$ rpki-client -vvvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: aN3SU8pZCPOvKSg9nSOSza1hmfzfLEXBXx1P5RvvzA8= Subject key identifier: 6E:05:8A:87:8F:FC:6E:61:38:77:3B:64:B7:9D:72:2E:E4:B7:EF:A0 Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 292E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 291A Signing time: Tue 22 Sep 2026 15:32:23 +0000 Manifest this update: Tue 22 Sep 2026 15:32:22 +0000 Manifest next update: Tue 29 Sep 2026 15:32:22 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: XS6wd6nqdXFJgqfd12+6WqbC/ymvz5D01FegW6uAwck=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: LoCmdUsK6L+TshugdKCnyVfyQSooI4RUEUwWon0yLJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10542 (0x292e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: Sep 22 15:32:22 2026 GMT Not After : Sep 29 15:32:22 2026 GMT Subject: CN=6ab29f86-61e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:da:0e:e9:73:41:98:5b:98:95:e6:79:7e: 63:67:7f:ac:69:de:25:40:a3:e3:44:73:7b:a0:af: c8:8c:c1:f2:21:1b:76:92:4d:ed:9e:42:a9:3c:b0: 22:02:1a:87:04:63:dd:09:3c:8b:d4:88:d1:d3:77: 29:3c:a1:7e:ec:2e:de:93:27:d7:94:5e:77:bd:f6: 27:a3:a3:ec:7d:07:37:e6:75:f1:35:c7:28:be:2c: cc:d2:be:1d:06:32:54:0f:33:b2:4c:3e:51:0b:1c: 72:c5:e4:9f:8f:d5:6e:52:5c:46:c2:42:79:f9:81: 08:38:9a:36:84:dc:1e:50:71:d0:5c:f5:ac:ec:5b: 86:47:76:cb:8d:97:65:bc:24:8f:ff:a0:5b:90:c6: ff:e2:d2:11:da:0e:5e:7b:f8:aa:be:e8:d1:f9:22: 0f:7d:9f:72:ed:d8:4f:28:a5:d7:c3:a4:36:73:09: c2:57:80:3f:d2:3c:d1:56:31:c5:fc:ba:78:55:ae: c9:66:85:74:32:a7:3f:79:91:a8:0f:02:2f:21:0c: 37:ea:dc:c0:63:9c:06:77:7c:56:17:7d:cc:30:89: c3:e7:41:76:69:ec:73:84:e8:a4:a5:2e:63:af:ca: 6f:87:1f:28:e3:54:06:cd:8b:dc:7b:73:95:6d:e7: 88:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:05:8A:87:8F:FC:6E:61:38:77:3B:64:B7:9D:72:2E:E4:B7:EF:A0 X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:18:59:c0:40:a4:9c:e7:63:38:2a:8e:44:de:8a:4e:32:eb: bb:a5:25:e3:d7:82:9e:e0:47:be:c8:28:0c:20:5e:85:27:15: 8e:80:e8:5b:9b:69:2b:81:47:44:1d:6f:ed:d2:89:96:aa:e6: 62:7c:b3:7e:ca:f7:b5:e0:8a:c3:42:c8:f9:2a:2f:c4:42:a5: 03:91:c7:fe:1c:08:e5:b1:aa:30:ed:d7:c8:eb:41:07:45:0d: 90:e5:e6:83:03:66:73:43:47:6c:85:c8:73:9e:fd:29:a4:e8: d8:6f:0a:42:e1:1b:11:46:aa:64:c4:e9:d5:47:16:5c:b1:b7: 3b:26:1f:4e:b5:af:07:7c:3c:74:cb:b3:23:56:83:d3:25:5b: 88:58:20:89:46:65:cc:e3:e6:0c:1f:09:8d:fe:81:1f:bf:4d: 6e:e7:58:7e:b4:a4:4f:3f:c8:e1:01:42:e3:50:56:20:f0:5d: e9:f0:8d:7b:54:1b:57:6d:35:1b:bd:4e:26:95:15:f6:53:20: c1:0e:ca:fd:df:e9:55:62:a7:4b:2d:0d:0f:26:97:a8:ff:d6: 7c:db:1b:8e:ff:e8:d6:f2:81:d2:3f:14:88:82:6d:b0:7b:f3: 04:2a:f9:ed:ac:98:d1:c3:5a:3b:3a:ac:98:f8:28:03:d0:e0: 99:78:7c:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjYwOTIyMTUzMjIyWhcNMjYwOTI5MTUzMjIyWjAYMRYwFAYD VQQDEw02YWIyOWY4Ni02MWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz7aDulzQZhbmJXmeX5jZ3+sad4lQKPjRHN7oK/IjMHyIRt2kk3tnkKpPLAi AhqHBGPdCTyL1IjR03cpPKF+7C7ekyfXlF53vfYno6PsfQc35nXxNccovizM0r4d BjJUDzOyTD5RCxxyxeSfj9VuUlxGwkJ5+YEIOJo2hNweUHHQXPWs7FuGR3bLjZdl vCSP/6BbkMb/4tIR2g5ee/iqvujR+SIPfZ9y7dhPKKXXw6Q2cwnCV4A/0jzRVjHF /Lp4Va7JZoV0Mqc/eZGoDwIvIQw36tzAY5wGd3xWF33MMInD50F2aexzhOikpS5j r8pvhx8o41QGzYvce3OVbeeIuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4FioeP /G5hOHc7ZLedci7kt++gMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuxhZwECknOdjOCqORN6KTjLru6Ul49eCnuBHvsgoDCBehScVjoDoW5tpK4FH RB1v7dKJlqrmYnyzfsr3teCKw0LI+SovxEKlA5HH/hwI5bGqMO3XyOtBB0UNkOXm gwNmc0NHbIXIc579KaTo2G8KQuEbEUaqZMTp1UcWXLG3OyYfTrWvB3w8dMuzI1aD 0yVbiFggiUZlzOPmDB8Jjf6BH79NbudYfrSkTz/I4QFC41BWIPBd6fCNe1QbV201 G71OJpUV9lMgwQ7K/d/pVWKnSy0NDyaXqP/WfNsbjv/o1vKB0j8UiIJtsHvzBCr5 7ayY0cNaOzqsmPgoA9DgmXh8AQ== -----END CERTIFICATE-----Generated at Wed Sep 23 17:28:18 2026 by rpki-client