$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: iOFyIYT5J/k0XQprRiaNaDqtxq91TmAkaCxASg1/HIc= Subject key identifier: 77:D8:AF:BA:96:76:DC:A6:F5:1F:D0:4F:4C:33:A5:9A:22:50:64:39 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: 0191 Signing time: Fri 25 Sep 2026 04:26:31 +0000 Manifest this update: Fri 25 Sep 2026 04:26:30 +0000 Manifest next update: Fri 02 Oct 2026 04:26:30 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: yKWBhitQCClfBKizMP1DJwpPkRHfWGfqn60Xjls9avw=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: a57NdJ1gk+iJiRBW3C9KSb5FNlrBpcnk273JBCCOK0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Sep 25 04:26:30 2026 GMT Not After : Oct 2 04:26:30 2026 GMT Subject: CN=6ab5f7f7-197a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:e3:5e:10:82:99:87:37:a5:bb:e1:bc:12: 6a:33:0b:c0:2b:eb:0b:fa:17:52:4f:72:99:78:27: 66:0d:02:55:86:12:42:81:bc:43:b0:3b:75:34:b7: b9:77:bd:67:02:b5:c9:9b:bb:5a:ae:83:79:72:f8: 6e:5a:85:4c:bb:ac:38:fc:e5:ec:e6:ec:6f:da:2b: 1a:c8:af:4f:10:b1:72:ce:16:05:df:70:9c:8f:4d: 73:97:19:13:ba:01:df:15:10:fb:a5:e0:00:cf:14: c8:cf:ec:37:45:5f:0a:ca:78:07:79:e2:11:9b:ba: f7:fc:2e:44:ed:cb:55:ad:f4:30:f3:56:fa:bc:43: f6:6a:61:c6:0a:0a:d3:ca:c7:5f:be:78:81:93:df: e4:5b:fd:fc:f6:6e:f0:8d:54:57:96:1c:c7:c9:16: 9d:e1:6b:6b:58:46:48:c9:d1:05:a4:d4:a4:97:09: cb:7d:11:35:8a:e7:4a:bc:6f:a0:23:fc:d2:ff:5a: 41:ef:66:5c:30:5e:71:d6:af:61:2c:88:19:dc:61: 2a:a2:3f:2b:dc:01:a4:98:9b:2f:db:47:fa:89:11: 71:15:5d:a0:cf:39:72:05:76:91:9f:6c:a3:27:39: a7:4d:0b:7c:ce:a2:94:91:95:3f:46:e1:3c:03:9b: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D8:AF:BA:96:76:DC:A6:F5:1F:D0:4F:4C:33:A5:9A:22:50:64:39 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:26:b9:aa:b8:44:0c:8f:cf:16:6f:92:f2:20:77:74:f3:70: d9:06:81:a9:e8:e7:8a:10:d4:60:5c:51:2f:e9:5a:8d:1f:64: 40:34:59:ca:d1:72:b6:8d:f3:8c:83:93:44:2e:3e:88:0d:ec: cd:23:4b:40:6f:89:01:9a:fd:6c:62:d2:12:b0:df:a3:cf:94: 88:6e:cc:b3:81:2f:16:7c:d4:4e:32:71:dc:e1:50:57:87:37: 05:de:23:18:ab:05:5a:13:d8:37:b1:22:8d:6c:ff:09:e5:c9: 2d:4e:6a:31:ee:8d:58:ee:f2:7d:7b:a7:0c:56:c7:56:16:bf: ce:be:bc:1a:f1:ef:d7:66:01:1b:fe:10:10:70:d2:a6:4f:ba: ea:bc:20:fb:c4:6d:8b:bf:a5:9c:c0:28:ab:bb:f0:1b:25:2a: 91:f7:ea:77:0e:05:ac:16:e8:7f:3b:f3:84:67:51:ba:a5:17: 6b:71:75:46:d2:4a:eb:f9:fb:ea:ac:56:1d:3a:4d:f0:ea:a0: 08:4f:0c:79:a6:80:d3:5c:de:4b:22:a2:d8:23:4c:aa:aa:69: 91:e9:63:ef:fd:a3:05:ab:b9:f7:6e:a6:a0:bc:a5:04:e4:06: 53:d2:ce:f4:7f:c8:33:79:04:57:e2:19:cf:4c:79:55:f4:f6: fc:aa:0e:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjYwOTI1MDQyNjMwWhcNMjYxMDAyMDQyNjMwWjAYMRYwFAYD VQQDEw02YWI1ZjdmNy0xOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4bjXhCCmYc3pbvhvBJqMwvAK+sL+hdST3KZeCdmDQJVhhJCgbxDsDt1NLe5 d71nArXJm7taroN5cvhuWoVMu6w4/OXs5uxv2isayK9PELFyzhYF33Ccj01zlxkT ugHfFRD7peAAzxTIz+w3RV8KyngHeeIRm7r3/C5E7ctVrfQw81b6vEP2amHGCgrT ysdfvniBk9/kW/389m7wjVRXlhzHyRad4WtrWEZIydEFpNSklwnLfRE1iudKvG+g I/zS/1pB72ZcMF5x1q9hLIgZ3GEqoj8r3AGkmJsv20f6iRFxFV2gzzlyBXaRn2yj JzmnTQt8zqKUkZU/RuE8A5uSawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfYr7qW dtym9R/QT0wzpZoiUGQ5MB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkCa5qrhEDI/PFm+S8iB3dPNw2QaBqejnihDUYFxRL+lajR9kQDRZytFyto3z jIOTRC4+iA3szSNLQG+JAZr9bGLSErDfo8+UiG7Ms4EvFnzUTjJx3OFQV4c3Bd4j GKsFWhPYN7EijWz/CeXJLU5qMe6NWO7yfXunDFbHVha/zr68GvHv12YBG/4QEHDS pk+66rwg+8Rti7+lnMAoq7vwGyUqkffqdw4FrBbofzvzhGdRuqUXa3F1RtJK6/n7 6qxWHTpN8OqgCE8MeaaA01zeSyKi2CNMqqppkelj7/2jBau5926moLylBOQGU9LO 9H/IM3kEV+IZz0x5VfT2/KoOWA== -----END CERTIFICATE-----Generated at Fri Sep 25 11:02:39 2026 by rpki-client