$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: ui1Rryz+rHv3ZKnWTK9d5o5RtGG55F5XWe4OkDGLZaY= Subject key identifier: 79:05:75:91:9E:23:95:AD:E4:54:87:48:D5:66:91:D2:35:8C:D8:9A Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 0219 Signing time: Wed 23 Sep 2026 02:50:40 +0000 Manifest this update: Wed 23 Sep 2026 02:50:39 +0000 Manifest next update: Wed 30 Sep 2026 02:50:39 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: vD9hkcmeUgApRLas4I1W3QnoJC4h1FNfFARDNdbL78U=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: McXWsXXcIZmHr1+c7MXfi1yOdfqnkuMIhVjsAcxCbA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Sep 23 02:50:39 2026 GMT Not After : Sep 30 02:50:39 2026 GMT Subject: CN=6ab33e80-2443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:64:9c:72:bd:d3:eb:fd:c0:b4:65:dd:d5:74: cf:09:79:7a:f7:86:f9:b1:80:3d:bf:e0:32:d7:a8: 3d:a9:4e:52:11:f1:f6:ae:b2:ae:2d:89:98:78:3f: cd:08:29:f1:09:42:d6:42:85:ad:ed:47:c5:d1:04: 34:a1:ea:e8:1f:e1:61:0a:53:e2:89:3c:fa:c4:67: 0d:e6:e1:62:c5:04:53:e5:d6:25:67:ad:75:df:80: 49:97:11:6e:c5:94:35:87:69:00:bf:70:7d:d2:25: cc:d8:27:81:77:aa:1e:51:a1:0f:70:21:ef:d8:c5: 48:bd:4b:62:71:3f:a0:c7:4f:ec:9c:13:be:25:26: c6:50:dc:f0:4a:be:a1:84:6a:46:76:4e:b3:d0:86: a0:9b:4a:b4:16:b0:70:3d:b4:0a:c2:5e:ff:7a:8b: 4b:59:00:7f:9f:51:b1:fe:54:44:4f:71:46:0f:0c: 9d:67:e5:8b:5e:4a:4e:2a:b5:fa:d8:19:0a:36:7f: be:8e:f1:d1:b6:e6:e7:1b:ab:73:12:cc:2d:86:74: 8e:e9:ad:cb:a6:07:3d:01:0c:97:9b:51:2f:5f:9b: bb:eb:a4:b9:fd:9b:9f:40:5f:36:0a:c5:b0:41:f3: 4a:39:48:cf:5e:14:c5:8d:8d:2a:53:0c:02:4e:46: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:05:75:91:9E:23:95:AD:E4:54:87:48:D5:66:91:D2:35:8C:D8:9A X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f0:1a:ec:f0:7d:ad:75:b4:0b:5e:a5:1d:0f:1b:d2:1e:07: d5:5b:7b:d6:0b:49:26:29:75:a9:0c:44:ac:35:c9:0e:c1:b3: d0:ab:ed:ee:bc:17:8a:60:4d:39:fa:12:e5:39:16:33:5b:5c: e7:22:9b:80:f0:7c:3a:07:4f:2f:e9:b0:16:a8:c2:9f:e6:f5: ec:e8:3b:03:d3:4f:26:a3:be:a8:7e:88:9b:e7:cc:f7:5c:41: d3:fb:55:a2:6a:87:34:8c:ec:18:4b:69:39:9d:ea:48:a1:ca: 31:66:4f:6c:1b:88:13:9f:bf:a6:7e:f2:85:47:7c:c1:f0:b8: 27:71:1b:80:4b:db:b2:ec:08:60:3a:a7:8a:4a:0d:75:db:0b: 59:d2:31:7c:98:12:82:99:ee:28:ea:1a:d7:a1:5d:b7:5e:3d: 1f:94:b9:c1:4f:a0:4c:6b:b3:5d:8a:ab:be:10:00:01:44:3d: 78:c7:5d:c3:c5:6d:9c:ab:ec:e3:fc:51:40:f2:71:7c:ec:aa: 78:26:6e:e0:b5:df:6c:bb:c3:5b:84:12:67:31:45:2d:38:db: e6:98:f4:56:c6:c8:d1:d7:df:c0:85:ee:5b:36:0b:e0:be:ad: 95:ca:61:71:2d:27:8e:bd:05:de:db:b3:8b:4f:66:3e:4e:f8: 91:cd:b5:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjYwOTIzMDI1MDM5WhcNMjYwOTMwMDI1MDM5WjAYMRYwFAYD VQQDEw02YWIzM2U4MC0yNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02Sccr3T6/3AtGXd1XTPCXl694b5sYA9v+Ay16g9qU5SEfH2rrKuLYmYeD/N CCnxCULWQoWt7UfF0QQ0oeroH+FhClPiiTz6xGcN5uFixQRT5dYlZ61134BJlxFu xZQ1h2kAv3B90iXM2CeBd6oeUaEPcCHv2MVIvUticT+gx0/snBO+JSbGUNzwSr6h hGpGdk6z0Iagm0q0FrBwPbQKwl7/eotLWQB/n1Gx/lRET3FGDwydZ+WLXkpOKrX6 2BkKNn++jvHRtubnG6tzEswthnSO6a3Lpgc9AQyXm1EvX5u766S5/ZufQF82CsWw QfNKOUjPXhTFjY0qUwwCTkZYqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkFdZGe I5Wt5FSHSNVmkdI1jNiaMB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVfAa7PB9rXW0C16lHQ8b0h4H1Vt71gtJJil1qQxErDXJDsGz0Kvt7rwXimBN OfoS5TkWM1tc5yKbgPB8OgdPL+mwFqjCn+b17Og7A9NPJqO+qH6Im+fM91xB0/tV omqHNIzsGEtpOZ3qSKHKMWZPbBuIE5+/pn7yhUd8wfC4J3EbgEvbsuwIYDqnikoN ddsLWdIxfJgSgpnuKOoa16Fdt149H5S5wU+gTGuzXYqrvhAAAUQ9eMddw8VtnKvs 4/xRQPJxfOyqeCZu4LXfbLvDW4QSZzFFLTjb5pj0VsbI0dffwIXuWzYL4L6tlcph cS0njr0F3tuzi09mPk74kc21rw== -----END CERTIFICATE-----Generated at Thu Sep 24 21:56:26 2026 by rpki-client