$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json) Hash identifier: lkLvMrP89ibe9OsWoZ/dzIGVteHiCbVma9onDUt5z7I= Subject key identifier: AA:A1:89:3C:3A:E0:E3:F2:4C:BA:5C:8C:71:80:81:5C:11:0C:CE:4C Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft Manifest number: 01C3 Signing time: Thu 17 Sep 2026 04:01:37 +0000 Manifest this update: Thu 17 Sep 2026 04:01:36 +0000 Manifest next update: Thu 24 Sep 2026 04:01:36 +0000 Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: VLg0ziFJy8vERx5P99G+pDTbI2UpX/U1UnM+sn+ybs8=) 2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=) 3: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: i2+AU5JC1CnIuV2WebgbR1MhXzhp17jyG1HTb2dIKP0=) 4: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Sep 17 04:01:36 2026 GMT Not After : Sep 24 04:01:36 2026 GMT Subject: CN=6aab6621-4d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:13:57:ca:a1:bf:fc:05:b6:43:3a:c9:4a: 18:a1:1a:aa:76:8b:a9:94:02:5f:b3:e8:fe:df:b2: 68:3b:b3:db:3e:b3:74:8d:8a:6a:5e:c8:e9:85:4d: d1:51:ae:3e:e8:f3:2c:56:11:f4:ce:54:b2:45:cd: 40:fa:29:23:fe:f1:c7:91:b5:a8:e1:58:e4:9e:b2: ff:44:56:82:e2:c8:c6:92:af:ec:86:71:73:58:d6: a8:e7:ac:39:89:da:a8:49:e4:43:18:10:76:bd:5d: 7f:87:5b:5d:00:ab:38:ee:bd:b0:3f:13:91:fa:b2: 80:b0:86:29:1b:1f:3b:14:e9:69:55:a8:94:3c:8b: 91:6f:06:4a:a4:5e:03:04:67:3f:c8:09:a8:9a:34: d4:f2:09:40:38:f8:c2:f7:bb:09:fd:79:07:ab:3a: 0f:01:04:6f:6b:35:36:91:7e:e0:41:85:83:91:d1: 5c:eb:11:73:1e:a3:c4:24:89:ed:c8:93:37:7d:e4: f8:89:69:62:ad:68:38:00:5a:23:d6:1b:03:6b:87: 0a:b4:a8:e4:81:09:a8:3d:d0:9d:dd:76:5e:74:0a: d8:06:b2:35:c4:93:b1:22:b4:0a:cc:d1:28:8c:6c: 01:81:1c:f4:93:14:41:12:fd:e4:bd:e2:29:f6:35: b1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A1:89:3C:3A:E0:E3:F2:4C:BA:5C:8C:71:80:81:5C:11:0C:CE:4C X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e7:b8:0e:a1:39:73:9b:c2:bc:6f:bb:b3:0d:3c:58:ac:be: 37:c9:a0:e3:7a:0c:a4:67:16:58:f3:d7:8d:c6:f1:1d:a3:72: 11:81:c1:98:75:d2:d2:c7:7e:ae:06:4c:bb:ef:97:b9:3e:b0: c4:d6:fa:70:65:de:e1:cc:77:a4:ab:d3:b0:f4:03:f7:90:f3: 0a:98:a6:a6:06:84:9a:4b:d5:8a:a9:1a:6e:1c:f3:32:f1:f4: 28:c4:e1:ae:ed:ff:49:6b:9e:0c:a0:4a:1d:92:13:eb:d3:50: a2:4c:2a:64:dc:1e:52:8b:62:b8:c1:b2:1e:67:e4:c2:08:93: ec:24:a8:8a:77:98:96:f0:c2:4f:38:0d:31:16:56:67:b2:7a: c7:25:49:36:2c:be:4a:89:0b:b6:8f:c7:52:32:c7:3b:52:2d: d6:ed:21:8e:61:c0:87:6c:a2:b9:66:9c:a3:37:0a:e4:ee:bb: 36:5c:e2:43:c2:e8:41:08:72:e6:7c:20:63:1e:17:eb:e3:6b: 57:ba:6e:c9:d7:fb:82:5e:9f:6c:2c:82:b2:ae:99:7e:89:6f: cd:d3:74:07:8a:18:9d:1b:72:12:d8:da:be:31:2d:29:59:37: 3b:37:5a:96:83:d3:5d:77:74:16:2d:f2:02:99:00:01:1c:2a: 3a:8b:ac:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG MERDNTkzM0QwHhcNMjYwOTE3MDQwMTM2WhcNMjYwOTI0MDQwMTM2WjAYMRYwFAYD VQQDEw02YWFiNjYyMS00ZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRYTV8qhv/wFtkM6yUoYoRqqdouplAJfs+j+37JoO7PbPrN0jYpqXsjphU3R Ua4+6PMsVhH0zlSyRc1A+ikj/vHHkbWo4VjknrL/RFaC4sjGkq/shnFzWNao56w5 idqoSeRDGBB2vV1/h1tdAKs47r2wPxOR+rKAsIYpGx87FOlpVaiUPIuRbwZKpF4D BGc/yAmomjTU8glAOPjC97sJ/XkHqzoPAQRvazU2kX7gQYWDkdFc6xFzHqPEJInt yJM3feT4iWlirWg4AFoj1hsDa4cKtKjkgQmoPdCd3XZedArYBrI1xJOxIrQKzNEo jGwBgRz0kxRBEv3kveIp9jWxDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqhiTw6 4OPyTLpcjHGAgVwRDM5MMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF QWJ6eURVdklERVB3M0ZrejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABee4DqE5c5vCvG+7sw08WKy+N8mg43oMpGcWWPPXjcbxHaNyEYHBmHXS0sd+ rgZMu++XuT6wxNb6cGXe4cx3pKvTsPQD95DzCpimpgaEmkvViqkabhzzMvH0KMTh ru3/SWueDKBKHZIT69NQokwqZNweUotiuMGyHmfkwgiT7CSoineYlvDCTzgNMRZW Z7J6xyVJNiy+SokLto/HUjLHO1It1u0hjmHAh2yiuWacozcK5O67NlziQ8LoQQhy 5nwgYx4X6+NrV7puydf7gl6fbCyCsq6ZfolvzdN0B4oYnRtyEtjavjEtKVk3Ozda loPTXXd0Fi3yApkAARwqOousrQ== -----END CERTIFICATE-----Generated at Fri Sep 18 20:48:49 2026 by rpki-client