$ rpki-client -vvvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: Cn/564A2itBH3Zxk+/LEx+hO2c9MSinv/EEK8J7knmo= Subject key identifier: AC:F6:01:A2:06:1C:92:B4:3C:74:0C:0E:BC:75:15:4E:7E:68:A1:0C Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 06F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 06C8 Signing time: Thu 24 Sep 2026 22:17:07 +0000 Manifest this update: Thu 24 Sep 2026 22:17:06 +0000 Manifest next update: Thu 01 Oct 2026 22:17:06 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: 1JXvXsGEujE1a0FVcdWeLLk5tKRamRIppkTBz9lJcMo=) 2: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: eA6mWyuVV1KikVqgTq4NzwsvdlA+Lo+7hoRNd7wEZiw=) 3: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: XThbuRDJ9AeBHR2f0+N9y3PVKHkkMbkQnJqbi1dA8dk=) 4: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: WtM7Gf9McV4dyBDihaoF7GIKprC8LiyJNTcZV2E7ygM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1776 (0x6f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Sep 24 22:17:06 2026 GMT Not After : Oct 1 22:17:06 2026 GMT Subject: CN=6ab5a163-e8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:82:68:fc:30:55:49:e4:e4:2a:e0:05:a2:6d: 9c:51:b2:80:64:44:34:19:e7:f7:aa:45:5d:c2:ab: 2c:9d:e6:03:4f:c3:29:89:35:23:f4:86:c3:e6:0b: 49:a0:e7:cc:6d:ac:c1:cb:dc:f6:b8:a6:1b:4b:d8: 83:89:da:a9:20:f1:a3:9b:38:a0:a4:72:15:4c:04: 6c:2d:ec:45:58:95:5d:53:35:43:b8:74:76:43:97: 19:5f:12:49:d5:50:82:22:b3:b4:8a:2b:8b:af:e0: 27:9b:a7:60:03:6c:6b:da:e2:14:77:df:cb:83:fe: 5a:2b:6a:de:13:ec:37:df:04:95:b4:66:76:4f:fd: 22:8d:42:e8:af:c3:eb:35:2e:f9:11:a6:e8:03:8c: d5:0e:ee:aa:1c:e7:79:5c:e4:b8:d9:a2:66:fc:40: a3:3b:3a:e5:e2:44:8b:4f:eb:0b:f0:46:ac:20:bc: 3b:09:7e:9e:08:64:00:42:2b:b0:bd:41:80:3f:ae: 0d:17:23:6f:3b:56:28:84:63:fb:16:b7:b5:ce:f9: 3f:0f:f9:c2:fd:07:b2:0a:88:90:f2:fb:30:76:2a: 96:c6:77:46:95:6d:d3:a2:7d:f1:4f:89:f9:16:73: 13:f8:88:34:04:7d:71:7f:6d:91:52:15:e9:9a:76: e5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F6:01:A2:06:1C:92:B4:3C:74:0C:0E:BC:75:15:4E:7E:68:A1:0C X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:ff:66:74:a9:f6:a5:d1:dd:df:96:f0:69:be:43:c2:d2:56: 4f:b8:4e:21:dc:5c:00:8a:2d:f3:de:f3:7b:fa:eb:cb:62:d0: bf:aa:d7:7a:75:a6:f0:5d:77:fd:73:92:fc:60:07:6d:3c:92: e4:3b:80:ee:8a:ac:a6:d8:64:90:17:57:5b:e6:46:14:cd:1c: 79:19:35:bb:b1:d4:4e:6c:b1:8b:4f:44:40:9e:53:a0:b3:55: df:0d:02:78:31:cd:87:48:2d:4b:70:01:7f:01:5b:37:6a:8d: c7:96:88:a4:de:33:17:f7:6f:cb:e7:5d:2f:55:8a:e8:83:c6: b6:b6:27:df:f9:c6:95:37:ad:51:d1:30:6a:8f:c2:c7:36:b1: 5f:ce:f4:4c:79:96:3c:74:3c:61:f6:77:3c:bf:b0:90:6f:5e: 03:be:0e:0d:bf:6f:9a:31:f2:c3:b1:67:ea:36:26:ef:dc:02: 56:72:a1:8e:d8:90:21:ed:05:00:24:52:e0:77:60:74:dd:dc: 61:77:00:de:c2:89:d5:a3:d5:3d:30:44:4b:02:c5:0f:d2:98: 95:9e:d7:1d:37:91:cf:f0:86:b5:0f:01:86:eb:11:fa:21:38: 83:cd:02:9f:9e:c0:74:a9:8d:21:dc:2a:33:5e:f2:73:12:b8: d4:c4:7f:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjYwOTI0MjIxNzA2WhcNMjYxMDAxMjIxNzA2WjAYMRYwFAYD VQQDEw02YWI1YTE2My1lOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIJo/DBVSeTkKuAFom2cUbKAZEQ0Gef3qkVdwqssneYDT8MpiTUj9IbD5gtJ oOfMbazBy9z2uKYbS9iDidqpIPGjmzigpHIVTARsLexFWJVdUzVDuHR2Q5cZXxJJ 1VCCIrO0iiuLr+Anm6dgA2xr2uIUd9/Lg/5aK2reE+w33wSVtGZ2T/0ijULor8Pr NS75EaboA4zVDu6qHOd5XOS42aJm/ECjOzrl4kSLT+sL8EasILw7CX6eCGQAQiuw vUGAP64NFyNvO1YohGP7Fre1zvk/D/nC/QeyCoiQ8vswdiqWxndGlW3Ton3xT4n5 FnMT+Ig0BH1xf22RUhXpmnblDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKz2AaIG HJK0PHQMDrx1FU5+aKEMMB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0P9mdKn2pdHd35bwab5DwtJWT7hOIdxcAIot897ze/rry2LQv6rXenWm8F13 /XOS/GAHbTyS5DuA7oqspthkkBdXW+ZGFM0ceRk1u7HUTmyxi09EQJ5ToLNV3w0C eDHNh0gtS3ABfwFbN2qNx5aIpN4zF/dvy+ddL1WK6IPGtrYn3/nGlTetUdEwao/C xzaxX870THmWPHQ8YfZ3PL+wkG9eA74ODb9vmjHyw7Fn6jYm79wCVnKhjtiQIe0F ACRS4HdgdN3cYXcA3sKJ1aPVPTBESwLFD9KYlZ7XHTeRz/CGtQ8BhusR+iE4g80C n57AdKmNIdwqM17ycxK41MR/rA== -----END CERTIFICATE-----Generated at Fri Sep 25 09:02:39 2026 by rpki-client