$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft File: 2wVNT_SDuJTYCF4P43hs4um1MGI.mft (raw, json) Hash identifier: jsIUtiai0eyipgDESwiDbRWUskzCNoGNwqPIqTRFzRI= Subject key identifier: FA:DA:21:F8:3F:A3:46:61:B8:8A:DF:95:99:12:2C:9D:19:EE:CE:6A Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62 Certificate issuer: /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft Manifest number: 5C Signing time: Tue 22 Sep 2026 20:05:22 +0000 Manifest this update: Tue 22 Sep 2026 20:05:22 +0000 Manifest next update: Tue 29 Sep 2026 20:05:22 +0000 Files and hashes: 1: 2wVNT_SDuJTYCF4P43hs4um1MGI.crl (hash: oXT2UW+JZs6LjAZDswscCC4ir15sPJui7EOiutD7W2A=) 2: 031A6E544E9311F19004C0C7A2EE528E.roa (hash: XSk8TRLnQcnajyyzxwmOeH2VC1E5ZNDxh6cE4PqtTW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062 Validity Not Before: Sep 22 20:05:22 2026 GMT Not After : Sep 29 20:05:22 2026 GMT Subject: CN=6ab2df82-dbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:24:20:29:c7:3c:02:11:fd:d3:29:84:2e: 01:b0:a9:a5:f5:82:1d:7b:8d:ab:31:79:36:ea:f7: 20:76:2d:10:e9:0c:7d:7d:e2:4f:62:28:e1:2f:c0: 71:30:0a:25:ee:21:55:c2:19:d4:1d:b0:a1:d1:aa: a8:f5:ad:db:98:77:0f:33:7e:f6:32:c2:e3:88:b5: 6f:03:c5:fe:35:e1:d1:f8:d7:94:b4:74:eb:88:c3: 51:c4:f3:38:f4:94:75:b6:b7:8c:50:4e:14:c3:12: 1d:92:16:0c:b5:b8:98:1c:28:9c:e4:1c:1c:2a:92: 16:52:3d:53:4d:da:53:1e:69:1d:36:9a:b5:a6:47: 4c:62:50:f7:0f:23:ca:e2:9f:e0:69:e2:f3:a9:82: 37:b8:34:f8:cc:92:ca:f1:72:1f:c1:57:a2:63:7a: 95:05:cc:14:76:cd:80:eb:65:ae:e8:3e:c3:fd:2b: e7:58:df:bc:cf:55:af:72:dc:c6:80:76:f6:00:38: de:a9:ba:e2:56:13:d2:06:b7:88:36:ea:89:4c:95: 9c:d1:36:46:41:a9:26:d4:73:69:31:b1:e3:e5:18: 7e:b7:09:1f:a3:e3:3f:38:37:ec:b1:b5:76:50:aa: ea:b6:c7:fe:26:3a:81:7b:71:45:38:da:d2:2d:f1: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DA:21:F8:3F:A3:46:61:B8:8A:DF:95:99:12:2C:9D:19:EE:CE:6A X509v3 Authority Key Identifier: keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7f:a9:94:95:29:87:4b:74:6d:30:eb:a4:1e:1a:1e:22:c9: 40:23:79:e1:15:f0:64:0f:b7:70:ac:8b:81:d2:dc:26:e2:d2: 72:7b:84:fa:6a:75:1b:a0:74:0f:9f:1b:05:59:db:a4:c5:fd: c8:bd:18:55:be:3d:be:07:5d:60:3a:d3:04:21:4a:af:27:d7: 6a:c0:b7:26:c5:81:b8:12:0d:62:37:98:c4:f0:e8:fc:f4:74: b1:dd:78:db:42:f8:85:6f:24:62:33:75:5a:88:67:58:ca:35: 16:d4:16:cc:56:06:a8:70:d2:6b:eb:bc:c0:e0:ab:1f:bf:dd: f3:1c:00:cb:eb:e0:1d:0b:07:0f:3e:60:46:32:8c:6b:8a:7e: 7f:80:a3:e0:87:6c:3b:0c:2c:79:85:a0:eb:69:25:c2:55:f7: 86:a4:01:cf:a5:21:ed:c2:d7:64:af:8c:7b:7d:19:60:ed:48: fd:6a:0a:76:3e:96:81:36:6b:9d:c4:ef:12:ec:c3:e0:72:a0: f5:52:e9:34:e9:99:31:72:94:28:d4:14:a4:aa:38:78:c9:f6: 6c:cb:29:64:e1:2f:93:62:b7:a4:32:20:e2:91:4c:1e:ed:20: 02:f5:e8:a7:7b:28:74:2d:10:68:6f:d1:7c:5d:a1:e8:a6:fd: 1a:7d:c3:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NThERjExMC8GA1UEBRMoREIwNTRENEZGNDgzQjg5NEQ4MDg1RTBGRTM3ODZDRTJF OUI1MzA2MjAeFw0yNjA5MjIyMDA1MjJaFw0yNjA5MjkyMDA1MjJaMBgxFjAUBgNV BAMTDTZhYjJkZjgyLWRiZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgPyQgKcc8AhH90ymELgGwqaX1gh17jasxeTbq9yB2LRDpDH194k9iKOEvwHEw CiXuIVXCGdQdsKHRqqj1rduYdw8zfvYywuOItW8Dxf414dH415S0dOuIw1HE8zj0 lHW2t4xQThTDEh2SFgy1uJgcKJzkHBwqkhZSPVNN2lMeaR02mrWmR0xiUPcPI8ri n+Bp4vOpgje4NPjMksrxch/BV6JjepUFzBR2zYDrZa7oPsP9K+dY37zPVa9y3MaA dvYAON6puuJWE9IGt4g26olMlZzRNkZBqSbUc2kxsePlGH63CR+j4z84N+yxtXZQ quq2x/4mOoF7cUU42tIt8R/pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+toh+D+j RmG4it+VmRIsnRnuzmowHwYDVR0jBBgwFoAU2wVNT/SDuJTYCF4P43hs4um1MGIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OERGLzBDNEJBODIwMzUx QzExRjFBQjI4NkNBNzdDRUU1MjhFLzJ3Vk5UX1NEdUpUWUNGNFA0M2hzNHVtMU1H SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvMndWTlRfU0R1SlRZQ0Y0UDQzaHM0dW0xTUdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 OERGLzBDNEJBODIwMzUxQzExRjFBQjI4NkNBNzdDRUU1MjhFLzJ3Vk5UX1NEdUpU WUNGNFA0M2hzNHVtMU1HSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdf6mUlSmHS3RtMOukHhoeIslAI3nhFfBkD7dwrIuB0twm4tJye4T6anUboHQP nxsFWdukxf3IvRhVvj2+B11gOtMEIUqvJ9dqwLcmxYG4Eg1iN5jE8Oj89HSx3Xjb QviFbyRiM3VaiGdYyjUW1BbMVgaocNJr67zA4Ksfv93zHADL6+AdCwcPPmBGMoxr in5/gKPgh2w7DCx5haDraSXCVfeGpAHPpSHtwtdkr4x7fRlg7Uj9agp2PpaBNmud xO8S7MPgcqD1Uuk06ZkxcpQo1BSkqjh4yfZsyylk4S+TYrekMiDikUwe7SAC9ein eyh0LRBob9F8XaHopv0afcNc -----END CERTIFICATE-----Generated at Thu Sep 24 12:57:00 2026 by rpki-client