$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft File: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft (raw, json) Hash identifier: P40s8iI7zkC5iYFYCSSmb9JrF7g14YSUm1kCy3HF0m8= Subject key identifier: A0:43:B6:5D:22:74:68:2B:7B:81:16:E6:57:4C:F5:77:63:92:3E:F9 Authority key identifier: D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F Certificate issuer: /CN=A91758EC/serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft Manifest number: FD Signing time: Tue 03 Nov 2026 07:21:28 +0000 Manifest this update: Tue 03 Nov 2026 07:21:28 +0000 Manifest next update: Tue 10 Nov 2026 07:21:28 +0000 Files and hashes: 1: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl (hash: cDgqlbjAD7Nq9rdI3YDkeSXy3qhSa0Mke7VT4eKrKMY=) 2: 1AC14F60FC1C11F0AA0D3BE4396F56BC.roa (hash: aYDnHlZZ14KegbsrCL1Glj9EDgxGx2Y0U5BoskwOni4=) 3: 1B34EF06FC1C11F0AA0D3BE4396F56BC.roa (hash: iqYV9/xnKXVfiZZcxAVxMjO3LAkmh0lLnZhQciHJSJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 07:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758EC, serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F Validity Not Before: Nov 3 07:21:28 2026 GMT Not After : Nov 10 07:21:28 2026 GMT Subject: CN=6ae98b78-4bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:cd:d6:85:dc:43:e1:7b:90:24:82:dd:c5: 8c:48:5e:12:97:bb:da:1c:ec:c9:99:b3:e9:44:d6: 6f:8c:96:5a:55:ee:1a:60:be:c2:af:6b:c4:d3:80: 2c:f8:17:12:44:b7:62:35:af:2e:ec:ad:60:ae:bc: f0:1e:4a:17:87:62:9b:35:ff:02:86:45:a0:ff:7d: ba:5d:d7:83:67:e5:56:f1:91:9b:b4:79:60:3c:89: 6c:87:a0:11:38:5b:18:95:b1:0f:4c:ef:50:a6:b4: 3a:6a:4b:f7:16:97:f2:b1:72:3a:30:a0:ce:6e:cf: f6:36:26:da:27:0b:1b:df:44:98:19:2d:75:6d:1c: 46:72:79:3f:82:2c:a4:e5:25:cd:c5:4b:06:ef:bb: 67:02:14:74:1e:c9:a4:39:15:e2:67:7b:10:8d:10: 34:84:b2:9e:7a:63:e2:0d:ae:ce:0e:64:c1:05:92: c3:65:66:20:90:f2:6d:e6:59:74:42:84:45:e2:52: d6:4d:38:b0:72:c1:d4:bb:f0:0f:9e:2d:4f:16:f4: 01:ae:cb:ac:0c:b4:dd:f3:f6:88:4b:2a:b2:1c:97: 63:93:9c:12:9f:4a:31:56:28:62:d3:c6:8c:2c:af: bd:65:e3:30:5c:28:41:cb:32:24:55:43:b0:34:ce: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:43:B6:5D:22:74:68:2B:7B:81:16:E6:57:4C:F5:77:63:92:3E:F9 X509v3 Authority Key Identifier: keyid:D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:69:6b:34:e8:7a:a8:32:58:4a:83:24:fa:3a:65:f9:db:51: d2:b3:c2:7a:fc:3d:5f:e5:0c:df:e1:2a:9d:ba:d6:fe:92:8e: 9b:a8:dd:4d:d4:09:83:a2:47:1f:ac:8d:81:d3:d5:72:40:a3: 93:04:b3:48:1e:15:9c:f3:15:a6:a0:60:d2:de:c0:cc:d5:7f: 44:a5:13:fe:2f:1a:90:45:5d:5e:97:89:b6:9d:a7:98:8b:6a: c2:25:5f:66:1c:d6:3f:3b:8e:3e:cb:cf:e1:91:4a:11:24:cb: aa:28:68:c3:dc:b9:e5:ed:5f:0c:85:4c:bf:90:ff:31:62:90: af:b1:a3:73:8a:52:2a:36:b7:f2:d0:5e:f1:c9:1e:95:20:ea: 12:e0:f8:43:39:01:0c:e9:d4:b4:09:e7:62:94:c6:02:d5:5c: 4b:61:a7:92:a2:17:ba:03:5c:79:69:2d:e1:4c:fa:5e:3b:dd: f4:d0:f4:3e:0a:a4:12:49:1a:7a:3b:01:50:49:cb:40:4a:81: 53:b4:8e:bc:d5:b9:90:85:51:2f:e8:12:b4:78:fa:36:e2:d5: c8:17:e9:2a:58:d6:9a:8e:47:37:d7:e5:4e:f5:bb:d9:c5:d6: 15:33:90:a0:e1:94:d7:ea:c6:9a:80:fa:c4:f2:ce:c5:23:7d: 5f:46:b4:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4RUMxMTAvBgNVBAUTKEQ4MjdCNjg0M0VCN0Y2QjlGMEVENUYyRkY3MjM0NEE1 MkMwNEI0OUYwHhcNMjYxMTAzMDcyMTI4WhcNMjYxMTEwMDcyMTI4WjAYMRYwFAYD VQQDEw02YWU5OGI3OC00YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApN7N1oXcQ+F7kCSC3cWMSF4Sl7vaHOzJmbPpRNZvjJZaVe4aYL7Cr2vE04As +BcSRLdiNa8u7K1grrzwHkoXh2KbNf8ChkWg/326XdeDZ+VW8ZGbtHlgPIlsh6AR OFsYlbEPTO9QprQ6akv3FpfysXI6MKDObs/2NibaJwsb30SYGS11bRxGcnk/giyk 5SXNxUsG77tnAhR0HsmkORXiZ3sQjRA0hLKeemPiDa7ODmTBBZLDZWYgkPJt5ll0 QoRF4lLWTTiwcsHUu/APni1PFvQBrsusDLTd8/aISyqyHJdjk5wSn0oxVihi08aM LK+9ZeMwXChByzIkVUOwNM7raQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBDtl0i dGgre4EW5ldM9Xdjkj75MB8GA1UdIwQYMBaAFNgntoQ+t/a58O1fL/cjRKUsBLSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThFQy82QkY4NkI4NDY2 MzAxMUYwQjlEQzRFNjRDNEY5QUUwMi8yQ2UyaEQ2Mzlybnc3Vjh2OXlORXBTd0V0 SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDZTJoRDYzOXJudzdWOHY5eU5FcFN3RXRKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThFQy82QkY4NkI4NDY2MzAxMUYwQjlEQzRFNjRDNEY5QUUwMi8yQ2UyaEQ2Mzly bnc3Vjh2OXlORXBTd0V0SjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABGlrNOh6qDJYSoMk+jpl+dtR0rPCevw9X+UM3+EqnbrW/pKOm6jdTdQJg6JH H6yNgdPVckCjkwSzSB4VnPMVpqBg0t7AzNV/RKUT/i8akEVdXpeJtp2nmItqwiVf ZhzWPzuOPsvP4ZFKESTLqihow9y55e1fDIVMv5D/MWKQr7Gjc4pSKja38tBe8cke lSDqEuD4QzkBDOnUtAnnYpTGAtVcS2GnkqIXugNceWkt4Uz6Xjvd9ND0PgqkEkka ejsBUEnLQEqBU7SOvNW5kIVRL+gStHj6NuLVyBfpKljWmo5HN9flTvW72cXWFTOQ oOGU1+rGmoD6xPLOxSN9X0a0+g== -----END CERTIFICATE-----Generated at Wed Nov 4 00:32:51 2026 by rpki-client