$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft File: 2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft (raw, json) Hash identifier: uAHhVRvbqgceEd8lS3Hi+8Uk5Z+2GVn/ilC964yj1WA= Subject key identifier: 7D:BF:16:B6:D6:B1:CE:48:25:0B:D1:E1:0A:E3:DE:C0:4D:DA:67:45 Authority key identifier: D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE Certificate issuer: /CN=A91689B9/serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft Manifest number: 3C Signing time: Tue 27 Oct 2026 08:48:58 +0000 Manifest this update: Tue 27 Oct 2026 08:48:58 +0000 Manifest next update: Tue 03 Nov 2026 08:48:58 +0000 Files and hashes: 1: 2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl (hash: 253UVfEqISGifAfFLB2DlPgjPOj72Hmdhj7+gQgG5gA=) 2: 9D1E103C79BD11F1A56111AD5AA30FBC.roa (hash: v5LCMSJ7unsotsj1CUAFikFHoJMXhj0hIvgSsrnsLqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B9, serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE Validity Not Before: Oct 27 08:48:58 2026 GMT Not After : Nov 3 08:48:58 2026 GMT Subject: CN=6ae0657a-3aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:33:db:ae:e4:4a:11:01:7c:71:ef:c4:49: 58:10:1a:4e:f0:5e:36:d2:d1:1e:c0:fa:f1:06:28: 21:b1:b1:41:bc:c6:ea:cb:55:81:df:07:9c:2c:49: 27:e5:46:7c:25:3d:2b:a3:e3:5e:f0:a4:6f:b0:99: 93:0f:32:e7:1d:b2:c4:f4:bb:a3:37:2e:ec:b2:5e: 72:d8:7f:b7:c6:bc:34:d1:c6:05:a8:67:a0:3f:52: e8:d7:83:23:55:a1:15:97:c9:22:a8:e6:1a:a8:52: 0b:57:be:e3:f0:28:22:3b:ab:46:71:66:79:f8:06: d8:fb:70:7d:3b:32:fa:82:01:dc:24:68:75:98:08: 5d:7f:31:a9:2f:8e:ba:23:69:74:cf:3e:7d:22:3a: 6e:94:8f:e5:f2:41:1c:2a:6f:41:90:46:b9:4a:95: 3b:d8:df:5d:23:93:f4:e6:e1:f7:c9:e5:4b:c4:47: 36:a6:1c:08:bb:23:b8:d7:cc:54:6d:bc:cc:a2:1a: ec:1a:a6:68:3f:88:c7:74:bc:75:8f:88:c7:02:40: b1:8c:c2:a6:38:23:ec:06:4a:b9:3b:20:65:35:e3: 7e:6c:d0:c1:77:e1:6a:6a:23:54:a5:4d:b1:33:b0: 08:58:d2:4c:c0:ce:3b:ac:7c:e5:bb:1c:32:25:96: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BF:16:B6:D6:B1:CE:48:25:0B:D1:E1:0A:E3:DE:C0:4D:DA:67:45 X509v3 Authority Key Identifier: keyid:D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:13:a7:37:24:ad:ac:94:59:16:5b:46:5c:57:c4:a5:94:81: d8:14:9f:a2:9d:d4:e0:0a:92:18:49:55:bb:d6:c3:04:0d:e7: 40:a9:d7:04:50:67:62:ff:6a:90:b0:8d:5d:e3:9f:a6:33:8c: 66:50:dd:d7:51:ca:5d:73:82:5a:6c:e1:a8:3c:cd:00:15:a4: 47:eb:7b:d3:b1:f6:bc:33:99:cf:96:3a:bb:b2:62:f2:93:da: 6b:05:48:3b:a9:5a:87:bb:1f:e4:0d:40:80:be:a2:1a:99:8a: 68:22:98:57:51:3a:8d:b1:0f:3f:40:85:4d:f9:a2:bc:4b:da: 18:1e:7c:ba:8d:4c:3f:51:2c:d8:aa:cb:41:4d:e8:7a:46:b7: 89:3a:af:b3:eb:b3:64:06:78:10:7e:2c:78:33:0c:b2:bd:f1: 8e:26:d9:93:54:ca:9e:df:b3:df:1f:0a:f3:80:ee:dd:9c:63: 81:1f:d6:e0:be:8d:34:59:75:3b:00:c4:6f:8e:19:a7:42:5c: 42:c4:cb:3c:dd:67:3f:7d:4a:a4:1b:26:01:fa:2b:7d:62:22: 7d:40:95:e6:f2:d1:09:a0:21:d3:73:40:c9:e6:37:9b:25:02: cb:f4:8f:0d:52:5a:18:5a:45:74:45:1b:2f:01:c9:86:ec:0f: 71:c2:20:7e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlCOTExMC8GA1UEBRMoRDg2OURCRUEyNjMwNjQzQ0Q2RDFENEI2MzhENDZFNTM0 RDNGNkVBRTAeFw0yNjEwMjcwODQ4NThaFw0yNjExMDMwODQ4NThaMBgxFjAUBgNV BAMTDTZhZTA2NTdhLTNhYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBTTPbruRKEQF8ce/ESVgQGk7wXjbS0R7A+vEGKCGxsUG8xurLVYHfB5wsSSfl RnwlPSuj417wpG+wmZMPMucdssT0u6M3LuyyXnLYf7fGvDTRxgWoZ6A/UujXgyNV oRWXySKo5hqoUgtXvuPwKCI7q0ZxZnn4Btj7cH07MvqCAdwkaHWYCF1/Makvjroj aXTPPn0iOm6Uj+XyQRwqb0GQRrlKlTvY310jk/Tm4ffJ5UvERzamHAi7I7jXzFRt vMyiGuwapmg/iMd0vHWPiMcCQLGMwqY4I+wGSrk7IGU1435s0MF34WpqI1SlTbEz sAhY0kzAzjusfOW7HDIllmRNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfb8Wttax zkglC9HhCuPewE3aZ0UwHwYDVR0jBBgwFoAU2Gnb6iYwZDzW0dS2ONRuU00/bq4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzAwQ0U1QzQwNzky RDExRjFCQzg4OTA5MDZGQTMwRkJDLzJHbmI2aVl3WkR6VzBkUzJPTlJ1VTAwX2Jx NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkduYjZpWXdaRHpXMGRTMk9OUnVVMDBfYnE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUI5LzAwQ0U1QzQwNzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzJHbmI2aVl3WkR6 VzBkUzJPTlJ1VTAwX2JxNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDE6c3JK2slFkWW0ZcV8SllIHYFJ+indTgCpIYSVW71sMEDedAqdcEUGdi/2qQ sI1d45+mM4xmUN3XUcpdc4JabOGoPM0AFaRH63vTsfa8M5nPljq7smLyk9prBUg7 qVqHux/kDUCAvqIamYpoIphXUTqNsQ8/QIVN+aK8S9oYHny6jUw/USzYqstBTeh6 RreJOq+z67NkBngQfix4MwyyvfGOJtmTVMqe37PfHwrzgO7dnGOBH9bgvo00WXU7 AMRvjhmnQlxCxMs83Wc/fUqkGyYB+it9YiJ9QJXm8tEJoCHTc0DJ5jebJQLL9I8N UloYWkV0RRsvAcmG7A9xwiB+ -----END CERTIFICATE-----Generated at Tue Oct 27 16:39:12 2026 by rpki-client