$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: F9G5aE7tu7JoJGjlvjXT5WcDeRaNG1RP4XyVdeDJ1Aw= Subject key identifier: 45:C5:C9:F7:D3:A7:1F:1C:E8:3C:4F:18:FF:C2:6C:9F:A7:C4:39:1D Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 16F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 16E0 Signing time: Sat 10 Oct 2026 16:41:14 +0000 Manifest this update: Sat 10 Oct 2026 16:41:14 +0000 Manifest next update: Sat 17 Oct 2026 16:41:14 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: clm5Skn6lU5MFUDpvGfQz3jlsRkeqNTgcCbK1vJueu0=) 2: 21A4183096D111F1A11E4B235711F970.roa (hash: k2+qx+drmH//e+9qGHsf2iYVzrlk7nrWgE6t8MQWTRQ=) 3: 3F202DE4993911F18F87526B4F11F970.roa (hash: GSAC+7o5SvtGwbHQMbuD2JkQo56sQ3KcyyGSI1Idma8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5879 (0x16f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Oct 10 16:41:14 2026 GMT Not After : Oct 17 16:41:14 2026 GMT Subject: CN=6aca6aaa-60a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:5d:d2:de:31:73:78:89:ef:99:ac:ef:ec: ba:43:96:45:1f:51:4b:51:f8:90:fb:ee:5c:49:e2: 63:a7:f5:15:5a:7c:52:58:b1:8c:53:be:b2:18:b8: 13:1f:27:78:bd:ee:ea:47:75:98:87:a5:b4:0c:7d: 57:d5:38:74:7c:0c:15:89:13:cb:50:e3:47:91:51: 24:4e:35:d1:8a:16:e3:40:31:e2:c9:13:8c:0e:2c: 57:55:87:ad:c0:48:d8:b1:12:a4:71:26:ec:26:4a: 94:30:b6:e9:5b:bc:c4:6c:57:2f:37:54:07:af:15: 78:ea:7c:09:79:b4:b5:3a:22:38:5a:06:89:38:71: 59:8b:50:44:2c:00:86:be:4c:a6:10:09:05:2a:d1: 24:ae:68:3a:1d:82:51:ff:3d:45:66:8b:44:af:e2: 64:54:7e:c6:8f:25:88:3c:39:09:7c:2e:2a:62:b0: 3c:6e:64:81:8e:7d:92:3c:8d:38:3e:a4:6e:ff:45: 4f:45:74:0b:67:69:89:3c:83:d3:82:11:a9:c9:e7: 13:16:67:3c:2a:c1:34:ae:a3:97:76:c7:ba:46:b8: 7b:6c:a4:5e:e8:3a:da:a9:d8:5d:ab:c7:e4:59:9c: db:14:52:90:35:69:01:ef:c1:78:a1:29:51:5d:0d: 62:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C5:C9:F7:D3:A7:1F:1C:E8:3C:4F:18:FF:C2:6C:9F:A7:C4:39:1D X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:94:35:a4:96:62:9e:2e:b1:87:91:ce:09:d1:9e:99:73:dd: 9b:95:b1:35:e8:9c:61:d3:bf:2d:42:d4:a0:79:8b:9f:fe:27: e7:c9:23:27:86:41:88:4d:71:da:37:40:e5:22:af:fb:02:b1: 36:f3:e0:45:02:65:e8:df:f1:7e:12:d5:24:35:03:99:65:8a: 8d:33:62:68:7e:38:45:17:c9:e2:bc:14:02:9f:57:d5:99:93: 9f:b0:76:bc:85:ae:b2:1a:61:53:96:9b:1c:7f:b9:82:02:ad: 92:c8:0e:5b:30:54:3e:86:5a:bc:d5:c3:52:76:ef:8e:aa:7b: 7d:57:db:1d:5e:83:82:a8:2f:0f:16:c3:e2:86:6d:e0:f3:ff: 9e:f5:59:87:a6:ab:f6:c2:65:94:29:93:fc:33:51:5b:52:a4: aa:4b:3e:6f:a8:cc:4a:a9:dd:d0:7d:4a:fb:db:12:30:73:48: 54:02:2e:2d:4b:49:04:1b:9e:fb:ad:7d:ae:ba:a4:d8:22:5e: 63:df:01:10:6b:72:d8:b3:bc:4c:36:2c:4e:ef:00:00:d2:db: 3d:13:58:e1:da:03:8c:1f:b2:6a:e3:67:3b:bd:fe:57:3b:52: c1:8e:26:5c:ef:d8:32:94:af:96:22:3c:41:28:69:42:b8:29: a6:aa:73:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjYxMDEwMTY0MTE0WhcNMjYxMDE3MTY0MTE0WjAYMRYwFAYD VQQDEw02YWNhNmFhYS02MGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdNd0t4xc3iJ75ms7+y6Q5ZFH1FLUfiQ++5cSeJjp/UVWnxSWLGMU76yGLgT Hyd4ve7qR3WYh6W0DH1X1Th0fAwViRPLUONHkVEkTjXRihbjQDHiyROMDixXVYet wEjYsRKkcSbsJkqUMLbpW7zEbFcvN1QHrxV46nwJebS1OiI4WgaJOHFZi1BELACG vkymEAkFKtEkrmg6HYJR/z1FZotEr+JkVH7GjyWIPDkJfC4qYrA8bmSBjn2SPI04 PqRu/0VPRXQLZ2mJPIPTghGpyecTFmc8KsE0rqOXdse6Rrh7bKRe6Draqdhdq8fk WZzbFFKQNWkB78F4oSlRXQ1iQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXFyffT px8c6DxPGP/CbJ+nxDkdMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXpQ1pJZini6xh5HOCdGemXPdm5WxNeicYdO/LULUoHmLn/4n58kjJ4ZBiE1x 2jdA5SKv+wKxNvPgRQJl6N/xfhLVJDUDmWWKjTNiaH44RRfJ4rwUAp9X1ZmTn7B2 vIWushphU5abHH+5ggKtksgOWzBUPoZavNXDUnbvjqp7fVfbHV6DgqgvDxbD4oZt 4PP/nvVZh6ar9sJllCmT/DNRW1Kkqks+b6jMSqnd0H1K+9sSMHNIVAIuLUtJBBue +619rrqk2CJeY98BEGty2LO8TDYsTu8AANLbPRNY4doDjB+yauNnO73+VztSwY4m XO/YMpSvliI8QShpQrgppqpzqw== -----END CERTIFICATE-----Generated at Sun Oct 11 23:19:03 2026 by rpki-client