$ rpki-client -vvvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json) Hash identifier: g3biAfbVSo21NASI5VHtSLi4OcAzCMDRBXqLLl5yPDY= Subject key identifier: BA:B3:3E:AC:BF:30:0D:6B:85:B4:09:DB:EE:53:A1:7D:BF:F6:2D:66 Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft Manifest number: 0291 Signing time: Wed 07 Oct 2026 02:13:21 +0000 Manifest this update: Wed 07 Oct 2026 02:13:21 +0000 Manifest next update: Wed 14 Oct 2026 02:13:21 +0000 Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: XNVhb0vYqj8/752j8XD6Wq9JGIt0BSam1kKpE1svU4o=) 2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: oTWb+bgInuA40lVE9MU0fw0Ps1nvcZEIkiY5rAEAf1M=) 3: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: didvJhI7x6rWco2OGYAbxDlObbw/3Pq6tRwgusbYWYA=) 4: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: uq6cUAp8aWstgVcfNAAsf2DmlkVgoELMDbHxDJXHEOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Validity Not Before: Oct 7 02:13:21 2026 GMT Not After : Oct 14 02:13:21 2026 GMT Subject: CN=6ac5aac1-ed56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:86:38:2e:5b:e1:e3:0a:af:d1:7b:2c:d6: ed:49:7e:e8:2b:f8:42:bc:24:d5:4e:9b:76:b2:54: 25:37:c5:22:14:27:7c:05:51:28:cf:d9:e3:2c:2e: 8a:a2:b5:da:2c:65:9c:f5:55:51:e6:d8:c3:d7:cd: f1:ce:05:22:0d:90:8a:94:35:1c:39:f2:47:04:92: e2:dd:b7:2a:14:1b:5b:00:d0:a9:c7:99:75:b3:a3: 5c:de:d4:a3:f4:df:db:eb:e3:c5:e9:0b:97:76:39: c3:68:b5:42:32:3c:6a:5c:5d:a9:df:ff:94:f2:81: 0a:5f:63:ba:e1:fe:f7:61:e3:ec:43:e3:7d:ae:80: a5:16:f1:2b:d6:7a:82:63:4c:00:58:fd:b4:85:7c: c6:4e:62:d8:b9:20:d7:2f:75:88:37:3b:23:50:14: 65:2b:58:22:74:47:a6:45:c0:3a:f8:5a:c4:45:6a: 18:ba:56:ab:24:c0:99:43:fc:29:78:d3:86:b9:f2: c4:1c:a7:a9:ef:38:a8:db:7d:da:96:62:29:2f:59: c5:24:de:dc:f5:52:b9:21:b4:5c:5e:3e:60:9a:cc: b6:3c:ea:3b:01:31:28:c8:77:4b:3a:d9:2f:cb:45: 1f:41:68:53:57:96:20:ae:81:00:fe:a0:6d:4a:3d: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B3:3E:AC:BF:30:0D:6B:85:B4:09:DB:EE:53:A1:7D:BF:F6:2D:66 X509v3 Authority Key Identifier: keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:29:55:a1:8a:aa:a3:9a:7b:c5:2d:da:4f:18:1f:e9:96:d0: 63:ae:f4:2b:8b:fa:82:d6:3a:37:8a:56:3c:25:3c:84:86:71: 44:0c:f0:08:65:60:78:06:7f:78:01:5a:3b:89:cd:2a:87:ac: e2:53:2a:28:e2:13:db:3b:ee:c1:25:8c:f8:79:52:33:ad:c2: 6a:06:e9:0c:81:13:b4:05:b4:a9:88:41:98:33:28:54:0e:80: ad:41:a4:e5:8a:22:e6:08:4b:54:da:36:64:c0:dd:96:82:24: cc:6a:c8:9a:18:c8:a7:d6:15:db:ab:61:0c:47:40:3e:b7:40: 03:4f:02:20:fb:de:73:63:1e:be:38:56:54:e4:74:f7:e5:a5: 9b:05:eb:e2:e8:1a:58:bc:4c:23:dc:22:ca:e6:e1:a8:36:02: 4a:97:25:47:e0:c6:38:69:17:a9:8e:ba:bd:23:bb:73:91:40: c3:3e:92:0f:15:85:53:35:46:4e:f5:45:81:c5:18:d5:d7:1b: 02:e3:c0:b5:bc:0d:cc:f3:cd:b1:b5:bf:05:41:e5:c4:d0:40: 61:ff:7c:cd:76:5e:9c:66:0e:ff:fb:86:62:99:c3:7a:1c:fb: c4:26:cd:45:70:c9:80:68:da:e8:0e:38:14:77:4b:53:ad:4d: 98:41:32:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0 NkFCN0NCOUMwHhcNMjYxMDA3MDIxMzIxWhcNMjYxMDE0MDIxMzIxWjAYMRYwFAYD VQQDEw02YWM1YWFjMS1lZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EKGOC5b4eMKr9F7LNbtSX7oK/hCvCTVTpt2slQlN8UiFCd8BVEoz9njLC6K orXaLGWc9VVR5tjD183xzgUiDZCKlDUcOfJHBJLi3bcqFBtbANCpx5l1s6Nc3tSj 9N/b6+PF6QuXdjnDaLVCMjxqXF2p3/+U8oEKX2O64f73YePsQ+N9roClFvEr1nqC Y0wAWP20hXzGTmLYuSDXL3WINzsjUBRlK1gidEemRcA6+FrERWoYularJMCZQ/wp eNOGufLEHKep7zio233almIpL1nFJN7c9VK5IbRcXj5gmsy2POo7ATEoyHdLOtkv y0UfQWhTV5YgroEA/qBtSj2hiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqzPqy/ MA1rhbQJ2+5ToX2/9i1mMB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY0Ri8xRTA4NTRBRUREN0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2 MVFnb0V2cDlCM0ZHcTN5NXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWylVoYqqo5p7xS3aTxgf6ZbQY670K4v6gtY6N4pWPCU8hIZxRAzwCGVgeAZ/ eAFaO4nNKoes4lMqKOIT2zvuwSWM+HlSM63CagbpDIETtAW0qYhBmDMoVA6ArUGk 5Yoi5ghLVNo2ZMDdloIkzGrImhjIp9YV26thDEdAPrdAA08CIPvec2MevjhWVOR0 9+WlmwXr4ugaWLxMI9wiyubhqDYCSpclR+DGOGkXqY66vSO7c5FAwz6SDxWFUzVG TvVFgcUY1dcbAuPAtbwNzPPNsbW/BUHlxNBAYf98zXZenGYO//uGYpnDehz7xCbN RXDJgGja6A44FHdLU61NmEEyQg== -----END CERTIFICATE-----Generated at Wed Oct 7 13:14:46 2026 by rpki-client