$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft File: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft (raw, json) Hash identifier: pPUK0OK8/iF1O3VXqXm7EGXZItpjJrsDEIP86MifPIU= Subject key identifier: 47:13:66:C0:47:09:DC:B8:B1:7C:61:0D:09:96:EF:91:9A:9C:3C:76 Authority key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED Certificate issuer: /CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Certificate serial: 14D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft Manifest number: 14AE Signing time: Fri 04 Sep 2026 15:23:12 +0000 Manifest this update: Fri 04 Sep 2026 15:23:12 +0000 Manifest next update: Fri 11 Sep 2026 15:23:12 +0000 Files and hashes: 1: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl (hash: /0qnHMQ563FMUhvzBD7+tpO25GVlHU78Cqq5cyn0WO4=) 2: 49678FBCB72B11EC8C8E3017C4F9AE02.roa (hash: +w2vcpHK75X0Tet8/CGiCfjrwOEMZcMJWwhe54Tggdg=) 3: 76C6BCF6B72811ECAEFC180DC4F9AE02.roa (hash: Ud5rGXdsvm2mwszq8gV1a3f93uHlsVz51C6UOk64thk=) 4: B969D2D0BA4A11EC90B53115C4F9AE02.roa (hash: ifpIwtwH21MGtyhP0efYlv476sZB8oAZKR7P4ILcbsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5335 (0x14d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Validity Not Before: Sep 4 15:23:12 2026 GMT Not After : Sep 11 15:23:12 2026 GMT Subject: CN=6a9ae260-e306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:22:36:a2:21:c2:32:7e:ab:a1:3d:e0:2d: b6:cd:19:fb:b1:bf:32:0c:81:42:03:ab:d7:81:4b: d0:1b:35:46:41:a8:f3:01:c6:b5:40:b4:7b:79:ee: 63:7b:b9:c9:e4:ce:49:df:0c:05:68:0c:60:d4:46: 65:b8:15:7c:ac:c4:2c:22:3f:34:ec:82:5b:c1:59: 70:ad:d3:84:1b:01:e9:d1:bd:bc:a6:b9:3f:c9:ae: 05:5b:a3:4f:b4:24:7c:53:2b:85:de:ba:54:a3:45: 01:78:3a:41:8a:74:f0:98:90:ae:0c:78:95:64:22: 93:9a:37:ac:4c:d3:78:f7:2b:a2:25:10:78:41:91: 83:ea:df:d1:5f:3e:b8:54:6b:d1:56:6f:16:c9:18: 7b:de:68:83:b5:65:f1:be:96:3e:ca:ec:5c:33:25: b6:23:54:9e:0b:6d:0d:ec:da:9e:bd:0f:4a:2f:f4: 79:9d:d3:e0:60:88:16:d5:47:35:aa:7f:de:78:f3: 9a:5c:83:6d:4f:76:59:d1:26:fe:de:8d:5f:bf:06: 1e:50:c8:d1:f6:ce:28:f0:c6:f9:66:cd:48:0c:fa: d6:6e:dd:d1:f2:9a:69:56:70:ed:a2:b7:b0:7d:b5: 3a:37:aa:1c:8e:68:89:3c:0c:f4:53:68:35:d3:92: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:13:66:C0:47:09:DC:B8:B1:7C:61:0D:09:96:EF:91:9A:9C:3C:76 X509v3 Authority Key Identifier: keyid:DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:84:56:98:83:38:99:8e:6f:15:1e:e9:70:06:e9:6c:59:b2: 41:9e:b4:fd:ca:e8:35:db:27:ef:34:d6:1b:54:ef:cc:20:a3: 21:97:d3:43:36:bb:67:1b:e0:20:7a:ff:36:90:ab:39:ae:82: 72:50:5f:2d:a5:54:06:1b:26:21:17:ae:d9:a2:b5:24:65:91: d8:18:1a:c4:52:67:bb:31:7b:62:ff:53:ef:9a:b4:b5:d9:47: cc:f3:3a:f3:ca:1e:ce:c2:dc:86:13:85:d0:02:da:89:72:c1: ff:9e:02:d7:da:4a:60:75:e0:bc:9b:75:81:3d:4c:f7:65:08: fe:7f:83:8b:a9:e1:9f:48:96:c2:d2:cb:02:77:0d:e7:52:0a: 11:ea:e6:9e:26:d1:62:91:0b:96:6a:f4:9f:86:7b:5a:4b:17: 73:4c:c3:ba:20:64:75:2c:3a:7d:30:ad:79:b4:96:41:7e:59: b0:88:76:b0:6e:bb:75:6f:70:53:40:c8:92:63:e0:b9:8e:93: 9b:8d:e0:f6:83:d3:73:51:d2:91:16:60:fe:7b:e7:99:e5:08: 6a:98:d0:cd:05:29:ba:3b:89:5b:47:2a:f3:a6:ba:7c:91:c3: ed:67:1d:43:71:62:95:f3:39:55:b0:8e:26:69:10:1d:05:71: 0d:69:3e:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKERBNEI1QzIxMjNCQTlEMEY4MDIzNzhEQURERDQ4MDFC NTY3MEEzRUQwHhcNMjYwOTA0MTUyMzEyWhcNMjYwOTExMTUyMzEyWjAYMRYwFAYD VQQDEw02YTlhZTI2MC1lMzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIgiNqIhwjJ+q6E94C22zRn7sb8yDIFCA6vXgUvQGzVGQajzAca1QLR7ee5j e7nJ5M5J3wwFaAxg1EZluBV8rMQsIj807IJbwVlwrdOEGwHp0b28prk/ya4FW6NP tCR8UyuF3rpUo0UBeDpBinTwmJCuDHiVZCKTmjesTNN49yuiJRB4QZGD6t/RXz64 VGvRVm8WyRh73miDtWXxvpY+yuxcMyW2I1SeC20N7NqevQ9KL/R5ndPgYIgW1Uc1 qn/eePOaXINtT3ZZ0Sb+3o1fvwYeUMjR9s4o8Mb5Zs1IDPrWbt3R8pppVnDtorew fbU6N6ocjmiJPAz0U2g105KOgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcTZsBH Cdy4sXxhDQmW75GanDx2MB8GA1UdIwQYMBaAFNpLXCEjup0PgCN42t3UgBtWcKPt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wNzQ5NTg5MDkx ODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5RLUFJM2phM2RTQUcxWndv LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJrdGNJU082blEtQUkzamEzZFNBRzFad28tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wNzQ5NTg5MDkxODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5R LUFJM2phM2RTQUcxWndvLTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAYRWmIM4mY5vFR7pcAbpbFmyQZ60/croNdsn7zTWG1TvzCCjIZfTQza7Zxvg IHr/NpCrOa6CclBfLaVUBhsmIReu2aK1JGWR2BgaxFJnuzF7Yv9T75q0tdlHzPM6 88oezsLchhOF0ALaiXLB/54C19pKYHXgvJt1gT1M92UI/n+Di6nhn0iWwtLLAncN 51IKEermnibRYpELlmr0n4Z7WksXc0zDuiBkdSw6fTCtebSWQX5ZsIh2sG67dW9w U0DIkmPguY6Tm43g9oPTc1HSkRZg/nvnmeUIapjQzQUpujuJW0cq86a6fJHD7Wcd Q3FilfM5VbCOJmkQHQVxDWk+Sg== -----END CERTIFICATE-----Generated at Sat Sep 5 04:39:36 2026 by rpki-client