$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json) Hash identifier: GcluHqDGPYbt7K7VbZ6rN0nFticyE1BLU9sJIeZhJeU= Subject key identifier: CD:CD:3B:6A:91:B4:FC:5E:DC:32:86:64:A4:F1:AC:DC:4D:89:B6:5B Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft Manifest number: 0111 Signing time: Tue 27 Oct 2026 06:16:09 +0000 Manifest this update: Tue 27 Oct 2026 06:16:08 +0000 Manifest next update: Tue 03 Nov 2026 06:16:08 +0000 Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: fgvIKQcWmp1iEjanAjOekTYUDaWHAYBMhF3df2jWkRY=) 2: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=) 3: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Validity Not Before: Oct 27 06:16:08 2026 GMT Not After : Nov 3 06:16:08 2026 GMT Subject: CN=6ae041a9-f5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:3f:a8:3b:d6:40:e1:a6:c5:9e:a4:38:10: 54:7f:27:28:4e:17:da:52:2d:b7:43:50:4d:36:cc: af:92:30:e0:fa:46:e8:2f:a3:b0:f9:fb:05:05:5a: 10:e9:b7:f7:de:33:e0:9e:d2:54:cc:19:42:b0:0a: f1:3a:ba:1e:33:6a:92:5f:12:c4:fd:3a:f1:f3:2d: cf:b2:ab:ab:9c:85:66:7b:cd:67:f5:31:31:10:db: f5:7e:17:2f:9d:71:46:a1:e1:06:58:7e:29:c7:ef: cc:37:ab:a9:b3:31:fe:0b:9c:02:30:ba:d2:6d:a9: cb:d1:de:56:79:bc:dc:3d:9d:e7:da:f8:f2:cb:73: 3e:65:2d:84:6f:85:e0:f2:9c:be:94:da:76:22:41: 10:8c:ba:42:0d:c4:25:e1:1a:d1:64:27:34:81:b6: e4:7a:14:be:0a:78:b4:11:b6:6c:bd:3f:52:88:2d: 6f:1c:21:bc:e3:5c:27:b4:63:c6:31:1f:f3:f9:9a: 09:6a:11:2f:a4:c4:43:1a:ba:40:ab:12:44:b5:fa: 64:2b:f6:c2:fd:c4:2e:29:f0:94:67:9e:49:04:da: 26:90:60:2d:4a:b6:93:0b:70:20:f7:22:51:c8:19: 03:e1:e7:7d:12:f2:6f:1f:f3:0b:61:ca:dd:85:36: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CD:3B:6A:91:B4:FC:5E:DC:32:86:64:A4:F1:AC:DC:4D:89:B6:5B X509v3 Authority Key Identifier: keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:c9:76:de:a9:71:80:ac:f7:0b:be:db:ef:17:4f:96:fa:75: 0f:f0:ae:9d:4d:11:81:a6:ca:67:d1:f2:e8:78:3e:6c:b8:b9: 96:e8:ee:cb:83:0c:cd:fd:74:75:d7:d8:93:8d:bf:2b:b4:1f: 65:2a:cf:cc:1e:65:45:dc:da:1a:c6:ee:4b:d2:2e:45:6a:c2: f6:9f:d6:65:f2:6a:ff:b3:74:ac:8f:5b:81:3b:ac:be:9e:b7: d1:a7:a7:bf:cf:bf:da:f2:b9:be:56:da:7c:10:04:d0:63:6f: 87:6e:e5:4c:c6:21:d5:8e:bc:06:6a:89:42:2c:f5:cc:2f:0c: 6f:71:3d:98:5f:9b:7a:ff:95:14:b3:91:8b:4e:15:b6:9d:8d: 19:35:85:60:32:91:bc:80:ef:a5:e7:8f:2f:d8:ff:ae:3f:d0: 3b:04:00:aa:51:51:09:49:71:db:77:51:52:23:97:d5:d2:83: f8:67:45:6c:6c:b1:27:94:d3:2d:5d:0f:73:31:1d:7b:6f:17: 4e:21:4a:ef:56:43:e4:fd:df:d1:fa:d2:f7:d9:df:88:a8:06: 69:33:a1:f3:47:4e:6a:d1:d2:6d:fe:dd:4c:57:0f:ee:3e:46: 52:87:55:1f:13:01:91:2b:b0:46:b0:10:71:d0:4a:c0:76:63: 0e:a1:49:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFRDIxMTAvBgNVBAUTKEQ5MDRENTUyQzBFRjMyRjI0OUFCQTQ1OTdCRDg0QTE1 RUU1NTU1QzEwHhcNMjYxMDI3MDYxNjA4WhcNMjYxMTAzMDYxNjA4WjAYMRYwFAYD VQQDEw02YWUwNDFhOS1mNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXQ/qDvWQOGmxZ6kOBBUfycoThfaUi23Q1BNNsyvkjDg+kboL6Ow+fsFBVoQ 6bf33jPgntJUzBlCsArxOroeM2qSXxLE/Trx8y3PsqurnIVme81n9TExENv1fhcv nXFGoeEGWH4px+/MN6upszH+C5wCMLrSbanL0d5WebzcPZ3n2vjyy3M+ZS2Eb4Xg 8py+lNp2IkEQjLpCDcQl4RrRZCc0gbbkehS+Cni0EbZsvT9SiC1vHCG841wntGPG MR/z+ZoJahEvpMRDGrpAqxJEtfpkK/bC/cQuKfCUZ55JBNomkGAtSraTC3Ag9yJR yBkD4ed9EvJvH/MLYcrdhTYpEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3NO2qR tPxe3DKGZKTxrNxNibZbMB8GA1UdIwQYMBaAFNkE1VLA7zLySaukWXvYShXuVVXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVEMi9GMjQ1QjJENjMx MUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12SkpxNlJaZTloS0ZlNVZW Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVEMi9GMjQ1QjJENjMxMUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12 SkpxNlJaZTloS0ZlNVZWY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZcl23qlxgKz3C77b7xdPlvp1D/CunU0RgabKZ9Hy6Hg+bLi5lujuy4MMzf10 ddfYk42/K7QfZSrPzB5lRdzaGsbuS9IuRWrC9p/WZfJq/7N0rI9bgTusvp630aen v8+/2vK5vlbafBAE0GNvh27lTMYh1Y68BmqJQiz1zC8Mb3E9mF+bev+VFLORi04V tp2NGTWFYDKRvIDvpeePL9j/rj/QOwQAqlFRCUlx23dRUiOX1dKD+GdFbGyxJ5TT LV0PczEde28XTiFK71ZD5P3f0frS99nfiKgGaTOh80dOatHSbf7dTFcP7j5GUodV HxMBkSuwRrAQcdBKwHZjDqFJoA== -----END CERTIFICATE-----Generated at Tue Oct 27 22:31:47 2026 by rpki-client