$ rpki-client -vvvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: smt5wQZXYuUyN9LOLUZVVteGEKtmHUKlHNuZCsYpQbc= Subject key identifier: CC:6F:19:6E:4C:D9:17:AD:2A:37:9E:5E:71:D1:CD:31:8E:F7:42:F9 Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: 01A7 Signing time: Fri 25 Sep 2026 04:14:18 +0000 Manifest this update: Fri 25 Sep 2026 04:14:17 +0000 Manifest next update: Fri 02 Oct 2026 04:14:17 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: VSi5Eva06caHQ3i4nf1EcPASHImRXCaw1Jv4aJefvgM=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: VxdztqIyeKdq6Y1gZHMxA5mA6eKYSPyJZb/jS0HIv30=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: oEK7UbEneVnN8s/S/N5Woyft7ItBdFqqTJalpL6CP44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Sep 25 04:14:17 2026 GMT Not After : Oct 2 04:14:17 2026 GMT Subject: CN=6ab5f519-f31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:d6:2e:0b:f3:24:0e:43:0f:f7:4a:90:cc: 7e:5e:1b:e9:d7:d6:47:40:ad:57:27:84:3b:a7:16: 71:99:5b:bc:d3:0d:93:71:3f:65:15:1b:f7:31:b9: 25:63:e8:aa:d9:2d:c3:24:ad:30:98:aa:5b:da:fb: ef:f2:e9:49:12:bf:e2:c8:0d:27:98:f0:0f:2b:eb: 23:4e:15:45:23:1a:15:2e:1c:b2:74:5d:01:a6:cf: c2:26:b7:b3:6b:01:7e:1b:e7:e0:1d:59:56:e6:a6: 1c:15:4a:90:16:9b:35:4e:28:43:d3:25:b6:a4:b8: 55:47:8f:c2:0a:bb:f8:25:9f:9f:da:08:26:15:aa: 3a:53:ed:bc:b8:71:24:90:15:1e:fa:55:80:7c:b5: 5c:9f:36:71:21:7b:1c:fa:67:48:4a:06:2e:c8:c0: 5d:19:38:70:af:c1:79:24:b4:f3:fb:e2:01:aa:fb: 82:c5:ba:12:ff:84:5d:25:a0:2c:68:83:05:bd:e2: a8:00:f9:8f:13:d3:a7:cb:e0:be:d0:0d:ba:c4:ff: b5:39:da:2e:f1:96:6c:5e:d8:cb:52:71:91:db:c2: db:23:f3:9f:ce:02:b7:7c:e4:2a:4e:75:f9:2e:18: 99:2b:2a:e2:13:3a:45:09:35:94:fa:b3:dd:49:20: af:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6F:19:6E:4C:D9:17:AD:2A:37:9E:5E:71:D1:CD:31:8E:F7:42:F9 X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:cf:29:e8:29:e2:47:56:79:3b:87:cc:c8:46:0a:f9:32:18: 18:4b:1c:d6:50:5a:1a:b1:43:a7:07:e3:a8:9e:db:33:c1:1a: 13:f3:52:5e:fb:f0:54:9c:3d:8d:dc:23:1c:30:25:28:b0:bb: 6c:0a:f5:d8:c7:4e:50:a4:56:25:54:4f:48:77:60:da:03:37: c2:9d:d6:69:98:bd:fd:bd:6b:75:f9:e3:a8:1c:cb:7c:9c:4d: 6c:4c:50:23:f8:fb:6b:4e:33:f2:16:2a:68:14:3b:e0:2b:fc: 90:06:15:c6:70:53:50:17:9d:74:6d:c7:6c:3c:19:93:ed:e9: 7e:26:67:97:cb:92:3d:c8:9b:20:8d:c3:92:f6:fe:da:3b:d3: 6f:06:03:1b:07:a3:85:35:66:a8:df:2b:66:e8:e7:7f:bd:88: 0c:43:a3:7c:7d:a9:57:1b:0b:d8:4b:65:fd:94:82:31:3d:01: dc:80:0b:14:89:b0:49:97:a2:1e:a4:58:c9:8f:7b:73:79:3e: 23:dd:36:e0:c6:75:8e:f7:b5:f5:5d:31:1f:79:1f:71:4e:1b: 62:3f:71:38:87:78:ec:8a:e0:53:5e:fc:e0:a5:e2:2e:ca:3f: 36:9b:76:5a:1a:57:07:92:cc:94:35:b9:e7:66:2a:de:c9:fa: a9:c0:66:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjYwOTI1MDQxNDE3WhcNMjYxMDAyMDQxNDE3WjAYMRYwFAYD VQQDEw02YWI1ZjUxOS1mMzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyejWLgvzJA5DD/dKkMx+Xhvp19ZHQK1XJ4Q7pxZxmVu80w2TcT9lFRv3Mbkl Y+iq2S3DJK0wmKpb2vvv8ulJEr/iyA0nmPAPK+sjThVFIxoVLhyydF0Bps/CJrez awF+G+fgHVlW5qYcFUqQFps1TihD0yW2pLhVR4/CCrv4JZ+f2ggmFao6U+28uHEk kBUe+lWAfLVcnzZxIXsc+mdISgYuyMBdGThwr8F5JLTz++IBqvuCxboS/4RdJaAs aIMFveKoAPmPE9Ony+C+0A26xP+1Odou8ZZsXtjLUnGR28LbI/OfzgK3fOQqTnX5 LhiZKyriEzpFCTWU+rPdSSCvQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxvGW5M 2RetKjeeXnHRzTGO90L5MB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOM8p6CniR1Z5O4fMyEYK+TIYGEsc1lBaGrFDpwfjqJ7bM8EaE/NSXvvwVJw9 jdwjHDAlKLC7bAr12MdOUKRWJVRPSHdg2gM3wp3WaZi9/b1rdfnjqBzLfJxNbExQ I/j7a04z8hYqaBQ74Cv8kAYVxnBTUBeddG3HbDwZk+3pfiZnl8uSPcibII3Dkvb+ 2jvTbwYDGwejhTVmqN8rZujnf72IDEOjfH2pVxsL2Etl/ZSCMT0B3IALFImwSZei HqRYyY97c3k+I9024MZ1jve19V0xH3kfcU4bYj9xOId47IrgU1784KXiLso/Npt2 WhpXB5LMlDW552Yq3sn6qcBmxA== -----END CERTIFICATE-----Generated at Sat Sep 26 18:23:14 2026 by rpki-client