$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft File: D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft (raw, json) Hash identifier: VmUTyJjddrQUODeUuU3/BCd7qJoqSVlPL1deamKpPvY= Subject key identifier: 77:DB:F7:FE:68:F5:CC:8F:59:A0:38:EE:39:D4:2B:0F:48:C4:D6:80 Authority key identifier: 0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34 Certificate issuer: /CN=A91A7C68/serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34 Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft Manifest number: 02BF Signing time: Fri 25 Sep 2026 01:29:55 +0000 Manifest this update: Fri 25 Sep 2026 01:29:54 +0000 Manifest next update: Fri 02 Oct 2026 01:29:54 +0000 Files and hashes: 1: D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl (hash: NU605slSZ2JVampQnnFGiYezRfa43Z+WKKOb9iJ+aVQ=) 2: BC72661A972911ED8CBCA476C4F9AE02.roa (hash: ijHVWHANYsNS9d5u+2L0OG/TAcPXhYDdTjzMH7Olj0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7C68, serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34 Validity Not Before: Sep 25 01:29:54 2026 GMT Not After : Oct 2 01:29:54 2026 GMT Subject: CN=6ab5ce93-373c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:ca:25:1a:4d:c3:78:b6:fc:3b:80:0b:15: fe:45:7f:88:fa:f2:be:df:64:c0:3e:34:c2:67:88: 3f:84:8c:3d:43:6a:42:f6:b1:32:15:29:ef:9a:99: 60:b5:92:18:2e:87:28:a5:01:f2:2a:90:a6:f1:9e: c2:70:1b:6b:7e:0c:e9:8a:e9:16:02:1c:13:9f:6b: ce:66:ad:d0:ed:ab:29:38:1e:4a:f6:9d:f1:58:b9: cc:7f:28:7c:d4:a0:87:73:62:46:a1:1b:65:6c:c0: e3:bf:45:61:c7:4b:50:15:ac:68:9c:30:3b:d1:56: 68:c8:b8:46:77:fc:22:b5:53:80:bd:3b:2f:40:dd: e6:2f:e4:ea:e9:ad:06:8b:6c:69:74:ae:b1:71:d1: 72:07:00:c9:24:7c:c9:88:3a:03:29:fb:4a:6c:e9: d0:b4:2f:77:55:2c:fb:56:63:16:26:0c:f4:eb:d7: 23:4d:3b:e9:b4:01:6c:57:94:b6:e8:32:8f:e7:83: 78:11:47:a7:f3:c3:3f:86:ae:83:a6:d1:3d:0c:e4: 04:20:a8:8a:89:76:cd:5d:0c:ec:92:8a:64:a3:69: a5:8f:26:62:46:0d:eb:68:42:28:d0:33:8a:38:a9: 1c:54:b9:57:86:42:13:30:60:1b:0c:38:4d:19:07: 29:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DB:F7:FE:68:F5:CC:8F:59:A0:38:EE:39:D4:2B:0F:48:C4:D6:80 X509v3 Authority Key Identifier: keyid:0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:7c:dc:dc:25:42:bf:bb:18:dd:30:23:3f:84:c5:f7:69:55: 9c:59:3a:fb:b5:67:e2:7d:f1:b9:ca:83:6c:47:ac:69:79:ba: 13:3e:54:b1:12:dd:e6:2a:d9:eb:b2:17:8e:86:c6:8c:bc:b3: be:1b:22:a5:d9:c7:94:b2:61:1a:aa:88:a9:cb:c4:27:b4:22: e6:d0:f0:fd:8a:5e:f0:85:af:0a:96:29:2c:d8:bf:9f:f8:74: 02:b2:77:16:a3:65:e3:a2:84:43:d4:7a:38:91:dd:e2:af:4e: 0d:36:2c:2d:04:78:51:73:f6:5b:fd:fa:fe:a6:21:12:62:57: 29:b9:f6:f2:e9:31:d3:30:74:a1:6c:d8:79:4e:3f:60:29:ba: 9b:21:11:c9:30:a8:5d:79:e4:99:d4:0e:78:b9:8f:b4:cd:5c: 9a:2b:d5:6b:65:3e:e3:fc:2f:c3:df:88:4a:09:12:8a:92:0f: b0:73:0e:89:21:2b:f1:c0:20:43:a9:27:1e:9e:2d:d1:3d:a0: ee:a3:3a:ef:e6:65:9a:43:65:b3:14:1e:ec:7a:17:83:39:d4: 6e:54:53:31:ab:d3:28:ab:6f:f1:9a:e9:b7:a0:f5:c3:29:d2: 20:af:d7:7f:ca:4d:26:a8:e8:2b:41:02:7a:49:25:8b:95:fa: 73:1a:5b:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDNjgxMTAvBgNVBAUTKDBGNjI2QTMyNjRENkZFQ0NDQkZFQjJEOTlCMURCRjhB RkZFQzNCMzQwHhcNMjYwOTI1MDEyOTU0WhcNMjYxMDAyMDEyOTU0WjAYMRYwFAYD VQQDEw02YWI1Y2U5My0zNzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLfKJRpNw3i2/DuACxX+RX+I+vK+32TAPjTCZ4g/hIw9Q2pC9rEyFSnvmplg tZIYLocopQHyKpCm8Z7CcBtrfgzpiukWAhwTn2vOZq3Q7aspOB5K9p3xWLnMfyh8 1KCHc2JGoRtlbMDjv0Vhx0tQFaxonDA70VZoyLhGd/witVOAvTsvQN3mL+Tq6a0G i2xpdK6xcdFyBwDJJHzJiDoDKftKbOnQtC93VSz7VmMWJgz069cjTTvptAFsV5S2 6DKP54N4EUen88M/hq6DptE9DOQEIKiKiXbNXQzskopko2mljyZiRg3raEIo0DOK OKkcVLlXhkITMGAbDDhNGQcprQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfb9/5o 9cyPWaA47jnUKw9IxNaAMB8GA1UdIwQYMBaAFA9iajJk1v7My/6y2Zsdv4r/7Ds0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0M2OC80MjM5ODZGNjk3 MjExMUVEQTJFMDIyNTFDNEY5QUUwMi9EMkpxTW1UV19zekxfckxabXgyX2l2X3NP elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QySnFNbVRXX3N6TF9yTFpteDJfaXZfc096US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0M2OC80MjM5ODZGNjk3MjExMUVEQTJFMDIyNTFDNEY5QUUwMi9EMkpxTW1UV19z ekxfckxabXgyX2l2X3NPelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgnzc3CVCv7sY3TAjP4TF92lVnFk6+7Vn4n3xucqDbEesaXm6Ez5UsRLd5irZ 67IXjobGjLyzvhsipdnHlLJhGqqIqcvEJ7Qi5tDw/Ype8IWvCpYpLNi/n/h0ArJ3 FqNl46KEQ9R6OJHd4q9ODTYsLQR4UXP2W/36/qYhEmJXKbn28ukx0zB0oWzYeU4/ YCm6myERyTCoXXnkmdQOeLmPtM1cmivVa2U+4/wvw9+ISgkSipIPsHMOiSEr8cAg Q6knHp4t0T2g7qM67+ZlmkNlsxQe7HoXgznUblRTMavTKKtv8Zrpt6D1wynSIK/X f8pNJqjoK0ECekkli5X6cxpbnA== -----END CERTIFICATE-----Generated at Fri Sep 25 22:17:08 2026 by rpki-client