$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: Mf0IIGUrLzDCPC3wmMu7zdod1ty61lRMgGg7Jd5VUS4= Subject key identifier: E1:54:21:F6:BE:55:E6:9C:59:F6:4E:45:C4:59:BE:F1:F3:A4:B4:C6 Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 0297 Signing time: Sat 05 Sep 2026 01:55:43 +0000 Manifest this update: Sat 05 Sep 2026 01:55:42 +0000 Manifest next update: Sat 12 Sep 2026 01:55:42 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: ed7hmwEUZSppvGFJqh5oj/jpkyNFNWN1ihabL6eG04E=) 2: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 8KKDSMBlMVX3WIkFvdZMkpRJGKyqonScIIf8lT6mmuA=) 3: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: TG2ohJNYEaDsDYNDfYYhx+nUq/BWPbtnOzSvkzV8QmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 01:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Sep 5 01:55:42 2026 GMT Not After : Sep 12 01:55:42 2026 GMT Subject: CN=6a9b769e-1c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:25:20:bd:98:47:03:f9:16:fc:52:df:e1:b4: 02:9b:8e:1a:c9:29:2d:a8:1f:07:3a:75:23:ea:7a: e7:00:69:c8:33:af:77:1f:aa:3d:09:d6:4b:9a:c0: f7:d1:4d:1f:2c:29:5a:8c:a1:6b:82:a6:6b:69:33: 62:18:c6:a6:82:6c:ef:e8:72:02:0a:d8:e5:f0:e9: f4:b3:d2:47:4d:83:5b:04:75:9e:82:4e:68:98:ad: c7:68:ad:3b:49:da:96:0c:6d:53:4d:12:be:dc:b3: 40:59:c6:70:8d:cb:f8:19:57:6f:fc:2d:0d:58:47: fd:c7:fc:3b:f8:35:e1:84:ec:eb:95:6d:06:0b:63: b8:e4:fb:05:37:81:21:c3:ff:34:56:f4:69:e6:8b: cf:57:94:57:54:9f:01:ed:10:10:37:c7:18:50:c5: 21:d3:b1:e0:9f:cf:43:2e:42:15:9e:38:b5:49:c9: 10:75:28:d3:5a:c4:db:e0:25:30:15:ae:de:22:68: 8f:b6:b9:d4:4d:26:d9:ae:b6:8d:2b:10:2f:31:c8: a1:49:40:11:45:b7:9d:ec:80:33:b0:e3:11:bd:cb: 41:1f:92:5e:99:9d:a3:4b:17:eb:b4:03:ec:3b:a3: ba:68:a0:ed:49:fe:fe:0c:45:84:31:18:67:8c:37: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:54:21:F6:BE:55:E6:9C:59:F6:4E:45:C4:59:BE:F1:F3:A4:B4:C6 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:67:84:f7:55:c0:fb:19:38:14:34:11:7f:95:58:de:9f:0f: 2d:31:f4:80:a1:4a:cc:76:c7:8e:45:b2:32:45:6c:67:0d:25: 48:f0:5c:a5:1d:4e:87:06:d4:18:20:5b:25:40:74:ad:ea:12: 18:ab:2f:43:59:29:10:7f:f2:57:b1:ac:a4:ae:5d:19:2b:3d: 1b:0f:c6:2a:47:cb:1f:3e:bd:29:e1:f8:ca:c1:72:fe:e5:c7: 4d:be:85:71:c4:d6:98:ef:a3:6f:8e:da:62:77:69:48:5c:d8: 04:45:5e:bf:b3:ec:30:dd:b9:fd:cc:6a:02:73:ab:41:2f:e7: b2:ff:65:23:8b:6a:45:a7:42:14:c7:33:a8:72:ab:a1:47:6d: 55:9e:75:77:30:80:e7:6f:e4:e8:f9:c3:45:5b:5c:29:40:0c: 80:49:a4:68:06:dc:2b:ff:ef:54:7f:c3:62:6e:26:7d:c7:e0: b2:dd:1a:09:5e:69:aa:e4:c0:c2:96:60:2c:4c:31:dc:8a:84: ce:59:67:86:c5:cd:ff:2b:2e:ae:17:1e:18:74:9f:19:bc:d2: 56:7e:0c:de:62:db:01:27:cd:96:67:fb:4a:c2:69:5e:c1:0a: 9d:49:0a:88:1b:df:69:0e:db:b0:31:da:ad:f8:0b:49:01:c0: 78:76:6b:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjYwOTA1MDE1NTQyWhcNMjYwOTEyMDE1NTQyWjAYMRYwFAYD VQQDEw02YTliNzY5ZS0xYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+yUgvZhHA/kW/FLf4bQCm44aySktqB8HOnUj6nrnAGnIM693H6o9CdZLmsD3 0U0fLClajKFrgqZraTNiGMamgmzv6HICCtjl8On0s9JHTYNbBHWegk5omK3HaK07 SdqWDG1TTRK+3LNAWcZwjcv4GVdv/C0NWEf9x/w7+DXhhOzrlW0GC2O45PsFN4Eh w/80VvRp5ovPV5RXVJ8B7RAQN8cYUMUh07Hgn89DLkIVnji1SckQdSjTWsTb4CUw Fa7eImiPtrnUTSbZrraNKxAvMcihSUARRbed7IAzsOMRvctBH5JemZ2jSxfrtAPs O6O6aKDtSf7+DEWEMRhnjDfsBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFUIfa+ VeacWfZORcRZvvHzpLTGMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXGeE91XA+xk4FDQRf5VY3p8PLTH0gKFKzHbHjkWyMkVsZw0lSPBcpR1OhwbU GCBbJUB0reoSGKsvQ1kpEH/yV7GspK5dGSs9Gw/GKkfLHz69KeH4ysFy/uXHTb6F ccTWmO+jb47aYndpSFzYBEVev7PsMN25/cxqAnOrQS/nsv9lI4tqRadCFMczqHKr oUdtVZ51dzCA52/k6PnDRVtcKUAMgEmkaAbcK//vVH/DYm4mfcfgst0aCV5pquTA wpZgLEwx3IqEzllnhsXN/ysurhceGHSfGbzSVn4M3mLbASfNlmf7SsJpXsEKnUkK iBvfaQ7bsDHarfgLSQHAeHZraQ== -----END CERTIFICATE-----Generated at Sat Sep 5 05:15:50 2026 by rpki-client