$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: EjF3QE9TVmB21iMPBUmAP39gQbvJ4kGOMu+VW2hzyr0= Subject key identifier: EC:08:1F:87:D2:C4:2D:79:68:EB:05:05:8B:08:61:EC:9F:36:62:6E Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 02B3 Signing time: Sun 25 Oct 2026 02:11:13 +0000 Manifest this update: Sun 25 Oct 2026 02:11:12 +0000 Manifest next update: Sun 01 Nov 2026 02:11:12 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: /Ua1+fwodnnqit0CBarb1d8lHYlk8+pkPpcUiN5bu+U=) 2: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 8KKDSMBlMVX3WIkFvdZMkpRJGKyqonScIIf8lT6mmuA=) 3: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: n5qn/7DgUayNb0ooYS65Ved7HCxgL0W74TbOmO29GE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Oct 25 02:11:12 2026 GMT Not After : Nov 1 02:11:12 2026 GMT Subject: CN=6add6541-d211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9c:d8:0a:7c:9b:08:13:c8:e4:bc:5e:0d:05: ba:ee:51:56:d2:17:45:d1:02:48:3f:af:db:1f:0b: c7:3e:ca:dc:b6:f2:b2:81:14:b1:ae:3f:28:75:27: 07:fa:3e:4b:05:0a:41:be:b1:f4:81:ac:47:f2:1e: e5:e6:16:60:10:6f:50:a0:a5:41:bc:61:4d:b7:34: 78:cd:77:8d:79:e2:31:c9:b9:56:96:56:c7:58:b2: 55:51:84:70:6e:2b:5e:7a:87:85:e8:11:ec:9b:1e: e8:41:9c:fe:ca:bd:0b:bf:6b:e6:25:8b:30:a1:7e: 8b:c3:61:3b:4e:4c:db:48:3f:f3:09:63:37:19:70: f1:ea:43:cb:7d:40:38:4a:5f:0a:b7:85:2d:2f:0e: 53:83:51:99:fd:6d:3b:cd:7d:c7:20:5a:9a:fb:b5: bd:8f:fa:8a:e9:c8:1d:e3:d9:73:be:e1:97:3c:e3: 48:c5:e9:73:51:fe:72:82:2d:b4:f5:15:c2:e6:f8: 5c:f4:ed:4c:d6:5b:f3:ce:dd:17:6c:f1:d4:26:c1: 3f:1e:58:7b:f2:20:e3:f2:66:ca:d4:46:06:b6:27: 18:9b:2a:f3:4a:01:4c:62:38:56:d0:f6:2c:10:c2: f8:ca:d8:96:69:9f:30:5e:45:7b:d2:d0:c4:48:49: c7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:08:1F:87:D2:C4:2D:79:68:EB:05:05:8B:08:61:EC:9F:36:62:6E X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:50:4e:d3:52:36:f7:0d:d9:65:c8:f7:b4:db:b1:aa:ac:e7: 8c:d5:e5:a1:7d:19:29:5f:9e:a0:68:f7:1d:00:52:f6:bb:23: 9d:e2:a6:b7:51:82:c0:a4:67:1e:00:8a:fe:18:05:40:af:1e: 27:a6:be:fb:e5:89:f3:f2:00:8d:5e:8a:b6:73:69:ae:8e:4c: c3:c5:9e:91:f9:6a:59:ae:69:ea:e6:62:77:c3:79:69:7d:47: 8e:8b:e0:e4:6a:7c:5f:ef:12:70:98:b3:9b:57:12:f1:e8:aa: 7b:2e:1d:69:e2:16:dd:a4:95:95:8f:cc:ed:76:53:46:86:72: bb:48:8a:04:d8:cc:88:ee:f4:31:a7:e9:b5:f6:df:fa:88:8d: fa:c6:14:ba:5c:4c:51:f2:62:e2:50:89:ee:8b:e6:ba:d0:b6: 9c:49:f3:87:76:ba:e3:e0:7f:2b:f0:22:3c:bc:31:81:d2:eb: c9:f6:20:63:bb:bf:fb:3f:fb:97:61:e7:51:36:2d:33:0e:1e: 79:ee:84:41:5a:19:b7:f2:a2:fe:4d:e8:69:5c:02:c1:a6:fa: f4:88:20:b4:01:fe:79:44:0e:6d:ed:36:58:b5:99:50:25:8d: d4:38:4a:ba:34:04:19:ea:27:c3:90:5a:32:b7:2b:06:36:e4: 4c:c0:45:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjYxMDI1MDIxMTEyWhcNMjYxMTAxMDIxMTEyWjAYMRYwFAYD VQQDEw02YWRkNjU0MS1kMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJzYCnybCBPI5LxeDQW67lFW0hdF0QJIP6/bHwvHPsrctvKygRSxrj8odScH +j5LBQpBvrH0gaxH8h7l5hZgEG9QoKVBvGFNtzR4zXeNeeIxyblWllbHWLJVUYRw biteeoeF6BHsmx7oQZz+yr0Lv2vmJYswoX6Lw2E7TkzbSD/zCWM3GXDx6kPLfUA4 Sl8Kt4UtLw5Tg1GZ/W07zX3HIFqa+7W9j/qK6cgd49lzvuGXPONIxelzUf5ygi20 9RXC5vhc9O1M1lvzzt0XbPHUJsE/Hlh78iDj8mbK1EYGticYmyrzSgFMYjhW0PYs EML4ytiWaZ8wXkV70tDESEnHhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwIH4fS xC15aOsFBYsIYeyfNmJuMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdlBO01I29w3ZZcj3tNuxqqznjNXloX0ZKV+eoGj3HQBS9rsjneKmt1GCwKRn HgCK/hgFQK8eJ6a+++WJ8/IAjV6KtnNpro5Mw8WekflqWa5p6uZid8N5aX1Hjovg 5Gp8X+8ScJizm1cS8eiqey4daeIW3aSVlY/M7XZTRoZyu0iKBNjMiO70Mafptfbf +oiN+sYUulxMUfJi4lCJ7ovmutC2nEnzh3a64+B/K/AiPLwxgdLryfYgY7u/+z/7 l2HnUTYtMw4eee6EQVoZt/Ki/k3oaVwCwab69IggtAH+eUQObe02WLWZUCWN1DhK ujQEGeonw5BaMrcrBjbkTMBF/w== -----END CERTIFICATE-----Generated at Sun Oct 25 19:53:39 2026 by rpki-client