$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: Pn39wwwLo3byfYlOxPHo8QneUHGVgjOpPQdpTO9orhk= Subject key identifier: B3:01:76:DD:8F:42:F3:8A:55:78:EA:E4:62:E9:34:57:57:37:E0:57 Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 0560 Signing time: Tue 22 Sep 2026 23:03:11 +0000 Manifest this update: Tue 22 Sep 2026 23:03:10 +0000 Manifest next update: Tue 29 Sep 2026 23:03:10 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: QItDAq+Qr9srIPbnWQo2V0PwsQSX0THD8Kw1hWtKccc=) 2: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=) 3: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: dY+BZEOINurtJjOA3yhjmWQ4kx2Zua1d5uXKZrya/Kk=) 4: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7xZPQJy4FlDqQRK4ZNxBOqn11xvYRCTnG5Hl+SBa0kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Sep 22 23:03:10 2026 GMT Not After : Sep 29 23:03:10 2026 GMT Subject: CN=6ab3092f-05ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:19:5b:eb:d6:28:12:20:70:b3:3b:35:bb:20: 94:82:cf:f4:81:a1:0a:8a:49:b2:30:5d:11:21:77: cc:32:10:2f:44:1a:53:ee:3b:8b:fb:ee:8a:6f:ac: bd:a3:09:65:89:05:25:98:77:1d:07:0f:cb:4f:d8: 3e:2d:00:ed:35:61:30:e6:7b:39:69:77:ef:39:8c: e4:c3:e4:5a:d9:43:37:e8:ca:19:05:90:7c:39:3d: b9:45:4c:c0:eb:6b:3a:7b:cd:2b:7c:35:81:b4:2f: 8f:59:90:45:a3:6a:da:71:db:d9:28:ba:b0:37:e1: 11:6d:09:d6:70:ac:c4:62:d5:07:61:f0:62:9f:c2: 67:7a:c1:e0:7c:e4:e3:2c:5c:a6:56:ad:78:de:55: e8:60:f8:5b:b0:4b:57:39:7e:b5:43:78:4d:83:81: 1d:1d:a0:81:33:76:b8:2f:b9:22:4a:1d:53:7d:a5: d3:03:6f:9f:1d:40:3b:52:26:de:45:f3:89:87:03: 2d:4f:80:83:bf:7d:08:1b:38:78:89:b3:37:de:a0: 12:77:53:6a:18:51:25:c3:6d:2f:5c:70:24:14:52: 86:e9:38:b9:ad:40:74:d2:88:60:e2:ee:82:89:92: 9a:a7:a2:35:7d:9b:82:a8:1b:0e:ff:bd:32:11:a4: 94:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:01:76:DD:8F:42:F3:8A:55:78:EA:E4:62:E9:34:57:57:37:E0:57 X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d7:b6:ed:73:f8:e4:2d:99:97:d4:41:9b:e0:e6:c4:25:60: 58:9a:6f:01:ab:53:ed:f1:65:38:19:34:71:f7:35:bc:0f:3a: 77:cf:5c:4b:cd:2a:0b:cd:5e:1d:08:ec:1b:6d:f7:da:31:2f: ad:c5:9e:ce:ce:3d:9b:d4:b7:be:1c:8c:79:5c:3c:65:e0:6b: fd:2c:3f:80:48:77:07:be:ae:49:5a:34:87:01:f3:2a:8e:39: dd:78:b2:65:31:30:d0:71:b1:ac:9b:37:cf:bb:78:1e:29:da: 00:5b:aa:a4:3a:d3:f4:1f:a2:2b:04:ff:12:bf:9e:8c:39:53: 9e:c5:28:db:b7:4d:3d:13:ce:4a:fc:91:74:f2:fb:87:53:fe: 48:10:65:ea:9b:e0:6d:bb:b0:d4:59:0e:5b:cc:4c:30:bc:6d: b2:8c:5a:14:05:cc:8b:23:88:bc:d7:77:81:2e:9f:0f:b7:4d: 40:2d:df:8f:a5:bd:1c:e2:db:b3:a6:d6:a9:06:b8:0d:3d:2c: a6:58:74:fa:16:63:a9:b8:94:d3:33:67:0a:c0:7d:7c:75:f2: 7e:79:bb:21:d4:ba:dc:09:8b:5a:af:30:46:c8:7e:10:ba:8c: 47:de:d9:d5:37:43:08:de:ca:85:11:9f:bc:de:99:f9:16:1d: ef:89:af:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYwOTIyMjMwMzEwWhcNMjYwOTI5MjMwMzEwWjAYMRYwFAYD VQQDEw02YWIzMDkyZi0wNWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxlb69YoEiBwszs1uyCUgs/0gaEKikmyMF0RIXfMMhAvRBpT7juL++6Kb6y9 owlliQUlmHcdBw/LT9g+LQDtNWEw5ns5aXfvOYzkw+Ra2UM36MoZBZB8OT25RUzA 62s6e80rfDWBtC+PWZBFo2racdvZKLqwN+ERbQnWcKzEYtUHYfBin8JnesHgfOTj LFymVq143lXoYPhbsEtXOX61Q3hNg4EdHaCBM3a4L7kiSh1TfaXTA2+fHUA7Uibe RfOJhwMtT4CDv30IGzh4ibM33qASd1NqGFElw20vXHAkFFKG6Ti5rUB00ohg4u6C iZKap6I1fZuCqBsO/70yEaSU/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMBdt2P QvOKVXjq5GLpNFdXN+BXMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXte27XP45C2Zl9RBm+DmxCVgWJpvAatT7fFlOBk0cfc1vA86d89cS80qC81e HQjsG2332jEvrcWezs49m9S3vhyMeVw8ZeBr/Sw/gEh3B76uSVo0hwHzKo453Xiy ZTEw0HGxrJs3z7t4HinaAFuqpDrT9B+iKwT/Er+ejDlTnsUo27dNPRPOSvyRdPL7 h1P+SBBl6pvgbbuw1FkOW8xMMLxtsoxaFAXMiyOIvNd3gS6fD7dNQC3fj6W9HOLb s6bWqQa4DT0splh0+hZjqbiU0zNnCsB9fHXyfnm7IdS63AmLWq8wRsh+ELqMR97Z 1TdDCN7KhRGfvN6Z+RYd74mv6g== -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:26 2026 by rpki-client