$ rpki-client -vvvf rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft File: 2CVmixrBt_OBXwe82lfnSMSWSpo.mft (raw, json) Hash identifier: veS2aEFsYoWD/UzMtDY5AG99S/HQJ471w4oIVg4WCwQ= Subject key identifier: 0C:96:E1:42:FF:23:FF:3D:31:F6:58:35:7D:5E:EA:F1:5D:7B:74:86 Authority key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A Certificate issuer: /CN=A91756C3/serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft Manifest number: 013B Signing time: Sun 27 Sep 2026 06:02:40 +0000 Manifest this update: Sun 27 Sep 2026 06:02:40 +0000 Manifest next update: Sun 04 Oct 2026 06:02:40 +0000 Files and hashes: 1: 2CVmixrBt_OBXwe82lfnSMSWSpo.crl (hash: 5c22yQ8lLGMhRglCo0ezJ63P1B+y95fSLiP6W9mSpCM=) 2: 00078764E06811EF8716401DC4F9AE02.roa (hash: JAiUHomtiUqiqYTLwAToU1Zg3aNGAOGf/55bKHeBYC4=) 3: BPfmVXHNj0cLBBvHN68-D9Sw9jo.asa (hash: jSYUP8eA41eKB7H8u3DmMSb87n/WwOnrfSBvQ1R3M3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756C3, serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Validity Not Before: Sep 27 06:02:40 2026 GMT Not After : Oct 4 06:02:40 2026 GMT Subject: CN=6ab8b180-ff11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:8b:49:92:9d:70:ab:09:0c:92:5a:32:16: 3e:41:c0:50:9b:32:fc:2c:b0:42:b7:f4:0c:b9:84: d9:59:b3:cd:9b:c9:1c:64:bf:7a:61:20:01:ee:f1: 2a:98:da:23:12:9f:e5:af:8d:7c:1c:7d:87:9f:52: 67:15:68:13:2d:30:12:89:c9:f4:d3:0b:9e:19:bd: 6e:f9:6d:66:74:d0:86:f5:b6:54:15:19:92:23:e7: e2:70:a7:a8:b5:96:ac:b3:5a:e9:d4:77:0a:5d:8d: f1:5b:53:e1:e0:b0:22:d4:ff:f4:4d:d2:23:57:3f: 6f:ab:90:82:64:23:a8:2e:0d:56:5b:6b:6e:ce:65: 51:be:3b:10:26:bb:44:b9:77:9a:69:1e:14:5c:a8: 23:e3:d7:f8:7c:06:e7:2c:62:b7:33:91:a7:f7:5a: 54:f7:5b:b9:f8:46:81:fd:8e:e4:84:a0:fe:8f:d9: ea:41:87:c2:f8:c6:bb:81:8e:bb:31:bf:2a:49:ba: 7f:f6:b5:9e:20:b7:7f:07:55:0b:71:3e:e2:09:03: fa:5f:19:3e:8b:46:dc:dd:65:fe:81:d1:2e:48:79: 94:6a:5a:f6:3d:90:aa:f4:20:4e:95:6f:f7:6b:ab: e6:f7:16:2c:95:9f:9b:9c:15:b0:c1:12:b7:be:8f: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:96:E1:42:FF:23:FF:3D:31:F6:58:35:7D:5E:EA:F1:5D:7B:74:86 X509v3 Authority Key Identifier: keyid:D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c6:3a:2b:84:9b:91:79:31:b8:38:9c:c0:66:77:5c:50:b2: c5:bd:66:96:96:5e:df:0c:dd:91:7a:de:d3:95:fd:16:64:a0: 4a:67:c4:8c:82:07:e2:3e:15:0e:90:63:07:7a:b4:39:79:68: 9a:52:4e:b3:cb:3b:94:6e:49:c5:1b:6e:70:3d:a7:e3:a0:1d: 9d:8b:ce:b5:d6:07:4a:31:b3:c1:23:3e:b7:ce:3b:5c:38:a0: 27:a5:fa:37:70:8d:3e:63:da:be:0c:34:a4:cc:5f:ad:9d:58: 33:46:1c:83:c1:ea:cd:c3:a9:4b:81:ec:60:4f:90:53:96:01: 9c:e7:4a:02:9c:52:bb:28:47:5c:cb:ed:8a:b7:a8:84:8f:75: 89:92:fc:98:d2:6d:98:0b:fa:ec:a2:43:b4:21:1f:8b:c9:16: 51:2b:fb:b8:69:cb:b6:27:ee:f6:77:e2:47:e0:5b:99:21:2f: 2e:ae:0b:4d:fa:da:2e:24:10:49:ee:67:34:e5:ed:2b:32:78: 1c:25:8c:03:f7:3d:12:d4:5c:1d:96:0d:70:cd:43:fa:0b:13: bf:3a:5b:6d:99:11:3e:fb:1b:5b:71:82:82:78:d4:0c:9a:b5: 65:7f:b2:c5:01:84:3a:42:d6:37:85:4e:b5:9a:4d:59:d2:e0: e0:97:32:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QzMxMTAvBgNVBAUTKEQ4MjU2NjhCMUFDMUI3RjM4MTVGMDdCQ0RBNTdFNzQ4 QzQ5NjRBOUEwHhcNMjYwOTI3MDYwMjQwWhcNMjYxMDA0MDYwMjQwWjAYMRYwFAYD VQQDEw02YWI4YjE4MC1mZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybuLSZKdcKsJDJJaMhY+QcBQmzL8LLBCt/QMuYTZWbPNm8kcZL96YSAB7vEq mNojEp/lr418HH2Hn1JnFWgTLTASicn00wueGb1u+W1mdNCG9bZUFRmSI+ficKeo tZass1rp1HcKXY3xW1Ph4LAi1P/0TdIjVz9vq5CCZCOoLg1WW2tuzmVRvjsQJrtE uXeaaR4UXKgj49f4fAbnLGK3M5Gn91pU91u5+EaB/Y7khKD+j9nqQYfC+Ma7gY67 Mb8qSbp/9rWeILd/B1ULcT7iCQP6Xxk+i0bc3WX+gdEuSHmUalr2PZCq9CBOlW/3 a6vm9xYslZ+bnBWwwRK3vo/LiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAyW4UL/ I/89MfZYNX1e6vFde3SGMB8GA1UdIwQYMBaAFNglZosawbfzgV8HvNpX50jElkqa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZDMy81QkY1MTkyQUUw NjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhyQnRfT0JYd2U4MmxmblNNU1dT cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDVm1peHJCdF9PQlh3ZTgybGZuU01TV1Nwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTZDMy81QkY1MTkyQUUwNjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhyQnRf T0JYd2U4MmxmblNNU1dTcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjcY6K4SbkXkxuDicwGZ3XFCyxb1mlpZe3wzdkXre05X9FmSgSmfEjIIH4j4V DpBjB3q0OXlomlJOs8s7lG5JxRtucD2n46AdnYvOtdYHSjGzwSM+t847XDigJ6X6 N3CNPmPavgw0pMxfrZ1YM0Ycg8HqzcOpS4HsYE+QU5YBnOdKApxSuyhHXMvtireo hI91iZL8mNJtmAv67KJDtCEfi8kWUSv7uGnLtifu9nfiR+BbmSEvLq4LTfraLiQQ Se5nNOXtKzJ4HCWMA/c9EtRcHZYNcM1D+gsTvzpbbZkRPvsbW3GCgnjUDJq1ZX+y xQGEOkLWN4VOtZpNWdLg4Jcy/Q== -----END CERTIFICATE-----Generated at Mon Sep 28 11:13:46 2026 by rpki-client