$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: FqDLyZJpGbCHhfdzid+1ZXHNdavLjdwg0kGEMw/rDPw= Subject key identifier: BE:43:19:50:38:53:AD:21:45:74:D5:2F:62:76:41:C3:33:C0:1F:7D Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 25BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 25A5 Signing time: Sat 24 Oct 2026 15:42:37 +0000 Manifest this update: Sat 24 Oct 2026 15:42:36 +0000 Manifest next update: Sat 31 Oct 2026 15:42:36 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: CFavQW4wcpRMs+Fj9jIxvUYj2pExP6yjYHMUvTSPkjo=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: b6OXIaFOwHltn0O0kXTL8rEbiURulr3IPmbB4z+Y3qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 15:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9662 (0x25be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Oct 24 15:42:36 2026 GMT Not After : Oct 31 15:42:36 2026 GMT Subject: CN=6adcd1ed-1a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:f1:b5:c2:16:0a:f1:2b:3d:22:0f:7d:ae: 81:c3:9a:bc:3b:50:7a:0f:83:9a:d7:5d:f2:bf:66: 45:96:98:08:68:e6:fc:e5:a7:30:6f:ba:98:b5:bf: ba:cf:0d:a0:67:7b:7c:15:b4:75:d4:9c:3f:90:a9: 2d:8e:9c:a0:12:bb:a5:be:98:74:b3:f7:4b:d3:d1: 6e:23:83:14:52:ec:23:e7:d0:7f:c4:1f:88:37:ca: 82:50:ba:cf:e9:b4:d4:74:8e:bb:ac:8c:76:c8:36: 3a:4a:92:8d:9e:33:b9:b0:f9:1d:e4:a8:78:f6:ad: b8:04:76:69:c1:33:84:3b:47:a4:77:05:a2:33:55: fd:5b:45:67:ca:4c:ee:ae:64:5f:a7:26:0e:93:f7: 46:31:19:9d:5c:5e:9e:89:0d:0d:cf:75:d0:de:87: 44:aa:60:02:9e:00:17:6a:32:b9:da:54:a5:60:32: 6e:89:00:2a:82:16:ce:c3:36:09:5a:c3:5d:0a:c9: 17:9d:a7:75:a2:2a:c6:43:3f:ee:6b:b3:4a:6b:4c: b8:0c:31:93:df:e8:8a:8a:f1:39:08:99:61:81:ea: cd:7b:15:8f:09:1d:10:c8:ef:2b:9f:98:40:58:97: 20:a0:23:eb:3c:22:a0:c4:bf:42:a5:3a:4c:50:e3: ec:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:43:19:50:38:53:AD:21:45:74:D5:2F:62:76:41:C3:33:C0:1F:7D X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:80:57:b4:09:50:c3:9f:2f:b3:35:b2:df:f3:69:39:5b:5b: a8:07:35:c8:dc:86:80:72:56:42:17:e5:fb:0f:21:3c:ac:3d: 43:97:84:41:6d:d4:0c:0c:aa:99:f6:3a:2e:8b:7c:fe:d2:57: 0f:6c:69:b6:56:5a:80:67:00:32:f8:a9:cc:90:5a:67:36:7d: 7e:f2:30:b5:06:2d:c8:6c:d6:80:68:87:2f:0f:3e:ee:28:21: 9c:8e:56:93:a2:bc:d8:8c:b4:06:dc:b0:b6:d8:88:4d:b5:e9: 1b:ba:fc:96:89:81:53:db:a6:ac:2d:fa:32:81:62:35:bb:b5: 3f:6e:e5:b6:72:96:5b:09:af:e3:f3:87:4a:9d:83:3f:7f:28: 19:b5:1f:e1:98:d7:52:03:d0:6c:d9:1a:ab:46:0f:2d:10:ba: ac:23:3e:fc:fc:a3:83:41:ca:cb:29:ce:64:c1:f5:1a:dc:47: 93:4a:83:d2:57:58:86:ee:c1:2b:e1:f0:8e:ab:a7:7b:91:7b: da:1c:2d:fe:69:f8:25:79:bf:06:28:bb:18:76:0f:0a:18:89: 58:21:7a:f6:f0:47:6d:6a:c1:16:da:56:ac:5b:3a:99:95:0d: f2:6f:5a:46:ce:d6:a6:ea:55:93:09:94:08:32:1b:c7:54:07: 72:a6:e4:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjYxMDI0MTU0MjM2WhcNMjYxMDMxMTU0MjM2WjAYMRYwFAYD VQQDEw02YWRjZDFlZC0xYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwTxtcIWCvErPSIPfa6Bw5q8O1B6D4Oa113yv2ZFlpgIaOb85acwb7qYtb+6 zw2gZ3t8FbR11Jw/kKktjpygErulvph0s/dL09FuI4MUUuwj59B/xB+IN8qCULrP 6bTUdI67rIx2yDY6SpKNnjO5sPkd5Kh49q24BHZpwTOEO0ekdwWiM1X9W0Vnykzu rmRfpyYOk/dGMRmdXF6eiQ0Nz3XQ3odEqmACngAXajK52lSlYDJuiQAqghbOwzYJ WsNdCskXnad1oirGQz/ua7NKa0y4DDGT3+iKivE5CJlhgerNexWPCR0QyO8rn5hA WJcgoCPrPCKgxL9CpTpMUOPsfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5DGVA4 U60hRXTVL2J2QcMzwB99MB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIYBXtAlQw58vszWy3/NpOVtbqAc1yNyGgHJWQhfl+w8hPKw9Q5eEQW3UDAyq mfY6Lot8/tJXD2xptlZagGcAMvipzJBaZzZ9fvIwtQYtyGzWgGiHLw8+7ighnI5W k6K82Iy0BtywttiITbXpG7r8lomBU9umrC36MoFiNbu1P27ltnKWWwmv4/OHSp2D P38oGbUf4ZjXUgPQbNkaq0YPLRC6rCM+/Pyjg0HKyynOZMH1GtxHk0qD0ldYhu7B K+Hwjqune5F72hwt/mn4JXm/Bii7GHYPChiJWCF69vBHbWrBFtpWrFs6mZUN8m9a Rs7WpupVkwmUCDIbx1QHcqbkGQ== -----END CERTIFICATE-----Generated at Sun Oct 25 17:58:15 2026 by rpki-client