$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: gMVxrZnsUOGf/UHI4UarRNKBqkbe26PVhAxsK4AZmsY= Subject key identifier: E2:BB:26:BE:39:57:BD:55:29:70:CD:F6:1F:93:54:92:48:2D:35:2E Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 04C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 04B5 Signing time: Sun 20 Sep 2026 23:41:13 +0000 Manifest this update: Sun 20 Sep 2026 23:41:13 +0000 Manifest next update: Sun 27 Sep 2026 23:41:13 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: Iy9F5+gwjN4ObB5FAPuys5Qi8QWFv9e3Q5GmJXPF+DM=) 2: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: SzKheHkyXGhCU9L9E9bj5O9UK/QqaZCVghpUUMIvziw=) 3: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: lRK5hM0+Ajz1Iu+TnpLxwj4NeRvEETgFEYDFPhqxkGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Sep 20 23:41:13 2026 GMT Not After : Sep 27 23:41:13 2026 GMT Subject: CN=6ab06f19-ce9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:f4:a2:dd:d5:c6:73:66:1f:58:a6:4b:18: 02:6b:6f:fe:7c:7b:c3:7b:fc:5d:43:eb:3d:7a:4f: 42:fe:4d:86:9e:50:08:5b:67:50:fc:12:86:fd:37: ac:cc:9f:11:10:61:16:14:46:75:e1:c3:28:00:e3: f2:56:50:3a:94:4e:13:1b:cf:c4:b4:d4:17:56:ce: dc:80:9e:59:0e:82:31:3a:05:2c:6e:50:08:61:93: 70:7e:82:a6:b3:ae:9f:7f:ac:a8:e3:30:fb:9b:0c: 78:9f:16:0e:61:d3:af:83:1c:d2:52:60:33:d3:56: 2a:62:57:1f:78:e0:53:6d:8e:9c:2c:f5:e2:44:6f: e3:8e:fa:34:92:03:e6:4d:71:f4:be:9b:0c:b1:6c: 4a:51:8d:6d:9b:f9:df:86:5f:d4:9c:55:6f:df:6b: e2:48:7f:2a:4a:49:bd:df:ad:c9:92:9e:35:cf:b3: 85:ea:0d:10:4a:0c:7d:88:8e:5e:10:4c:28:ce:ab: 66:46:8f:f1:57:63:3b:63:6c:d2:06:2b:2e:37:7d: f7:34:9e:24:0a:4d:2a:0a:b4:12:fd:b0:77:d3:21: 3b:88:69:10:f7:f3:60:70:a1:57:a9:59:35:79:91: 7e:6a:df:03:c6:0c:cd:e3:2a:da:b0:4f:d1:e9:fd: ae:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BB:26:BE:39:57:BD:55:29:70:CD:F6:1F:93:54:92:48:2D:35:2E X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:3d:08:23:b9:11:50:a9:a9:95:3c:bc:3b:fc:64:28:cd:fb: 1d:22:67:b2:8f:c5:89:53:db:f0:8a:e8:78:90:f6:03:59:0e: 81:32:ac:35:a1:df:f8:ac:05:d6:2e:99:f9:ab:d8:6f:4e:67: 09:c5:54:c2:80:d0:25:8a:d3:01:9e:ac:ca:43:16:14:d4:5a: 03:8a:d7:8b:d1:e2:f8:3c:10:51:35:03:32:77:2e:53:bf:78: 6b:13:bc:ef:cb:42:38:c3:b9:18:d0:7d:c5:39:0f:1c:44:87: 44:66:39:87:12:10:d9:d8:be:c3:1d:f7:4f:3e:d5:97:17:67: b1:66:5e:9e:02:37:6a:14:61:a2:f4:d5:9b:fc:36:48:b7:a7: 0c:13:f6:9c:42:d2:f1:da:6a:14:dc:8e:61:01:bf:4c:d0:f0: b8:a5:36:19:0c:d9:d2:f5:f2:9b:5c:49:1d:4c:bd:19:7c:bd: 40:95:b5:b6:6d:e8:d1:8a:f2:35:39:31:99:2c:77:2d:dc:d1: f4:f5:ec:de:ec:03:3b:30:68:6b:34:de:4b:53:32:a0:fd:a1: 6f:67:08:35:29:7e:4a:a2:c7:c2:3b:56:79:42:c4:47:6c:ef: 84:39:06:9f:51:00:42:2c:e9:d9:9c:22:38:5a:e7:a8:2e:6b: cd:80:46:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjYwOTIwMjM0MTEzWhcNMjYwOTI3MjM0MTEzWjAYMRYwFAYD VQQDEw02YWIwNmYxOS1jZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfr0ot3VxnNmH1imSxgCa2/+fHvDe/xdQ+s9ek9C/k2GnlAIW2dQ/BKG/Tes zJ8REGEWFEZ14cMoAOPyVlA6lE4TG8/EtNQXVs7cgJ5ZDoIxOgUsblAIYZNwfoKm s66ff6yo4zD7mwx4nxYOYdOvgxzSUmAz01YqYlcfeOBTbY6cLPXiRG/jjvo0kgPm TXH0vpsMsWxKUY1tm/nfhl/UnFVv32viSH8qSkm9363Jkp41z7OF6g0QSgx9iI5e EEwozqtmRo/xV2M7Y2zSBisuN333NJ4kCk0qCrQS/bB30yE7iGkQ9/NgcKFXqVk1 eZF+at8DxgzN4yrasE/R6f2urQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOK7Jr45 V71VKXDN9h+TVJJILTUuMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtT0II7kRUKmplTy8O/xkKM37HSJnso/FiVPb8IroeJD2A1kOgTKsNaHf+KwF 1i6Z+avYb05nCcVUwoDQJYrTAZ6sykMWFNRaA4rXi9Hi+DwQUTUDMncuU794axO8 78tCOMO5GNB9xTkPHESHRGY5hxIQ2di+wx33Tz7VlxdnsWZengI3ahRhovTVm/w2 SLenDBP2nELS8dpqFNyOYQG/TNDwuKU2GQzZ0vXym1xJHUy9GXy9QJW1tm3o0Yry NTkxmSx3LdzR9PXs3uwDOzBoazTeS1MyoP2hb2cINSl+SqLHwjtWeULER2zvhDkG n1EAQizp2ZwiOFrnqC5rzYBGSg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:00:16 2026 by rpki-client