$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: zMTzDFzse+gWbRVtIcdgFFJxODCJZSuQ3qXIJTiBOd8= Subject key identifier: E5:D3:85:77:CF:86:7C:A2:DA:DC:BD:AE:D8:BE:28:91:87:AB:96:0F Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 0571 Signing time: Thu 22 Oct 2026 23:26:01 +0000 Manifest this update: Thu 22 Oct 2026 23:26:01 +0000 Manifest next update: Thu 29 Oct 2026 23:26:01 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: Ih9po4MnB1h8VJmi2zj4UQxmUFDQtU5+VnwPHmOA1bE=) 2: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7AlbdSRwlkKkR/K67yLfvbN2W4ttU00otNSVkmLwufw=) 3: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: 1ebb9Nj7VmrMuK4yoaZZ0oDCaWXlb2RlaODB76e/OBo=) 4: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: anTMOnnsvpaZsJUni+4X+XZEvopmfPdNDNkwkStiV2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 23:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Oct 22 23:26:01 2026 GMT Not After : Oct 29 23:26:01 2026 GMT Subject: CN=6ada9b89-2a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:ba:e5:d8:d0:e7:4f:70:63:2d:c5:20:0d: 64:05:d4:65:4b:14:cc:74:c6:15:3f:28:3a:07:b3: f6:17:32:e8:4e:f2:5e:ce:29:04:f3:1c:08:54:e7: fd:71:18:7f:b9:07:4f:96:b5:95:31:a8:b5:e3:bd: 02:25:01:da:09:f6:f6:d5:17:07:76:9e:3e:fd:bc: 9f:36:b9:80:d9:29:bc:13:82:a2:a5:50:fe:be:17: 4d:1a:c5:f0:ea:93:5f:c0:6e:35:cc:b7:1a:70:aa: 93:a8:c4:f6:06:c7:1d:7d:26:95:f7:5a:c2:8f:6d: e7:06:f3:ee:ba:ba:e4:2c:84:55:b2:4b:9f:ad:78: 74:b8:1e:c8:9e:10:18:b7:31:3d:b0:ac:54:07:9c: 91:37:96:8b:9f:60:64:f4:02:93:ca:04:e6:0f:02: de:1b:01:df:47:60:c4:dd:e8:dd:6f:63:24:d0:d7: 4d:fe:22:0d:45:e1:51:7a:08:c7:cd:22:b5:ef:56: ad:f9:e8:2d:36:f5:0e:a5:85:8f:26:24:3e:dd:49: 6f:d8:f5:67:15:53:0e:10:a8:75:8a:34:59:00:50: 8c:b5:c1:77:c7:9c:89:06:4a:ba:40:3e:74:e2:25: 21:50:ba:05:14:02:d3:f9:ae:c0:58:a2:67:1e:28: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D3:85:77:CF:86:7C:A2:DA:DC:BD:AE:D8:BE:28:91:87:AB:96:0F X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:9f:b7:24:d7:3a:63:59:73:e2:c4:a3:0d:ba:b7:59:c8:af: 1c:f3:34:1c:6a:c1:29:a4:19:5f:50:22:da:19:03:a5:ef:de: 50:4b:85:53:a6:d7:51:b0:58:55:02:d1:25:cc:93:93:b7:1d: 63:52:e8:6e:a7:3a:d0:40:88:e0:52:9c:4d:5e:b8:f3:12:a8: 20:8f:c2:4c:8c:7d:04:a6:18:c6:27:ad:ee:dd:2d:84:e4:94: 1c:c6:5d:b3:2e:01:1e:32:14:17:0d:86:27:21:2d:44:52:a1: 3d:0f:1d:01:84:24:90:04:89:b5:70:19:2f:61:89:2f:be:9c: a2:d1:3d:24:ef:2e:cf:fd:4c:5c:a5:db:77:50:74:00:2c:21: ae:59:70:c2:4d:f3:2f:20:17:09:c1:8e:55:0c:15:b7:f7:be: e9:63:aa:f4:b5:f3:dd:92:5b:ba:a4:d5:b6:fa:98:21:3e:b3: 2d:44:d7:77:75:5a:cd:34:62:2e:08:8b:97:d7:42:1f:d1:78: 9b:b6:8f:29:f7:49:cf:9a:fb:6a:73:cf:4b:97:cd:d1:7d:f7: 28:ec:2b:fa:64:41:95:44:c0:0b:20:37:0d:83:93:14:aa:d4: be:bd:27:9e:40:97:f9:51:c1:5e:3f:84:73:3a:a2:24:9e:d4: bf:ea:b5:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYxMDIyMjMyNjAxWhcNMjYxMDI5MjMyNjAxWjAYMRYwFAYD VQQDEw02YWRhOWI4OS0yYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3S65djQ509wYy3FIA1kBdRlSxTMdMYVPyg6B7P2FzLoTvJezikE8xwIVOf9 cRh/uQdPlrWVMai1470CJQHaCfb21RcHdp4+/byfNrmA2Sm8E4KipVD+vhdNGsXw 6pNfwG41zLcacKqTqMT2BscdfSaV91rCj23nBvPuurrkLIRVskufrXh0uB7InhAY tzE9sKxUB5yRN5aLn2Bk9AKTygTmDwLeGwHfR2DE3ejdb2Mk0NdN/iINReFRegjH zSK171at+egtNvUOpYWPJiQ+3Ulv2PVnFVMOEKh1ijRZAFCMtcF3x5yJBkq6QD50 4iUhULoFFALT+a7AWKJnHigGdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXThXfP hnyi2ty9rti+KJGHq5YPMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs5+3JNc6Y1lz4sSjDbq3WcivHPM0HGrBKaQZX1Ai2hkDpe/eUEuFU6bXUbBY VQLRJcyTk7cdY1Lobqc60ECI4FKcTV648xKoII/CTIx9BKYYxiet7t0thOSUHMZd sy4BHjIUFw2GJyEtRFKhPQ8dAYQkkASJtXAZL2GJL76cotE9JO8uz/1MXKXbd1B0 ACwhrllwwk3zLyAXCcGOVQwVt/e+6WOq9LXz3ZJbuqTVtvqYIT6zLUTXd3VazTRi LgiLl9dCH9F4m7aPKfdJz5r7anPPS5fN0X33KOwr+mRBlUTACyA3DYOTFKrUvr0n nkCX+VHBXj+EczqiJJ7Uv+q1Vg== -----END CERTIFICATE-----Generated at Sat Oct 24 02:09:16 2026 by rpki-client