$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft File: N2LeNhaqS6BLeurLVIuGpi5vFw4.mft (raw, json) Hash identifier: Mt+J3f/Wap4EtEvGM2eyCDW0VpvFiXtMYH14/jXWMdI= Subject key identifier: C6:AE:38:98:01:E5:72:CE:00:2A:09:4B:19:61:18:66:56:D1:7A:BF Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E Certificate issuer: /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft Manifest number: 81 Signing time: Mon 21 Sep 2026 07:48:52 +0000 Manifest this update: Mon 21 Sep 2026 07:48:52 +0000 Manifest next update: Mon 28 Sep 2026 07:48:52 +0000 Files and hashes: 1: N2LeNhaqS6BLeurLVIuGpi5vFw4.crl (hash: B+14lvR1ESHJfqkz0im40/8rDLt8b45Y/C/8Q+iu+C8=) 2: 3A8D72EC50E511F1B3C6CC42C3833773.roa (hash: G9gjTmASAxWaSGyTQLyM5wPNBpCQflf0owj+nNRdQME=) 3: 3B91F0E650E511F1B3C6CC42C3833773.roa (hash: 14xyf5BgEGdxYISaOxLmZCE19ludmdYaT6MeaJylJoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E Validity Not Before: Sep 21 07:48:52 2026 GMT Not After : Sep 28 07:48:52 2026 GMT Subject: CN=6ab0e164-280b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:d5:70:53:1b:9f:2c:e2:b0:c0:97:5f:ed: 40:bc:99:cf:f7:2a:23:dc:07:4a:3e:59:06:13:8f: 8f:f9:63:01:88:a0:ef:eb:44:72:32:5d:27:b7:bc: c9:12:e8:ee:b5:aa:0d:af:ab:be:50:74:46:76:e0: a3:a9:8f:e0:3e:5e:ad:88:fb:1c:02:9e:cb:22:24: bd:41:59:4b:e4:44:04:8e:4d:74:71:b0:ae:9e:26: fc:e9:75:43:88:23:dd:74:75:2f:ee:82:4d:03:be: 8e:87:a8:5a:63:90:81:c8:4c:14:9d:03:8f:63:73: 3b:57:20:dc:5f:9b:80:6b:32:f6:39:36:ee:04:14: 7f:59:f1:69:b5:39:92:3e:7b:a2:d0:32:fd:bf:c2: 64:c8:85:21:92:0a:84:03:61:8c:c6:21:57:17:94: eb:c3:ea:52:4f:1b:e4:26:5b:26:fe:3e:b0:4f:c6: 19:70:8a:4e:11:03:f1:86:c7:3e:0d:74:2c:48:5c: b6:f9:ff:9b:2c:1f:c7:46:a5:f7:4b:11:05:a5:f1: 0e:da:67:2f:af:48:f1:8d:df:7c:8f:d8:97:5e:dc: a8:10:23:df:dc:b8:c0:90:2c:d8:38:6b:51:21:62: 35:60:83:75:1b:bd:a9:2f:9f:1c:11:a6:85:30:d3: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AE:38:98:01:E5:72:CE:00:2A:09:4B:19:61:18:66:56:D1:7A:BF X509v3 Authority Key Identifier: keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5d:76:1d:9e:38:6e:33:a7:7f:48:f3:be:36:9f:cc:d8:e2: 67:54:85:c8:41:29:a1:b5:37:22:ea:ac:9a:e3:57:fe:66:ee: d4:35:6d:72:50:2d:7b:96:4b:8a:3e:af:b7:ae:2a:5e:f5:aa: 65:ac:73:58:7c:9d:0c:5b:3c:49:a9:be:a5:23:d0:0b:65:4c: c0:a3:ed:38:85:34:d0:89:df:2b:20:0e:26:de:04:24:b6:68: 64:8d:17:2e:48:d3:2c:74:a7:93:a6:a6:d1:fd:d3:44:8b:e4: bd:c1:ce:fc:3e:70:6f:53:8a:05:6e:69:bc:9a:b1:ef:77:eb: 10:64:20:f7:9e:13:66:a0:b0:39:c1:07:fb:5c:f4:0d:33:38: 1a:24:f9:6a:bd:30:d1:ac:b7:2f:4c:3a:82:aa:31:2b:16:9e: 6b:7b:fb:54:cb:91:eb:9f:8c:fc:48:e8:ec:3f:7b:02:53:5d: ee:6f:d9:0f:03:49:3a:41:b0:a4:19:5b:d7:42:fd:ef:e8:26: 91:5c:fe:52:b4:8e:1c:6d:35:de:a1:46:bd:c3:24:be:dd:6e: c3:45:fa:cc:8f:9b:fe:aa:2b:12:cc:b9:2f:d7:e8:7f:bb:01: a9:e0:0a:6d:c5:ea:e7:bb:32:08:79:0d:7d:11:ae:f5:50:04: fc:c5:3c:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2NjAxMTAvBgNVBAUTKDM3NjJERTM2MTZBQTRCQTA0QjdBRUFDQjU0OEI4NkE2 MkU2RjE3MEUwHhcNMjYwOTIxMDc0ODUyWhcNMjYwOTI4MDc0ODUyWjAYMRYwFAYD VQQDEw02YWIwZTE2NC0yODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmlXVcFMbnyzisMCXX+1AvJnP9yoj3AdKPlkGE4+P+WMBiKDv60RyMl0nt7zJ EujutaoNr6u+UHRGduCjqY/gPl6tiPscAp7LIiS9QVlL5EQEjk10cbCunib86XVD iCPddHUv7oJNA76Oh6haY5CByEwUnQOPY3M7VyDcX5uAazL2OTbuBBR/WfFptTmS Pnui0DL9v8JkyIUhkgqEA2GMxiFXF5Trw+pSTxvkJlsm/j6wT8YZcIpOEQPxhsc+ DXQsSFy2+f+bLB/HRqX3SxEFpfEO2mcvr0jxjd98j9iXXtyoECPf3LjAkCzYOGtR IWI1YIN1G72pL58cEaaFMNOWzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMauOJgB 5XLOACoJSxlhGGZW0Xq/MB8GA1UdIwQYMBaAFDdi3jYWqkugS3rqy1SLhqYubxcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzY2MC9ERUU5QzY4MDAw MTYxMUYxOEE0Q0Q5OUE0MTZGNTZCQy9OMkxlTmhhcVM2QkxldXJMVkl1R3BpNXZG dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yTGVOaGFxUzZCTGV1ckxWSXVHcGk1dkZ3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzY2MC9ERUU5QzY4MDAwMTYxMUYxOEE0Q0Q5OUE0MTZGNTZCQy9OMkxlTmhhcVM2 QkxldXJMVkl1R3BpNXZGdzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi112HZ44bjOnf0jzvjafzNjiZ1SFyEEpobU3IuqsmuNX/mbu1DVtclAte5ZL ij6vt64qXvWqZaxzWHydDFs8Sam+pSPQC2VMwKPtOIU00InfKyAOJt4EJLZoZI0X LkjTLHSnk6am0f3TRIvkvcHO/D5wb1OKBW5pvJqx73frEGQg954TZqCwOcEH+1z0 DTM4GiT5ar0w0ay3L0w6gqoxKxaea3v7VMuR65+M/Ejo7D97AlNd7m/ZDwNJOkGw pBlb10L97+gmkVz+UrSOHG013qFGvcMkvt1uw0X6zI+b/qorEsy5L9fof7sBqeAK bcXq57syCHkNfRGu9VAE/MU8aA== -----END CERTIFICATE-----Generated at Tue Sep 22 21:55:56 2026 by rpki-client