$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json) Hash identifier: HXmqBQgiJYvcpqVF0z+7zFsT8uidc5neScyxF2o8T7Y= Subject key identifier: 2B:59:9A:F7:C2:AE:79:0A:12:79:3C:D1:D4:3C:7F:B2:A0:CD:11:C4 Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Certificate serial: 0B11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft Manifest number: 0AEF Signing time: Fri 18 Sep 2026 19:22:34 +0000 Manifest this update: Fri 18 Sep 2026 19:22:33 +0000 Manifest next update: Fri 25 Sep 2026 19:22:33 +0000 Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: UyiXpFBAAnyATiyN14jA96rcpXOcIAhlqdV1SJwfIT4=) 2: 02BA60CCDADF11F08398647877D3641D.roa (hash: VTqipcXUO8c22f+xXYM6JyBDiLleZ9VVpmvmijuhsTw=) 3: EBCAEC9EB0BA11F19005EE656611F970.roa (hash: H2pxRDwAOayS+k2blVsQkPbyhFdrjDFPdWPptTUTpyc=) 4: ECEABB7CB0BA11F19005EE656611F970.roa (hash: nYtTx86y8i/3+MIxsW3FIE2hyx0lwhToi48Tf/0i8Vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2833 (0xb11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Validity Not Before: Sep 18 19:22:33 2026 GMT Not After : Sep 25 19:22:33 2026 GMT Subject: CN=6aad8f7a-5909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:48:5e:ab:ea:2a:da:2d:f3:31:6f:b0:f1: f0:a6:1b:e2:c3:b7:14:ad:2f:b8:95:c9:af:74:ae: ae:3e:56:23:66:83:1e:17:28:ef:c1:82:12:4a:05: b1:3e:97:22:f4:0f:82:58:0b:f2:06:dd:ba:58:4f: 5a:82:82:b8:2f:a6:98:6f:d6:80:d3:83:33:20:a3: df:bc:8c:06:21:cd:b9:e4:09:d0:06:e0:8e:13:74: 4b:56:a2:73:d8:7c:31:73:64:62:2b:19:e3:fc:0f: b4:85:6e:91:4f:2c:fb:c7:e9:96:05:c1:f0:41:48: f4:5c:d8:78:37:c8:48:a9:c3:21:67:d3:4a:0a:5a: 3e:ba:54:b1:cc:0b:f9:d5:0d:50:9e:aa:1d:bf:8d: 52:37:12:fc:73:cf:dd:0f:8f:b2:e3:7c:ac:bf:23: 85:6e:90:26:f8:5f:40:3d:5e:70:8f:23:ff:6c:ab: b1:b3:45:8e:fb:34:34:5f:ab:45:78:6d:46:65:a9: 11:f0:b6:93:b2:35:af:cd:07:cc:ee:69:1c:7c:47: 92:0f:74:ba:78:42:f3:76:9e:ed:63:76:f5:28:29: 3d:54:5c:9b:9c:34:52:74:f8:2d:21:c0:1c:30:19: 6c:49:d4:f9:f8:2e:89:2c:ef:17:65:0f:05:08:83: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:59:9A:F7:C2:AE:79:0A:12:79:3C:D1:D4:3C:7F:B2:A0:CD:11:C4 X509v3 Authority Key Identifier: keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:39:bb:b5:4d:66:8a:56:06:e5:5a:44:d1:f1:ec:a3:ce:8a: 09:98:0f:54:72:15:2b:73:29:f3:0c:24:e5:25:76:34:81:a5: 62:16:d3:27:87:52:cf:6a:9c:69:9e:40:18:b1:08:d3:8c:33: 8b:4f:4e:c4:22:21:1a:42:af:3d:83:7e:cf:80:89:a5:82:92: 44:d4:fb:30:2b:5e:3c:ce:2e:10:84:99:70:6e:bc:02:f7:a7: ee:34:c7:cf:73:73:81:c1:b3:46:f5:4a:cb:31:99:71:e5:53: 51:15:40:b4:22:0e:c4:a2:41:d0:42:e4:5c:e2:6d:53:3f:59: e6:70:eb:4d:7a:ff:f5:51:7e:4e:47:fc:27:2b:fc:b3:64:dd: e9:1a:cd:72:1c:1c:a1:a0:5f:8a:fd:a2:4d:8a:69:73:83:1c: c0:67:b7:c8:04:e1:d0:91:d4:b8:c4:ad:3f:8e:37:09:77:24: c9:9e:10:48:61:10:af:ce:fc:bb:41:e0:96:54:13:8a:4a:bd: 23:79:f8:d0:74:9f:d3:b2:16:2a:f2:87:61:46:3c:9a:57:b8: 0a:21:6d:c3:f3:3b:ad:ba:8d:e0:bf:9a:15:c5:56:97:f7:fb: 45:4a:25:2f:1c:78:a1:6e:61:40:73:de:60:eb:15:ca:3a:0a: 83:1f:c9:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx Q0M5NkJBNzQwHhcNMjYwOTE4MTkyMjMzWhcNMjYwOTI1MTkyMjMzWjAYMRYwFAYD VQQDEw02YWFkOGY3YS01OTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqNIXqvqKtot8zFvsPHwphviw7cUrS+4lcmvdK6uPlYjZoMeFyjvwYISSgWx Ppci9A+CWAvyBt26WE9agoK4L6aYb9aA04MzIKPfvIwGIc255AnQBuCOE3RLVqJz 2Hwxc2RiKxnj/A+0hW6RTyz7x+mWBcHwQUj0XNh4N8hIqcMhZ9NKClo+ulSxzAv5 1Q1Qnqodv41SNxL8c8/dD4+y43ysvyOFbpAm+F9APV5wjyP/bKuxs0WO+zQ0X6tF eG1GZakR8LaTsjWvzQfM7mkcfEeSD3S6eELzdp7tY3b1KCk9VFybnDRSdPgtIcAc MBlsSdT5+C6JLO8XZQ8FCIMKuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtZmvfC rnkKEnk80dQ8f7KgzRHEMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3 YnM1Y3MxVzR4MWNjeVd1blEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzjm7tU1milYG5VpE0fHso86KCZgPVHIVK3Mp8wwk5SV2NIGlYhbTJ4dSz2qc aZ5AGLEI04wzi09OxCIhGkKvPYN+z4CJpYKSRNT7MCtePM4uEISZcG68Aven7jTH z3NzgcGzRvVKyzGZceVTURVAtCIOxKJB0ELkXOJtUz9Z5nDrTXr/9VF+Tkf8Jyv8 s2Td6RrNchwcoaBfiv2iTYppc4McwGe3yATh0JHUuMStP443CXckyZ4QSGEQr878 u0HgllQTikq9I3n40HSf07IWKvKHYUY8mle4CiFtw/M7rbqN4L+aFcVWl/f7RUol Lxx4oW5hQHPeYOsVyjoKgx/JRg== -----END CERTIFICATE-----Generated at Sat Sep 19 21:31:22 2026 by rpki-client