$ rpki-client -vvvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft File: 2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json) Hash identifier: v6o0devNtcbXaf98uw2Wi0gcnNEkCT+MP86xy1ycZgI= Subject key identifier: 5F:B9:78:05:D5:3E:24:F0:82:DE:63:21:41:6E:A7:7E:B2:77:DD:59 Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft Manifest number: A5 Signing time: Tue 29 Sep 2026 07:52:34 +0000 Manifest this update: Tue 29 Sep 2026 07:52:34 +0000 Manifest next update: Tue 06 Oct 2026 07:52:34 +0000 Files and hashes: 1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: UYSQo70Qxwp+LJZS+oBUctO/74QaF1AEr3IiDuXS0Og=) 2: 46BCC40E4F7E11F190CC27DCCD833773.roa (hash: Nghl/gGf3uzD6ZNyf47Xvx/I/pPxvMZUhYSQpT2Rhp8=) 3: 534E797A4F7811F1AC63D401CC833773.roa (hash: dAbQc+dld6yEP+cMR+R2W2FXFJfIm0ApZqmWogVGSbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 07:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Validity Not Before: Sep 29 07:52:34 2026 GMT Not After : Oct 6 07:52:34 2026 GMT Subject: CN=6abb6e42-4d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:1f:8c:f4:09:aa:60:b0:3a:4a:3d:2a:32: 8b:ca:a3:73:37:f3:a9:0e:e6:c5:84:3e:4c:e4:01: 71:50:de:5b:21:25:58:26:31:85:0a:02:29:ae:37: 43:af:a1:72:df:2e:99:01:5c:46:56:6c:f7:25:c0: 70:a6:0b:37:19:e6:6b:1d:86:d9:86:e5:f1:a9:53: 9d:87:2a:40:59:53:28:06:44:cf:2e:81:68:74:f6: c4:65:b3:ce:25:0d:64:8d:15:07:c3:2e:0d:b4:52: fa:61:20:e7:9a:55:5e:3e:73:7c:3a:a7:dd:44:f2: dc:67:cb:24:6e:00:9e:19:4d:3f:87:0f:91:1b:19: ea:c1:23:72:84:51:43:60:ce:bb:e7:63:8c:e9:00: d6:36:4b:fe:b0:cb:6b:0d:b0:bc:f9:da:27:90:2c: b5:fb:8a:c9:a6:b0:12:a7:cb:19:ef:b7:9f:32:64: 2c:9e:36:e2:10:b9:7f:c0:ec:7d:a2:8a:d8:08:3b: 8a:69:c9:41:2a:bb:5d:48:9c:d3:69:a3:97:74:cb: 3d:29:b2:1b:59:08:75:02:9a:89:30:95:ef:94:fd: 9e:db:78:40:61:49:43:03:fe:7b:91:84:8e:75:83: e1:2e:30:d9:1a:bb:2e:85:09:c4:17:c9:e7:b9:b1: 6d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B9:78:05:D5:3E:24:F0:82:DE:63:21:41:6E:A7:7E:B2:77:DD:59 X509v3 Authority Key Identifier: keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dc:6c:cb:de:b8:95:ea:ad:d2:78:25:cf:96:3f:45:56:c6: f6:55:78:11:cd:3e:eb:3a:f4:11:70:85:1c:c4:4d:6a:49:7d: ff:e7:65:a4:4f:65:54:68:89:69:ff:12:2d:ba:94:36:4e:a3: 07:5f:a8:1d:74:1e:0b:f6:fc:3d:4c:74:30:2d:50:ba:d0:e5: 04:e6:dc:3f:2b:14:a5:8a:e2:c1:16:bd:ac:0a:a2:a6:cc:74: 9a:0d:6e:5b:3e:84:70:37:1f:53:a1:46:04:e7:86:f1:5d:9c: ea:75:64:9e:0e:7c:84:fe:23:95:53:41:31:9c:06:95:f0:97: 37:46:d8:22:84:7d:c5:06:2c:b2:9e:d4:f6:cd:07:b1:98:19: d6:6c:98:d2:a4:7c:13:b4:97:aa:d5:32:7b:9c:64:8b:d0:5a: a9:62:69:69:8c:f3:17:51:a5:25:5f:e6:62:30:cb:e3:aa:e3: 15:cf:13:d6:25:91:40:9d:0d:eb:64:17:5a:1f:d7:45:fc:18: c7:4d:78:5c:fe:bc:9a:c4:d5:72:04:22:a3:cc:90:a5:68:bf: 55:0c:4d:f6:7c:18:cd:2d:c9:9d:7d:24:e2:c8:ed:92:a5:0f: c4:1a:70:7c:4b:26:dd:c4:53:f1:f9:ea:5e:c1:e2:dc:34:63: 0d:10:b6:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3RTQxMTAvBgNVBAUTKEQ5MzVFQ0Y3OTkxMzFCRUMyNDM4REE5REU4MkI2ODU4 OTYzQzcwNUMwHhcNMjYwOTI5MDc1MjM0WhcNMjYxMDA2MDc1MjM0WjAYMRYwFAYD VQQDEw02YWJiNmU0Mi00ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8sfjPQJqmCwOko9KjKLyqNzN/OpDubFhD5M5AFxUN5bISVYJjGFCgIprjdD r6Fy3y6ZAVxGVmz3JcBwpgs3GeZrHYbZhuXxqVOdhypAWVMoBkTPLoFodPbEZbPO JQ1kjRUHwy4NtFL6YSDnmlVePnN8OqfdRPLcZ8skbgCeGU0/hw+RGxnqwSNyhFFD YM6752OM6QDWNkv+sMtrDbC8+donkCy1+4rJprASp8sZ77efMmQsnjbiELl/wOx9 oorYCDuKaclBKrtdSJzTaaOXdMs9KbIbWQh1ApqJMJXvlP2e23hAYUlDA/57kYSO dYPhLjDZGrsuhQnEF8nnubFtpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF+5eAXV PiTwgt5jIUFup36yd91ZMB8GA1UdIwQYMBaAFNk17PeZExvsJDjanegraFiWPHBc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFNC8wMjMyRTU0OENC NzExMUYwQTVBREVEMjJDNEY5QUUwMi8yVFhzOTVrVEctd2tPTnFkNkN0b1dKWThj RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDdFNC8wMjMyRTU0OENCNzExMUYwQTVBREVEMjJDNEY5QUUwMi8yVFhzOTVrVEct d2tPTnFkNkN0b1dKWThjRncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOtxsy964leqt0nglz5Y/RVbG9lV4Ec0+6zr0EXCFHMRNakl9/+dlpE9lVGiJ af8SLbqUNk6jB1+oHXQeC/b8PUx0MC1QutDlBObcPysUpYriwRa9rAqipsx0mg1u Wz6EcDcfU6FGBOeG8V2c6nVkng58hP4jlVNBMZwGlfCXN0bYIoR9xQYssp7U9s0H sZgZ1myY0qR8E7SXqtUye5xki9BaqWJpaYzzF1GlJV/mYjDL46rjFc8T1iWRQJ0N 62QXWh/XRfwYx014XP68msTVcgQio8yQpWi/VQxN9nwYzS3JnX0k4sjtkqUPxBpw fEsm3cRT8fnqXsHi3DRjDRC29Q== -----END CERTIFICATE-----Generated at Wed Sep 30 07:06:07 2026 by rpki-client