$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft File: 2x_5ooQq3wDKEBQTx5pvACFsWvA.mft (raw, json) Hash identifier: XQ+If+ypZL5LLOx4bnYvDLv8rRGBZCzVqP0J5ey6TCM= Subject key identifier: 57:D5:21:FF:97:02:D9:55:9A:5F:EE:1B:C6:D7:EF:0B:FD:55:53:D4 Authority key identifier: DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0 Certificate issuer: /CN=A91E0E7D/serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft Manifest number: 22 Signing time: Fri 23 Oct 2026 09:28:35 +0000 Manifest this update: Fri 23 Oct 2026 09:28:34 +0000 Manifest next update: Fri 30 Oct 2026 09:28:34 +0000 Files and hashes: 1: 2x_5ooQq3wDKEBQTx5pvACFsWvA.crl (hash: FFaBuEPxXWdL4JzrB2OgfXGx/S6KsJzBOWL7EpWqkN0=) 2: EDA0097C9FD611F18710A9255A11F970.roa (hash: kFPd6ZCCWKwkoa/r2Uhma7Kd/IQDW1PTBDgDOoC0aIs=) 3: EC73EAD29FD611F18710A9255A11F970.roa (hash: PYfOG4e8SZv7qBS6pP7VFhdv6C3gDR1/cZ2xk75pc7M=) 4: 33644314BB2111F1937F0CF76711F970.roa (hash: 96DIFwIl6zPXBgd0wjif1AQX7p/km5lQYnGAHHpp7fE=) 5: mSalsaSx3s8-1Xmu44FW2V79p_U.asa (hash: cQ7zPkIfMI9Uzv7GDBaTWME53Sx0bcFmhB8OL1zDBHk=) 6: 32C41236BB2111F1937F0CF76711F970.roa (hash: luXmjmSSHxX11GbYyKoo5cdtKquMQqR13UakhBWIsIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.crl rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 09:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E7D, serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0 Validity Not Before: Oct 23 09:28:34 2026 GMT Not After : Oct 30 09:28:34 2026 GMT Subject: CN=6adb28c3-e663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:90:85:bc:05:42:ac:10:e9:f3:24:1e:5c: 95:9e:e3:d0:ec:16:be:91:92:30:90:b3:e5:a4:8a: f1:85:14:76:2d:81:dd:c3:e7:16:e8:51:44:00:e4: 7e:d8:d7:5e:68:90:b5:52:96:43:bf:e5:fc:01:d2: 70:c7:84:07:02:68:7c:8a:0b:8c:d5:44:68:8f:b7: dc:16:45:e0:e9:95:e7:1d:91:49:c7:f9:19:45:94: 3c:f5:6c:ab:ae:e0:37:f2:83:43:db:49:db:de:32: d2:50:40:77:bb:ac:61:e2:b8:e9:a9:47:0c:34:85: 0e:d7:6d:60:c3:3d:3e:70:c9:85:25:cc:65:e1:b2: 4b:ac:8e:ce:e2:03:63:d3:23:5e:f2:41:73:f8:49: 9e:e7:0c:c8:22:f6:b9:c0:3a:ce:a1:47:d8:83:ae: fc:4d:6a:49:ad:e2:24:fa:0f:a2:66:29:7b:7f:79: cf:36:b9:3a:32:77:1d:53:20:64:41:dc:4e:13:b0: ac:79:2f:b3:2a:66:de:74:11:13:7b:01:d0:f7:c3: bd:9a:49:cc:6a:b4:02:31:f7:7c:8c:08:db:d1:06: 6c:bf:4b:27:e2:b5:73:c5:77:5e:66:fc:1b:fb:df: 89:b4:d5:fe:b7:c1:03:e2:3d:b8:c7:79:c1:c6:0a: 54:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D5:21:FF:97:02:D9:55:9A:5F:EE:1B:C6:D7:EF:0B:FD:55:53:D4 X509v3 Authority Key Identifier: keyid:DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:8a:fa:48:c9:0b:18:87:d5:21:ac:77:b3:39:17:d2:40: 4d:84:9d:fb:ab:a5:94:55:a6:0e:38:09:4b:62:e4:b5:df:79: be:6d:02:15:b5:f8:91:2a:57:a8:45:50:80:0b:e2:25:d2:9a: f4:51:b0:fd:69:fc:89:cd:3a:ba:8d:95:a8:59:91:1d:33:38: 23:7f:ff:9c:64:7e:40:2d:c0:cc:7f:4a:9c:5d:38:a4:7e:2a: c0:76:08:71:77:84:b4:d6:f5:ec:64:61:2d:25:d7:8d:a5:82: f2:32:8e:4e:8f:a5:6d:ba:1c:1b:80:2a:f9:40:93:b0:1f:51: 0a:f6:96:e2:c1:70:9e:25:81:6d:3e:e7:7c:82:9d:0b:c4:75: 0e:8d:5b:d1:a2:51:80:96:a7:6a:f5:8e:44:56:25:2d:e1:9c: ea:b3:5d:14:21:d6:13:9f:97:b2:87:09:4b:f7:f4:ce:e2:9d: 3c:89:e4:40:50:25:13:d3:30:a8:d8:e2:79:f6:38:20:d3:cf: 72:78:f5:c1:06:da:66:36:04:bc:5b:f4:49:d4:88:97:cb:e0: b9:70:0a:01:ad:de:f4:ff:63:3b:28:e6:f2:2e:61:1e:ba:48: 9e:20:02:93:75:7d:4a:3e:8e:be:af:85:aa:8a:3c:f9:f7:0e: f5:41:74:23 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MEU3RDExMC8GA1UEBRMoREIxRkY5QTI4NDJBREYwMENBMTAxNDEzQzc5QTZGMDAy MTZDNUFGMDAeFw0yNjEwMjMwOTI4MzRaFw0yNjEwMzAwOTI4MzRaMBgxFjAUBgNV BAMTDTZhZGIyOGMzLWU2NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwdpCFvAVCrBDp8yQeXJWe49DsFr6RkjCQs+WkivGFFHYtgd3D5xboUUQA5H7Y 115okLVSlkO/5fwB0nDHhAcCaHyKC4zVRGiPt9wWReDplecdkUnH+RlFlDz1bKuu 4Dfyg0PbSdveMtJQQHe7rGHiuOmpRww0hQ7XbWDDPT5wyYUlzGXhskusjs7iA2PT I17yQXP4SZ7nDMgi9rnAOs6hR9iDrvxNakmt4iT6D6JmKXt/ec82uToydx1TIGRB 3E4TsKx5L7MqZt50ERN7AdD3w72aScxqtAIx93yMCNvRBmy/SyfitXPFd15m/Bv7 34m01f63wQPiPbjHecHGClTRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUV9Uh/5cC 2VWaX+4bxtfvC/1VU9QwHwYDVR0jBBgwFoAU2x/5ooQq3wDKEBQTx5pvACFsWvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwRTdELzU5NkNENTRFOUZE MzExRjFCMUE2MTI4QzU4MTFGOTcwLzJ4XzVvb1FxM3dES0VCUVR4NXB2QUNGc1d2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnhfNW9vUXEzd0RLRUJRVHg1cHZBQ0ZzV3ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw RTdELzU5NkNENTRFOUZEMzExRjFCMUE2MTI4QzU4MTFGOTcwLzJ4XzVvb1FxM3dE S0VCUVR4NXB2QUNGc1d2QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAdSIr6SMkLGIfVIax3szkX0kBNhJ37q6WUVaYOOAlLYuS133m+bQIVtfiRKleo RVCAC+Il0pr0UbD9afyJzTq6jZWoWZEdMzgjf/+cZH5ALcDMf0qcXTikfirAdghx d4S01vXsZGEtJdeNpYLyMo5Oj6VtuhwbgCr5QJOwH1EK9pbiwXCeJYFtPud8gp0L xHUOjVvRolGAlqdq9Y5EViUt4Zzqs10UIdYTn5eyhwlL9/TO4p08ieRAUCUT0zCo 2OJ59jgg089yePXBBtpmNgS8W/RJ1IiXy+C5cAoBrd70/2M7KObyLmEeukieIAKT dX1KPo6+r4Wqijz59w71QXQj -----END CERTIFICATE-----Generated at Sat Oct 24 11:05:24 2026 by rpki-client