$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json) Hash identifier: 4KNTKc0HPsTLN2Dy+idgpkZsHU4ptydzBbhrLwbMA+s= Subject key identifier: BF:31:A2:7D:33:D1:0D:15:00:5F:A0:8B:8E:F0:6C:42:D8:32:F8:C5 Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0D1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft Manifest number: 0D0F Signing time: Tue 06 Oct 2026 18:28:25 +0000 Manifest this update: Tue 06 Oct 2026 18:28:25 +0000 Manifest next update: Tue 13 Oct 2026 18:28:25 +0000 Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: YRpfbmAc7ih2W1p7qwjMRnVo50ootKBopf2i+E8XYUc=) 2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: P3cA4Ey/V8rl3zAePZZSJQ01VWq57x0zCe1ptcZIm4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3355 (0xd1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Oct 6 18:28:25 2026 GMT Not After : Oct 13 18:28:25 2026 GMT Subject: CN=6ac53dc9-df7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:de:80:6a:e1:41:1b:65:9b:31:f1:d6:c6: e8:62:a5:76:b2:7b:6f:cf:8f:2d:da:d0:17:95:c1: 2f:41:e6:b3:38:6a:8a:87:65:c9:4a:dc:48:d2:f0: a0:90:d0:b9:d0:72:10:eb:5a:f4:7a:3c:b5:ed:5f: 95:c7:49:87:99:83:5b:d0:b7:8c:0f:b1:0c:f8:93: 35:1c:2a:f6:25:f7:28:cc:4d:6b:a5:72:d1:9e:a8: 3b:64:cc:31:71:d8:69:d8:b1:44:89:07:03:c3:b2: 2a:27:06:96:94:35:e3:bf:e2:93:0b:28:56:d0:bc: 2c:61:d6:b4:22:5e:77:5d:f5:94:3c:4d:c5:8d:b2: ce:ef:ef:c7:8b:8a:ce:09:a3:9c:07:92:27:7e:1d: 8a:d2:35:8c:3c:14:45:83:b4:77:8f:04:a2:d0:88: c4:77:3b:5b:24:56:54:9c:d7:12:83:50:eb:ee:4b: b9:8b:22:3d:69:c2:74:d6:13:18:d0:8f:0f:4b:26: 2e:55:0a:6d:fc:c0:f9:fc:1f:33:4c:14:a5:6d:9f: 41:74:b0:02:40:d1:ac:1b:21:58:64:9a:27:1b:0e: bd:df:c0:72:9d:20:6a:b4:f2:a9:f9:ba:9d:43:c6: f4:3a:7a:f0:71:95:1e:70:ef:f0:9e:3e:87:dc:85: 70:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:31:A2:7D:33:D1:0D:15:00:5F:A0:8B:8E:F0:6C:42:D8:32:F8:C5 X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a3:fc:cc:f7:87:72:00:2f:92:1c:8a:d1:54:1c:34:bd:bb: f9:f5:70:e3:c6:ca:cf:6c:e5:42:3c:05:c2:d0:01:42:8e:f9: c4:06:c2:09:d4:53:88:71:91:fc:51:b3:5e:a8:1f:d3:39:68: 69:a2:29:6b:00:98:69:cc:e1:9a:77:c0:93:77:3c:68:1f:8e: 6c:1c:c4:3b:61:78:fd:04:e5:5e:c9:cb:08:a9:5a:03:63:9b: 99:45:1e:ea:6a:fa:c4:90:4d:f0:ed:6f:cc:8a:da:32:99:e6: b1:51:c5:7f:e7:3e:7b:0e:8a:92:57:f6:4f:df:24:98:cf:c9: 82:2f:7d:91:f0:ee:24:a6:af:76:4f:44:38:33:ab:70:3c:89: 09:eb:77:d5:d1:e1:1e:ba:45:4b:80:76:a8:c6:d5:96:97:4c: 39:b8:c2:bf:cc:50:d3:b8:a3:42:98:54:17:23:ff:de:f4:9f: 20:e6:d0:bf:de:81:41:91:b5:b5:44:f9:2b:0f:b2:e3:64:7e: a8:21:49:9f:08:9a:09:09:4d:d2:17:3d:bf:d8:38:0e:17:5a: 39:a0:ec:3b:c2:5d:32:8b:22:36:11:57:8b:f8:66:3d:30:44: 63:61:50:6b:39:72:b6:00:c2:1b:c0:ba:d8:2f:a4:86:90:e4: 15:4b:35:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjYxMDA2MTgyODI1WhcNMjYxMDEzMTgyODI1WjAYMRYwFAYD VQQDEw02YWM1M2RjOS1kZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLjegGrhQRtlmzHx1sboYqV2sntvz48t2tAXlcEvQeazOGqKh2XJStxI0vCg kNC50HIQ61r0ejy17V+Vx0mHmYNb0LeMD7EM+JM1HCr2JfcozE1rpXLRnqg7ZMwx cdhp2LFEiQcDw7IqJwaWlDXjv+KTCyhW0LwsYda0Il53XfWUPE3FjbLO7+/Hi4rO CaOcB5Infh2K0jWMPBRFg7R3jwSi0IjEdztbJFZUnNcSg1Dr7ku5iyI9acJ01hMY 0I8PSyYuVQpt/MD5/B8zTBSlbZ9BdLACQNGsGyFYZJonGw6938BynSBqtPKp+bqd Q8b0OnrwcZUecO/wnj6H3IVwWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8xon0z 0Q0VAF+gi47wbELYMvjFMB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTdEQi80RTQxMEFDRTBGNkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVu SG84eHJnUGp6SnJFWmcyVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADqP8zPeHcgAvkhyK0VQcNL27+fVw48bKz2zlQjwFwtABQo75xAbCCdRTiHGR /FGzXqgf0zloaaIpawCYaczhmnfAk3c8aB+ObBzEO2F4/QTlXsnLCKlaA2ObmUUe 6mr6xJBN8O1vzIraMpnmsVHFf+c+ew6Kklf2T98kmM/Jgi99kfDuJKavdk9EODOr cDyJCet31dHhHrpFS4B2qMbVlpdMObjCv8xQ07ijQphUFyP/3vSfIObQv96BQZG1 tUT5Kw+y42R+qCFJnwiaCQlN0hc9v9g4DhdaOaDsO8JdMosiNhFXi/hmPTBEY2FQ azlytgDCG8C62C+khpDkFUs1eg== -----END CERTIFICATE-----Generated at Wed Oct 7 04:23:50 2026 by rpki-client