$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft File: 2nWrD7Oqh1r631o4-FK9zB3YJvc.mft (raw, json) Hash identifier: 1IR7ikkLHUENdNTEj+Ux4OrWyYqflvMMQD8UTXvg0kE= Subject key identifier: D2:54:35:B6:FF:51:3A:E1:71:7C:4B:6D:0F:DE:94:40:41:B2:64:4E Authority key identifier: DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7 Certificate issuer: /CN=A91FEFBB/serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7 Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft Manifest number: 027C Signing time: Fri 11 Sep 2026 02:01:10 +0000 Manifest this update: Fri 11 Sep 2026 02:01:09 +0000 Manifest next update: Fri 18 Sep 2026 02:01:09 +0000 Files and hashes: 1: 2nWrD7Oqh1r631o4-FK9zB3YJvc.crl (hash: /THEKEm7mszjDaZJyW2+XxH9UlLJxhnBn7eZuU1J4x8=) 2: 261D3B8AEE4611ED9BEFED31C4F9AE02.roa (hash: 2kSM4B/k8NdFJAL4ebPd/o/E0Fw58aj47tXGXUAxnss=) 3: DE10576881C811F19DD5355C67A30FBC.roa (hash: Mybp7xu69McndoDjQ+vpXUAVd2ngNEP7A3p6m2zUXBk=) 4: 881C3F9CABD311EFBFED7130C4F9AE02.roa (hash: JS1ZBhltkdXyrySkpU8SpuqRR1QN77GhpUZ60d1ygSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEFBB, serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7 Validity Not Before: Sep 11 02:01:09 2026 GMT Not After : Sep 18 02:01:09 2026 GMT Subject: CN=6aa360e5-a7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:5e:bf:fd:98:d1:2c:c1:bb:5c:74:d9:1f: 54:1d:ba:33:20:61:44:b5:85:dc:a9:65:20:6e:98: 80:16:bd:d9:e4:89:a8:50:ed:3b:28:75:78:83:eb: 0d:76:88:a4:06:ea:d2:48:85:4e:9d:6b:da:15:e4: af:3d:b1:d8:33:69:5c:9c:c5:54:1c:65:12:12:ec: 8d:93:70:53:eb:8f:8d:53:d1:93:ff:4a:8e:0d:ab: 16:52:55:bc:72:83:ba:36:43:a6:28:16:2a:fe:fd: dc:5c:62:1f:11:8b:e4:4a:c8:a9:7d:aa:3b:36:4d: 03:50:8a:de:fc:14:1f:4e:3b:93:eb:a0:58:2f:13: 3c:d5:57:70:67:3a:db:89:38:a2:50:4b:ee:89:1a: 63:c5:13:e2:4f:e7:4a:00:e0:9a:46:53:63:9e:13: 4b:73:91:c4:3a:c6:06:18:5e:0f:82:14:e4:bc:5c: 81:f4:f4:ca:cd:cf:f8:1e:94:63:cf:5e:f9:d3:ae: 29:10:28:92:d4:b5:66:51:11:52:5f:32:12:51:05: 22:99:5d:c0:fa:68:e7:f2:ee:4c:b2:9d:99:0e:48: 52:e2:c9:9f:31:93:64:60:a9:f6:c0:7a:35:ee:1d: 4c:9e:a5:27:cb:8b:13:25:43:cb:7f:36:8f:7e:a4: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:54:35:B6:FF:51:3A:E1:71:7C:4B:6D:0F:DE:94:40:41:B2:64:4E X509v3 Authority Key Identifier: keyid:DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cd:e8:f1:12:bd:fe:e2:b1:63:20:04:50:12:c4:fe:8e:e4: 11:12:3a:ee:14:0c:b9:09:95:56:54:0b:50:d9:31:be:3b:8a: 35:8c:52:a7:a3:37:56:77:e7:80:b0:56:05:28:1d:4f:04:15: 3f:4d:e8:46:2b:7c:28:5a:b1:e0:9f:9a:c7:b3:a7:5b:fe:7c: 1a:44:e3:f4:6b:61:be:46:79:aa:dd:df:49:5f:c4:40:74:12: 9d:c7:1b:b5:68:4f:0e:b7:e4:4c:cd:14:ce:dc:ea:e6:8d:3e: c5:7f:3d:d5:99:c6:f8:26:6c:66:dd:5d:44:5d:33:34:d8:c5: 8b:47:93:27:4b:b5:73:1c:dc:70:a1:72:e7:8b:52:c7:92:86: 58:e9:f7:21:c1:45:b0:d1:59:7e:ab:0c:a7:fb:09:73:8f:84: cf:9a:ed:2c:56:b9:f6:bb:7b:de:da:17:bf:07:88:a2:1f:de: f9:8e:b6:45:93:95:50:f0:3d:69:98:f5:22:ba:32:01:7c:27: 9a:3c:33:a0:17:45:3c:96:7d:f1:86:85:75:cc:63:f6:dc:67: e9:6a:e5:ed:7f:10:af:0f:f1:45:8b:45:1f:ee:ed:e6:f6:37: 41:39:fb:7b:ee:e8:2e:2e:4a:70:5a:cf:38:68:20:78:b4:43: c6:66:f3:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVGQkIxMTAvBgNVBAUTKERBNzVBQjBGQjNBQTg3NUFGQURGNUEzOEY4NTJCREND MUREODI2RjcwHhcNMjYwOTExMDIwMTA5WhcNMjYwOTE4MDIwMTA5WjAYMRYwFAYD VQQDEw02YWEzNjBlNS1hN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzRev/2Y0SzBu1x02R9UHbozIGFEtYXcqWUgbpiAFr3Z5ImoUO07KHV4g+sN doikBurSSIVOnWvaFeSvPbHYM2lcnMVUHGUSEuyNk3BT64+NU9GT/0qODasWUlW8 coO6NkOmKBYq/v3cXGIfEYvkSsipfao7Nk0DUIre/BQfTjuT66BYLxM81VdwZzrb iTiiUEvuiRpjxRPiT+dKAOCaRlNjnhNLc5HEOsYGGF4PghTkvFyB9PTKzc/4HpRj z175064pECiS1LVmURFSXzISUQUimV3A+mjn8u5Msp2ZDkhS4smfMZNkYKn2wHo1 7h1MnqUny4sTJUPLfzaPfqTHBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJUNbb/ UTrhcXxLbQ/elEBBsmROMB8GA1UdIwQYMBaAFNp1qw+zqoda+t9aOPhSvcwd2Cb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUZCQi9EODk2QjVDOEVB NkExMUVEQjVCNkI1NUVDNEY5QUUwMi8ybldyRDdPcWgxcjYzMW80LUZLOXpCM1lK dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuV3JEN09xaDFyNjMxbzQtRks5ekIzWUp2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUZCQi9EODk2QjVDOEVBNkExMUVEQjVCNkI1NUVDNEY5QUUwMi8ybldyRDdPcWgx cjYzMW80LUZLOXpCM1lKdmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKs3o8RK9/uKxYyAEUBLE/o7kERI67hQMuQmVVlQLUNkxvjuKNYxSp6M3Vnfn gLBWBSgdTwQVP03oRit8KFqx4J+ax7OnW/58GkTj9GthvkZ5qt3fSV/EQHQSnccb tWhPDrfkTM0Uztzq5o0+xX891ZnG+CZsZt1dRF0zNNjFi0eTJ0u1cxzccKFy54tS x5KGWOn3IcFFsNFZfqsMp/sJc4+Ez5rtLFa59rt73toXvweIoh/e+Y62RZOVUPA9 aZj1IroyAXwnmjwzoBdFPJZ98YaFdcxj9txn6Wrl7X8Qrw/xRYtFH+7t5vY3QTn7 e+7oLi5KcFrPOGggeLRDxmbzMA== -----END CERTIFICATE-----Generated at Fri Sep 11 13:55:57 2026 by rpki-client