$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.mft File: mpA3HxZsjFMSUxk96j5Y_T2_a5c.mft (raw, json) Hash identifier: amjfRaBWaPsANzT70ztHzcvC8LCeBp5PUUUddpaemLo= Subject key identifier: B4:38:48:E5:85:2D:84:6D:3E:A0:42:08:E4:DC:79:9F:08:0E:D8:A8 Authority key identifier: 9A:90:37:1F:16:6C:8C:53:12:53:19:3D:EA:3E:58:FD:3D:BF:6B:97 Certificate issuer: /CN=A91C9ADB/serialNumber=9A90371F166C8C531253193DEA3E58FD3DBF6B97 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpA3HxZsjFMSUxk96j5Y_T2_a5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.mft Manifest number: 2A Signing time: Sat 17 Oct 2026 09:31:22 +0000 Manifest this update: Sat 17 Oct 2026 09:31:22 +0000 Manifest next update: Sat 24 Oct 2026 09:31:22 +0000 Files and hashes: 1: mpA3HxZsjFMSUxk96j5Y_T2_a5c.crl (hash: 53TzxESWFOm+7ofVbJyN9e/EqvVthQywDzjuFRkkaUk=) 2: 24D9DEEE8F1611F1B716621D3511F970.roa (hash: i/6ea57w2taA3R2xOmg8WFa/iDrumoCn0OOXfOp6R18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.crl rsync://rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpA3HxZsjFMSUxk96j5Y_T2_a5c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 09:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9ADB, serialNumber=9A90371F166C8C531253193DEA3E58FD3DBF6B97 Validity Not Before: Oct 17 09:31:22 2026 GMT Not After : Oct 24 09:31:22 2026 GMT Subject: CN=6ad3406a-9345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:02:22:fd:3e:97:ac:f7:35:9f:eb:fd:04: 7d:e4:8d:c1:5b:1f:60:da:6e:d4:c7:06:bb:eb:6f: d5:a9:a3:31:04:5f:e1:2c:be:ff:e1:e2:45:bf:a8: 38:a3:d7:2f:23:1a:b5:18:48:f8:14:db:e9:2e:c6: 32:df:a7:ce:e5:b4:61:f7:a4:ef:a3:d8:b8:d8:cd: 1a:ae:fe:31:bd:0a:41:26:2f:c7:d1:3b:ef:a2:db: 64:e8:46:51:89:51:77:6a:9c:55:25:f5:7b:b5:bb: 20:a2:cc:6c:e5:c0:42:df:27:0b:f9:a6:63:02:a2: ec:83:f8:3b:5e:51:34:c8:2a:a7:a6:ef:a9:cd:1c: 6e:0d:2e:5a:ab:fb:13:60:a2:5d:ac:bc:fe:0c:3f: b6:18:5b:4f:28:e7:7b:a2:29:88:f1:4d:01:22:34: 52:cb:14:9a:86:57:56:d3:8e:4f:eb:e3:c1:14:74: 40:e9:ef:0e:5a:32:5c:4f:69:5c:04:e0:82:48:d1: b4:dd:eb:5f:19:4f:d2:4a:0e:40:7e:46:58:87:1f: 32:0e:7d:6d:e2:91:ba:9b:a2:db:8c:84:f3:3f:e2: 90:86:86:bb:89:c4:ab:9b:a5:55:91:a7:a3:91:a2: 01:28:37:47:b0:15:6f:70:64:e1:96:c1:04:12:90: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:48:E5:85:2D:84:6D:3E:A0:42:08:E4:DC:79:9F:08:0E:D8:A8 X509v3 Authority Key Identifier: keyid:9A:90:37:1F:16:6C:8C:53:12:53:19:3D:EA:3E:58:FD:3D:BF:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpA3HxZsjFMSUxk96j5Y_T2_a5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:5c:b8:04:1d:a7:50:0a:7f:45:96:11:4f:1f:e2:eb:0a:d0: f5:83:d5:46:75:07:be:bc:52:f7:ef:e0:52:cf:7e:10:2f:d7: b3:f8:71:0a:cc:6e:d4:3d:78:7a:9e:2e:ce:e6:de:b7:f0:b5: 4b:4b:f7:52:35:b8:46:10:30:5e:4d:a8:9a:29:87:ac:15:1d: b4:be:8b:ad:b4:5a:92:c8:61:02:72:cc:0d:7f:39:6d:61:72: 6a:28:5f:d8:2a:c2:a2:f4:28:d0:1b:b8:1c:e0:a4:74:8c:95: 34:1c:06:ab:c4:e0:31:e0:3d:eb:f1:d1:66:35:da:b9:f1:15: 1b:79:da:97:3e:2f:65:90:ca:59:a9:5f:d5:b3:ed:0a:45:40: f1:29:f1:20:34:cf:8a:5d:9a:c6:f4:9c:3e:98:fe:e5:a4:e8: 5e:f3:ff:32:8f:fe:4b:2b:5b:b2:28:ce:fe:f6:ca:20:a9:39: 52:7e:fb:80:28:ba:1c:5e:cd:67:59:d4:9a:f0:37:44:8c:18: 0f:f1:32:0b:6c:35:bf:94:f9:4a:46:23:f2:95:79:2d:32:1e: 2e:20:c0:aa:8f:d1:d2:d6:ee:70:35:87:93:7b:4d:35:ab:59: f9:aa:fa:0f:41:76:16:54:a6:55:bd:ce:09:86:ea:a9:96:83: 78:a4:f8:c2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUFEQjExMC8GA1UEBRMoOUE5MDM3MUYxNjZDOEM1MzEyNTMxOTNERUEzRTU4RkQz REJGNkI5NzAeFw0yNjEwMTcwOTMxMjJaFw0yNjEwMjQwOTMxMjJaMBgxFjAUBgNV BAMTDTZhZDM0MDZhLTkzNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpugIi/T6XrPc1n+v9BH3kjcFbH2DabtTHBrvrb9WpozEEX+Esvv/h4kW/qDij 1y8jGrUYSPgU2+kuxjLfp87ltGH3pO+j2LjYzRqu/jG9CkEmL8fRO++i22ToRlGJ UXdqnFUl9Xu1uyCizGzlwELfJwv5pmMCouyD+DteUTTIKqem76nNHG4NLlqr+xNg ol2svP4MP7YYW08o53uiKYjxTQEiNFLLFJqGV1bTjk/r48EUdEDp7w5aMlxPaVwE 4IJI0bTd618ZT9JKDkB+RliHHzIOfW3ikbqbotuMhPM/4pCGhruJxKubpVWRp6OR ogEoN0ewFW9wZOGWwQQSkPaxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtDhI5YUt hG0+oEII5Nx5nwgO2KgwHwYDVR0jBBgwFoAUmpA3HxZsjFMSUxk96j5Y/T2/a5cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QURCLzFEQTBERDA0OEYx NTExRjE5MzM3NjJCOTM0MTFGOTcwL21wQTNIeFpzakZNU1V4azk2ajVZX1QyX2E1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbXBBM0h4WnNqRk1TVXhrOTZqNVlfVDJfYTVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QURCLzFEQTBERDA0OEYxNTExRjE5MzM3NjJCOTM0MTFGOTcwL21wQTNIeFpzakZN U1V4azk2ajVZX1QyX2E1Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBiXLgEHadQCn9FlhFPH+LrCtD1g9VGdQe+vFL37+BSz34QL9ez+HEKzG7UPXh6 ni7O5t638LVLS/dSNbhGEDBeTaiaKYesFR20vouttFqSyGECcswNfzltYXJqKF/Y KsKi9CjQG7gc4KR0jJU0HAarxOAx4D3r8dFmNdq58RUbedqXPi9lkMpZqV/Vs+0K RUDxKfEgNM+KXZrG9Jw+mP7lpOhe8/8yj/5LK1uyKM7+9sogqTlSfvuAKLocXs1n WdSa8DdEjBgP8TILbDW/lPlKRiPylXktMh4uIMCqj9HS1u5wNYeTe001q1n5qvoP QXYWVKZVvc4JhuqploN4pPjC -----END CERTIFICATE-----Generated at Sat Oct 17 22:29:05 2026 by rpki-client