$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json) Hash identifier: ibiHOMubTrYckzSaySDLiS5HeUvEWkcWIdFjSIIYlZc= Subject key identifier: 6B:D8:00:4A:4E:37:BE:19:FD:17:7F:C4:E7:70:11:31:6E:87:89:9B Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Certificate serial: 3589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft Manifest number: 3583 Signing time: Tue 22 Sep 2026 14:48:41 +0000 Manifest this update: Tue 22 Sep 2026 14:48:40 +0000 Manifest next update: Tue 29 Sep 2026 14:48:40 +0000 Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: 7opeOG755ki+EsybNvLa4zfQQc5oTaAcJsIJdQijUfg=) 2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: RTpAZwruc7NuoT/Wh4GeFBLqLMrhtkNDUYMQpCl+t8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13705 (0x3589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Validity Not Before: Sep 22 14:48:40 2026 GMT Not After : Sep 29 14:48:40 2026 GMT Subject: CN=6ab29549-4c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ad:e9:38:f2:38:61:93:98:33:20:c2:2f:d8: 9a:14:35:91:a4:bd:f7:f1:a8:c3:0f:ed:32:e7:3b: 55:e8:c3:aa:17:9b:35:e8:aa:cd:fd:a6:9d:c5:95: 98:aa:28:7b:17:fa:5c:60:12:b0:d9:c2:c0:01:74: 27:14:e4:6f:3c:5a:d4:89:64:6b:d2:6a:b0:5a:ee: ff:06:c3:cd:28:95:b3:ac:72:94:e6:03:b6:7b:59: c2:37:54:a4:51:0e:ed:d4:7e:49:ef:ae:9a:c7:88: 39:e3:3a:3e:e1:a0:8d:fb:22:58:ea:6b:b2:48:c5: bb:20:da:80:3f:9f:d9:d6:64:86:b4:9f:d0:96:3b: 96:88:94:24:95:5a:fa:e2:de:5b:10:4f:96:1a:fd: 1a:d3:b7:8a:30:09:6e:58:12:34:51:8b:1c:e2:94: af:76:3a:ef:a8:1c:70:eb:70:90:40:ac:a5:75:b4: 61:1b:63:d1:5a:52:f4:0c:57:7e:8e:10:50:5a:60: 09:1b:06:ce:aa:93:59:6c:98:e9:93:b3:14:02:cd: 8f:b1:67:2c:69:c7:ee:3a:49:74:e3:eb:d2:7f:a9: 2a:a9:a9:ed:0b:bc:1a:25:36:f2:4a:44:2d:af:2c: 23:2f:94:4f:b0:5f:9a:7f:89:38:e6:c8:69:46:9a: 7d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D8:00:4A:4E:37:BE:19:FD:17:7F:C4:E7:70:11:31:6E:87:89:9B X509v3 Authority Key Identifier: keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:2a:b2:4e:1f:83:7c:27:a3:31:18:05:a8:06:de:6c:89:4c: 7b:76:c2:48:8b:7c:5a:94:d9:f6:a0:3c:96:ef:51:b2:49:2d: e7:69:55:42:2f:2e:95:52:75:c2:98:55:c8:c4:e4:49:b5:22: 76:ec:1f:5e:ab:ff:7a:5f:85:f8:5a:81:30:de:69:cb:11:c2: ab:94:7d:34:6a:50:e0:22:cb:81:93:9b:01:d6:e7:d8:81:8c: 02:3a:5c:c1:14:0e:bb:28:a0:45:df:59:f5:7b:ce:f9:02:aa: a2:f5:fb:57:d1:b2:1e:43:0a:98:4e:89:a9:38:5a:27:14:50: 01:ab:bf:eb:6f:9c:43:c8:be:19:5f:ac:a8:9c:16:c3:28:78: dd:62:a2:e9:50:de:32:3e:6a:27:88:9a:c0:10:26:ae:06:e6: 5c:20:16:35:f2:a6:9c:d9:71:1a:32:4a:d8:2b:31:4a:a0:ae: 8b:cc:2f:b8:2e:67:fb:02:21:e6:15:8a:de:0a:4a:7e:38:1a: ec:fe:c5:2e:ba:0a:64:f1:9b:2d:46:72:30:cc:f7:da:30:59: 94:ab:fe:a4:19:f0:ee:6f:d9:ea:6d:7e:45:13:46:7b:2b:45: ab:6a:89:bc:7a:fc:2f:c1:95:08:22:90:a7:1b:0d:c6:65:7d: 6d:9b:df:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE NUZGQkQ4MzgwHhcNMjYwOTIyMTQ0ODQwWhcNMjYwOTI5MTQ0ODQwWjAYMRYwFAYD VQQDEw02YWIyOTU0OS00YzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjK3pOPI4YZOYMyDCL9iaFDWRpL338ajDD+0y5ztV6MOqF5s16KrN/aadxZWY qih7F/pcYBKw2cLAAXQnFORvPFrUiWRr0mqwWu7/BsPNKJWzrHKU5gO2e1nCN1Sk UQ7t1H5J766ax4g54zo+4aCN+yJY6muySMW7INqAP5/Z1mSGtJ/QljuWiJQklVr6 4t5bEE+WGv0a07eKMAluWBI0UYsc4pSvdjrvqBxw63CQQKyldbRhG2PRWlL0DFd+ jhBQWmAJGwbOqpNZbJjpk7MUAs2PsWcsacfuOkl04+vSf6kqqantC7waJTbySkQt rywjL5RPsF+af4k45shpRpp9FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvYAEpO N74Z/Rd/xOdwETFuh4mbMB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8zOUFBMEEwMjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhX MFpVRkR0eUxZVDdWXzcyRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOSqyTh+DfCejMRgFqAbebIlMe3bCSIt8WpTZ9qA8lu9Rskkt52lVQi8ulVJ1 wphVyMTkSbUiduwfXqv/el+F+FqBMN5pyxHCq5R9NGpQ4CLLgZObAdbn2IGMAjpc wRQOuyigRd9Z9XvO+QKqovX7V9GyHkMKmE6JqThaJxRQAau/62+cQ8i+GV+sqJwW wyh43WKi6VDeMj5qJ4iawBAmrgbmXCAWNfKmnNlxGjJK2CsxSqCui8wvuC5n+wIh 5hWK3gpKfjga7P7FLroKZPGbLUZyMMz32jBZlKv+pBnw7m/Z6m1+RRNGeytFq2qJ vHr8L8GVCCKQpxsNxmV9bZvfGg== -----END CERTIFICATE-----Generated at Wed Sep 23 05:58:47 2026 by rpki-client