$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft File: 2QDd8konYiv5ZDdX7byv-u4yHDc.mft (raw, json) Hash identifier: 9HR5IY8Fw5zu9y/nfffiGSgyAog3Z1/GnON+uGDc/3s= Subject key identifier: DF:15:7B:81:7D:30:77:2F:20:6B:48:D5:F3:A7:E5:5B:D0:C8:AD:AA Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Certificate serial: 0F6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft Manifest number: 0F4C Signing time: Sun 04 Oct 2026 17:37:20 +0000 Manifest this update: Sun 04 Oct 2026 17:37:20 +0000 Manifest next update: Sun 11 Oct 2026 17:37:20 +0000 Files and hashes: 1: 2QDd8konYiv5ZDdX7byv-u4yHDc.crl (hash: PiNV3BtUCzH0Nv7UK8aKJ/wnTkzapdNSWCLQJlcs05o=) 2: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (hash: c9S7+kwjScDv1EnjDtuUHgRxKdbpYUp5OTdjbknm8O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3947 (0xf6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7773, serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Validity Not Before: Oct 4 17:37:20 2026 GMT Not After : Oct 11 17:37:20 2026 GMT Subject: CN=6ac28ed0-612a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:90:13:e8:81:14:cb:3c:30:0a:52:2f:94: 24:77:13:32:88:4a:7a:58:b3:76:55:2f:bf:a5:4e: 76:ca:a2:74:99:14:a4:7d:1c:97:58:88:d5:b9:a3: a2:3c:15:29:f6:ab:10:a4:0e:22:71:7f:b8:36:db: 37:04:2d:2d:cc:f5:d1:b1:d6:45:26:89:eb:82:24: c8:2e:7a:65:d8:54:56:57:8c:96:ed:4b:8e:71:34: 72:cc:26:99:d2:a3:a8:b6:43:67:ab:3e:8e:f5:d2: 56:ae:3d:92:26:90:e1:b4:48:d1:91:1c:22:9c:3a: eb:2b:e7:f9:3d:2b:be:98:56:a6:10:4d:dd:1c:29: a2:a0:c9:98:1d:0e:46:b2:5c:10:ce:61:a7:99:f3: 7d:82:0b:d6:a5:96:27:19:94:15:3c:dd:44:6c:f6: 82:5e:4c:13:35:0a:cf:c7:16:0c:8e:da:62:2e:44: fe:6b:d9:cf:c8:e9:44:28:22:68:98:d2:ae:84:af: 2f:6a:7c:56:f4:3f:2a:11:cb:c8:e8:a4:51:32:33: a2:4c:7e:41:9e:f4:32:da:7c:21:3b:45:2b:81:91: 16:8f:d6:f8:e6:26:0a:7d:5d:ec:82:7c:ef:50:f2: 30:41:dc:05:b8:72:5c:ec:9a:51:3a:1a:b8:b7:b6: d9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:15:7B:81:7D:30:77:2F:20:6B:48:D5:F3:A7:E5:5B:D0:C8:AD:AA X509v3 Authority Key Identifier: keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b7:6d:49:7e:f7:83:d6:43:3d:59:85:db:9e:f0:c2:b0:08: da:64:4c:86:0d:39:c8:ef:f0:f1:9d:40:bf:23:4e:72:0e:29: 0d:21:bf:14:6f:c5:ea:4c:15:53:41:da:f2:a9:15:a9:64:87: be:3d:48:d9:8b:36:1d:d2:35:24:e4:fb:d5:3b:9b:46:35:d6: 6a:33:80:fd:7b:cb:43:b5:51:23:ea:f0:66:0e:05:30:53:b2: 25:55:36:00:5a:13:c6:36:af:13:eb:16:b7:b7:98:8c:e6:4d: eb:ec:eb:f0:3a:1f:f6:c5:da:11:5e:12:fc:f3:2a:fd:59:c1: 21:23:7d:6e:11:0e:8e:8f:04:f7:2f:e2:0c:4d:44:1d:f0:ed: 45:f5:b2:ff:b5:f0:54:ef:19:34:ac:05:e4:c6:bb:ae:61:ae: 0e:f8:9c:dd:a7:1d:b1:35:39:d7:d8:a6:74:8c:01:8d:5b:05: 66:a9:74:a9:e4:3e:4e:90:b0:4d:4f:4e:bc:f6:8b:a3:31:90: be:ac:b4:57:ed:48:db:6b:2e:63:89:ca:83:c2:a9:50:21:53: 5e:43:6b:25:39:10:cf:1b:e8:68:3a:f2:1d:d3:df:84:d0:e5: d5:ed:13:0b:c5:81:ec:2f:e2:f9:e2:ca:88:a0:71:31:30:50: 74:80:f5:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB RUUzMjFDMzcwHhcNMjYxMDA0MTczNzIwWhcNMjYxMDExMTczNzIwWjAYMRYwFAYD VQQDEw02YWMyOGVkMC02MTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudWQE+iBFMs8MApSL5QkdxMyiEp6WLN2VS+/pU52yqJ0mRSkfRyXWIjVuaOi PBUp9qsQpA4icX+4Nts3BC0tzPXRsdZFJonrgiTILnpl2FRWV4yW7UuOcTRyzCaZ 0qOotkNnqz6O9dJWrj2SJpDhtEjRkRwinDrrK+f5PSu+mFamEE3dHCmioMmYHQ5G slwQzmGnmfN9ggvWpZYnGZQVPN1EbPaCXkwTNQrPxxYMjtpiLkT+a9nPyOlEKCJo mNKuhK8vanxW9D8qEcvI6KRRMjOiTH5BnvQy2nwhO0UrgZEWj9b45iYKfV3sgnzv UPIwQdwFuHJc7JpROhq4t7bZKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8Ve4F9 MHcvIGtI1fOn5VvQyK2qMB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc3My9BRDMyMjM3Q0EyRTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllp djVaRGRYN2J5di11NHlIRGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIrdtSX73g9ZDPVmF257wwrAI2mRMhg05yO/w8Z1AvyNOcg4pDSG/FG/F6kwV U0Ha8qkVqWSHvj1I2Ys2HdI1JOT71TubRjXWajOA/XvLQ7VRI+rwZg4FMFOyJVU2 AFoTxjavE+sWt7eYjOZN6+zr8Dof9sXaEV4S/PMq/VnBISN9bhEOjo8E9y/iDE1E HfDtRfWy/7XwVO8ZNKwF5Ma7rmGuDvic3acdsTU519imdIwBjVsFZql0qeQ+TpCw TU9OvPaLozGQvqy0V+1I22suY4nKg8KpUCFTXkNrJTkQzxvoaDryHdPfhNDl1e0T C8WB7C/i+eLKiKBxMTBQdID1xw== -----END CERTIFICATE-----Generated at Mon Oct 5 06:29:43 2026 by rpki-client