$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft File: 2m3rP2XMI2eEg6drt445Hy-cZCE.mft (raw, json) Hash identifier: dVsSuzqxhFzehBP5VAxYneWW0igRsi2MSXWHUuzHVzg= Subject key identifier: 89:08:06:54:D1:6B:1A:57:3C:7E:08:3D:99:4A:96:60:04:58:F1:F5 Authority key identifier: DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 Certificate issuer: /CN=A91CE959/serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft Manifest number: 5A Signing time: Thu 03 Sep 2026 03:57:06 +0000 Manifest this update: Thu 03 Sep 2026 03:57:05 +0000 Manifest next update: Thu 10 Sep 2026 03:57:05 +0000 Files and hashes: 1: 2m3rP2XMI2eEg6drt445Hy-cZCE.crl (hash: yy0L/Cw2daCWUNp3Gy+7fuq9NhxSi9Axl+u7TYdUbns=) 2: DD10EC4221D311F1A9814A2D233D8C67.roa (hash: /yzAJPiNJxpo9+q64etk5otNPKwR6uKsst/Nxwyi5gg=) 3: E302E312268811F185CD3CFFB4833773.roa (hash: 1Tn0eJ0bGdKPh/87544Mu+NSKKv9zP/9QDVNwO5GdQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 03:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Validity Not Before: Sep 3 03:57:05 2026 GMT Not After : Sep 10 03:57:05 2026 GMT Subject: CN=6a98f011-848f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:86:e6:69:dd:94:61:2c:e4:db:d9:e8:73:80: 1f:48:39:cf:5f:07:e1:88:3e:c7:08:9e:5a:c8:69: 0e:49:83:57:7e:cb:3a:7b:e2:9f:27:43:88:f9:95: 97:bf:f1:eb:15:7d:d0:e7:a6:f3:19:f6:a1:ad:3b: a0:a7:7e:6f:7a:36:e9:6c:3b:49:43:61:ea:9f:ac: 0a:fb:d2:39:98:e4:63:6c:1b:cf:97:ab:b7:ee:92: bb:fb:16:35:13:3a:97:76:3b:c8:f3:57:89:a7:3e: ce:ad:a9:69:8e:ab:df:e6:03:a9:26:91:30:58:47: b5:df:31:b7:1e:d5:bd:7c:9a:3c:0c:ea:e9:62:61: c2:cd:01:d0:d2:0f:73:52:52:e8:a1:52:aa:e5:93: 92:a3:19:70:b0:3c:42:2e:d4:ef:fd:5d:11:9d:af: 56:4f:c6:81:0e:8b:57:98:3c:65:95:9c:14:b8:8e: b3:f1:5c:02:d1:95:7a:94:7a:f5:2d:68:70:68:02: f0:21:b1:56:94:96:92:66:0b:cb:92:15:a2:48:65: 97:36:02:f3:96:1a:c8:9b:db:0e:13:d5:4e:66:29: 1f:a4:c0:8d:f4:26:2d:6b:1b:20:0f:06:7d:de:e7: 5e:da:2e:c5:e5:0b:d0:24:1b:7e:11:cc:da:a2:22: 43:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:08:06:54:D1:6B:1A:57:3C:7E:08:3D:99:4A:96:60:04:58:F1:F5 X509v3 Authority Key Identifier: keyid:DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:63:61:5c:9a:cf:1a:46:79:b1:e6:cc:ac:d4:28:71:9a:7d: 37:00:45:4e:0d:96:fc:5c:7b:39:17:3f:4f:24:7a:66:01:fa: 63:14:11:82:27:33:91:6b:67:cd:01:52:8b:40:3e:e0:f2:d5: 99:f9:c9:2b:e7:29:d8:68:26:b3:0f:0e:42:e1:53:ae:03:68: b0:a2:4e:a7:c8:3d:77:44:f6:96:ee:ee:18:08:f8:7c:c8:6c: 4f:84:e5:ba:6a:21:fe:e2:9c:0f:81:ca:61:19:ba:ae:f3:15: 1f:10:28:13:f2:3b:a1:a6:44:ba:13:44:88:77:70:ff:8b:ae: ac:b6:73:31:3b:ec:11:50:c5:ff:bd:e5:04:a2:fc:55:e4:37: fd:2e:ea:bd:a9:2a:c6:53:dd:55:86:fe:fe:dd:3b:ea:a6:8c: 38:46:8c:bc:c8:61:97:06:dc:55:fc:8d:a7:2b:b2:e8:14:bf: 4b:70:d7:ed:df:55:0e:a3:30:db:d8:e8:55:38:3d:6d:77:8f: af:c3:95:ec:56:0e:4c:46:e9:0a:74:ae:b2:56:a9:dc:27:b1: 6d:88:92:f8:06:4f:58:94:f8:ac:1d:09:d1:59:a3:4c:27:7d: db:7d:37:81:c7:cc:6c:ff:84:8a:4f:cb:12:9e:b8:aa:7b:49: 00:5b:09:44 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTk1OTExMC8GA1UEBRMoREE2REVCM0Y2NUNDMjM2Nzg0ODNBNzZCQjc4RTM5MUYy RjlDNjQyMTAeFw0yNjA5MDMwMzU3MDVaFw0yNjA5MTAwMzU3MDVaMBgxFjAUBgNV BAMTDTZhOThmMDExLTg0OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCchuZp3ZRhLOTb2ehzgB9IOc9fB+GIPscInlrIaQ5Jg1d+yzp74p8nQ4j5lZe/ 8esVfdDnpvMZ9qGtO6Cnfm96NulsO0lDYeqfrAr70jmY5GNsG8+Xq7fukrv7FjUT Opd2O8jzV4mnPs6tqWmOq9/mA6kmkTBYR7XfMbce1b18mjwM6uliYcLNAdDSD3NS UuihUqrlk5KjGXCwPEIu1O/9XRGdr1ZPxoEOi1eYPGWVnBS4jrPxXALRlXqUevUt aHBoAvAhsVaUlpJmC8uSFaJIZZc2AvOWGsib2w4T1U5mKR+kwI30Ji1rGyAPBn3e 517aLsXlC9AkG34RzNqiIkNXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiQgGVNFr Glc8fgg9mUqWYARY8fUwHwYDVR0jBBgwFoAU2m3rP2XMI2eEg6drt445Hy+cZCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFOTU5L0Y0Nzc1NUI4MjFC MjExRjE5NTlERjk3N0FBRUU1MjhFLzJtM3JQMlhNSTJlRWc2ZHJ0NDQ1SHktY1pD RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMm0zclAyWE1JMmVFZzZkcnQ0NDVIeS1jWkNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF OTU5L0Y0Nzc1NUI4MjFCMjExRjE5NTlERjk3N0FBRUU1MjhFLzJtM3JQMlhNSTJl RWc2ZHJ0NDQ1SHktY1pDRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCpY2Fcms8aRnmx5sys1Chxmn03AEVODZb8XHs5Fz9PJHpmAfpjFBGCJzORa2fN AVKLQD7g8tWZ+ckr5ynYaCazDw5C4VOuA2iwok6nyD13RPaW7u4YCPh8yGxPhOW6 aiH+4pwPgcphGbqu8xUfECgT8juhpkS6E0SId3D/i66stnMxO+wRUMX/veUEovxV 5Df9Luq9qSrGU91Vhv7+3Tvqpow4Roy8yGGXBtxV/I2nK7LoFL9LcNft31UOozDb 2OhVOD1td4+vw5XsVg5MRukKdK6yVqncJ7FtiJL4Bk9YlPisHQnRWaNMJ33bfTeB x8xs/4SKT8sSnriqe0kAWwlE -----END CERTIFICATE-----Generated at Fri Sep 4 23:44:40 2026 by rpki-client