$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: hspcgIUM03ibcqmH9L+qm93AcBoMzcjiRTWAAhkzQsI= Subject key identifier: EB:B8:87:4C:74:DA:05:BF:15:27:6A:F1:B1:7E:32:8D:3F:B1:40:0B Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: 01D6 Signing time: Wed 23 Sep 2026 03:35:50 +0000 Manifest this update: Wed 23 Sep 2026 03:35:50 +0000 Manifest next update: Wed 30 Sep 2026 03:35:50 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: 5KJeLGXEKCEgT5XyC2jxf0Z220+jy3SnNP+NjsLccLM=) 2: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nQQCvcP4Ab62KnLuqB+2dhOJymAwNDUrlbhEiMGFBCY=) 3: 1B7430784BD411F1A6EB1F4394833773.roa (hash: oe2ZCXIQb92ROAH/nNeoR+2JzTpi9XU0AorFDG3Oc4Y=) 4: DAF8A746E01B11F097920A16646F56BC.roa (hash: ddW0Ynay18N2vbuqKbzQBFWoQChkJES43ys+thhHWto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Sep 23 03:35:50 2026 GMT Not After : Sep 30 03:35:50 2026 GMT Subject: CN=6ab34916-def6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:95:34:98:f1:11:57:33:75:08:f3:87:de: 5d:dd:4a:ae:51:bb:a9:ee:a3:6e:98:b8:24:8b:1c: 3d:3f:0e:21:26:8f:27:ea:41:f6:19:18:21:3b:16: 49:72:a5:c0:02:0f:fe:1f:c1:da:64:f9:5c:c3:4c: aa:6f:f9:23:d3:07:ab:86:69:d6:d3:20:35:ac:d9: fd:6b:a9:af:15:b2:31:a8:2e:8b:0e:0b:90:e5:44: 8e:de:f2:e7:8d:04:b0:c0:a3:fa:5d:fb:4a:ca:fd: 17:0f:c1:28:db:64:ab:f3:78:52:75:e4:03:d6:42: d7:26:d9:5a:7c:2d:f2:3f:b3:78:ad:e9:7a:84:c1: f6:92:3f:db:f3:da:03:c9:40:b9:a9:55:e3:23:54: 41:e2:ad:44:cf:a7:a7:13:48:92:f8:a7:2f:99:01: 64:e8:a3:ae:0b:c3:68:c8:bc:91:82:1b:d5:32:4f: b2:be:9d:b4:f7:70:c3:ae:e9:8c:2f:97:5f:db:b6: 60:f6:ef:1e:c4:05:97:f6:83:e5:4f:af:4c:d4:73: 4a:16:a3:c4:31:b0:54:26:65:dd:90:d5:28:7f:60: b2:47:d7:5b:ca:6e:9c:b3:20:62:c1:2d:c1:43:13: 92:28:12:09:46:ed:93:b9:d1:de:8f:4a:35:0a:0f: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B8:87:4C:74:DA:05:BF:15:27:6A:F1:B1:7E:32:8D:3F:B1:40:0B X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:be:24:06:5c:c2:9b:31:e8:a6:30:0d:7e:fd:c2:23:dc:0b: 39:90:8d:93:9b:5d:31:37:7c:23:d9:f4:49:dc:ab:7c:21:61: 93:86:04:55:fd:00:ec:10:d1:4a:1e:72:d9:d9:1e:ca:9c:b3: 82:ee:0c:3e:6d:3c:4c:ac:07:ea:a9:a2:69:49:ef:3b:45:ad: dd:16:30:86:db:55:35:b4:4f:17:ca:9e:b2:d6:9c:14:83:70: 1c:73:37:77:eb:20:ea:b5:6a:2f:7b:df:62:fd:75:9a:a6:66: 1e:d0:22:e0:21:a3:8f:24:72:05:44:dd:b0:48:96:1a:4c:b6: fb:3c:4c:38:55:1c:63:b0:15:0b:91:86:c9:4d:6e:f9:47:5f: ea:01:57:08:3b:11:13:f1:ee:2b:41:aa:5c:78:c4:8a:d4:95: b4:c2:29:ab:c3:81:ec:1d:69:c6:9f:26:89:1e:e4:bb:43:57: 2b:3f:1d:cd:0f:35:1d:27:df:ca:65:b2:4c:7f:50:5c:78:61: 50:51:f3:32:05:54:95:a9:ed:10:c0:c8:c7:68:1f:05:c8:ec: 68:0f:35:5a:80:f7:f9:57:a2:02:57:18:58:92:86:b9:cd:a6: 84:6c:0a:ae:40:f7:b5:70:00:4d:c0:d2:65:98:06:b4:52:76: b2:0e:db:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjYwOTIzMDMzNTUwWhcNMjYwOTMwMDMzNTUwWjAYMRYwFAYD VQQDEw02YWIzNDkxNi1kZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoiVNJjxEVczdQjzh95d3UquUbup7qNumLgkixw9Pw4hJo8n6kH2GRghOxZJ cqXAAg/+H8HaZPlcw0yqb/kj0werhmnW0yA1rNn9a6mvFbIxqC6LDguQ5USO3vLn jQSwwKP6XftKyv0XD8Eo22Sr83hSdeQD1kLXJtlafC3yP7N4rel6hMH2kj/b89oD yUC5qVXjI1RB4q1Ez6enE0iS+KcvmQFk6KOuC8NoyLyRghvVMk+yvp2093DDrumM L5df27Zg9u8exAWX9oPlT69M1HNKFqPEMbBUJmXdkNUof2CyR9dbym6csyBiwS3B QxOSKBIJRu2TudHej0o1Cg85/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOu4h0x0 2gW/FSdq8bF+Mo0/sUALMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzL4kBlzCmzHopjANfv3CI9wLOZCNk5tdMTd8I9n0SdyrfCFhk4YEVf0A7BDR Sh5y2dkeypyzgu4MPm08TKwH6qmiaUnvO0Wt3RYwhttVNbRPF8qestacFINwHHM3 d+sg6rVqL3vfYv11mqZmHtAi4CGjjyRyBUTdsEiWGky2+zxMOFUcY7AVC5GGyU1u +Udf6gFXCDsRE/HuK0GqXHjEitSVtMIpq8OB7B1pxp8miR7ku0NXKz8dzQ81HSff ymWyTH9QXHhhUFHzMgVUlantEMDIx2gfBcjsaA81WoD3+VeiAlcYWJKGuc2mhGwK rkD3tXAATcDSZZgGtFJ2sg7bpg== -----END CERTIFICATE-----Generated at Thu Sep 24 08:35:13 2026 by rpki-client