$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft File: srRBM3JITuPOwrPP8DCwN6v2-C4.mft (raw, json) Hash identifier: LW4LWdZTeyCt0dAaK+mCZVbksdhlM67GAbcziwMk2Vs= Subject key identifier: 75:10:91:81:30:57:3B:E2:DA:BE:DE:CC:B2:29:38:71:47:2F:2C:2C Authority key identifier: B2:B4:41:33:72:48:4E:E3:CE:C2:B3:CF:F0:30:B0:37:AB:F6:F8:2E Certificate issuer: /CN=A91ABD41/serialNumber=B2B4413372484EE3CEC2B3CFF030B037ABF6F82E Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft Manifest number: 2A Signing time: Mon 21 Sep 2026 08:44:46 +0000 Manifest this update: Mon 21 Sep 2026 08:44:45 +0000 Manifest next update: Mon 28 Sep 2026 08:44:45 +0000 Files and hashes: 1: srRBM3JITuPOwrPP8DCwN6v2-C4.crl (hash: Paa1yPApa0Rsqw/H7JNpL6xOcinjxWgfJ43gEoy5z3k=) 2: 1B7D039C877A11F1985B111C4C11F970.roa (hash: FAZiZDUG5Zm6j9xufGQcA/X9ynlaFejum5rH7WqDHV4=) 3: 27A8153A877A11F1BF0258354C11F970.roa (hash: 2dvUUDp3HKp6RjeBgGZ/GajEKJeeUV4Gc1PJYH4NGxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.crl rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD41, serialNumber=B2B4413372484EE3CEC2B3CFF030B037ABF6F82E Validity Not Before: Sep 21 08:44:45 2026 GMT Not After : Sep 28 08:44:45 2026 GMT Subject: CN=6ab0ee7e-3c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:84:f2:7d:04:20:98:e0:42:14:58:14:72: 0f:18:6e:34:0f:df:89:05:3b:b8:92:85:8d:ae:6e: a1:cb:c0:9d:cd:c3:73:a5:76:cd:b5:83:b8:a4:47: 0a:1e:2b:6e:11:6b:9c:ff:52:79:fa:cb:1f:72:41: 93:79:6f:4f:b3:d3:56:4e:f6:cb:eb:61:b8:33:80: 62:92:86:4e:9c:a7:86:bc:60:46:9c:64:92:6c:5c: be:fb:87:a2:b6:6e:77:a4:05:dc:7e:c9:93:22:9e: a7:e9:cb:fa:54:b8:b8:15:89:08:fd:07:6f:fd:6a: 4b:1d:d5:27:16:7f:c3:04:09:2d:1b:7d:87:de:d2: 45:8b:86:85:f7:3f:c4:cf:6b:96:af:33:57:7f:3f: e1:61:88:48:0b:e4:48:fe:32:f6:f1:d6:62:ba:64: f1:91:b3:b4:aa:10:ce:c1:cd:80:f2:bb:f3:a1:b1: b2:d4:dd:54:82:0e:be:37:aa:7d:a6:cf:93:48:1d: 4d:82:25:8e:14:16:25:96:c5:40:fd:66:6f:b9:55: dc:0b:a6:31:ce:0e:30:38:2e:c9:27:14:50:92:0e: e9:27:cb:af:9f:d5:45:f7:32:d4:4f:9a:42:11:aa: 38:78:96:07:0e:04:f9:51:5c:11:ee:dd:e3:ab:ef: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:10:91:81:30:57:3B:E2:DA:BE:DE:CC:B2:29:38:71:47:2F:2C:2C X509v3 Authority Key Identifier: keyid:B2:B4:41:33:72:48:4E:E3:CE:C2:B3:CF:F0:30:B0:37:AB:F6:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b8:28:51:0c:34:74:ba:d4:79:f9:25:04:27:67:10:43:49: 97:36:39:af:f8:0b:a4:c8:0e:af:c6:d2:cb:3d:6f:0b:65:51: 77:76:ac:45:32:6a:6b:71:c0:79:82:03:83:cd:00:c0:d0:0c: 2a:e2:b4:56:83:91:51:88:8f:eb:b4:f9:f9:67:70:44:43:93: df:d4:b7:36:ef:96:c9:ad:01:e6:c4:7a:2c:c6:7b:82:e1:b5: c3:03:65:03:ca:55:c0:cc:3d:80:92:33:64:4e:c0:07:74:32: 7c:59:96:03:43:ee:d1:44:89:06:a3:95:c3:f9:18:b5:31:53: ca:fd:68:e1:f7:d6:82:f1:24:cb:83:90:0b:b1:90:50:eb:ac: 22:12:8a:f5:ed:e5:04:4a:15:cb:8c:71:88:70:c3:cb:48:71: 69:72:69:93:a1:f7:22:77:32:b9:d1:2f:df:8d:3a:be:22:97: 3a:55:9a:cd:d5:1c:c7:3e:67:09:9c:1a:e8:91:48:ad:fd:1a: dc:62:54:82:ae:c7:83:4c:df:5c:bc:6e:fe:b7:93:49:8d:2b: f5:27:b5:bc:dd:54:cd:f2:1f:37:85:4a:3d:00:2f:51:d4:57: b7:2a:e9:95:0e:c3:76:8d:06:51:d2:d0:62:1b:8e:3b:9b:a8: 17:ec:35:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QkQ0MTExMC8GA1UEBRMoQjJCNDQxMzM3MjQ4NEVFM0NFQzJCM0NGRjAzMEIwMzdB QkY2RjgyRTAeFw0yNjA5MjEwODQ0NDVaFw0yNjA5MjgwODQ0NDVaMBgxFjAUBgNV BAMTDTZhYjBlZTdlLTNjOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeLYTyfQQgmOBCFFgUcg8YbjQP34kFO7iShY2ubqHLwJ3Nw3Olds21g7ikRwoe K24Ra5z/Unn6yx9yQZN5b0+z01ZO9svrYbgzgGKShk6cp4a8YEacZJJsXL77h6K2 bnekBdx+yZMinqfpy/pUuLgViQj9B2/9aksd1ScWf8MECS0bfYfe0kWLhoX3P8TP a5avM1d/P+FhiEgL5Ej+Mvbx1mK6ZPGRs7SqEM7BzYDyu/OhsbLU3VSCDr43qn2m z5NIHU2CJY4UFiWWxUD9Zm+5VdwLpjHODjA4LsknFFCSDukny6+f1UX3MtRPmkIR qjh4lgcOBPlRXBHu3eOr75kvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdRCRgTBX O+Lavt7Msik4cUcvLCwwHwYDVR0jBBgwFoAUsrRBM3JITuPOwrPP8DCwN6v2+C4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCRDQxL0MzNkFFNDk0NzlE QzExRjE4MTVFNEJGRTYzQTMwRkJDL3NyUkJNM0pJVHVQT3dyUFA4REN3TjZ2Mi1D NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc3JSQk0zSklUdVBPd3JQUDhEQ3dONnYyLUM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC RDQxL0MzNkFFNDk0NzlEQzExRjE4MTVFNEJGRTYzQTMwRkJDL3NyUkJNM0pJVHVQ T3dyUFA4REN3TjZ2Mi1DNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPuChRDDR0utR5+SUEJ2cQQ0mXNjmv+AukyA6vxtLLPW8LZVF3dqxFMmprccB5 ggODzQDA0Awq4rRWg5FRiI/rtPn5Z3BEQ5Pf1Lc275bJrQHmxHosxnuC4bXDA2UD ylXAzD2AkjNkTsAHdDJ8WZYDQ+7RRIkGo5XD+Ri1MVPK/Wjh99aC8STLg5ALsZBQ 66wiEor17eUEShXLjHGIcMPLSHFpcmmTofcidzK50S/fjTq+Ipc6VZrN1RzHPmcJ nBrokUit/RrcYlSCrseDTN9cvG7+t5NJjSv1J7W83VTN8h83hUo9AC9R1Fe3KumV DsN2jQZR0tBiG447m6gX7DXV -----END CERTIFICATE-----Generated at Mon Sep 21 21:51:46 2026 by rpki-client