$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: pG1XQ3GraCxazAFzwA6LgM7ofJhWJ1i3KeGwjqcScpY= Subject key identifier: 58:6B:FA:26:D5:3F:96:B4:B8:44:15:22:8B:BA:98:8A:A7:6B:C1:90 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 032B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 0321 Signing time: Sat 03 Oct 2026 01:21:58 +0000 Manifest this update: Sat 03 Oct 2026 01:21:57 +0000 Manifest next update: Sat 10 Oct 2026 01:21:57 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: bBzty8O2cqzY5/r02rOb8Xswj2gtchWoRNufFJSFewQ=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: 41XnV0Dfd97uGyPbDbqHHH2dJuzZIdcHH6ek0SjFVbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 01:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 811 (0x32b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Oct 3 01:21:57 2026 GMT Not After : Oct 10 01:21:57 2026 GMT Subject: CN=6ac058b6-e326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:f1:14:7b:7d:e5:e8:54:8d:40:ca:c5:59: 34:43:b8:f4:f4:a2:f2:79:ab:67:52:17:cb:e2:c7: 1e:1d:68:08:e2:f0:ab:bb:20:b7:72:fb:5b:ea:7e: 5c:2c:1b:12:44:ff:65:93:af:dd:ed:93:fa:06:64: bb:78:0c:4f:fa:24:a2:d4:52:6c:79:e7:ed:54:85: 22:5c:ca:4c:64:2c:42:77:cd:0e:ec:93:c0:98:ea: 94:cf:69:a7:30:63:4c:ab:82:12:32:c8:fd:d4:7d: df:78:14:11:ab:6e:75:b3:22:47:e3:9d:45:c2:21: 60:a1:38:94:e9:94:e1:a9:da:de:19:d5:b9:8f:af: e1:d6:95:06:60:54:f2:82:34:e5:ae:f5:67:7e:71: 8b:e2:aa:67:1c:eb:94:54:ac:8c:01:dd:ec:57:ca: ab:68:a1:db:7e:9e:61:a4:75:ef:24:8a:cb:82:e7: 18:9b:24:b3:9c:c9:21:29:69:d4:49:d7:0d:0d:a6: 35:91:6f:2b:6c:6b:4a:41:67:db:d8:3e:32:df:50: 50:a1:c9:9a:5c:30:2b:9f:c2:53:89:7e:f0:2b:68: cd:e8:8b:bc:2a:19:12:f2:14:35:0c:46:8c:0a:ad: ee:f8:a3:23:2c:a8:15:bf:1f:98:89:4a:d6:45:73: c2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6B:FA:26:D5:3F:96:B4:B8:44:15:22:8B:BA:98:8A:A7:6B:C1:90 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:26:f9:b5:0f:2b:bb:5a:fe:75:4a:20:fd:20:52:d3:d1:74: 6f:ac:73:27:2e:e2:ce:d2:db:b3:df:ca:d4:45:d6:3a:47:b9: cd:54:0b:80:b0:4d:b0:28:4e:fa:a1:33:b7:6a:bf:54:34:47: f7:64:72:a3:f2:3a:e9:ca:ff:5e:a8:e8:18:93:ce:b6:06:b3: 4a:b0:73:5c:19:40:41:08:63:c7:df:9f:db:d7:ef:69:ea:78: 37:80:0a:5a:c4:a2:e2:ac:3c:3e:17:9d:99:f8:a4:fa:6b:94: 8a:80:26:9e:90:7a:b0:02:ca:ab:1a:f9:69:d1:32:4b:18:52: 85:bd:27:10:27:75:8c:18:37:34:4d:0f:12:9a:1e:a2:9e:34: 4d:6e:48:1f:23:73:41:e4:2a:d4:6d:5c:6f:5d:40:9a:e2:4d: 59:dd:92:82:e7:21:a1:85:de:65:c2:f5:74:b0:67:3c:42:55: 2c:9d:68:22:c9:1a:52:25:3a:44:4d:dc:c4:a9:b3:69:d4:47: e4:ca:c8:8d:a7:4d:ec:6c:73:31:59:f5:85:1d:bb:bb:cf:e1: e4:9d:17:79:93:2d:bc:e5:82:1b:1d:1b:52:a5:78:c0:1e:7d: 81:eb:40:53:1c:9b:b7:a4:3a:13:7e:dc:e5:60:9a:d9:fc:4c: 9d:f6:65:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjYxMDAzMDEyMTU3WhcNMjYxMDEwMDEyMTU3WjAYMRYwFAYD VQQDEw02YWMwNThiNi1lMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukTxFHt95ehUjUDKxVk0Q7j09KLyeatnUhfL4sceHWgI4vCruyC3cvtb6n5c LBsSRP9lk6/d7ZP6BmS7eAxP+iSi1FJseeftVIUiXMpMZCxCd80O7JPAmOqUz2mn MGNMq4ISMsj91H3feBQRq251syJH451FwiFgoTiU6ZThqdreGdW5j6/h1pUGYFTy gjTlrvVnfnGL4qpnHOuUVKyMAd3sV8qraKHbfp5hpHXvJIrLgucYmySznMkhKWnU SdcNDaY1kW8rbGtKQWfb2D4y31BQocmaXDArn8JTiX7wK2jN6Iu8KhkS8hQ1DEaM Cq3u+KMjLKgVvx+YiUrWRXPCjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhr+ibV P5a0uEQVIou6mIqna8GQMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXCb5tQ8ru1r+dUog/SBS09F0b6xzJy7iztLbs9/K1EXWOke5zVQLgLBNsChO +qEzt2q/VDRH92Ryo/I66cr/XqjoGJPOtgazSrBzXBlAQQhjx9+f29fvaep4N4AK WsSi4qw8Phedmfik+muUioAmnpB6sALKqxr5adEySxhShb0nECd1jBg3NE0PEpoe op40TW5IHyNzQeQq1G1cb11AmuJNWd2SguchoYXeZcL1dLBnPEJVLJ1oIskaUiU6 RE3cxKmzadRH5MrIjadN7GxzMVn1hR27u8/h5J0XeZMtvOWCGx0bUqV4wB59getA Uxybt6Q6E37c5WCa2fxMnfZl+w== -----END CERTIFICATE-----Generated at Sun Oct 4 13:35:20 2026 by rpki-client