$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft File: q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json) Hash identifier: FfZOoo/PLBgjOMrfT0q52XBLpGvw+b5wVlPllJ3RCz4= Subject key identifier: 7F:31:7A:C5:C4:9A:90:01:4E:B0:AC:87:C4:7A:63:27:6C:51:F5:22 Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 370E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft Manifest number: 3620 Signing time: Fri 04 Sep 2026 14:28:51 +0000 Manifest this update: Fri 04 Sep 2026 14:28:51 +0000 Manifest next update: Fri 11 Sep 2026 14:28:51 +0000 Files and hashes: 1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: h58Uaofz17DQ21LDkb/fqlBVjmaSro46magVCkOkoj4=) 2: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: Vuo+8i5V4Znap+Qs1dOcHdE1nAFejMLQYP5EDIvQcjU=) 3: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: kuzwCvIHtKelM7oshMzAb2U462l4e0HmxA10PXja6PA=) 4: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc=) 5: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=) 6: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=) 7: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=) 8: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: rEfB0wTEVedizbjd1aa4stNP7Lpi5g6RaGy1a4umZiM=) 9: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: /QQiHNO+P4zS7clMch+1xG2dmlltL/7vNQJGue0Q24E=) 10: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk=) 11: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: HGBUZghw2mrH37viSTYGdL7UxbtP3kpsrCzGnWhLnVU=) 12: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: N79DDK5pn6TCAon8GJdsX02x5/pCsRg1kmXulJOa3DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14094 (0x370e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Sep 4 14:28:51 2026 GMT Not After : Sep 11 14:28:51 2026 GMT Subject: CN=6a9ad5a3-7114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:57:88:d2:4f:99:4d:fd:99:b5:44:0e:af: aa:5a:96:58:2b:9b:f3:a0:fc:bd:4c:af:be:d2:39: ee:d2:8f:1d:cb:27:7c:ca:16:0c:71:ff:dc:19:96: 57:ab:f3:93:57:3c:b8:6c:96:63:9d:b1:e5:d9:5f: 78:b9:2f:0a:96:6c:3b:01:b0:0f:ee:d1:a0:7b:65: 2c:af:c6:71:8d:7f:a5:ac:16:1f:ea:de:83:29:3b: 5d:5d:b6:e4:a5:61:ab:7f:80:9f:8f:14:c1:fa:68: 5f:24:55:56:63:d1:19:40:02:53:35:a0:70:0c:ee: 1e:bf:fc:0f:3d:27:51:bd:43:29:d4:c2:28:0f:71: ad:74:c3:28:ae:3d:ce:8a:3b:b5:1f:00:b1:30:29: 1f:9c:45:e1:e9:70:13:65:39:5d:ff:b3:eb:85:0b: 33:12:60:e2:0e:19:9f:24:d9:a7:65:35:fc:bc:22: 9b:09:dc:f8:43:38:ea:93:57:15:82:4c:39:b7:90: c4:77:ab:dd:4b:d7:63:1b:63:e6:00:29:4e:98:36: f8:63:06:af:d3:bf:14:17:81:85:36:1f:7e:d7:a3: 8b:1d:2b:d7:ad:07:97:9a:58:f3:38:24:fc:56:99: 8b:1b:66:1a:d1:87:1f:0d:6b:35:1f:78:09:00:16: 5e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:31:7A:C5:C4:9A:90:01:4E:B0:AC:87:C4:7A:63:27:6C:51:F5:22 X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:76:d0:51:10:e8:37:a6:5a:72:02:06:0f:4a:8f:e1:62:67: 85:02:06:85:f8:c0:ae:e3:16:5a:65:8d:a7:05:66:3c:b6:44: ad:12:66:3c:ae:ca:22:61:4e:2d:fa:bf:42:a0:26:4d:5d:06: 6f:2b:14:17:8a:54:1e:2c:e2:9c:40:3f:df:a7:61:93:61:05: 2c:60:00:02:c7:c0:92:5c:6a:59:3f:6f:8a:1b:c6:56:76:2e: a1:01:54:92:8e:0f:b6:04:3c:7b:a1:d4:43:ab:16:c1:d0:08: 72:42:a1:fc:f4:50:50:91:02:6b:59:f6:db:42:3f:da:66:37: d2:c5:9f:79:24:0a:06:c3:d7:ce:48:5a:59:44:65:21:6b:8a: 23:74:f8:bd:d2:b8:a0:f9:1f:25:f5:2f:0c:5b:34:21:d3:c1: 27:5d:7e:76:2d:82:79:ec:03:e6:db:52:bb:bc:5b:1e:a2:2b: 3f:57:a6:4a:e4:22:5e:c2:54:8d:d3:d2:6b:8f:8b:f2:87:84: 1b:2d:52:62:bb:9e:33:89:6e:1c:31:4f:9d:d8:19:04:8f:e2: ac:2b:cb:a1:34:9e:43:5b:03:e2:39:af:ad:71:fe:6b:d7:4c: f5:b2:6e:41:cb:8a:bc:be:a4:04:f3:f6:4f:a6:3b:26:69:a9: 1e:39:4e:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjYwOTA0MTQyODUxWhcNMjYwOTExMTQyODUxWjAYMRYwFAYD VQQDEw02YTlhZDVhMy03MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdlXiNJPmU39mbVEDq+qWpZYK5vzoPy9TK++0jnu0o8dyyd8yhYMcf/cGZZX q/OTVzy4bJZjnbHl2V94uS8Klmw7AbAP7tGge2Usr8ZxjX+lrBYf6t6DKTtdXbbk pWGrf4CfjxTB+mhfJFVWY9EZQAJTNaBwDO4ev/wPPSdRvUMp1MIoD3GtdMMorj3O iju1HwCxMCkfnEXh6XATZTld/7PrhQszEmDiDhmfJNmnZTX8vCKbCdz4Qzjqk1cV gkw5t5DEd6vdS9djG2PmAClOmDb4Ywav078UF4GFNh9+16OLHSvXrQeXmljzOCT8 VpmLG2Ya0YcfDWs1H3gJABZemwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8xesXE mpABTrCsh8R6YydsUfUiMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQ1NC9ENEMzMEI0MjFEODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdC clVpM0hhbUxjOUlxTmkydkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUHbQURDoN6ZacgIGD0qP4WJnhQIGhfjAruMWWmWNpwVmPLZErRJmPK7KImFO Lfq/QqAmTV0GbysUF4pUHizinEA/36dhk2EFLGAAAsfAklxqWT9vihvGVnYuoQFU ko4PtgQ8e6HUQ6sWwdAIckKh/PRQUJECa1n220I/2mY30sWfeSQKBsPXzkhaWURl IWuKI3T4vdK4oPkfJfUvDFs0IdPBJ11+di2CeewD5ttSu7xbHqIrP1emSuQiXsJU jdPSa4+L8oeEGy1SYrueM4luHDFPndgZBI/irCvLoTSeQ1sD4jmvrXH+a9dM9bJu QcuKvL6kBPP2T6Y7JmmpHjlOFA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:15:25 2026 by rpki-client