$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: Lbp6zSAbAG7VOm2gGreYp/vuMp/r6Z8VJCwlc/odAhc= Subject key identifier: 45:4C:6C:31:41:88:DE:E5:23:7B:0A:6D:8E:2B:7D:0A:57:38:7D:C6 Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 0213 Signing time: Fri 11 Sep 2026 03:05:47 +0000 Manifest this update: Fri 11 Sep 2026 03:05:46 +0000 Manifest next update: Fri 18 Sep 2026 03:05:46 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: pnrjhFsHMNJsiqZUJ9gmXobscHehHOKgkILQL3yOLac=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: McXWsXXcIZmHr1+c7MXfi1yOdfqnkuMIhVjsAcxCbA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Sep 11 03:05:46 2026 GMT Not After : Sep 18 03:05:46 2026 GMT Subject: CN=6aa3700b-c043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:ec:92:46:a2:63:d8:eb:0d:e8:42:20:e7: 9c:cf:d5:04:67:7a:93:81:e9:84:f8:76:b6:6f:f0: 35:17:d0:12:50:c1:b1:1b:ea:70:30:0f:98:4d:a5: 54:36:42:3a:54:e0:26:87:71:be:b7:64:95:05:38: 04:53:25:66:4a:51:4a:20:b0:ae:7a:98:49:73:35: 11:cd:8c:27:a2:f9:65:a6:68:81:fb:cc:ef:3d:ef: cf:ef:5a:84:4c:b7:7b:bd:99:59:ec:36:9c:c8:d7: bc:5e:e1:b2:d9:4f:60:ce:7e:a4:94:41:1d:ae:03: cc:d5:bf:6a:db:1c:0f:3b:50:eb:49:2c:7c:9d:a3: ad:7f:f8:29:c7:d1:af:63:d3:79:6d:c4:57:67:07: db:cc:f6:28:12:df:ef:79:bc:f6:eb:de:11:cc:30: d3:c4:ad:be:9a:e8:8c:84:e3:45:0e:94:d9:45:b5: 70:bb:8b:59:c4:52:ec:fa:d8:e8:a5:3d:73:30:6e: a7:e9:37:ef:08:aa:2d:35:78:1b:3c:a7:46:14:06: 9e:9d:44:39:cf:7a:ac:9f:7f:bb:d8:7d:87:cf:93: 79:4c:f3:56:0a:e8:69:35:db:f2:22:51:0d:2a:af: 08:59:f6:d5:10:84:34:71:61:97:0f:1f:fe:c4:6a: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4C:6C:31:41:88:DE:E5:23:7B:0A:6D:8E:2B:7D:0A:57:38:7D:C6 X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:17:c0:96:02:06:f4:49:3d:a5:a8:2f:d9:29:ff:ad:aa:b0: 16:36:5a:fa:a9:b1:59:33:d4:0b:35:f8:63:f5:84:26:46:36: ef:1f:28:89:28:a5:ea:19:9e:9a:35:b4:8b:b6:3a:60:7e:b3: ce:ed:c9:6c:38:b1:1c:1c:06:17:a1:8b:78:58:cd:a0:d9:4e: c8:e6:d9:49:b2:51:0d:23:8e:2b:6d:d2:ac:20:24:fa:de:bb: 08:1c:78:37:b5:8d:10:72:d0:e5:50:8f:ab:bb:4d:3c:bd:aa: 61:5d:e9:db:5b:23:c7:8e:05:71:d7:41:32:36:aa:5a:f6:5f: a0:9a:92:da:a7:1b:88:2f:6b:d0:2f:dd:23:6d:97:0f:d7:71: 24:bf:df:5a:d6:12:c5:27:4c:72:f1:fb:62:14:99:f4:12:59: e0:bc:0f:a1:8f:b1:2d:0a:cf:49:be:89:cd:13:ce:c0:0a:57: 1a:5e:c7:9f:93:77:73:f5:86:1f:51:de:66:57:ba:7e:7c:fd: 07:7d:4b:6d:fe:e9:e5:98:1f:90:4a:59:2d:86:b6:43:34:35: 70:b6:a7:2f:ac:56:89:ec:ac:b0:45:10:55:71:62:1c:60:d8: 93:6a:32:2a:9e:2b:47:57:fa:fb:b5:81:75:14:45:5e:f2:5f: 82:1d:27:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjYwOTExMDMwNTQ2WhcNMjYwOTE4MDMwNTQ2WjAYMRYwFAYD VQQDEw02YWEzNzAwYi1jMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKfskkaiY9jrDehCIOecz9UEZ3qTgemE+Ha2b/A1F9ASUMGxG+pwMA+YTaVU NkI6VOAmh3G+t2SVBTgEUyVmSlFKILCuephJczURzYwnovllpmiB+8zvPe/P71qE TLd7vZlZ7DacyNe8XuGy2U9gzn6klEEdrgPM1b9q2xwPO1DrSSx8naOtf/gpx9Gv Y9N5bcRXZwfbzPYoEt/vebz2694RzDDTxK2+muiMhONFDpTZRbVwu4tZxFLs+tjo pT1zMG6n6TfvCKotNXgbPKdGFAaenUQ5z3qsn3+72H2Hz5N5TPNWCuhpNdvyIlEN Kq8IWfbVEIQ0cWGXDx/+xGoYRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVMbDFB iN7lI3sKbY4rfQpXOH3GMB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFRfAlgIG9Ek9pagv2Sn/raqwFjZa+qmxWTPUCzX4Y/WEJkY27x8oiSil6hme mjW0i7Y6YH6zzu3JbDixHBwGF6GLeFjNoNlOyObZSbJRDSOOK23SrCAk+t67CBx4 N7WNEHLQ5VCPq7tNPL2qYV3p21sjx44FcddBMjaqWvZfoJqS2qcbiC9r0C/dI22X D9dxJL/fWtYSxSdMcvH7YhSZ9BJZ4LwPoY+xLQrPSb6JzRPOwApXGl7Hn5N3c/WG H1HeZle6fnz9B31Lbf7p5ZgfkEpZLYa2QzQ1cLanL6xWieyssEUQVXFiHGDYk2oy Kp4rR1f6+7WBdRRFXvJfgh0nZw== -----END CERTIFICATE-----Generated at Fri Sep 11 14:33:51 2026 by rpki-client