$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: iQep3oAznfxMOuploZMJEfsm7E7vpk7M2kF5xKY2CCU= Subject key identifier: 42:FD:C2:3C:2F:51:34:D6:F6:D1:F8:58:AE:E3:EE:5F:0C:EC:68:46 Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0C78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0C04 Signing time: Sat 26 Sep 2026 19:09:27 +0000 Manifest this update: Sat 26 Sep 2026 19:09:27 +0000 Manifest next update: Sat 03 Oct 2026 19:09:27 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: NSVib4UqYYFqQmyJ2RfKqJYlu1Mi8gXEOQp5Deq7w4Q=) 2: B66F0C58817111EFB121970CC4F9AE02.roa (hash: ouZu/jn5ZKmwfIcE3ghEaFkVLB6My1iKKzR3gtO189k=) 3: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: jHzcYJ90DjGoipsCrkdoqarlimj3fDzkOjXCClEv3uY=) 4: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: x0qoqY3+7NzxsMKW0qJM37L/2r2psmq486dVg8v0Nmc=) 5: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: dL/b9kFR/fDDp+1b1nZMcsVPe3aqtduJg9+GzU7pUT4=) 6: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: Ds4m30JNX7VD0YAwlidc5p6ZJQmsCh5FAge2wZckos0=) 7: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: MsOEzeKC3wQWVNmqxzfHjUDeGAqxXFvTMRBM7uQm94k=) 8: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: rs5DeAiXJUjkmk87XhQXy9eavqmolXmi42NXBuxe1D8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Sep 26 19:09:27 2026 GMT Not After : Oct 3 19:09:27 2026 GMT Subject: CN=6ab81867-7f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:d3:63:87:c7:3f:9d:e4:ec:a6:42:9b:0c: 6e:96:36:be:70:78:20:5c:ea:6c:1d:9b:f9:67:5b: b6:1f:55:dd:fe:c3:9c:e0:a1:2f:6f:b2:72:85:31: 15:81:8c:a7:1a:0f:be:a4:5b:a5:cb:0d:74:ce:26: 24:f4:6d:37:f0:f8:68:e6:3e:cc:cf:9a:1c:6a:c7: fb:63:12:45:eb:52:49:38:f2:d7:21:e6:3e:41:4e: 84:3a:16:1f:05:91:4a:e9:b0:9f:a8:92:39:38:0f: 18:83:28:28:3a:8c:2c:7e:6b:d4:08:70:69:1d:ff: 2e:42:14:52:19:b9:01:c6:d1:70:3f:10:c4:40:2d: 51:e4:e7:8f:d1:9b:5a:8e:38:0b:4c:4b:38:2a:66: b6:3d:81:0b:f6:19:8b:c7:02:aa:5c:f4:17:ed:d3: 98:e4:bd:b1:05:99:ec:01:e3:dd:96:1c:6d:e9:30: d5:aa:fa:75:42:ea:8a:24:02:6f:64:06:ba:c1:65: 4a:a3:83:ba:9a:46:57:e0:98:4e:e2:e2:44:14:12: 56:48:f2:9b:8e:5d:c8:5f:85:6f:af:eb:98:5b:71: da:b4:5f:5f:08:d3:3a:bd:04:42:61:7b:b7:ee:88: 39:4d:ec:6c:87:c3:70:8a:34:86:aa:dd:53:f4:66: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FD:C2:3C:2F:51:34:D6:F6:D1:F8:58:AE:E3:EE:5F:0C:EC:68:46 X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:29:c3:ec:c0:7c:be:59:94:95:4b:ff:d4:7a:bb:b0:28:67: 7d:86:c0:3d:3a:91:3b:70:86:a2:4b:f9:8a:cc:3b:6d:9d:ac: 7e:10:9f:19:22:0b:2f:2a:05:8a:db:ba:d4:9a:42:54:47:df: eb:20:70:72:14:d8:60:66:e3:09:87:fd:61:b9:c7:36:1c:67: f4:b0:7b:a4:d8:08:5e:a9:47:3f:ed:33:5e:41:11:95:8e:ed: d4:f8:d7:4e:0d:0a:6e:bf:05:f9:ee:9b:11:46:64:6f:42:0e: cc:69:f4:66:c0:43:c3:1d:27:e6:1d:3e:ae:4a:e3:42:b8:69: df:24:16:28:e6:d5:78:8b:82:fa:33:3b:1a:b0:da:c3:75:98: f4:cf:ae:a6:25:d0:ce:d9:15:23:0b:a8:78:67:43:e8:f4:e5: d0:c4:c6:51:62:b2:79:a6:53:70:c9:af:4c:39:43:ab:e5:90: b2:01:17:18:73:34:44:6b:be:06:3c:c4:a4:15:f5:f7:df:49: 0c:71:47:f0:04:3a:24:19:c3:82:0b:af:8b:99:1a:67:d3:c4: 62:11:f0:84:5d:c3:12:33:05:0f:1a:43:cd:ff:33:1c:80:4f: 9a:29:49:0e:5d:f7:66:d0:71:b0:9f:a9:40:08:b2:e1:d8:25: 1d:0c:b0:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjYwOTI2MTkwOTI3WhcNMjYxMDAzMTkwOTI3WjAYMRYwFAYD VQQDEw02YWI4MTg2Ny03ZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZTTY4fHP53k7KZCmwxulja+cHggXOpsHZv5Z1u2H1Xd/sOc4KEvb7JyhTEV gYynGg++pFulyw10ziYk9G038Pho5j7Mz5ocasf7YxJF61JJOPLXIeY+QU6EOhYf BZFK6bCfqJI5OA8YgygoOowsfmvUCHBpHf8uQhRSGbkBxtFwPxDEQC1R5OeP0Zta jjgLTEs4Kma2PYEL9hmLxwKqXPQX7dOY5L2xBZnsAePdlhxt6TDVqvp1QuqKJAJv ZAa6wWVKo4O6mkZX4JhO4uJEFBJWSPKbjl3IX4Vvr+uYW3HatF9fCNM6vQRCYXu3 7og5Texsh8NwijSGqt1T9GaLPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEL9wjwv UTTW9tH4WK7j7l8M7GhGMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqSnD7MB8vlmUlUv/1Hq7sChnfYbAPTqRO3CGokv5isw7bZ2sfhCfGSILLyoF itu61JpCVEff6yBwchTYYGbjCYf9YbnHNhxn9LB7pNgIXqlHP+0zXkERlY7t1PjX Tg0Kbr8F+e6bEUZkb0IOzGn0ZsBDwx0n5h0+rkrjQrhp3yQWKObVeIuC+jM7GrDa w3WY9M+upiXQztkVIwuoeGdD6PTl0MTGUWKyeaZTcMmvTDlDq+WQsgEXGHM0RGu+ BjzEpBX1999JDHFH8AQ6JBnDgguvi5kaZ9PEYhHwhF3DEjMFDxpDzf8zHIBPmilJ Dl33ZtBxsJ+pQAiy4dglHQywMQ== -----END CERTIFICATE-----Generated at Sun Sep 27 08:25:47 2026 by rpki-client