$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: ErJwbEZmPN1kJMZcXBAQk8wAb+XzMT3MpfRS+coVAwQ= Subject key identifier: AD:4A:86:72:60:2C:EA:EE:A6:71:E0:52:E6:2F:85:83:85:20:8F:92 Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 0590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 0557 Signing time: Fri 04 Sep 2026 23:10:37 +0000 Manifest this update: Fri 04 Sep 2026 23:10:36 +0000 Manifest next update: Fri 11 Sep 2026 23:10:36 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: x7gLPWpDegSfEb8qRbQjDyr8E7iuoERkrVTZRDi6d70=) 2: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: dY+BZEOINurtJjOA3yhjmWQ4kx2Zua1d5uXKZrya/Kk=) 3: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7xZPQJy4FlDqQRK4ZNxBOqn11xvYRCTnG5Hl+SBa0kA=) 4: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Sep 4 23:10:36 2026 GMT Not After : Sep 11 23:10:36 2026 GMT Subject: CN=6a9b4fec-38b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:7f:f8:e9:32:ea:e3:58:07:9b:a6:2d:20: 00:66:72:2e:d4:c8:d9:9c:24:ec:c5:d4:55:60:23: 8c:11:4b:fd:37:4f:8b:65:9e:f7:b7:0f:58:a5:57: f4:b4:c7:c8:ad:9c:93:f2:a0:28:11:3c:d5:fa:7e: de:30:cc:9a:75:6f:f7:94:d4:c5:cf:57:77:2d:f3: 56:d7:99:25:8a:a7:a6:ef:ab:6a:10:0d:cf:03:ce: c1:99:9e:10:98:1b:15:f1:96:4b:1e:fb:d7:c4:20: c0:f3:0d:47:dd:51:69:b2:85:7e:7c:44:b5:56:ab: fc:25:f7:1b:2a:1d:d1:d3:f9:5e:a4:c2:b0:37:96: 0c:19:30:81:1e:81:87:ad:85:ef:d3:19:e6:86:70: c8:6b:ae:59:0a:7b:29:53:e5:94:1d:d5:81:94:8f: b6:45:4d:03:44:27:1b:2b:46:10:87:09:9a:a6:32: cb:6d:7d:65:0e:bd:cf:64:ea:84:ca:0f:a6:24:6c: c4:72:e0:a7:35:15:97:2d:1d:a9:b5:84:5f:25:40: fe:63:8f:d9:2d:a2:c7:f2:43:cd:ae:25:d5:d2:d5: d9:27:a6:49:47:e2:94:1b:52:50:3d:25:1b:11:de: ae:e8:f6:8a:ed:f7:50:cb:94:44:a8:d7:13:16:2a: 41:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4A:86:72:60:2C:EA:EE:A6:71:E0:52:E6:2F:85:83:85:20:8F:92 X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:1b:91:8b:5f:74:17:82:21:82:89:69:9d:a8:20:c3:58:06: ae:a0:5b:03:49:72:0c:9a:f3:98:b9:bf:0b:98:e6:ea:da:2b: c4:c8:a8:bb:08:9d:1d:c6:cd:a2:04:09:5b:2f:25:e6:88:0e: 21:8e:30:d6:d4:11:53:0d:f5:65:c6:1f:0d:5d:84:9a:37:a5: 8e:34:e6:e7:58:5f:b2:69:59:67:fb:02:5c:90:f0:21:c4:f8: f9:ea:0c:64:8e:0a:2b:a0:dd:5e:44:89:e1:6b:98:1d:21:73: 8a:a2:94:df:8b:4f:b7:0d:de:ad:49:f5:d8:99:06:c5:78:b2: 7b:2a:1f:65:5a:45:b3:cd:ff:c4:33:3f:fd:83:10:75:78:bb: f1:78:84:b2:b5:f3:f6:6f:d0:59:46:2b:95:54:81:93:1e:95: c5:0d:1c:1c:3e:8e:fb:80:09:06:cd:07:94:56:30:dc:c5:81: 0e:4a:63:9e:e0:93:ce:9c:bf:fc:03:62:c0:b8:da:58:cb:22: 5a:4a:8d:4a:46:38:77:5b:40:7e:46:45:98:a8:f9:eb:8b:a1: d5:6a:8d:7e:15:45:cc:12:19:51:be:dc:83:66:18:6c:ca:12: be:16:98:c1:eb:fa:6d:00:34:48:32:72:1c:9d:fa:39:df:19: d3:76:e0:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYwOTA0MjMxMDM2WhcNMjYwOTExMjMxMDM2WjAYMRYwFAYD VQQDEw02YTliNGZlYy0zOGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtit/+Oky6uNYB5umLSAAZnIu1MjZnCTsxdRVYCOMEUv9N0+LZZ73tw9YpVf0 tMfIrZyT8qAoETzV+n7eMMyadW/3lNTFz1d3LfNW15kliqem76tqEA3PA87BmZ4Q mBsV8ZZLHvvXxCDA8w1H3VFpsoV+fES1Vqv8JfcbKh3R0/lepMKwN5YMGTCBHoGH rYXv0xnmhnDIa65ZCnspU+WUHdWBlI+2RU0DRCcbK0YQhwmapjLLbX1lDr3PZOqE yg+mJGzEcuCnNRWXLR2ptYRfJUD+Y4/ZLaLH8kPNriXV0tXZJ6ZJR+KUG1JQPSUb Ed6u6PaK7fdQy5REqNcTFipB3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1KhnJg LOrupnHgUuYvhYOFII+SMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVhuRi190F4Ihgolpnaggw1gGrqBbA0lyDJrzmLm/C5jm6torxMiouwidHcbN ogQJWy8l5ogOIY4w1tQRUw31ZcYfDV2EmjeljjTm51hfsmlZZ/sCXJDwIcT4+eoM ZI4KK6DdXkSJ4WuYHSFziqKU34tPtw3erUn12JkGxXiyeyofZVpFs83/xDM//YMQ dXi78XiEsrXz9m/QWUYrlVSBkx6VxQ0cHD6O+4AJBs0HlFYw3MWBDkpjnuCTzpy/ /ANiwLjaWMsiWkqNSkY4d1tAfkZFmKj564uh1WqNfhVFzBIZUb7cg2YYbMoSvhaY wev6bQA0SDJyHJ36Od8Z03bgvw== -----END CERTIFICATE-----Generated at Sat Sep 5 05:29:41 2026 by rpki-client