$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: Pouu5K80tYJVn3ivwqj7i9qW/Ub602Y8hnWX7GiW2QQ= Subject key identifier: A3:1A:1D:EE:DC:ED:2A:32:F5:3A:45:03:C2:1C:00:6C:6F:43:9D:86 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2B4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2B17 Signing time: Sat 10 Oct 2026 15:33:42 +0000 Manifest this update: Sat 10 Oct 2026 15:33:42 +0000 Manifest next update: Sat 17 Oct 2026 15:33:42 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: i+NvCDl/KFTR8aw8dVPv/VAwpxaigjEvZnhLkRPCxkw=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: mi5Z8QiyFyePXfXFb5bmVuyq1rksFrDBMyBn1iuDnTA=) 3: 3701B6ECAB3511F18DD665A26C11F970.roa (hash: AtFyjSzJpmwJS5++D9ZwxOebly4i8uSwVic2GM31Rrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11082 (0x2b4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Oct 10 15:33:42 2026 GMT Not After : Oct 17 15:33:42 2026 GMT Subject: CN=6aca5ad6-68b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:d2:e9:b8:f9:93:5c:9f:cd:08:52:36:cb: d6:50:30:e9:64:6e:31:8c:e9:f9:e1:a1:8a:98:93: 39:51:37:91:73:15:fa:60:68:13:0a:6d:96:4a:0d: 26:d1:9b:06:aa:38:cd:7f:82:0d:95:a3:56:f7:db: d5:0e:bd:10:b0:cf:ba:85:43:c4:26:27:32:51:7f: d6:95:6a:82:c3:a0:e1:2b:40:d1:d5:b8:c2:e4:63: 4b:7a:eb:12:34:48:af:31:bf:ab:2b:5b:2a:32:b9: dc:5d:e2:65:43:a1:88:62:2f:53:40:71:88:7f:40: ed:ed:c1:18:51:8e:61:f6:94:aa:7f:b1:67:af:01: 06:bf:89:d4:55:93:7f:e9:3b:2a:e2:3e:16:6d:b0: b6:f5:78:a7:0e:50:a8:a6:db:38:fb:a8:f6:0b:31: ac:71:da:84:a0:ca:7f:cb:59:39:3d:f0:04:45:d8: ec:06:64:ea:80:6d:ce:01:fc:fe:91:72:78:16:3d: 20:6a:f1:9f:44:a0:1c:e8:d3:b4:79:62:21:31:45: 2f:8b:fd:4d:20:2f:e7:94:88:c9:aa:d8:33:1b:b9: 8f:2c:81:42:63:c6:d0:66:6d:6f:80:a5:c3:16:14: 2d:c3:9e:e9:54:96:57:bb:c1:f2:0a:bb:f7:66:3d: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1A:1D:EE:DC:ED:2A:32:F5:3A:45:03:C2:1C:00:6C:6F:43:9D:86 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:c7:b6:86:91:3a:6d:2d:b0:a7:58:49:e6:fa:e0:33:4c:35: c6:e0:cc:e4:62:d5:dc:f8:cd:94:27:ad:1f:6a:f1:26:21:52: 66:1e:a4:21:cf:95:ab:23:e9:0b:ea:36:3e:f6:f0:5d:94:f2: 17:ee:3e:88:9e:06:84:df:b1:0f:bf:91:ea:a4:dd:82:60:e5: 69:35:11:d4:0c:73:f9:98:66:9d:5b:d2:3c:cd:cc:8c:ea:db: 4d:29:7a:f8:58:d1:f5:89:60:4b:b2:d4:3a:10:9b:df:28:03: bf:79:89:f2:0e:d5:17:31:8d:50:dc:ba:cc:6b:f2:27:ad:3c: f6:df:6c:04:a7:f2:36:dd:1c:81:1e:88:ed:b6:ef:7d:3b:aa: 9b:df:f1:10:30:b8:94:cf:44:97:cd:a7:a2:ec:3e:5e:f2:1b: 16:ee:27:fb:b1:16:80:7f:a3:77:84:b8:91:24:45:e5:97:97: 50:2e:19:62:42:48:18:d6:b8:ad:23:5b:5c:31:16:14:97:32: 3b:ed:f1:55:a2:45:e1:89:a7:80:16:45:91:a6:7f:3e:11:a2: ad:1f:54:7d:11:e3:de:0b:17:b1:99:f7:54:4e:40:75:c0:33: da:e9:ea:fd:fe:a7:a6:19:71:d7:bd:0f:20:e0:08:f9:fe:50: ac:0e:3f:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICK0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjYxMDEwMTUzMzQyWhcNMjYxMDE3MTUzMzQyWjAYMRYwFAYD VQQDEw02YWNhNWFkNi02OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0XS6bj5k1yfzQhSNsvWUDDpZG4xjOn54aGKmJM5UTeRcxX6YGgTCm2WSg0m 0ZsGqjjNf4INlaNW99vVDr0QsM+6hUPEJicyUX/WlWqCw6DhK0DR1bjC5GNLeusS NEivMb+rK1sqMrncXeJlQ6GIYi9TQHGIf0Dt7cEYUY5h9pSqf7FnrwEGv4nUVZN/ 6Tsq4j4WbbC29XinDlCopts4+6j2CzGscdqEoMp/y1k5PfAERdjsBmTqgG3OAfz+ kXJ4Fj0gavGfRKAc6NO0eWIhMUUvi/1NIC/nlIjJqtgzG7mPLIFCY8bQZm1vgKXD FhQtw57pVJZXu8HyCrv3Zj19dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMaHe7c 7Soy9TpFA8IcAGxvQ52GMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ8e2hpE6bS2wp1hJ5vrgM0w1xuDM5GLV3PjNlCetH2rxJiFSZh6kIc+VqyPp C+o2PvbwXZTyF+4+iJ4GhN+xD7+R6qTdgmDlaTUR1Axz+ZhmnVvSPM3MjOrbTSl6 +FjR9YlgS7LUOhCb3ygDv3mJ8g7VFzGNUNy6zGvyJ6089t9sBKfyNt0cgR6I7bbv fTuqm9/xEDC4lM9El82nouw+XvIbFu4n+7EWgH+jd4S4kSRF5ZeXUC4ZYkJIGNa4 rSNbXDEWFJcyO+3xVaJF4YmngBZFkaZ/PhGirR9UfRHj3gsXsZn3VE5AdcAz2unq /f6nphlx170PIOAI+f5QrA4/aQ== -----END CERTIFICATE-----Generated at Sun Oct 11 07:33:48 2026 by rpki-client