$ rpki-client -vvvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft File: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft (raw, json) Hash identifier: qQeWl7SP5EYyBU4P9gl16qqUcwYOBHVGA9UlFia3mvI= Subject key identifier: 16:AF:A8:E2:B6:0E:BC:2F:00:48:60:EB:E2:C1:38:E0:CD:AC:DA:FE Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft Manifest number: 02AD Signing time: Tue 22 Sep 2026 06:52:11 +0000 Manifest this update: Tue 22 Sep 2026 06:52:11 +0000 Manifest next update: Tue 29 Sep 2026 06:52:11 +0000 Files and hashes: 1: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl (hash: bj786bzJeQwcy7t077adIoAP8Iahwm0scuQNgOjTmm4=) 2: 436F4126B65011F1948A73976C11F970.roa (hash: F3+uY7nHwDjlXNt5YeZTIT18vC2O5MfAcnf6hK5VOi0=) 3: BFC2928AB50311F1A29149BC4111F970.roa (hash: 1pUmR0Iv+JSyRlcSri62+2ZlKQE8raHJCVkRfNgvUMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 06:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Validity Not Before: Sep 22 06:52:11 2026 GMT Not After : Sep 29 06:52:11 2026 GMT Subject: CN=6ab2259b-7fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:4d:8d:f4:1a:91:42:ea:5a:ae:25:c1:2a: cd:d7:75:7a:92:03:67:40:c2:c2:44:4f:03:2f:b8: b4:8c:df:3e:f9:9e:96:f7:00:ab:99:92:c4:49:80: 8a:68:8e:c3:40:1e:92:41:e2:87:91:7b:f3:e5:75: 16:e9:d7:bb:cd:e5:e7:22:7f:38:39:67:41:20:a6: 06:d1:de:ef:2d:75:f0:97:2f:85:86:53:3e:f9:ed: 7d:af:fc:7a:ea:20:9b:bc:89:62:b0:44:1f:9a:d1: ed:f4:47:f5:36:58:88:0b:ad:a9:c0:f6:80:a4:69: e2:d5:85:12:35:62:0b:e4:48:92:f5:ab:13:03:92: cb:05:3e:49:20:55:88:57:e8:69:c1:f1:f6:92:ce: 37:f0:48:a8:a5:9d:29:97:e4:07:b5:8d:1b:c3:c3: e3:16:e4:dc:59:ae:e7:a5:de:b7:53:59:a3:99:20: 5d:52:22:43:82:04:20:bd:5d:34:ab:9e:3d:ba:ac: f9:99:c2:29:71:41:e8:71:85:68:08:94:63:b7:80: 49:3d:53:3b:a9:66:8e:d9:a4:00:78:a3:67:8c:5c: ee:75:94:82:5f:b2:46:6d:a1:59:70:04:bc:58:cd: d0:c3:47:4f:10:dc:0e:1d:cb:91:a3:d0:23:50:c6: 33:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AF:A8:E2:B6:0E:BC:2F:00:48:60:EB:E2:C1:38:E0:CD:AC:DA:FE X509v3 Authority Key Identifier: keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:30:17:ad:2f:00:01:44:1c:09:09:95:26:da:0a:82:57:7f: ef:ee:22:83:8f:ba:fe:2c:f0:8e:6d:90:d1:5b:8f:19:c8:af: cd:2c:13:78:c4:ec:38:b9:e0:99:ab:0e:7b:03:38:d7:d3:dc: a3:80:30:a7:1c:f5:21:f3:80:2e:f1:bc:ed:f0:77:1f:ea:df: 34:e4:cd:30:9b:54:e8:86:80:30:3e:65:e2:b1:d4:26:e7:d2: 69:41:39:79:0a:81:1a:25:2c:3f:f3:cb:06:df:52:ac:9c:ac: 70:55:e3:a2:e9:36:c3:ac:e4:d0:f4:1d:f1:b4:af:69:a0:b4: 99:1c:f3:1b:f4:29:4a:80:25:02:04:fb:63:08:88:1f:b1:3a: e9:c9:d6:a8:2a:3e:8c:4c:28:71:2a:f0:53:de:2c:32:7e:59: 33:32:7f:24:ce:e2:70:50:07:9f:56:b9:6b:e7:52:9f:ea:a4: 69:94:68:31:75:eb:3e:81:ee:63:fe:08:36:c2:e0:ef:50:b2: 4c:ef:0b:02:57:28:c6:0d:07:e7:63:c0:ff:6a:0d:45:92:5f: aa:1c:96:e9:d7:84:9d:1f:b0:96:46:11:be:ce:b6:73:58:f5: 20:68:d9:b9:ab:7d:5f:8c:aa:7d:94:71:72:29:85:d6:b3:8c: 38:3e:29:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTkxMTAvBgNVBAUTKEVCQzNEN0ZDRkIxMzRGNTM4RkMxOUY5OEFEODk4QzBG M0YwNzRGMjAwHhcNMjYwOTIyMDY1MjExWhcNMjYwOTI5MDY1MjExWjAYMRYwFAYD VQQDEw02YWIyMjU5Yi03ZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8hNjfQakULqWq4lwSrN13V6kgNnQMLCRE8DL7i0jN8++Z6W9wCrmZLESYCK aI7DQB6SQeKHkXvz5XUW6de7zeXnIn84OWdBIKYG0d7vLXXwly+FhlM++e19r/x6 6iCbvIlisEQfmtHt9Ef1NliIC62pwPaApGni1YUSNWIL5EiS9asTA5LLBT5JIFWI V+hpwfH2ks438EiopZ0pl+QHtY0bw8PjFuTcWa7npd63U1mjmSBdUiJDggQgvV00 q549uqz5mcIpcUHocYVoCJRjt4BJPVM7qWaO2aQAeKNnjFzudZSCX7JGbaFZcAS8 WM3Qw0dPENwOHcuRo9AjUMYzIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBavqOK2 DrwvAEhg6+LBOODNrNr+MB8GA1UdIwQYMBaAFOvD1/z7E09Tj8GfmK2JjA8/B08g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBOS8yNjE4ODQwRUIx NDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQxT1B3Wi1ZclltTUR6OEhU eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY4UFhfUHNUVDFPUHdaLVlyWW1NRHo4SFR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBOS8yNjE4ODQwRUIxNDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQx T1B3Wi1ZclltTUR6OEhUeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAjAXrS8AAUQcCQmVJtoKgld/7+4ig4+6/izwjm2Q0VuPGcivzSwTeMTsOLng masOewM419Pco4Awpxz1IfOALvG87fB3H+rfNOTNMJtU6IaAMD5l4rHUJufSaUE5 eQqBGiUsP/PLBt9SrJyscFXjouk2w6zk0PQd8bSvaaC0mRzzG/QpSoAlAgT7YwiI H7E66cnWqCo+jEwocSrwU94sMn5ZMzJ/JM7icFAHn1a5a+dSn+qkaZRoMXXrPoHu Y/4INsLg71CyTO8LAlcoxg0H52PA/2oNRZJfqhyW6deEnR+wlkYRvs62c1j1IGjZ uat9X4yqfZRxcimF1rOMOD4p1g== -----END CERTIFICATE-----Generated at Tue Sep 22 21:15:19 2026 by rpki-client