$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft File: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft (raw, json) Hash identifier: QecXJn9QxoPrvwrvU0UlRUZfaXf6m/x47AuBpqJ54NI= Subject key identifier: 11:F9:8E:B9:65:74:4E:22:4F:E8:79:2E:8D:AB:85:3A:F0:E5:DD:EF Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B Certificate issuer: /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft Manifest number: 020C Signing time: Sun 25 Oct 2026 03:28:10 +0000 Manifest this update: Sun 25 Oct 2026 03:28:09 +0000 Manifest next update: Sun 01 Nov 2026 03:28:09 +0000 Files and hashes: 1: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl (hash: 49/o+18SCwAMCwsS4TUzAdq+0N4xS//Ag7bgfBm23So=) 2: 6F5F30B8B56111EE91C72951C4F9AE02.roa (hash: NKqxNV8ZTNMr3HZ7qohnaVPukBEy2IxhkEY74xhVUp4=) 3: 2DCC0688B57211EEBB68526DC4F9AE02.roa (hash: yJFPpL7wE2GdaICTMgXge87NbgvFqYn4RExlPALcImA=) 4: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (hash: Olet7/jMKDbPX9itUim3LSNIHYA8fTbBo6f7YD0v+zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 03:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Validity Not Before: Oct 25 03:28:09 2026 GMT Not After : Nov 1 03:28:09 2026 GMT Subject: CN=6add7749-f479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7e:70:00:6b:46:82:40:76:d8:49:f5:5b:17: 0e:38:73:7f:36:a2:8b:97:79:96:27:76:fe:9d:a3: 63:0d:03:b5:5e:cb:e9:20:78:34:a9:3f:79:95:10: 60:2f:75:0d:18:7d:7f:1e:5d:02:ea:b4:ff:10:dc: fc:8e:71:f5:0c:c6:72:69:26:7e:8b:fe:99:f9:e9: 77:db:d8:ac:80:67:c1:75:e6:7b:7b:c8:bf:4c:22: 36:cc:06:e8:7a:4e:6d:2b:13:23:54:fd:f0:62:cc: ee:7c:11:0b:54:4e:df:75:85:ac:35:0c:e9:c3:df: cf:7a:0d:8e:61:a4:32:93:2c:39:78:75:72:5e:0c: 46:d0:fb:80:b6:7f:31:b8:5b:43:3e:71:5a:94:6e: 08:87:a8:e2:73:cd:d3:89:ad:ed:2a:82:72:0a:1a: f7:b3:43:bc:1b:63:b7:42:6f:33:2c:e1:85:19:a1: 2c:00:7f:64:01:eb:49:9e:ed:6b:91:ca:77:53:e8: 33:6b:9c:3c:1e:6b:fc:23:a5:95:8d:86:fb:d0:f1: 89:e0:67:16:d7:36:1a:34:db:f5:82:0e:26:3e:f0: 39:72:83:8f:fb:ac:7f:8f:35:07:3e:98:ec:56:49: 74:3b:24:cc:cb:56:44:aa:e7:a4:51:42:36:cf:9c: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F9:8E:B9:65:74:4E:22:4F:E8:79:2E:8D:AB:85:3A:F0:E5:DD:EF X509v3 Authority Key Identifier: keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f1:87:29:92:2a:1a:db:ab:7c:9a:5c:cc:fa:8a:ce:2d:87: 3d:35:e2:5f:32:7a:56:51:87:75:78:b2:f7:5e:b7:1b:62:d0: 4d:af:79:ac:4a:82:01:dc:60:a4:d3:b9:50:0e:0d:59:82:49: 3f:b7:c2:e6:45:de:9d:06:c5:72:c7:e9:8b:5e:3c:99:8c:dc: d6:cd:b4:6b:89:75:4e:13:66:18:ac:e2:cc:13:43:ab:57:48: 40:41:75:74:c8:70:a0:e2:07:a5:e8:d2:c5:0f:d4:a5:07:60: e9:90:92:b0:3e:cf:b9:39:4c:3b:fc:b7:6f:bc:f9:90:91:dc: 33:2d:41:16:cd:23:b0:b8:9f:5f:b2:1c:63:08:6e:be:dc:49: 05:2e:f6:ed:58:bb:e5:9a:50:fb:dd:56:4b:64:54:c7:16:b1: 46:cd:52:40:44:b7:84:79:28:bf:65:d7:7a:ec:36:ab:d3:fa: b2:34:51:51:09:33:29:31:5b:ee:9b:48:40:02:c7:2e:58:7e: 2e:59:7d:2f:85:bc:f0:c7:d7:69:0f:8c:be:8f:99:4a:30:f0: 01:f7:f1:05:f6:b3:e4:41:5d:ea:8c:d3:2e:fb:59:cd:cb:fd: 3f:de:a0:19:0a:cb:29:9f:e0:e0:10:9f:54:22:df:65:f6:28: ad:d6:d2:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyNzcxMTAvBgNVBAUTKEQ4M0I5M0UzMUU5Mzk5MzdEOENCMTVGRTM5Q0E1RTZF OEZFQUZBOUIwHhcNMjYxMDI1MDMyODA5WhcNMjYxMTAxMDMyODA5WjAYMRYwFAYD VQQDEw02YWRkNzc0OS1mNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4H5wAGtGgkB22En1WxcOOHN/NqKLl3mWJ3b+naNjDQO1XsvpIHg0qT95lRBg L3UNGH1/Hl0C6rT/ENz8jnH1DMZyaSZ+i/6Z+el329isgGfBdeZ7e8i/TCI2zAbo ek5tKxMjVP3wYszufBELVE7fdYWsNQzpw9/Peg2OYaQykyw5eHVyXgxG0PuAtn8x uFtDPnFalG4Ih6jic83Tia3tKoJyChr3s0O8G2O3Qm8zLOGFGaEsAH9kAetJnu1r kcp3U+gza5w8Hmv8I6WVjYb70PGJ4GcW1zYaNNv1gg4mPvA5coOP+6x/jzUHPpjs Vkl0OyTMy1ZEquekUUI2z5yzRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBH5jrll dE4iT+h5Lo2rhTrw5d3vMB8GA1UdIwQYMBaAFNg7k+Mek5k32MsV/jnKXm6P6vqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzI3Ny80M0E3RTg5NEI1 NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1UZll5eFgtT2NwZWJvX3Et cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJEdVQ0eDZUbVRmWXl4WC1PY3BlYm9fcS1wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzI3Ny80M0E3RTg5NEI1NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1U Zll5eFgtT2NwZWJvX3EtcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAePGHKZIqGturfJpczPqKzi2HPTXiXzJ6VlGHdXiy9163G2LQTa95rEqCAdxg pNO5UA4NWYJJP7fC5kXenQbFcsfpi148mYzc1s20a4l1ThNmGKzizBNDq1dIQEF1 dMhwoOIHpejSxQ/UpQdg6ZCSsD7PuTlMO/y3b7z5kJHcMy1BFs0jsLifX7IcYwhu vtxJBS727Vi75ZpQ+91WS2RUxxaxRs1SQES3hHkov2XXeuw2q9P6sjRRUQkzKTFb 7ptIQALHLlh+Lll9L4W88MfXaQ+Mvo+ZSjDwAffxBfaz5EFd6ozTLvtZzcv9P96g GQrLKZ/g4BCfVCLfZfYordbSZA== -----END CERTIFICATE-----Generated at Sun Oct 25 21:54:12 2026 by rpki-client