$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: B3YBsG0q6A6ruHBDUIGTtofC2FOLLe2O98B/9FnJPZY= Subject key identifier: 53:62:46:A4:00:14:82:D8:A2:42:12:92:18:2C:52:ED:E9:C5:DF:A9 Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0DEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0DC4 Signing time: Thu 20 Aug 2026 17:52:32 +0000 Manifest this update: Thu 20 Aug 2026 17:52:31 +0000 Manifest next update: Thu 27 Aug 2026 17:52:31 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: 6ASdWfuv7NlLaN4Sih9Xn9KXccv0PIPrpOmeS/0PI/s=) 2: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: v/cYedkAqRKh3ztstNufD8S6zF7j1cUxZPyvJUeefHY=) 3: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: BGhkN0LDIdO9R5rWchzdTcKrPQRLiD8mPb9ml74T/wM=) 4: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: 1LoYhNhbrJS2K/AOCU0/gnT+ZLyx3HtIk+zT/REHe2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3567 (0xdef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Aug 20 17:52:31 2026 GMT Not After : Aug 27 17:52:31 2026 GMT Subject: CN=6a873ee0-fbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d6:92:9c:95:49:3d:1c:ef:af:50:92:6a:a4: 73:b8:19:d0:1f:43:10:9b:71:8c:d5:18:2a:40:15: e3:c9:b2:9c:e1:1e:e9:67:49:6b:fa:13:3d:5a:28: 45:1f:4c:48:5f:b9:6c:1d:40:e9:17:2f:12:33:db: 0a:04:28:4e:00:6b:90:d1:ae:23:17:fd:55:fd:a7: 7d:81:95:55:3e:82:fa:ff:2d:e9:f8:ec:00:a8:20: 00:f9:8a:64:02:ed:74:4d:f6:c0:e0:01:8f:c1:2e: 16:09:04:5a:06:e6:59:ee:da:29:90:da:9d:6f:1f: 6c:7e:ee:29:0a:c1:ba:52:36:59:16:9f:26:3f:d2: 24:3b:fa:50:a9:7d:f2:02:52:f5:8b:2d:96:69:57: 94:20:91:55:39:55:aa:53:06:27:64:fc:43:50:d4: b5:10:39:bd:45:a1:6e:d9:f7:2d:f8:79:e0:c3:fc: 52:d2:58:28:4e:06:61:bd:66:c9:be:8a:50:c1:0e: e0:3d:30:22:84:4f:11:70:1d:92:27:e6:cf:eb:d3: e7:42:15:54:43:4f:16:c3:a6:11:b7:f2:cd:c2:b1: 27:2a:92:a9:71:61:82:70:b1:05:4b:be:4e:da:c1: 35:22:42:3d:8a:3f:8d:d3:24:b9:88:d4:02:9a:06: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:62:46:A4:00:14:82:D8:A2:42:12:92:18:2C:52:ED:E9:C5:DF:A9 X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:47:71:c2:9e:d0:c5:22:b6:b9:92:9e:db:01:9e:45:66:5f: b8:1c:63:cb:d1:95:a1:98:06:63:09:e8:11:9c:9c:5d:55:42: ab:d1:89:a3:94:e5:64:98:cf:54:af:84:f9:18:b3:0b:31:dd: 9b:12:58:91:a3:c8:2f:82:9f:88:32:35:d1:fc:52:ee:bc:75: 80:2c:5e:85:b2:cc:02:59:be:67:b5:1c:8b:4f:03:91:12:cf: 2f:7d:a8:d8:85:83:16:3b:7d:7d:ea:e7:4e:37:26:db:f2:fc: cd:3a:7c:23:98:3c:fd:47:3c:c9:72:52:74:4d:d6:c5:e8:75: 64:ee:52:6a:e7:6b:39:7a:53:7c:4b:4a:ad:9d:44:cd:76:1e: 6f:dc:de:4c:46:39:78:07:f8:42:6c:33:d7:26:46:16:38:e1: fd:62:4f:66:48:53:93:f4:30:fc:9b:d6:4f:59:b4:5d:89:b2: 69:e1:4e:ad:2a:49:80:81:40:e4:66:c0:70:8c:a7:79:28:7e: eb:7f:6b:89:0d:eb:21:4a:75:81:b9:eb:f7:b9:b5:32:d1:d1: 4f:aa:5b:47:fa:87:16:c6:62:30:e4:92:11:14:3a:81:8b:9e: 30:ef:a3:19:82:27:50:cb:85:b9:3d:32:bd:ae:77:96:d9:7a: f5:3b:ea:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjYwODIwMTc1MjMxWhcNMjYwODI3MTc1MjMxWjAYMRYwFAYD VQQDEw02YTg3M2VlMC1mYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodaSnJVJPRzvr1CSaqRzuBnQH0MQm3GM1RgqQBXjybKc4R7pZ0lr+hM9WihF H0xIX7lsHUDpFy8SM9sKBChOAGuQ0a4jF/1V/ad9gZVVPoL6/y3p+OwAqCAA+Ypk Au10TfbA4AGPwS4WCQRaBuZZ7topkNqdbx9sfu4pCsG6UjZZFp8mP9IkO/pQqX3y AlL1iy2WaVeUIJFVOVWqUwYnZPxDUNS1EDm9RaFu2fct+Hngw/xS0lgoTgZhvWbJ vopQwQ7gPTAihE8RcB2SJ+bP69PnQhVUQ08Ww6YRt/LNwrEnKpKpcWGCcLEFS75O 2sE1IkI9ij+N0yS5iNQCmgbVKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNiRqQA FILYokISkhgsUu3pxd+pMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlUdxwp7QxSK2uZKe2wGeRWZfuBxjy9GVoZgGYwnoEZycXVVCq9GJo5TlZJjP VK+E+RizCzHdmxJYkaPIL4KfiDI10fxS7rx1gCxehbLMAlm+Z7Uci08DkRLPL32o 2IWDFjt9fernTjcm2/L8zTp8I5g8/Uc8yXJSdE3Wxeh1ZO5SaudrOXpTfEtKrZ1E zXYeb9zeTEY5eAf4Qmwz1yZGFjjh/WJPZkhTk/Qw/JvWT1m0XYmyaeFOrSpJgIFA 5GbAcIyneSh+639riQ3rIUp1gbnr97m1MtHRT6pbR/qHFsZiMOSSERQ6gYueMO+j GYInUMuFuT0yva53ltl69Tvq9A== -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:38 2026 by rpki-client