$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: jrW4yckcV2PaLUwjtD0diXzBwcrCO2OxKbACBT5rs1k= Subject key identifier: BD:0B:B4:9D:4B:9F:7C:A9:C9:8E:BF:7E:B9:20:0A:59:B4:09:0A:32 Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 029A Signing time: Fri 09 Oct 2026 02:08:18 +0000 Manifest this update: Fri 09 Oct 2026 02:08:17 +0000 Manifest next update: Fri 16 Oct 2026 02:08:17 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: BNcLss4+hX5majScvSTFa4AZm1XuFXbfRBYhbBcSl4I=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: M7rxsuOrH2kuk/pXICO7DXTzFRaUh4fgHJe4Gm7Q1vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 02:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Oct 9 02:08:17 2026 GMT Not After : Oct 16 02:08:17 2026 GMT Subject: CN=6ac84c92-f0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:87:a1:56:82:64:79:ea:6d:14:5e:06:a3:a3: dd:a1:4d:fc:83:ef:88:28:26:03:93:fe:8e:74:3c: 53:63:75:37:20:cb:f0:2e:48:23:a5:b6:63:d0:71: 03:a2:59:04:87:f2:12:f4:1d:b9:98:39:3f:81:69: d2:0e:6f:6d:bb:c2:35:d0:00:a9:fd:79:73:fb:1b: f4:90:ae:22:ab:4d:dd:05:02:d8:bb:ba:f4:c5:b7: 0a:bd:8e:37:b9:14:07:d3:40:c0:f8:70:1b:27:c9: aa:97:bf:78:20:5f:68:8b:99:b9:c8:62:92:0f:51: e4:18:12:83:1f:ff:45:63:97:1b:fb:30:6a:5d:52: 6f:b7:a7:83:6f:67:79:fe:03:24:6b:7f:a2:58:3d: 7a:04:59:0a:0d:9e:5e:ff:13:1b:5f:4d:a5:cc:eb: 73:2b:25:9d:a7:2f:df:64:93:50:67:a2:93:b8:8b: ee:71:e0:9f:82:79:d4:1b:4e:55:a0:66:70:53:82: d7:95:e5:2c:7d:17:41:28:a4:fa:06:c1:8f:ea:93: cf:4d:f3:07:35:38:d3:6e:42:7a:9a:66:57:ed:22: c8:b1:47:74:1e:ef:e8:7d:1c:b6:63:24:a4:39:fa: c6:d5:01:aa:66:be:4d:e9:1c:a8:cc:5c:d9:0d:89: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0B:B4:9D:4B:9F:7C:A9:C9:8E:BF:7E:B9:20:0A:59:B4:09:0A:32 X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3d:46:fc:58:49:40:e4:2e:82:be:31:93:1c:14:d8:f5:1e: 22:00:f4:57:b0:1d:9d:18:a6:0c:85:d2:c9:84:04:ff:dc:0c: 8f:c6:5c:a3:6c:2d:bb:a9:af:45:c1:fa:14:92:36:48:4d:5a: b9:66:2c:e8:d7:ec:0d:ac:8e:5b:6c:0c:bf:35:7c:13:d5:88: 12:63:17:3a:2f:1a:56:15:ce:18:75:20:1a:c5:9b:23:93:b2: c6:18:cf:bb:0a:87:c0:04:58:14:06:9e:ec:f1:63:3e:f2:1c: 57:7e:50:5b:c7:6f:04:e5:db:2d:74:c8:b6:b4:bb:26:69:a6: 07:27:f7:d6:82:e2:af:88:e2:98:32:1e:12:38:37:26:fd:7f: 8a:d0:f8:a5:a0:58:d5:85:8c:84:63:dc:0c:eb:85:9d:55:94: 49:49:99:89:59:91:f8:70:88:17:bc:19:31:fe:e3:f0:26:7d: 13:35:e0:c0:6f:5c:d1:41:5d:a0:6e:00:9c:53:88:ca:f6:9b: 11:dc:ec:2c:3a:4d:ef:9c:d6:7b:71:e0:6c:24:23:1c:4e:14: 40:54:06:60:63:14:3a:45:d4:7e:7f:b8:5f:cf:db:37:d8:9d: bd:79:df:7b:1c:a0:79:09:99:e5:0d:e9:23:26:55:ab:a3:f7: 8d:e1:f3:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjYxMDA5MDIwODE3WhcNMjYxMDE2MDIwODE3WjAYMRYwFAYD VQQDEw02YWM4NGM5Mi1mMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkIehVoJkeeptFF4Go6PdoU38g++IKCYDk/6OdDxTY3U3IMvwLkgjpbZj0HED olkEh/IS9B25mDk/gWnSDm9tu8I10ACp/Xlz+xv0kK4iq03dBQLYu7r0xbcKvY43 uRQH00DA+HAbJ8mql794IF9oi5m5yGKSD1HkGBKDH/9FY5cb+zBqXVJvt6eDb2d5 /gMka3+iWD16BFkKDZ5e/xMbX02lzOtzKyWdpy/fZJNQZ6KTuIvuceCfgnnUG05V oGZwU4LXleUsfRdBKKT6BsGP6pPPTfMHNTjTbkJ6mmZX7SLIsUd0Hu/ofRy2YySk OfrG1QGqZr5N6RyozFzZDYlwKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0LtJ1L n3ypyY6/frkgClm0CQoyMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApj1G/FhJQOQugr4xkxwU2PUeIgD0V7AdnRimDIXSyYQE/9wMj8Zco2wtu6mv RcH6FJI2SE1auWYs6NfsDayOW2wMvzV8E9WIEmMXOi8aVhXOGHUgGsWbI5OyxhjP uwqHwARYFAae7PFjPvIcV35QW8dvBOXbLXTItrS7JmmmByf31oLir4jimDIeEjg3 Jv1/itD4paBY1YWMhGPcDOuFnVWUSUmZiVmR+HCIF7wZMf7j8CZ9EzXgwG9c0UFd oG4AnFOIyvabEdzsLDpN75zWe3HgbCQjHE4UQFQGYGMUOkXUfn+4X8/bN9idvXnf exygeQmZ5Q3pIyZVq6P3jeHz1A== -----END CERTIFICATE-----Generated at Sat Oct 10 21:23:12 2026 by rpki-client