$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft File: 2en59z7k9bHN8XYsLfODKVCja30.mft (raw, json) Hash identifier: d7MS+iWU9L6lqkp1zXkG653+yQsdA/j4vaBbn+mUvSk= Subject key identifier: 05:5A:A8:CD:BA:92:39:A8:BE:92:39:CC:C4:38:40:91:88:1F:1D:13 Authority key identifier: D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D Certificate issuer: /CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Certificate serial: 358F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft Manifest number: 3586 Signing time: Tue 22 Sep 2026 14:56:03 +0000 Manifest this update: Tue 22 Sep 2026 14:56:02 +0000 Manifest next update: Tue 29 Sep 2026 14:56:02 +0000 Files and hashes: 1: 2en59z7k9bHN8XYsLfODKVCja30.crl (hash: lYQ17uu9hZaG0WSzYZ7evC/LORW2OKIzqUaBEDiuw0E=) 2: 76B5C744B45E11EAB71DF94AC4F9AE02.roa (hash: OrYwlHpiSmZNjD507c7+5SVsF6TOXtHT7d2m6BJQ+nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13711 (0x358f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACB2, serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Validity Not Before: Sep 22 14:56:02 2026 GMT Not After : Sep 29 14:56:02 2026 GMT Subject: CN=6ab29702-eda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:92:13:58:f9:08:41:35:0e:ef:73:af:03: bf:b8:04:eb:4e:96:82:57:af:01:75:9b:18:08:de: 7d:c5:b7:ce:d5:6c:36:10:a2:92:26:d3:36:88:98: 91:5d:e6:c1:20:fa:fc:2c:e2:39:d5:7e:fa:16:13: 9b:c8:48:7e:1b:81:a0:95:00:38:d1:26:5e:38:5b: 47:ca:02:27:2a:0b:0d:9f:f3:ff:3e:b2:5a:68:e7: c6:e2:75:a6:34:50:72:d3:40:15:7e:3b:c2:5d:3b: 97:10:e6:5e:a4:ef:97:7d:60:41:fd:19:27:58:36: 95:b7:5a:e8:f1:13:cf:1c:46:31:87:e0:96:db:2f: aa:a4:52:e9:60:f1:b4:5c:c8:52:3c:1e:36:ae:c2: 18:b5:5b:10:70:91:35:8c:36:41:f7:73:c3:35:15: 15:69:ef:0d:cb:8a:b5:67:93:0a:a4:26:09:c1:e3: b5:0c:04:60:0d:09:b1:3c:f3:65:46:de:b6:55:33: 77:e5:96:05:0c:5b:65:59:8c:84:8c:20:3f:34:84: b7:e6:4f:da:c4:2b:d2:ba:f1:5b:f6:93:68:20:c7: 7f:db:79:4b:aa:23:d3:8e:86:a6:a1:c5:7a:7b:bf: 6e:ae:86:f4:e9:f2:1b:29:8f:84:ef:ce:f4:21:6a: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5A:A8:CD:BA:92:39:A8:BE:92:39:CC:C4:38:40:91:88:1F:1D:13 X509v3 Authority Key Identifier: keyid:D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d7:0a:4a:10:43:02:85:62:02:ef:4d:69:d1:60:5d:38:cc: 4c:80:7d:16:ea:b4:77:02:6d:ab:1e:89:4b:10:2d:36:7c:bc: 26:f3:74:75:77:ba:75:ce:96:91:c9:50:d9:bb:69:7e:af:ce: 55:7c:38:54:fd:d8:db:36:cc:20:42:51:b6:5f:9a:1b:30:05: a5:9f:c0:61:63:d4:fa:d6:52:1a:2c:48:3e:2c:83:fa:10:1e: d3:eb:b9:ec:b9:1a:10:27:0a:62:c8:1f:4f:f5:b0:7f:45:a1: f0:ad:80:e8:b0:9f:5c:bd:dc:13:82:1e:df:ad:3d:3d:36:9b: e7:23:93:1c:09:a4:06:23:14:1c:a9:0b:3d:be:4b:87:f3:9e: b2:eb:41:5b:e3:5e:2f:b6:2b:75:6f:a9:99:4c:18:5d:6d:42: 54:60:58:91:9e:73:69:06:45:d4:80:eb:90:38:ef:85:86:40: 21:9f:ec:f3:a7:b2:41:73:54:4a:45:3f:bc:a0:f2:9a:69:be: 78:6e:9f:11:cc:6f:1f:f6:db:81:ff:bc:c0:37:59:46:8d:6f: b2:7f:58:92:a4:22:bc:dd:fa:b5:f6:76:0d:8c:5f:c5:98:4b: c7:f1:bf:7e:98:d5:f3:c0:bd:cc:8d:1c:5d:98:fa:d1:02:6c: 84:65:42:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDQjIxMTAvBgNVBAUTKEQ5RTlGOUY3M0VFNEY1QjFDREYxNzYyQzJERjM4MzI5 NTBBMzZCN0QwHhcNMjYwOTIyMTQ1NjAyWhcNMjYwOTI5MTQ1NjAyWjAYMRYwFAYD VQQDEw02YWIyOTcwMi1lZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2t6SE1j5CEE1Du9zrwO/uATrTpaCV68BdZsYCN59xbfO1Ww2EKKSJtM2iJiR XebBIPr8LOI51X76FhObyEh+G4GglQA40SZeOFtHygInKgsNn/P/PrJaaOfG4nWm NFBy00AVfjvCXTuXEOZepO+XfWBB/RknWDaVt1ro8RPPHEYxh+CW2y+qpFLpYPG0 XMhSPB42rsIYtVsQcJE1jDZB93PDNRUVae8Ny4q1Z5MKpCYJweO1DARgDQmxPPNl Rt62VTN35ZYFDFtlWYyEjCA/NIS35k/axCvSuvFb9pNoIMd/23lLqiPTjoamocV6 e79urob06fIbKY+E7870IWpxMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVaqM26 kjmovpI5zMQ4QJGIHx0TMB8GA1UdIwQYMBaAFNnp+fc+5PWxzfF2LC3zgylQo2t9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNCMi8zN0Q1QTNERTFE OUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azliSE44WFlzTGZPREtWQ2ph MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJlbjU5ejdrOWJITjhYWXNMZk9ES1ZDamEzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUNCMi8zN0Q1QTNERTFEOUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azli SE44WFlzTGZPREtWQ2phMzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfNcKShBDAoViAu9NadFgXTjMTIB9Fuq0dwJtqx6JSxAtNny8JvN0dXe6dc6W kclQ2btpfq/OVXw4VP3Y2zbMIEJRtl+aGzAFpZ/AYWPU+tZSGixIPiyD+hAe0+u5 7LkaECcKYsgfT/Wwf0Wh8K2A6LCfXL3cE4Ie3609PTab5yOTHAmkBiMUHKkLPb5L h/OesutBW+NeL7YrdW+pmUwYXW1CVGBYkZ5zaQZF1IDrkDjvhYZAIZ/s86eyQXNU SkU/vKDymmm+eG6fEcxvH/bbgf+8wDdZRo1vsn9YkqQivN36tfZ2DYxfxZhLx/G/ fpjV88C9zI0cXZj60QJshGVCcQ== -----END CERTIFICATE-----Generated at Tue Sep 22 22:23:18 2026 by rpki-client