$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: GHriBDPufLDYYjrrhIL9bUPe17odRDwHIm59k9TrGfE= Subject key identifier: 85:9B:C9:91:73:F3:52:E4:49:1F:53:EB:89:57:E0:35:EB:63:26:64 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 25A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 258A Signing time: Fri 04 Sep 2026 15:42:35 +0000 Manifest this update: Fri 04 Sep 2026 15:42:35 +0000 Manifest next update: Fri 11 Sep 2026 15:42:35 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: dVXBRKrO0vCfOmnqnbVsPuJ6DivLXDRCebmuAr+AtZM=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: kNgeshEQoMHZ0sW+i2npHyw2h62/78Or0q6kxwJMwVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9634 (0x25a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Sep 4 15:42:35 2026 GMT Not After : Sep 11 15:42:35 2026 GMT Subject: CN=6a9ae6eb-9285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:2d:a1:62:98:a3:3a:cd:dc:5b:a1:2e:21: 70:45:39:3c:fc:de:d2:86:b2:38:5a:c1:da:74:e9: cb:dc:a4:ee:1e:ec:d1:65:fc:51:84:85:aa:0e:37: 10:59:54:60:8b:c0:bc:4f:7c:c4:7c:d9:c6:6f:dd: 52:e5:e8:41:bc:7e:b7:4e:5c:1c:62:82:7a:99:89: 2a:10:6b:8b:8b:15:50:22:e9:87:ec:16:1d:fa:cc: 4c:45:5f:8b:30:7f:10:77:97:de:81:46:b4:ff:20: 20:be:11:75:73:c0:24:6c:68:e8:29:46:8c:15:06: 55:42:83:34:f7:a8:7f:9f:bc:f6:d6:cc:99:04:65: c3:62:9d:de:28:56:88:d3:70:cd:60:72:eb:bb:33: 86:4a:b1:2c:1e:81:d2:da:93:8b:05:ac:e8:4c:8e: 80:50:eb:de:7b:1b:f4:f5:2f:37:13:3d:c9:6b:24: 58:d7:2d:2f:1c:2e:d2:8a:f8:13:81:ad:83:a3:6d: 80:9f:be:fc:8b:68:4e:66:a2:5a:da:fa:c9:a8:9d: 89:47:23:29:53:5b:07:81:c1:d0:b2:b8:a5:b7:07: 9d:7a:a0:78:02:a7:b6:f8:7c:b2:98:ba:82:60:89: 20:56:ad:ad:ed:83:85:00:c4:71:ae:f2:6f:be:9d: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9B:C9:91:73:F3:52:E4:49:1F:53:EB:89:57:E0:35:EB:63:26:64 X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ff:5e:07:da:6f:97:1c:d0:b2:6b:90:fe:52:ca:9b:5f:3f: 4e:71:b3:57:c1:ab:80:0a:ad:36:8c:e5:3b:ce:11:ba:fe:09: c6:fd:31:57:70:d2:74:89:5a:2e:c9:82:bf:5a:14:be:7b:28: fa:60:b9:4a:25:c2:8f:2a:ec:0b:fd:4f:08:e1:74:b6:71:cc: 74:78:bf:30:21:a3:bf:38:fb:e3:74:8a:04:3c:c8:50:86:c1: a4:72:18:f8:7f:34:60:45:75:79:dc:7e:69:48:16:3e:c2:44: 17:f6:22:fa:2a:fb:69:95:72:27:47:0a:c6:3a:47:0e:7b:83: 61:57:f3:f1:02:2e:1c:e2:32:70:6e:a9:ce:54:e3:9c:87:b6: e3:6c:bf:98:79:da:49:0f:41:c3:ab:5d:95:b6:17:f0:a5:75: 48:e6:86:c4:e7:85:53:c7:9c:52:f5:3b:df:8f:50:21:37:eb: ce:06:ab:ce:82:ae:76:56:e5:8e:60:ea:05:d6:ca:8e:66:e0: 5d:b0:b8:56:b0:45:0c:54:2a:89:62:01:b3:2e:a6:9c:9b:21: e6:28:d6:c5:99:7b:f1:e8:2c:c5:be:1c:bb:8a:76:76:b8:01: 1a:26:e1:4a:0a:d4:75:02:af:d9:87:bb:41:a6:cc:e4:5e:11: 28:b6:76:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjYwOTA0MTU0MjM1WhcNMjYwOTExMTU0MjM1WjAYMRYwFAYD VQQDEw02YTlhZTZlYi05Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLktoWKYozrN3FuhLiFwRTk8/N7ShrI4WsHadOnL3KTuHuzRZfxRhIWqDjcQ WVRgi8C8T3zEfNnGb91S5ehBvH63TlwcYoJ6mYkqEGuLixVQIumH7BYd+sxMRV+L MH8Qd5fegUa0/yAgvhF1c8AkbGjoKUaMFQZVQoM096h/n7z21syZBGXDYp3eKFaI 03DNYHLruzOGSrEsHoHS2pOLBazoTI6AUOveexv09S83Ez3JayRY1y0vHC7SivgT ga2Do22An778i2hOZqJa2vrJqJ2JRyMpU1sHgcHQsriltwedeqB4Aqe2+HyymLqC YIkgVq2t7YOFAMRxrvJvvp0nMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWbyZFz 81LkSR9T64lX4DXrYyZkMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUv9eB9pvlxzQsmuQ/lLKm18/TnGzV8GrgAqtNozlO84Ruv4Jxv0xV3DSdIla LsmCv1oUvnso+mC5SiXCjyrsC/1PCOF0tnHMdHi/MCGjvzj743SKBDzIUIbBpHIY +H80YEV1edx+aUgWPsJEF/Yi+ir7aZVyJ0cKxjpHDnuDYVfz8QIuHOIycG6pzlTj nIe242y/mHnaSQ9Bw6tdlbYX8KV1SOaGxOeFU8ecUvU7349QITfrzgarzoKudlbl jmDqBdbKjmbgXbC4VrBFDFQqiWIBsy6mnJsh5ijWxZl78egsxb4cu4p2drgBGibh SgrUdQKv2Ye7QabM5F4RKLZ2iQ== -----END CERTIFICATE-----Generated at Sat Sep 5 07:08:17 2026 by rpki-client