$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: PE+RqenZh7wB05kbGan439DqBJ//MfWKy7aGgCQikqU= Subject key identifier: DF:BB:6B:12:9A:54:F9:6C:28:CB:CE:4C:DC:A8:EC:B0:80:BB:02:1B Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 023F Signing time: Sat 03 Oct 2026 03:15:01 +0000 Manifest this update: Sat 03 Oct 2026 03:15:00 +0000 Manifest next update: Sat 10 Oct 2026 03:15:00 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: bpCGJhM3hE7G7qKmhV1cAZqdF6jsrlRhZJcWgEQd+HA=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: /BkRK1pd7XeoJPnuYhfXRxi+ZjaehytBLdeWASZ6S3g=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: gNrtkZkKrQjv9VGO4d7icZehe6OSfQ3CzkQRSTsWYpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Oct 3 03:15:00 2026 GMT Not After : Oct 10 03:15:00 2026 GMT Subject: CN=6ac07335-f3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:39:fa:16:e0:40:71:17:dc:e0:aa:7a:e4: e3:da:20:25:e8:24:45:67:73:1e:b5:50:eb:e8:17: 21:5d:e0:bf:9d:bf:bb:1a:12:b1:d7:2e:61:cb:0b: e5:c0:b7:c3:31:6f:88:b6:d4:07:39:82:d3:1f:39: 09:bf:f3:ec:43:cb:99:d6:fa:9e:37:4a:a0:bd:c1: 77:ca:d8:75:eb:92:2f:e1:d1:b6:ef:99:8c:eb:b0: 50:b5:f1:0f:79:de:20:b7:b3:e3:f1:31:e3:bc:33: 4a:87:ad:8a:c3:c7:a1:a8:2f:df:75:85:41:7f:83: b8:25:48:ac:8b:e4:d6:ac:f8:44:de:a7:ff:72:8b: 6b:22:1d:9f:44:be:1a:53:fd:b7:33:2b:c0:cb:d9: dd:a8:9b:b5:d1:71:0b:a7:6f:6d:18:59:6b:3c:85: 2c:c3:1f:67:ea:88:5a:64:33:89:e9:30:ae:dc:45: 4c:79:53:87:f9:71:64:de:ac:b8:1d:e1:01:c1:fa: e5:ef:23:5e:73:09:3c:2d:e3:61:58:a9:45:ab:f2: 97:7a:a9:4e:b7:e1:d1:c7:9d:35:dc:0f:be:f9:da: 5d:18:1d:5b:27:9e:30:ab:f8:89:72:77:00:4b:42: ff:14:84:50:f3:31:94:4a:8f:11:0f:8a:08:5c:ef: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BB:6B:12:9A:54:F9:6C:28:CB:CE:4C:DC:A8:EC:B0:80:BB:02:1B X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f8:28:0d:17:dc:d9:9a:17:18:c5:4f:05:60:07:5b:b8:b1: 15:dc:f9:b7:55:53:53:2a:da:17:e1:15:d0:14:83:e1:e0:60: ef:4c:e6:83:04:74:de:ce:ae:26:87:00:7b:1e:7f:a3:d5:83: 8b:59:9a:e6:6e:29:5e:25:39:31:70:bb:fa:fd:3f:20:87:5e: 87:76:87:c9:f1:e5:38:98:42:8f:5d:cc:3d:70:16:f7:81:10: 8d:40:4f:6d:e2:cf:e2:6f:b8:21:bb:66:f0:e2:3a:4c:4c:de: 85:40:29:7f:b2:84:3d:6b:89:a2:51:48:b7:37:e1:b0:1f:6f: 1c:ca:af:70:05:23:99:d3:cb:cf:dc:c8:c0:a0:90:2a:50:10: 9a:35:73:ae:93:58:96:2b:d3:fe:36:fd:94:68:cc:65:89:db: bc:30:83:38:d2:df:6f:19:b9:82:8e:83:4a:98:a2:2f:85:b3: ec:12:53:7e:3f:9c:b7:f1:2d:25:74:fb:d2:05:d0:63:80:64: 5b:06:53:f2:0f:bc:89:c1:8e:80:90:5e:94:d0:04:e3:cc:e4: 59:86:1f:79:19:4c:ca:da:46:ed:e3:6f:4f:cb:8a:81:a3:c3: 52:c2:3c:0a:94:59:3e:0b:ed:d4:69:79:57:ae:61:55:19:d8: a0:5f:31:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjYxMDAzMDMxNTAwWhcNMjYxMDEwMDMxNTAwWjAYMRYwFAYD VQQDEw02YWMwNzMzNS1mM2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMs5+hbgQHEX3OCqeuTj2iAl6CRFZ3MetVDr6BchXeC/nb+7GhKx1y5hywvl wLfDMW+IttQHOYLTHzkJv/PsQ8uZ1vqeN0qgvcF3yth165Iv4dG275mM67BQtfEP ed4gt7Pj8THjvDNKh62Kw8ehqC/fdYVBf4O4JUisi+TWrPhE3qf/cotrIh2fRL4a U/23MyvAy9ndqJu10XELp29tGFlrPIUswx9n6ohaZDOJ6TCu3EVMeVOH+XFk3qy4 HeEBwfrl7yNecwk8LeNhWKlFq/KXeqlOt+HRx5013A+++dpdGB1bJ54wq/iJcncA S0L/FIRQ8zGUSo8RD4oIXO+JKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+7axKa VPlsKMvOTNyo7LCAuwIbMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYPgoDRfc2ZoXGMVPBWAHW7ixFdz5t1VTUyraF+EV0BSD4eBg70zmgwR03s6u JocAex5/o9WDi1ma5m4pXiU5MXC7+v0/IIdeh3aHyfHlOJhCj13MPXAW94EQjUBP beLP4m+4Ibtm8OI6TEzehUApf7KEPWuJolFItzfhsB9vHMqvcAUjmdPLz9zIwKCQ KlAQmjVzrpNYlivT/jb9lGjMZYnbvDCDONLfbxm5go6DSpiiL4Wz7BJTfj+ct/Et JXT70gXQY4BkWwZT8g+8icGOgJBelNAE48zkWYYfeRlMytpG7eNvT8uKgaPDUsI8 CpRZPgvt1Gl5V65hVRnYoF8xoA== -----END CERTIFICATE-----Generated at Sun Oct 4 13:38:26 2026 by rpki-client