$ rpki-client -vvvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: zG4tKa4XCGTorh4KvCktciKDXBrdLnySAUTpy4uOu40= Subject key identifier: 25:AD:EF:AC:DD:CC:CD:81:27:8C:67:18:85:77:9F:CA:D9:A8:74:BB Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 06E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 06C1 Signing time: Thu 10 Sep 2026 22:18:42 +0000 Manifest this update: Thu 10 Sep 2026 22:18:42 +0000 Manifest next update: Thu 17 Sep 2026 22:18:42 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: JKrFxuqY7+shPX1PFhx00FU5jeVCZnGfG4uPWFdfrk0=) 2: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: WtM7Gf9McV4dyBDihaoF7GIKprC8LiyJNTcZV2E7ygM=) 3: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: XThbuRDJ9AeBHR2f0+N9y3PVKHkkMbkQnJqbi1dA8dk=) 4: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: eA6mWyuVV1KikVqgTq4NzwsvdlA+Lo+7hoRNd7wEZiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1769 (0x6e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Sep 10 22:18:42 2026 GMT Not After : Sep 17 22:18:42 2026 GMT Subject: CN=6aa32cc2-ce1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:2f:cd:bb:a4:7d:67:2b:69:5c:a7:3b:c1: 50:c0:cf:10:93:78:f5:2b:14:a6:51:63:97:d1:1b: 1a:ff:3c:1d:85:5c:00:bd:b6:ae:71:54:b6:e7:d9: ac:8c:63:69:62:97:2f:25:ed:4a:64:29:e4:51:14: 30:b0:a2:1a:fd:1e:ae:fe:85:fa:8d:41:7c:b5:54: 92:23:af:2f:a6:52:2f:48:d0:87:10:93:b1:e9:38: c6:42:d9:c5:4f:c7:99:4b:de:bb:ed:69:a9:90:e0: 29:02:80:6a:cc:5e:04:66:e8:3a:ac:a8:8e:d0:a0: 29:d7:98:75:c2:e8:91:11:99:6f:7d:55:01:24:07: 7c:ff:0b:9a:8e:e5:f4:f4:ab:16:a0:5d:19:18:10: cf:da:dd:4c:4e:e9:eb:1d:8c:14:42:f4:8e:ca:07: 74:62:42:41:54:44:75:b0:3a:94:2e:d8:a4:2f:f6: 59:59:24:f6:2c:ee:a9:f8:34:81:6d:63:fe:9b:29: e8:18:a6:78:20:32:67:9c:b2:18:e6:31:14:63:3c: 8d:ba:aa:06:79:96:10:f6:58:a5:15:9d:1e:9d:0a: d2:80:62:af:7c:50:5d:36:51:39:6c:82:9e:b6:f5: a3:71:42:16:f1:8f:fc:ea:bf:34:6f:aa:64:e1:51: 47:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:EF:AC:DD:CC:CD:81:27:8C:67:18:85:77:9F:CA:D9:A8:74:BB X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ee:51:cc:34:11:43:49:6e:b6:9d:ba:5e:98:78:43:46:08: fd:02:4b:9d:e0:ee:fd:14:08:57:be:ed:db:d4:46:cc:43:7e: 68:4d:c5:a2:dd:10:39:ce:7c:e7:95:31:2e:28:fd:11:50:c0: 18:2f:9b:64:4c:ce:96:68:d6:b7:b5:bd:e6:c9:9f:b0:6d:f8: 0f:1d:b6:4b:da:da:01:e5:08:75:f1:0d:34:a0:c9:89:7c:7c: e9:14:6f:d0:51:32:22:fa:fa:79:b0:b8:b3:7f:40:29:92:f3: bd:6d:82:ad:b6:60:fd:66:95:aa:3e:9b:b5:1d:de:89:00:6a: ba:e2:8e:35:cf:e2:b8:25:cc:75:4a:85:7e:6c:cd:1d:81:eb: 46:36:bc:31:42:51:cc:5e:ba:da:d1:e3:c0:bd:25:dc:52:bb: 95:2a:1b:a5:3e:73:e0:39:d9:f2:94:fd:70:29:64:f1:eb:66: 8d:2c:1c:3d:93:5a:68:a5:a5:84:aa:6f:47:47:c0:58:43:b4: 5d:c1:98:f1:5f:52:3b:23:da:b1:57:43:4c:51:6b:87:66:31: f0:9e:83:fb:07:21:d9:18:73:59:d3:7a:5b:8e:6c:f7:c8:f8: 43:a8:a0:cc:44:e8:37:43:b4:e7:00:d3:e4:04:da:52:0e:7e: ff:76:bd:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjYwOTEwMjIxODQyWhcNMjYwOTE3MjIxODQyWjAYMRYwFAYD VQQDEw02YWEzMmNjMi1jZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPAvzbukfWcraVynO8FQwM8Qk3j1KxSmUWOX0Rsa/zwdhVwAvbaucVS259ms jGNpYpcvJe1KZCnkURQwsKIa/R6u/oX6jUF8tVSSI68vplIvSNCHEJOx6TjGQtnF T8eZS9677WmpkOApAoBqzF4EZug6rKiO0KAp15h1wuiREZlvfVUBJAd8/wuajuX0 9KsWoF0ZGBDP2t1MTunrHYwUQvSOygd0YkJBVER1sDqULtikL/ZZWST2LO6p+DSB bWP+mynoGKZ4IDJnnLIY5jEUYzyNuqoGeZYQ9lilFZ0enQrSgGKvfFBdNlE5bIKe tvWjcUIW8Y/86r80b6pk4VFHhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWt76zd zM2BJ4xnGIV3n8rZqHS7MB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeO5RzDQRQ0lutp26Xph4Q0YI/QJLneDu/RQIV77t29RGzEN+aE3Fot0QOc58 55UxLij9EVDAGC+bZEzOlmjWt7W95smfsG34Dx22S9raAeUIdfENNKDJiXx86RRv 0FEyIvr6ebC4s39AKZLzvW2CrbZg/WaVqj6btR3eiQBquuKONc/iuCXMdUqFfmzN HYHrRja8MUJRzF662tHjwL0l3FK7lSobpT5z4DnZ8pT9cClk8etmjSwcPZNaaKWl hKpvR0fAWEO0XcGY8V9SOyPasVdDTFFrh2Yx8J6D+wch2RhzWdN6W45s98j4Q6ig zEToN0O05wDT5ATaUg5+/3a9Gg== -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:03 2026 by rpki-client