$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: Q/bDjcWqSip0LcQP4r02MB25CIBGpUCJO07abJFqCmc= Subject key identifier: 8A:2B:9A:DD:54:52:D5:AA:76:A7:43:7E:D4:48:61:D7:89:26:F6:FA Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0EFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0EE2 Signing time: Fri 04 Sep 2026 17:38:03 +0000 Manifest this update: Fri 04 Sep 2026 17:38:02 +0000 Manifest next update: Fri 11 Sep 2026 17:38:02 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: 99LzSMIKcI1kV3tx1v9NKWD26u3mzBwNfWcTwXfFAlY=) 2: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 8cuyoSN28q4uL8xy1DF6fDKydmWDLPM+OObCbWczh0k=) 3: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: otCvD2+70hExeG7UwhAKqvYl8H+cUijlEBEY7BdlZms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3839 (0xeff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Sep 4 17:38:02 2026 GMT Not After : Sep 11 17:38:02 2026 GMT Subject: CN=6a9b01fb-98a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:48:55:52:b4:7e:0f:e0:14:3b:7c:23:23:3a: 79:9c:5b:c9:d1:95:85:43:d5:b5:79:6d:a8:24:27: 7b:79:31:6f:b6:4e:ac:20:02:de:ae:41:bd:8e:70: 6f:50:1f:f7:7a:8e:57:13:c7:98:a1:dd:ca:b2:cf: f2:7e:5b:9d:3f:4d:78:00:cc:31:a8:2d:b9:da:4e: c6:e8:2e:17:a9:a8:df:6f:6b:8f:08:f5:e0:77:b2: d4:ce:e2:ba:f2:df:24:ec:f3:70:3e:f2:9b:02:4d: ba:9f:a3:5d:f6:2a:d6:27:bb:8e:a0:b0:66:cf:5e: e1:02:12:b5:ce:7b:8f:14:46:d8:0a:a5:e2:ad:81: 53:7b:02:7d:2b:e6:d7:dd:8b:08:7d:73:76:36:f3: 78:58:c4:3f:fd:24:60:03:df:37:f2:40:e6:1a:04: 6a:37:ec:6c:73:26:c0:c0:58:0a:82:96:09:e3:fb: 79:6a:c7:66:85:b2:e8:3b:b8:39:60:4a:53:68:a3: bf:0a:42:dc:a4:a4:6c:cf:4e:52:5f:93:67:81:f9: b1:3e:ad:3b:e1:a9:3c:3d:40:3c:9f:17:14:7a:70: f7:ea:1a:11:85:10:0b:01:6c:e6:e2:ff:4b:fb:60: 5e:55:8e:a1:dd:b6:a6:bf:60:8f:83:9c:6c:2f:c5: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2B:9A:DD:54:52:D5:AA:76:A7:43:7E:D4:48:61:D7:89:26:F6:FA X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:08:9c:9e:e7:1d:f9:cf:51:a2:69:14:94:8a:6d:8a:fc:85: 53:86:27:cd:b4:40:1c:a9:92:1e:57:2a:84:c6:5b:15:26:bb: b5:13:1c:e5:f8:b6:30:46:e2:43:ff:92:79:5a:5d:10:7a:dc: 2f:56:2c:2b:b6:c7:02:38:81:83:dd:08:05:fb:80:a6:7c:43: 08:9a:bb:9c:aa:8e:41:cd:fe:67:d9:62:56:2e:2d:fb:7b:d8: bc:b7:46:38:3e:59:96:9d:ad:09:b1:dc:f0:5b:3f:e2:86:ed: b8:21:32:72:74:da:ba:4d:83:bb:28:2d:5d:66:ac:0e:37:4d: 8b:a5:4a:ef:d3:1f:e6:2f:9b:d3:b4:a1:a9:88:96:24:34:05: 9b:6f:9f:68:d1:87:e5:c7:30:9a:76:53:93:aa:fe:46:2c:2a: 36:33:b8:91:49:34:85:51:1e:2e:b3:41:b5:e4:2a:b1:00:1a: 62:a9:eb:38:55:a4:9c:b7:c6:b6:a9:ef:ff:0a:14:38:0b:b5: 3f:17:d1:e0:dd:7b:ec:15:61:14:ec:ce:de:10:8a:cb:2b:38: 1f:71:e1:45:60:19:a6:4b:35:52:e8:95:eb:a9:41:d9:55:81: ac:0a:75:78:1d:6a:93:48:8c:1b:48:9b:01:4f:79:15:9b:fa: 48:0f:1d:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjYwOTA0MTczODAyWhcNMjYwOTExMTczODAyWjAYMRYwFAYD VQQDEw02YTliMDFmYi05OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEhVUrR+D+AUO3wjIzp5nFvJ0ZWFQ9W1eW2oJCd7eTFvtk6sIALerkG9jnBv UB/3eo5XE8eYod3Kss/yfludP014AMwxqC252k7G6C4Xqajfb2uPCPXgd7LUzuK6 8t8k7PNwPvKbAk26n6Nd9irWJ7uOoLBmz17hAhK1znuPFEbYCqXirYFTewJ9K+bX 3YsIfXN2NvN4WMQ//SRgA9838kDmGgRqN+xscybAwFgKgpYJ4/t5asdmhbLoO7g5 YEpTaKO/CkLcpKRsz05SX5NngfmxPq074ak8PUA8nxcUenD36hoRhRALAWzm4v9L +2BeVY6h3bamv2CPg5xsL8U/3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIormt1U UtWqdqdDftRIYdeJJvb6MB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApgicnucd+c9RomkUlIptivyFU4YnzbRAHKmSHlcqhMZbFSa7tRMc5fi2MEbi Q/+SeVpdEHrcL1YsK7bHAjiBg90IBfuApnxDCJq7nKqOQc3+Z9liVi4t+3vYvLdG OD5Zlp2tCbHc8Fs/4obtuCEycnTauk2DuygtXWasDjdNi6VK79Mf5i+b07ShqYiW JDQFm2+faNGH5ccwmnZTk6r+RiwqNjO4kUk0hVEeLrNBteQqsQAaYqnrOFWknLfG tqnv/woUOAu1PxfR4N177BVhFOzO3hCKyys4H3HhRWAZpks1UuiV66lB2VWBrAp1 eB1qk0iMG0ibAU95FZv6SA8dDg== -----END CERTIFICATE-----Generated at Fri Sep 4 23:40:34 2026 by rpki-client