$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: 57gzGpU8EoT+MVyGjaCyZt1Prce2ovFSryvyNTCE4Vs= Subject key identifier: 8A:E2:16:69:B9:80:D6:FF:88:0D:E1:6D:52:66:A9:4A:91:A1:2B:7F Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2B1F Signing time: Mon 26 Oct 2026 15:33:21 +0000 Manifest this update: Mon 26 Oct 2026 15:33:21 +0000 Manifest next update: Mon 02 Nov 2026 15:33:21 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: 0JUedf81SX34E5SnRnVX1x5SLvNYVhwI5T5xl/UzlGM=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: mi5Z8QiyFyePXfXFb5bmVuyq1rksFrDBMyBn1iuDnTA=) 3: 3701B6ECAB3511F18DD665A26C11F970.roa (hash: AtFyjSzJpmwJS5++D9ZwxOebly4i8uSwVic2GM31Rrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11090 (0x2b52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Oct 26 15:33:21 2026 GMT Not After : Nov 2 15:33:21 2026 GMT Subject: CN=6adf72c1-c932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:5c:fd:a4:8a:de:7b:03:81:19:75:3d:a3: cd:d4:0e:a7:2b:1b:d4:6b:7d:45:94:f1:ac:5a:74: b3:10:2a:98:1e:6e:d2:ee:e4:9e:57:46:7a:15:43: 94:31:73:7d:d0:13:5c:d1:7e:ac:e8:e5:9d:c0:75: 44:c2:34:40:15:c7:15:67:f1:7c:eb:bd:90:56:55: 0c:ed:f3:ba:59:f9:1d:c5:b2:68:d3:e2:05:f4:e4: 25:26:85:08:83:f5:c9:ad:e4:6f:a3:49:19:d9:3c: 09:2d:8a:1c:29:e0:7d:53:7a:90:8e:e2:7b:ec:fe: 82:49:12:7f:47:18:c4:01:ea:10:21:27:37:9c:cf: 1c:04:76:94:49:13:a6:a1:32:ba:42:c4:f9:0a:b8: 1a:3d:ad:d2:da:f8:89:82:93:c1:d3:1f:0a:58:cc: 29:f4:d5:9a:33:bd:0d:15:d2:42:fe:1a:a9:48:d9: 2f:fa:e8:99:c8:18:8b:51:83:ee:64:9a:39:fa:c3: 15:10:5d:8e:e1:32:63:90:7f:f1:db:b7:16:53:c1: 85:8e:dd:5c:28:bf:47:8c:a0:f1:30:40:6d:ef:8e: 29:df:ff:0f:f2:e9:dd:49:ff:09:22:29:e2:e9:c3: 8a:f3:b0:b5:e9:89:61:01:fa:2e:ad:01:ca:00:dc: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E2:16:69:B9:80:D6:FF:88:0D:E1:6D:52:66:A9:4A:91:A1:2B:7F X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:19:73:49:88:bb:f3:7a:d6:30:22:62:22:e0:6e:0d:01:ba: 17:0b:0c:bd:a9:61:9b:52:55:a8:d3:87:77:03:14:1e:26:5f: 9c:55:fd:be:1f:14:a2:bd:bd:92:2f:f1:98:17:6d:ad:1b:92: 03:31:b5:ad:9a:7f:52:9c:7e:8c:3c:c3:20:6f:ce:67:92:86: d7:2e:fa:08:44:d3:7c:72:51:6d:60:21:54:15:e7:82:4c:99: 14:99:16:ab:2b:24:c0:19:52:9c:5b:5d:01:c9:8a:1c:91:7f: a9:11:66:b5:e4:9a:af:f0:7e:4f:4d:c9:db:b2:1a:01:54:22: 08:12:6e:11:e0:7d:08:bd:3c:63:24:66:df:d3:7e:00:b0:ec: 3a:91:c1:1e:e8:37:f6:c4:f0:76:87:7d:4e:a6:9e:b5:61:dc: 49:8d:13:ba:76:25:7f:24:58:72:9e:b2:37:0e:6f:e4:6e:eb: 0f:2e:89:1e:b8:54:4f:08:37:25:dd:0a:08:36:29:79:fb:22: 72:ae:c6:1e:76:94:29:c1:8b:17:c0:40:80:4c:05:2e:69:83: 93:fa:84:22:92:c0:6b:d6:73:49:6e:81:65:f9:d2:8a:ec:f4: 44:26:4f:b6:b6:8c:6b:e1:a5:d2:60:21:71:7e:63:b4:52:87: f8:ad:8c:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICK1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjYxMDI2MTUzMzIxWhcNMjYxMTAyMTUzMzIxWjAYMRYwFAYD VQQDEw02YWRmNzJjMS1jOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrhc/aSK3nsDgRl1PaPN1A6nKxvUa31FlPGsWnSzECqYHm7S7uSeV0Z6FUOU MXN90BNc0X6s6OWdwHVEwjRAFccVZ/F8672QVlUM7fO6WfkdxbJo0+IF9OQlJoUI g/XJreRvo0kZ2TwJLYocKeB9U3qQjuJ77P6CSRJ/RxjEAeoQISc3nM8cBHaUSROm oTK6QsT5CrgaPa3S2viJgpPB0x8KWMwp9NWaM70NFdJC/hqpSNkv+uiZyBiLUYPu ZJo5+sMVEF2O4TJjkH/x27cWU8GFjt1cKL9HjKDxMEBt744p3/8P8undSf8JIini 6cOK87C16YlhAfourQHKANxPNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIriFmm5 gNb/iA3hbVJmqUqRoSt/MB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkxlzSYi783rWMCJiIuBuDQG6FwsMvalhm1JVqNOHdwMUHiZfnFX9vh8Uor29 ki/xmBdtrRuSAzG1rZp/Upx+jDzDIG/OZ5KG1y76CETTfHJRbWAhVBXngkyZFJkW qyskwBlSnFtdAcmKHJF/qRFmteSar/B+T03J27IaAVQiCBJuEeB9CL08YyRm39N+ ALDsOpHBHug39sTwdod9TqaetWHcSY0TunYlfyRYcp6yNw5v5G7rDy6JHrhUTwg3 Jd0KCDYpefsicq7GHnaUKcGLF8BAgEwFLmmDk/qEIpLAa9ZzSW6BZfnSiuz0RCZP traMa+Gl0mAhcX5jtFKH+K2MaA== -----END CERTIFICATE-----Generated at Wed Oct 28 10:32:30 2026 by rpki-client