$ rpki-client -vvvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft File: 2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json) Hash identifier: g6Mzs8CIHwtciKGXgyS2n+8rnerT54bE7nj5B+PJbY8= Subject key identifier: D1:5E:4A:4E:0A:C5:C2:74:51:7F:67:91:33:6B:27:23:0E:C0:8F:D3 Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft Manifest number: B3 Signing time: Tue 27 Oct 2026 07:25:43 +0000 Manifest this update: Tue 27 Oct 2026 07:25:43 +0000 Manifest next update: Tue 03 Nov 2026 07:25:43 +0000 Files and hashes: 1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: Y5KH9QwV2z3parosg4AO4g1oFC7f7SK9cOVBhfJwfus=) 2: 46BCC40E4F7E11F190CC27DCCD833773.roa (hash: Nghl/gGf3uzD6ZNyf47Xvx/I/pPxvMZUhYSQpT2Rhp8=) 3: 534E797A4F7811F1AC63D401CC833773.roa (hash: dAbQc+dld6yEP+cMR+R2W2FXFJfIm0ApZqmWogVGSbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 07:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Validity Not Before: Oct 27 07:25:43 2026 GMT Not After : Nov 3 07:25:43 2026 GMT Subject: CN=6ae051f7-c672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:df:7e:97:62:86:3d:24:26:05:d4:76:36: a6:81:ea:22:aa:9a:f2:88:af:83:27:37:4e:d1:6e: 6e:8d:1d:ac:d9:45:7f:f5:2d:25:fa:4f:5e:44:9e: 56:7f:c7:19:16:d2:b9:41:b5:c7:6e:1e:b4:31:79: 9e:9e:a0:8a:37:07:0a:eb:7c:ad:15:d4:9a:cc:1d: e2:59:57:18:12:e8:35:85:db:4f:44:b2:21:73:bf: ca:23:26:15:2e:e1:fb:20:d7:39:d4:3e:21:a1:b9: 97:6f:0c:5c:33:d4:2e:98:ba:97:7b:25:e8:45:0b: c8:25:37:af:57:5d:6d:58:fc:28:21:ff:ef:12:56: 5a:cf:cf:ad:c2:c5:b4:ae:63:96:ea:6a:26:a9:8e: ed:1f:fa:08:4d:a8:98:e7:38:20:aa:52:da:d2:8a: 48:b9:9a:a0:65:de:5f:57:c4:f1:ea:af:2b:c9:0e: 9f:d7:67:0d:0b:e2:40:f8:f5:57:1e:34:32:36:4a: c9:8a:a2:a7:4c:22:b4:fa:dd:68:5e:61:26:9e:46: 7a:27:1b:c4:d3:a2:6f:d0:3c:ed:36:57:35:a1:13: 15:16:30:59:e1:70:8e:f5:49:10:71:29:ec:a7:9b: 33:69:3e:33:49:f3:77:bd:b0:99:03:0c:ce:67:8e: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5E:4A:4E:0A:C5:C2:74:51:7F:67:91:33:6B:27:23:0E:C0:8F:D3 X509v3 Authority Key Identifier: keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:64:96:0e:4b:a3:d3:10:06:d3:28:67:6d:0d:95:ec:3c:55: 39:68:97:22:4e:32:2d:2e:cd:9f:f8:ec:9c:4d:7b:be:67:a8: 43:9e:a5:f1:ef:dd:0c:80:2b:e4:52:60:fd:49:20:12:af:0a: 05:0d:ee:de:ef:84:38:7f:04:fb:52:76:2d:7c:77:71:d8:be: 17:2b:70:81:13:05:ea:4c:c0:12:98:b3:59:78:06:0f:57:e8: 64:12:ed:ff:c2:92:59:68:50:e8:0c:68:46:5c:ff:fc:cf:c5: c2:43:cc:5a:52:cc:81:00:44:e7:25:9c:22:89:08:90:1e:e7: 56:4f:01:06:72:0d:78:50:02:47:fb:05:0b:14:d8:1f:64:c4: 18:48:89:03:97:54:91:0d:a1:df:04:1f:23:df:6b:2c:f3:44: 01:ff:9c:f3:2e:d7:4d:b1:43:40:a3:28:1a:84:92:a8:a5:40: b3:4b:b6:78:d6:27:18:24:84:26:eb:a0:ea:0f:52:47:2b:0d: bd:c0:9c:8c:a8:4f:3e:9e:41:37:32:67:60:25:5f:b1:55:b3: 5b:82:e7:ba:09:d3:63:98:40:d8:b4:8f:5d:31:e6:a8:cb:f5: 69:a4:39:bd:b5:30:7d:ac:67:ec:98:b2:e3:e2:db:e5:08:07: 68:eb:f3:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3RTQxMTAvBgNVBAUTKEQ5MzVFQ0Y3OTkxMzFCRUMyNDM4REE5REU4MkI2ODU4 OTYzQzcwNUMwHhcNMjYxMDI3MDcyNTQzWhcNMjYxMTAzMDcyNTQzWjAYMRYwFAYD VQQDEw02YWUwNTFmNy1jNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrjffpdihj0kJgXUdjamgeoiqpryiK+DJzdO0W5ujR2s2UV/9S0l+k9eRJ5W f8cZFtK5QbXHbh60MXmenqCKNwcK63ytFdSazB3iWVcYEug1hdtPRLIhc7/KIyYV LuH7INc51D4hobmXbwxcM9QumLqXeyXoRQvIJTevV11tWPwoIf/vElZaz8+twsW0 rmOW6momqY7tH/oITaiY5zggqlLa0opIuZqgZd5fV8Tx6q8ryQ6f12cNC+JA+PVX HjQyNkrJiqKnTCK0+t1oXmEmnkZ6JxvE06Jv0DztNlc1oRMVFjBZ4XCO9UkQcSns p5szaT4zSfN3vbCZAwzOZ47WeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFeSk4K xcJ0UX9nkTNrJyMOwI/TMB8GA1UdIwQYMBaAFNk17PeZExvsJDjanegraFiWPHBc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFNC8wMjMyRTU0OENC NzExMUYwQTVBREVEMjJDNEY5QUUwMi8yVFhzOTVrVEctd2tPTnFkNkN0b1dKWThj RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDdFNC8wMjMyRTU0OENCNzExMUYwQTVBREVEMjJDNEY5QUUwMi8yVFhzOTVrVEct d2tPTnFkNkN0b1dKWThjRncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkWSWDkuj0xAG0yhnbQ2V7DxVOWiXIk4yLS7Nn/jsnE17vmeoQ56l8e/dDIAr 5FJg/UkgEq8KBQ3u3u+EOH8E+1J2LXx3cdi+FytwgRMF6kzAEpizWXgGD1foZBLt /8KSWWhQ6AxoRlz//M/FwkPMWlLMgQBE5yWcIokIkB7nVk8BBnINeFACR/sFCxTY H2TEGEiJA5dUkQ2h3wQfI99rLPNEAf+c8y7XTbFDQKMoGoSSqKVAs0u2eNYnGCSE Juug6g9SRysNvcCcjKhPPp5BNzJnYCVfsVWzW4LnugnTY5hA2LSPXTHmqMv1aaQ5 vbUwfaxn7Jiy4+Lb5QgHaOvzCQ== -----END CERTIFICATE-----Generated at Wed Oct 28 04:42:49 2026 by rpki-client