$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.mft File: 6iR100bqLYkBRNhvdfF6f7MnMaU.mft (raw, json) Hash identifier: mlx81Iovb43hon6nb8n3+Qea9mAz9D0G07IN2wxUh7s= Subject key identifier: 25:60:25:E8:55:F7:F7:7E:98:78:F9:C6:79:59:26:82:F3:88:F3:C3 Authority key identifier: EA:24:75:D3:46:EA:2D:89:01:44:D8:6F:75:F1:7A:7F:B3:27:31:A5 Certificate issuer: /CN=A91B18B5/serialNumber=EA2475D346EA2D890144D86F75F17A7FB32731A5 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6iR100bqLYkBRNhvdfF6f7MnMaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.mft Manifest number: 2A Signing time: Tue 29 Sep 2026 09:23:32 +0000 Manifest this update: Tue 29 Sep 2026 09:23:31 +0000 Manifest next update: Tue 06 Oct 2026 09:23:31 +0000 Files and hashes: 1: 6iR100bqLYkBRNhvdfF6f7MnMaU.crl (hash: sl3w3coABPAP99UBl5DIeDHtRZ5iTIjRk889CGc3Jf4=) 2: 60C2D3747E5511F18793AB4A85A30FBC.roa (hash: xEOFEWdyCaSag6v7rSqAM6JAdpfpEjBwIonAWfJZXtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.crl rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6iR100bqLYkBRNhvdfF6f7MnMaU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 07:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B18B5, serialNumber=EA2475D346EA2D890144D86F75F17A7FB32731A5 Validity Not Before: Sep 29 09:23:31 2026 GMT Not After : Oct 6 09:23:31 2026 GMT Subject: CN=6abb8393-c134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:40:d2:3c:7c:df:74:f1:a2:bf:4a:68:20:57: 76:b9:8f:af:c3:77:92:36:94:0b:61:82:ed:fe:e6: 2d:43:ff:7f:4d:38:d5:ba:57:b1:5c:5b:5b:50:0a: 6f:33:ce:6e:b7:d4:03:93:c7:36:6d:13:d0:74:9c: a9:ad:f3:ae:f8:e1:0a:a4:2a:1b:5b:29:d7:16:eb: ec:9d:3e:23:75:62:ef:83:91:4a:6f:f5:c7:d1:ec: 60:da:34:74:a6:cf:73:70:1b:8a:52:b0:ac:97:1b: c0:d6:76:85:b6:88:15:71:c4:92:81:1a:78:f4:f4: 0b:3d:31:4c:45:9a:40:f6:e8:7d:f3:c5:cd:1a:a3: c9:8f:eb:1f:52:c9:20:91:45:46:e9:9a:a3:44:ca: 8e:c4:6f:e5:ab:88:a9:54:ad:4f:db:f1:1c:ce:8e: 7e:1d:9e:a6:8d:b7:49:fc:c3:a0:51:fc:dc:bf:0a: ed:41:94:ef:81:75:14:24:d8:27:b9:8f:c3:c5:6d: a4:16:dc:c5:ef:1f:8c:77:67:03:73:30:fc:71:b9: df:49:a2:c4:66:68:98:16:8d:53:3d:82:4e:69:19: ce:28:d7:b0:9c:cb:57:09:66:50:50:bd:87:63:4d: 5d:d2:cf:d0:fe:f2:e4:b3:ae:cc:cf:f7:c6:91:83: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:60:25:E8:55:F7:F7:7E:98:78:F9:C6:79:59:26:82:F3:88:F3:C3 X509v3 Authority Key Identifier: keyid:EA:24:75:D3:46:EA:2D:89:01:44:D8:6F:75:F1:7A:7F:B3:27:31:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6iR100bqLYkBRNhvdfF6f7MnMaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a4:1a:72:f3:12:b9:2b:f5:02:4e:df:c5:5b:67:5a:42:08: 7c:43:b5:0c:90:21:ba:0c:e6:db:91:8a:cb:3b:2a:6d:09:aa: db:c1:b5:d0:f6:01:ba:b3:82:9e:d3:12:4c:65:02:48:49:ff: 92:52:31:3d:a6:50:a5:54:f6:d4:ff:e6:7b:1e:e7:a4:aa:b2: 40:f0:5d:a7:f7:36:4e:c9:80:97:8b:21:d0:34:cd:8c:cc:26: 2f:dc:9e:d7:35:31:6a:44:89:6b:c8:59:3d:90:24:cb:e1:57: 06:18:cf:84:d2:2e:0d:1e:ca:96:4a:d4:cb:e9:13:ed:78:07: 82:e2:4f:44:25:81:5d:91:14:d6:b5:82:76:11:41:54:b0:fe: 7b:1f:01:bc:47:91:d4:9d:ae:a1:cc:8e:e8:50:ce:d2:af:7b: 79:c3:4c:ae:89:bc:24:2c:81:be:de:db:83:b7:b6:39:a9:78: c3:67:4a:b7:c5:3d:cd:52:f9:d4:54:cf:22:e0:43:67:8e:1d: 9d:4b:e8:54:ef:92:17:24:a7:c6:67:03:5a:cf:b4:d0:3e:7b: 71:94:3c:a6:45:12:77:68:46:31:9e:be:9f:22:26:c0:d4:b5: 6b:82:c5:d7:dc:1a:7c:d0:f8:0d:b2:0f:f6:cb:cb:99:6b:b0: e3:0f:b0:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MThCNTExMC8GA1UEBRMoRUEyNDc1RDM0NkVBMkQ4OTAxNDREODZGNzVGMTdBN0ZC MzI3MzFBNTAeFw0yNjA5MjkwOTIzMzFaFw0yNjEwMDYwOTIzMzFaMBgxFjAUBgNV BAMTDTZhYmI4MzkzLWMxMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWQNI8fN908aK/SmggV3a5j6/Dd5I2lAthgu3+5i1D/39NONW6V7FcW1tQCm8z zm631AOTxzZtE9B0nKmt86744QqkKhtbKdcW6+ydPiN1Yu+DkUpv9cfR7GDaNHSm z3NwG4pSsKyXG8DWdoW2iBVxxJKBGnj09As9MUxFmkD26H3zxc0ao8mP6x9SySCR RUbpmqNEyo7Eb+WriKlUrU/b8RzOjn4dnqaNt0n8w6BR/Ny/Cu1BlO+BdRQk2Ce5 j8PFbaQW3MXvH4x3ZwNzMPxxud9JosRmaJgWjVM9gk5pGc4o17Ccy1cJZlBQvYdj TV3Sz9D+8uSzrszP98aRg0vjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJWAl6FX3 936YePnGeVkmgvOI88MwHwYDVR0jBBgwFoAU6iR100bqLYkBRNhvdfF6f7MnMaUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxOEI1Lzk0MDI2RjQ0N0U1 MzExRjE4QzVCREMyRjg1QTMwRkJDLzZpUjEwMGJxTFlrQlJOaHZkZkY2ZjdNbk1h VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNmlSMTAwYnFMWWtCUk5odmRmRjZmN01uTWFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx OEI1Lzk0MDI2RjQ0N0U1MzExRjE4QzVCREMyRjg1QTMwRkJDLzZpUjEwMGJxTFlr QlJOaHZkZkY2ZjdNbk1hVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAjpBpy8xK5K/UCTt/FW2daQgh8Q7UMkCG6DObbkYrLOyptCarbwbXQ9gG6s4Ke 0xJMZQJISf+SUjE9plClVPbU/+Z7HuekqrJA8F2n9zZOyYCXiyHQNM2MzCYv3J7X NTFqRIlryFk9kCTL4VcGGM+E0i4NHsqWStTL6RPteAeC4k9EJYFdkRTWtYJ2EUFU sP57HwG8R5HUna6hzI7oUM7Sr3t5w0yuibwkLIG+3tuDt7Y5qXjDZ0q3xT3NUvnU VM8i4ENnjh2dS+hU75IXJKfGZwNaz7TQPntxlDymRRJ3aEYxnr6fIibA1LVrgsXX 3Bp80PgNsg/2y8uZa7DjD7Di -----END CERTIFICATE-----Generated at Tue Sep 29 13:00:27 2026 by rpki-client