:1c: 96:19:7c:0a:e8:a6:7d:0d:99:46:fd:df:d0:5d:0f: ef:aa:06:e1:58:45:4a:54:1c:33:5d:4d:e0:63:c0: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4B:5E:DC:B5:F9:D5:F5:5D:A9:8D:53:38:C0:69:96:41:21:9A:92 X509v3 Authority Key Identifier: keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:77:2a:72:a5:69:52:aa:4e:35:a8:0b:32:8d:5b:38:87:45: 8f:18:be:9a:71:7f:0c:b3:62:59:b2:36:9f:8f:4e:85:63:55: 84:9d:ed:64:82:90:bf:ad:0c:29:e4:88:e4:d3:2a:45:bf:df: 5e:18:ea:29:d3:55:ca:9a:03:ea:ad:19:96:df:fe:4a:72:b3: b1:6c:53:85:77:c7:13:2d:c4:f5:6f:2c:fa:f0:39:ca:9b:8b: 42:3b:42:52:d6:78:c5:9e:8d:94:42:ee:b7:28:f9:1e:d1:07: 2b:36:ee:24:e3:67:3b:e7:74:83:be:5a:d1:fb:f3:91:e4:7c: 4e:a2:45:ea:3f:d0:d2:d4:6b:74:2b:5b:b1:0b:38:4f:bb:69: d9:ba:35:d6:ce:0a:1f:37:28:f5:79:2a:c1:56:58:40:ab:53: 2f:d1:eb:50:ce:5d:3d:0b:cc:ac:43:ba:24:0f:8f:c3:a9:44: fa:c5:91:e7:40:f3:d7:61:47:40:dd:3d:af:25:55:7d:7c:72: d9:e3:36:12:f6:5a:55:51:62:84:72:35:ad:c4:9a:dc:d5:4d: 43:f9:23:c8:9f:2f:f5:57:23:0a:8d:ad:80:5d:46:bd:ea:51: 68:00:b7:c7:4a:96:8c:31:6c:a4:5d:4f:ab:de:6e:b7:f1:1c: 1c:42:69:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyNzcxMTAvBgNVBAUTKEQ4M0I5M0UzMUU5Mzk5MzdEOENCMTVGRTM5Q0E1RTZF OEZFQUZBOUIwHhcNMjYxMDIzMDMzNDMxWhcNMjYxMDMwMDMzNDMxWjAYMRYwFAYD VQQDEw02YWRhZDVjOC1iNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLMj0f0hgD1xelgIuLll0xq4t4L/9JvX3EJW6WHpcSvifG8fW9fhwh+6ihmc IvBVAMBmAvvjNVTQ7mWSQ4PMKbwEN+SZOOwHwePi1dNTeRjzBcJ/1rserzPdTx09 jPZAHXyS2CSwfGjxCYn03JGmW9sS4pundtXGbontUeMs3n5tmK7PfOG76lGdPnUr Pny+0pdmut4A+W5wwWW+wcFkqV9ee6ifN0sqLEjtHBJZrq6ocOvbbMAAwjCDO7t3 4KM6eNhMCrjusSIG+VAdhSC80KTCafCRimvRSPIqssfGiByWGXwK6KZ9DZlG/d/Q XQ/vqgbhWEVKVBwzXU3gY8CetwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxLXty1 +dX1XamNUzjAaZZBIZqSMB8GA1UdIwQYMBaAFNg7k+Mek5k32MsV/jnKXm6P6vqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzI3Ny80M0E3RTg5NEI1 NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1UZll5eFgtT2NwZWJvX3Et cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJEdVQ0eDZUbVRmWXl4WC1PY3BlYm9fcS1wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzI3Ny80M0E3RTg5NEI1NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1U Zll5eFgtT2NwZWJvX3EtcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFHcqcqVpUqpONagLMo1bOIdFjxi+mnF/DLNiWbI2n49OhWNVhJ3tZIKQv60M KeSI5NMqRb/fXhjqKdNVypoD6q0Zlt/+SnKzsWxThXfHEy3E9W8s+vA5ypuLQjtC UtZ4xZ6NlELutyj5HtEHKzbuJONnO+d0g75a0fvzkeR8TqJF6j/Q0tRrdCtbsQs4 T7tp2bo11s4KHzco9XkqwVZYQKtTL9HrUM5dPQvMrEO6JA+Pw6lE+sWR50Dz12FH QN09ryVVfXxy2eM2EvZaVVFihHI1rcSa3NVNQ/kjyJ8v9VcjCo2tgF1GvepRaAC3 x0qWjDFspF1Pq95ut/EcHEJp9A== -----END CERTIFICATE-----Generated at Sun Oct 25 01:12:43 2026 by rpki-client