$ rpki-client -vvvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: KTtRcNt+aJq8XP2+SvX3elOxGuDPodLlXHjUemgTemo= Subject key identifier: BE:FD:80:59:75:99:73:0A:D1:00:DF:BB:AA:22:7E:B7:AE:D5:2F:54 Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 06EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 06C7 Signing time: Tue 22 Sep 2026 22:06:03 +0000 Manifest this update: Tue 22 Sep 2026 22:06:02 +0000 Manifest next update: Tue 29 Sep 2026 22:06:02 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: 0yLU+jMdg0mlI8uTrCqiF9/uNGcds4NL1l7jZ1Efpr4=) 2: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: eA6mWyuVV1KikVqgTq4NzwsvdlA+Lo+7hoRNd7wEZiw=) 3: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: XThbuRDJ9AeBHR2f0+N9y3PVKHkkMbkQnJqbi1dA8dk=) 4: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: WtM7Gf9McV4dyBDihaoF7GIKprC8LiyJNTcZV2E7ygM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Sep 22 22:06:02 2026 GMT Not After : Sep 29 22:06:02 2026 GMT Subject: CN=6ab2fbcb-49c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:d2:8d:54:54:0d:4f:94:5f:44:be:93:a7: 02:f7:ea:ac:2f:16:73:3d:c4:ac:02:8a:65:ef:ff: fd:5d:62:f8:53:4f:fa:a2:3e:0b:61:be:52:6c:c0: 25:29:16:a9:f5:fa:ff:2a:25:9f:73:c1:c3:84:91: c6:66:5e:32:db:b3:54:d3:6d:15:01:3a:fb:ca:3a: 97:61:43:36:1f:2e:1d:2c:73:1a:0b:1a:db:d5:af: 51:f8:1a:17:5c:9a:39:27:f0:2f:bc:62:90:ad:8b: d5:72:8a:60:bd:b1:cb:7e:76:18:37:3d:20:be:38: e5:77:68:15:d2:31:94:5d:13:c0:7f:5d:9a:75:51: 90:3c:30:13:36:de:c2:ab:57:88:65:5a:b0:1b:50: c5:0f:04:98:1a:a5:42:95:a9:6e:fd:6d:f3:20:12: 7c:e1:25:b8:97:9f:38:f8:d0:ac:ab:6d:81:0b:de: 9c:ed:f1:ce:83:bf:07:97:2a:15:42:49:b2:ce:a7: e4:42:14:82:b7:4e:1a:c7:da:b2:7a:31:5d:44:da: 64:5c:c0:de:01:d8:53:e9:9d:96:3c:6a:6a:96:03: 4f:6a:9e:c4:95:a6:a4:a6:fc:85:2e:eb:ef:55:cb: 28:06:f2:ae:91:7c:a8:57:cd:c7:46:77:e7:5c:89: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FD:80:59:75:99:73:0A:D1:00:DF:BB:AA:22:7E:B7:AE:D5:2F:54 X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e8:a9:6f:09:21:54:16:d3:c5:91:b5:cd:2d:14:4c:c9:be: 13:5b:eb:c8:17:a8:e1:54:40:c5:9c:c2:37:5f:d5:3f:ad:1b: a8:6e:d8:3e:81:b3:da:98:1c:f3:c2:e7:5e:75:b4:0c:f5:49: 6e:06:ca:4c:83:b0:92:3c:bb:84:fa:cd:5e:44:de:fb:df:dd: af:2c:dc:4d:43:69:d5:e4:dd:2c:ca:cb:34:7b:ac:de:42:4e: ba:40:b7:a0:ff:ab:5d:53:49:1b:8e:fa:82:2a:e8:7e:14:f0: de:a5:43:28:47:85:07:34:62:60:90:fe:10:41:ae:79:60:34: dd:fd:f0:99:12:26:aa:ad:dc:eb:b9:45:56:5b:a8:7e:bf:b7: 64:69:5a:2e:21:64:53:4f:d2:33:c5:5e:7a:c7:9f:6d:2b:ea: 80:79:4d:c7:0b:6d:e2:8a:39:e1:ec:25:4a:7e:2f:b0:dc:7e: cf:19:42:89:5d:5e:36:f6:9a:9a:23:b1:07:68:f6:c5:37:c6: 96:8e:16:46:62:e9:14:1e:f9:43:8c:38:5e:89:ba:62:de:5e: aa:38:c7:d2:71:02:a5:d8:9b:14:06:c8:a1:49:0c:b2:2c:df: b1:73:01:47:ae:34:94:ce:b0:51:ff:47:62:e2:b2:24:b5:1a: 30:bd:9f:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjYwOTIyMjIwNjAyWhcNMjYwOTI5MjIwNjAyWjAYMRYwFAYD VQQDEw02YWIyZmJjYi00OWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysPSjVRUDU+UX0S+k6cC9+qsLxZzPcSsAopl7//9XWL4U0/6oj4LYb5SbMAl KRap9fr/KiWfc8HDhJHGZl4y27NU020VATr7yjqXYUM2Hy4dLHMaCxrb1a9R+BoX XJo5J/AvvGKQrYvVcopgvbHLfnYYNz0gvjjld2gV0jGUXRPAf12adVGQPDATNt7C q1eIZVqwG1DFDwSYGqVClalu/W3zIBJ84SW4l584+NCsq22BC96c7fHOg78HlyoV QkmyzqfkQhSCt04ax9qyejFdRNpkXMDeAdhT6Z2WPGpqlgNPap7ElaakpvyFLuvv VcsoBvKukXyoV83HRnfnXIlICQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL79gFl1 mXMK0QDfu6oifreu1S9UMB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtuipbwkhVBbTxZG1zS0UTMm+E1vryBeo4VRAxZzCN1/VP60bqG7YPoGz2pgc 88LnXnW0DPVJbgbKTIOwkjy7hPrNXkTe+9/dryzcTUNp1eTdLMrLNHus3kJOukC3 oP+rXVNJG476girofhTw3qVDKEeFBzRiYJD+EEGueWA03f3wmRImqq3c67lFVluo fr+3ZGlaLiFkU0/SM8VeesefbSvqgHlNxwtt4oo54ewlSn4vsNx+zxlCiV1eNvaa miOxB2j2xTfGlo4WRmLpFB75Q4w4Xom6Yt5eqjjH0nECpdibFAbIoUkMsizfsXMB R640lM6wUf9HYuKyJLUaML2fMQ== -----END CERTIFICATE-----Generated at Thu Sep 24 23:36:39 2026 by rpki-client