$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft File: 2x_5ooQq3wDKEBQTx5pvACFsWvA.mft (raw, json) Hash identifier: T+KPB9xoVmQHySBtF1MA25Fg2AsztPEhK+U25+avQuY= Subject key identifier: E8:A5:95:D4:8F:5D:00:8D:DE:EF:76:EE:BD:74:AF:2D:3E:6A:A9:EC Authority key identifier: DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0 Certificate issuer: /CN=A91E0E7D/serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft Manifest number: 08 Signing time: Thu 03 Sep 2026 09:27:02 +0000 Manifest this update: Thu 03 Sep 2026 09:27:02 +0000 Manifest next update: Thu 10 Sep 2026 09:27:02 +0000 Files and hashes: 1: 2x_5ooQq3wDKEBQTx5pvACFsWvA.crl (hash: uNa7wQZKUDrf558r0jajMkxG+U9w49SVY+r1m/dDIpk=) 2: EDA0097C9FD611F18710A9255A11F970.roa (hash: kFPd6ZCCWKwkoa/r2Uhma7Kd/IQDW1PTBDgDOoC0aIs=) 3: EC73EAD29FD611F18710A9255A11F970.roa (hash: PYfOG4e8SZv7qBS6pP7VFhdv6C3gDR1/cZ2xk75pc7M=) 4: mSalsaSx3s8-1Xmu44FW2V79p_U.asa (hash: cQ7zPkIfMI9Uzv7GDBaTWME53Sx0bcFmhB8OL1zDBHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.crl rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 09:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E7D, serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0 Validity Not Before: Sep 3 09:27:02 2026 GMT Not After : Sep 10 09:27:02 2026 GMT Subject: CN=6a993d66-faea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:51:e1:11:4b:aa:46:14:cf:d2:0a:ce:d7:bf: 95:9c:78:d6:6e:99:48:28:0d:c6:77:07:8b:8c:26: ec:72:bc:2b:37:70:b8:f6:5b:ca:f8:3f:2a:85:7a: e5:df:2b:18:a2:c9:d9:40:38:b5:89:37:f1:1a:34: e0:b3:51:7c:be:85:df:49:ed:f1:12:ce:3b:aa:89: bc:cf:73:83:69:65:69:16:ce:6b:05:33:f2:21:a0: 0d:03:c1:9c:42:6f:ae:93:a5:53:25:f6:01:8d:22: eb:c2:6c:da:b3:3a:11:9d:c2:8c:d2:9c:49:36:0f: 0d:f2:85:db:f4:4d:f1:be:83:b0:19:c4:79:3d:c4: 8e:6a:b4:c2:3d:80:9e:e9:6a:7c:5d:5f:03:5c:e5: a9:f6:c4:da:6b:d0:48:83:94:c2:88:91:61:d0:75: 5f:c1:d2:91:d4:92:28:84:43:3a:92:11:7a:0c:e7: b8:b2:a7:9b:41:04:b5:a6:b5:f0:2c:df:ec:1d:68: 52:b6:10:0f:9a:4b:7f:b7:97:e1:d9:be:92:db:28: f5:63:2a:a5:b7:8d:26:b1:30:ab:ed:a7:af:ec:88: 1e:e8:8b:1b:76:35:76:a1:d6:19:77:08:f0:59:cf: f7:1c:80:8d:29:24:ba:34:a5:8f:9c:69:9e:94:d2: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A5:95:D4:8F:5D:00:8D:DE:EF:76:EE:BD:74:AF:2D:3E:6A:A9:EC X509v3 Authority Key Identifier: keyid:DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:71:54:33:2c:89:0b:ab:21:35:72:3a:55:20:00:e1:36:51: 91:06:4e:53:7a:c0:e6:e5:53:04:58:0f:fa:43:ed:ef:24:f0: 75:ad:e8:33:12:dd:fd:ef:6d:c4:2b:e9:97:d3:5c:83:8a:6c: 10:cf:1b:43:73:d6:67:7e:9d:02:b4:34:53:b6:d5:62:50:d4: 7a:0a:e4:8b:06:fd:02:e4:a4:45:e9:9a:f4:df:e2:ac:ff:3a: bd:76:b9:07:a2:12:8a:84:98:08:23:87:e3:af:fc:8b:4d:5b: 6a:fa:5a:f8:80:f7:32:1a:02:d3:14:72:2d:09:71:f5:c0:e1: a7:bf:cb:42:b5:1e:9b:a0:59:21:fc:a9:56:e4:79:b2:21:23: 33:8d:8b:64:e0:63:65:af:bf:5e:6e:d8:80:94:29:39:24:b4: 91:09:b5:7b:99:1e:14:86:ae:47:b1:a3:8c:91:f4:9c:49:db: c8:63:70:ba:0f:2f:93:81:cc:dc:53:37:2e:4e:ac:8b:ce:22: c6:4a:fe:3d:ee:e5:c7:2d:35:71:43:69:fd:cb:58:6e:3e:bd: c9:51:68:34:fc:45:6c:29:71:c7:90:f4:2f:97:d4:0c:37:d6: 80:3c:d1:32:bc:7a:e2:d2:35:d6:a7:81:db:d4:0d:2b:14:38: 03:15:e1:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MEU3RDExMC8GA1UEBRMoREIxRkY5QTI4NDJBREYwMENBMTAxNDEzQzc5QTZGMDAy MTZDNUFGMDAeFw0yNjA5MDMwOTI3MDJaFw0yNjA5MTAwOTI3MDJaMBgxFjAUBgNV BAMTDTZhOTkzZDY2LWZhZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtUeERS6pGFM/SCs7Xv5WceNZumUgoDcZ3B4uMJuxyvCs3cLj2W8r4PyqFeuXf KxiiydlAOLWJN/EaNOCzUXy+hd9J7fESzjuqibzPc4NpZWkWzmsFM/IhoA0DwZxC b66TpVMl9gGNIuvCbNqzOhGdwozSnEk2Dw3yhdv0TfG+g7AZxHk9xI5qtMI9gJ7p anxdXwNc5an2xNpr0EiDlMKIkWHQdV/B0pHUkiiEQzqSEXoM57iyp5tBBLWmtfAs 3+wdaFK2EA+aS3+3l+HZvpLbKPVjKqW3jSaxMKvtp6/siB7oixt2NXah1hl3CPBZ z/ccgI0pJLo0pY+caZ6U0iLNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6KWV1I9d AI3e73buvXSvLT5qqewwHwYDVR0jBBgwFoAU2x/5ooQq3wDKEBQTx5pvACFsWvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwRTdELzU5NkNENTRFOUZE MzExRjFCMUE2MTI4QzU4MTFGOTcwLzJ4XzVvb1FxM3dES0VCUVR4NXB2QUNGc1d2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnhfNW9vUXEzd0RLRUJRVHg1cHZBQ0ZzV3ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw RTdELzU5NkNENTRFOUZEMzExRjFCMUE2MTI4QzU4MTFGOTcwLzJ4XzVvb1FxM3dE S0VCUVR4NXB2QUNGc1d2QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAlcVQzLIkLqyE1cjpVIADhNlGRBk5TesDm5VMEWA/6Q+3vJPB1regzEt39723E K+mX01yDimwQzxtDc9Znfp0CtDRTttViUNR6CuSLBv0C5KRF6Zr03+Ks/zq9drkH ohKKhJgII4fjr/yLTVtq+lr4gPcyGgLTFHItCXH1wOGnv8tCtR6boFkh/KlW5Hmy ISMzjYtk4GNlr79ebtiAlCk5JLSRCbV7mR4Uhq5HsaOMkfScSdvIY3C6Dy+Tgczc UzcuTqyLziLGSv497uXHLTVxQ2n9y1huPr3JUWg0/EVsKXHHkPQvl9QMN9aAPNEy vHri0jXWp4Hb1A0rFDgDFeEq -----END CERTIFICATE-----Generated at Sat Sep 5 02:40:15 2026 by rpki-client