$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft File: poP2ckwCoT8tOc8vIVAL4AOA3eM.mft (raw, json) Hash identifier: z5Qud7T7jtU+44P6IwsOviBZYb5sssC0NNw0BrXfxRk= Subject key identifier: 5D:FD:58:1F:3F:DB:04:54:45:58:CC:C7:31:AA:20:7D:F2:0C:8B:DE Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Certificate serial: 35FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft Manifest number: 35BA Signing time: Tue 22 Sep 2026 14:43:10 +0000 Manifest this update: Tue 22 Sep 2026 14:43:09 +0000 Manifest next update: Tue 29 Sep 2026 14:43:09 +0000 Files and hashes: 1: poP2ckwCoT8tOc8vIVAL4AOA3eM.crl (hash: uTtssxqFhR+FtQRloWzH74KRdnAzfzdmRtropXbMTbo=) 2: LorfDG7HkTieLpomVUqpyUsTD-w.asa (hash: KalywPiG5nOw7aGOXUh/Ul3kueH7iE7ZzzLS/P/1r5c=) 3: 42DAE250C8C711F08A7B6740C4F9AE02.roa (hash: RvDR+CwV5r8nXBYVtiJ4seGZbUdvtwvjuoEWjfxE9n4=) 4: A90BA98C74D011F19600C7755BA30FBC.roa (hash: 5g7W5ahRCXrfAoDmqnCGQYfrzLhobtl8/QoaS07b9B4=) 5: 97F461E0C8CB11F0BFB08139C4F9AE02.roa (hash: DG9csTjYXt2owT4jULXXaVRko/sw17eGl0Moy3hQJ9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13823 (0x35ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Validity Not Before: Sep 22 14:43:09 2026 GMT Not After : Sep 29 14:43:09 2026 GMT Subject: CN=6ab293fe-3adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:d1:4c:b4:84:3d:d9:85:fa:b9:4d:92:4b: 11:64:6d:51:07:df:bd:8c:95:0a:bd:32:70:45:b5: ae:d8:c8:3e:25:6a:52:33:c1:e0:c5:0c:38:10:e8: e2:16:ee:5b:aa:9f:da:12:5e:61:c3:d1:11:02:92: c8:76:8b:02:90:a2:dc:0b:44:7a:9b:e3:aa:6e:4e: 2e:a8:9d:6f:1c:a2:e4:8f:4a:9e:67:8e:a4:e7:f2: 6f:6b:ae:c6:dc:bb:fd:f5:25:4d:ac:09:cb:7b:76: 42:15:4d:23:ba:cd:6a:4b:d2:00:df:e3:e4:41:0a: 20:37:26:47:5e:5a:49:23:05:07:56:63:a3:99:7d: c9:a4:ab:fd:1b:20:18:30:42:08:6f:08:66:7f:a1: ba:72:d2:76:56:f0:d2:d1:15:a9:b9:35:2c:89:71: 93:d2:23:38:54:f1:ea:42:81:2b:65:13:63:0d:22: 90:31:56:14:c0:69:c1:a8:9a:9d:ca:0b:36:6c:ca: ad:f9:3c:37:0d:d2:ea:89:21:c6:1e:34:bd:24:0f: 99:39:44:f5:b8:b7:25:71:8c:5c:23:1a:b7:4f:d4: 1c:ad:18:5f:40:4d:dd:23:35:7d:7f:f9:6d:31:38: c9:8f:5f:0a:00:8c:96:a6:48:1c:8b:5e:8e:9e:aa: 9b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FD:58:1F:3F:DB:04:54:45:58:CC:C7:31:AA:20:7D:F2:0C:8B:DE X509v3 Authority Key Identifier: keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:73:4a:bb:d4:af:80:33:af:66:86:5d:d8:85:e1:01:53:03: 6c:09:e1:d3:41:23:e2:55:ed:85:e9:f8:c6:51:50:4e:fa:db: 94:2b:5c:c6:65:b1:a9:55:b9:1f:d2:16:ca:f3:57:07:16:22: 57:73:1a:13:b3:de:7d:95:1e:ed:27:b5:7f:a0:13:c2:84:28: 3b:64:c7:11:92:aa:f8:71:fe:86:e7:4c:5a:76:3a:7f:f7:51: f9:fc:7d:e4:e2:68:af:af:a8:da:6f:fd:d4:37:a0:bd:d6:8f: 25:b6:90:6e:4d:fa:d8:4e:a6:ee:ac:0b:bf:d5:c3:aa:09:f3: d2:05:eb:ca:e9:52:06:73:cd:06:90:b5:ff:21:2e:34:7c:d5: 54:5f:32:ed:54:bf:ee:13:94:b8:95:cd:af:23:b1:95:8d:ad: a4:ee:8f:34:41:c4:40:e1:19:bf:86:10:ad:17:4a:6c:70:7e: c1:d5:9d:74:53:c8:55:d7:41:82:1d:34:2f:bf:46:5a:5d:db: e2:86:44:f1:5a:55:87:3d:65:e3:43:43:9c:8d:ee:b3:81:90: 65:7a:21:e1:5d:1a:44:05:92:ce:78:f9:98:41:5b:5c:a5:5d: 22:ac:d5:96:e3:8a:59:f2:5d:b3:42:c8:fa:69:54:1f:d2:bb: 0c:8a:93:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThEMjIxMTAvBgNVBAUTKEE2ODNGNjcyNEMwMkExM0YyRDM5Q0YyRjIxNTAwQkUw MDM4MERERTMwHhcNMjYwOTIyMTQ0MzA5WhcNMjYwOTI5MTQ0MzA5WjAYMRYwFAYD VQQDEw02YWIyOTNmZS0zYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kjRTLSEPdmF+rlNkksRZG1RB9+9jJUKvTJwRbWu2Mg+JWpSM8HgxQw4EOji Fu5bqp/aEl5hw9ERApLIdosCkKLcC0R6m+Oqbk4uqJ1vHKLkj0qeZ46k5/Jva67G 3Lv99SVNrAnLe3ZCFU0jus1qS9IA3+PkQQogNyZHXlpJIwUHVmOjmX3JpKv9GyAY MEIIbwhmf6G6ctJ2VvDS0RWpuTUsiXGT0iM4VPHqQoErZRNjDSKQMVYUwGnBqJqd ygs2bMqt+Tw3DdLqiSHGHjS9JA+ZOUT1uLclcYxcIxq3T9QcrRhfQE3dIzV9f/lt MTjJj18KAIyWpkgci16OnqqbZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF39WB8/ 2wRURVjMxzGqIH3yDIveMB8GA1UdIwQYMBaAFKaD9nJMAqE/LTnPLyFQC+ADgN3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEQyMi8yNTI2OTc5ODFE OTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29UOHRPYzh2SVZBTDRBT0Ez ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvUDJja3dDb1Q4dE9jOHZJVkFMNEFPQTNlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEQyMi8yNTI2OTc5ODFEOTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29U OHRPYzh2SVZBTDRBT0EzZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqnNKu9SvgDOvZoZd2IXhAVMDbAnh00Ej4lXthen4xlFQTvrblCtcxmWxqVW5 H9IWyvNXBxYiV3MaE7PefZUe7Se1f6ATwoQoO2THEZKq+HH+hudMWnY6f/dR+fx9 5OJor6+o2m/91DegvdaPJbaQbk362E6m7qwLv9XDqgnz0gXryulSBnPNBpC1/yEu NHzVVF8y7VS/7hOUuJXNryOxlY2tpO6PNEHEQOEZv4YQrRdKbHB+wdWddFPIVddB gh00L79GWl3b4oZE8VpVhz1l40NDnI3us4GQZXoh4V0aRAWSznj5mEFbXKVdIqzV luOKWfJds0LI+mlUH9K7DIqTzg== -----END CERTIFICATE-----Generated at Thu Sep 24 01:13:08 2026 by rpki-client