$ rpki-client -vvvf rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft File: 2CVmixrBt_OBXwe82lfnSMSWSpo.mft (raw, json) Hash identifier: Luv4YH7N+d68dfB+GgruH6Sdl52UZ0A+y7M9ESv9Uus= Subject key identifier: 59:D7:48:10:BE:5F:F3:48:33:2D:E2:AE:FB:EE:C1:62:B5:28:0B:64 Authority key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A Certificate issuer: /CN=A91756C3/serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft Manifest number: 0139 Signing time: Wed 23 Sep 2026 05:23:15 +0000 Manifest this update: Wed 23 Sep 2026 05:23:14 +0000 Manifest next update: Wed 30 Sep 2026 05:23:14 +0000 Files and hashes: 1: 2CVmixrBt_OBXwe82lfnSMSWSpo.crl (hash: EuJKoOB1tA2cyYNCD0C5T3QAgY519DPB2qiMAmt5910=) 2: 00078764E06811EF8716401DC4F9AE02.roa (hash: JAiUHomtiUqiqYTLwAToU1Zg3aNGAOGf/55bKHeBYC4=) 3: BPfmVXHNj0cLBBvHN68-D9Sw9jo.asa (hash: jSYUP8eA41eKB7H8u3DmMSb87n/WwOnrfSBvQ1R3M3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756C3, serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Validity Not Before: Sep 23 05:23:14 2026 GMT Not After : Sep 30 05:23:14 2026 GMT Subject: CN=6ab36243-8e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:9d:d6:b2:e6:df:fd:1b:91:3a:0c:b2:a4:15: f3:48:a3:06:5e:29:50:e4:bd:ac:12:a9:97:f7:18: f1:ad:dc:81:a0:0a:91:2e:22:d9:d0:f8:5f:e4:e2: 85:83:83:bb:8c:e1:68:06:8e:20:1d:70:5d:80:19: 82:56:a8:60:95:0d:8f:ab:a5:6f:a7:eb:da:e5:b1: e1:d0:f3:33:09:ce:5a:0d:89:8e:dd:99:c7:54:68: b0:65:5d:28:9f:67:05:eb:13:34:b1:17:cc:28:8d: 85:6f:c9:ab:7d:c4:00:74:83:5e:b2:ac:a6:2b:cb: 1a:e5:ec:6f:6e:b1:b9:3f:0f:21:fb:a2:1f:e5:eb: 2c:43:b6:5d:d7:c2:c9:61:38:c1:e5:57:50:8a:18: 73:65:33:99:94:c2:8a:92:7d:c6:38:bf:ca:45:80: 2b:9f:2e:02:90:2d:67:df:b9:f1:ef:1d:cd:33:31: 5b:b9:b7:a5:38:02:36:95:03:ed:31:7b:ba:b6:1c: 8c:13:33:56:fa:63:7a:cf:ad:43:5f:57:f6:e4:e0: 7b:23:8a:00:ba:e9:b5:ce:ec:89:0d:33:92:d2:4d: 44:ce:73:db:5a:f9:45:b6:34:61:29:e1:a6:21:35: a2:55:fb:e5:fd:c8:8b:ee:04:9f:75:88:62:cb:bf: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D7:48:10:BE:5F:F3:48:33:2D:E2:AE:FB:EE:C1:62:B5:28:0B:64 X509v3 Authority Key Identifier: keyid:D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:20:ed:eb:5d:5a:38:2a:04:f2:a4:d7:ee:27:c0:98:62:86: 7e:e6:03:6c:57:29:5c:f9:8a:90:ba:a7:a4:2f:ce:f5:3c:2c: d2:6d:37:16:63:44:3d:18:60:5b:ea:b6:59:c4:26:f4:82:29: 7e:68:32:84:ee:57:71:16:6f:ae:dc:7a:a8:8b:12:ad:4f:1a: 69:a6:3d:eb:91:4b:a6:da:9a:da:0d:5f:7e:02:69:2e:81:3c: 1f:b2:1c:56:c2:6d:af:dc:2c:e5:93:f0:aa:6d:35:35:77:78: 04:8c:ca:87:ea:1b:59:29:ba:04:da:c9:7a:0b:3e:ba:4d:9c: d9:fb:09:18:3d:ba:32:6e:27:d6:45:28:ee:b2:22:97:c0:fd: 9d:42:23:a1:37:de:81:72:0a:8b:88:47:67:ed:38:09:3b:e7: 26:48:d3:f1:0a:06:e0:65:bf:d1:ec:e5:d2:c3:9f:f9:1a:44: af:cb:04:b3:1a:cf:f7:4b:a8:97:49:68:3d:9d:c9:ae:f7:48: a3:4b:89:78:f8:8b:57:3e:83:65:46:b8:e2:f5:c1:8a:af:c1: be:3e:2f:89:76:f9:b7:a6:85:2d:dc:3a:53:f6:61:77:ed:29: 99:57:3b:c2:18:8a:cd:df:cc:84:b6:7b:9e:5f:7e:92:1f:4b: 17:f9:77:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QzMxMTAvBgNVBAUTKEQ4MjU2NjhCMUFDMUI3RjM4MTVGMDdCQ0RBNTdFNzQ4 QzQ5NjRBOUEwHhcNMjYwOTIzMDUyMzE0WhcNMjYwOTMwMDUyMzE0WjAYMRYwFAYD VQQDEw02YWIzNjI0My04ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+53Wsubf/RuROgyypBXzSKMGXilQ5L2sEqmX9xjxrdyBoAqRLiLZ0Phf5OKF g4O7jOFoBo4gHXBdgBmCVqhglQ2Pq6Vvp+va5bHh0PMzCc5aDYmO3ZnHVGiwZV0o n2cF6xM0sRfMKI2Fb8mrfcQAdINesqymK8sa5exvbrG5Pw8h+6If5essQ7Zd18LJ YTjB5VdQihhzZTOZlMKKkn3GOL/KRYArny4CkC1n37nx7x3NMzFbubelOAI2lQPt MXu6thyMEzNW+mN6z61DX1f25OB7I4oAuum1zuyJDTOS0k1EznPbWvlFtjRhKeGm ITWiVfvl/ciL7gSfdYhiy7/m5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnXSBC+ X/NIMy3irvvuwWK1KAtkMB8GA1UdIwQYMBaAFNglZosawbfzgV8HvNpX50jElkqa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZDMy81QkY1MTkyQUUw NjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhyQnRfT0JYd2U4MmxmblNNU1dT cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDVm1peHJCdF9PQlh3ZTgybGZuU01TV1Nwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTZDMy81QkY1MTkyQUUwNjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhyQnRf T0JYd2U4MmxmblNNU1dTcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAryDt611aOCoE8qTX7ifAmGKGfuYDbFcpXPmKkLqnpC/O9Tws0m03FmNEPRhg W+q2WcQm9IIpfmgyhO5XcRZvrtx6qIsSrU8aaaY965FLptqa2g1ffgJpLoE8H7Ic VsJtr9ws5ZPwqm01NXd4BIzKh+obWSm6BNrJegs+uk2c2fsJGD26Mm4n1kUo7rIi l8D9nUIjoTfegXIKi4hHZ+04CTvnJkjT8QoG4GW/0ezl0sOf+RpEr8sEsxrP90uo l0loPZ3JrvdIo0uJePiLVz6DZUa44vXBiq/Bvj4viXb5t6aFLdw6U/Zhd+0pmVc7 whiKzd/MhLZ7nl9+kh9LF/l3Fw== -----END CERTIFICATE-----Generated at Wed Sep 23 20:21:23 2026 by rpki-client