$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json) Hash identifier: 3QuXOuA4HcF3IGKGU0ZSsNpr37wP5utvgGz7fNbvKZE= Subject key identifier: 86:89:98:7B:ED:21:F6:B6:C6:F4:D5:E7:68:FD:65:82:E5:43:F0:2D Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1B54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft Manifest number: 1B32 Signing time: Sat 26 Sep 2026 16:19:29 +0000 Manifest this update: Sat 26 Sep 2026 16:19:28 +0000 Manifest next update: Sat 03 Oct 2026 16:19:28 +0000 Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: jnWSxTsPGHCeuW5Sbjz1iYajxPLv7KB+bPW+MSVYNGQ=) 2: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: p4+NsJe4a3MSde9nMZiDmlNln2JEYVPGVaWpxC5fnk8=) 3: C443D86A55A311E7896BED09C4F9AE02.roa (hash: hkXxeNyW6zU7R/3tjUaDIgOzon4gIXx8opB7l3LzhSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 16:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6996 (0x1b54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Sep 26 16:19:28 2026 GMT Not After : Oct 3 16:19:28 2026 GMT Subject: CN=6ab7f091-de0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:67:35:c3:3c:24:55:61:ea:ef:34:b9:e4: 5a:fb:ef:16:e4:27:98:33:f4:d9:e2:02:3b:48:5c: 0a:58:a7:84:5e:dd:9f:84:00:a6:ed:33:2c:3a:8f: 78:9f:fd:42:b3:de:24:b2:5d:40:3e:0f:02:ed:9f: c9:78:ab:9f:62:3c:fa:75:d2:fd:de:6f:ba:de:0c: 54:bd:cd:b5:0c:59:87:d9:86:e5:33:14:a7:65:1b: 84:6f:d8:09:3b:3d:ee:22:25:c5:1d:35:ff:db:3d: 26:c5:45:b7:ff:c1:67:af:9b:a5:1a:f7:38:8e:04: 3c:59:ac:50:34:97:15:fa:61:f9:2e:fd:e4:b5:06: 91:d7:1c:b8:65:c4:5d:b2:38:82:06:67:9a:72:f8: 56:b3:63:85:da:0d:ce:88:9d:c0:a2:31:1a:c6:fe: f2:96:de:20:7b:68:d2:80:83:d9:54:d1:a3:55:e4: 8f:2f:d2:80:75:09:36:a0:46:ef:62:ef:4e:fc:3c: fe:dc:68:00:f9:8b:53:81:45:67:e5:be:d4:61:bc: d1:a3:bb:05:34:63:db:c2:08:42:ca:08:60:d3:ed: fe:bc:9d:e5:cf:2e:2f:19:4c:a7:70:1b:65:e8:3d: 08:a4:bd:b1:32:85:5c:b0:66:e8:f2:ff:c6:72:2f: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:89:98:7B:ED:21:F6:B6:C6:F4:D5:E7:68:FD:65:82:E5:43:F0:2D X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e4:05:10:c5:34:a5:19:cd:75:2d:1e:01:79:6e:48:69:a4: 40:46:d1:c6:7b:9a:5f:58:09:91:66:de:19:55:2a:fd:3c:13: 9f:8f:16:68:00:3a:a3:bc:db:ae:c8:d5:4c:0b:96:72:65:2d: d2:ac:4d:8e:39:23:9e:ef:6c:05:2b:cb:10:e9:8e:9f:b6:64: 76:2d:51:28:93:37:41:37:d7:46:a3:37:bd:5f:b0:e4:c1:62: cc:3a:6f:72:bc:e8:72:3e:38:d8:6b:e8:b5:ff:71:0a:18:1d: cf:1d:4f:f3:3d:27:e4:37:a9:fb:96:16:5b:4b:90:5e:c8:72: 2d:a4:a3:f5:91:3e:87:91:48:0b:3a:56:a0:a6:02:69:eb:9d: 94:81:1a:cf:36:2c:2f:b6:db:ba:bd:3e:13:30:a2:d6:8c:48: de:74:5e:21:6b:a8:7c:7b:57:a8:41:cd:b9:7c:87:a7:25:4f: d0:81:e0:3d:20:97:17:ed:0b:fa:6e:f6:da:98:7d:4c:6e:02: d6:0b:84:da:79:54:5d:53:a9:f4:f5:9c:fc:8d:69:2f:7e:fc: 76:08:75:3e:f2:5e:3e:e9:de:c9:0a:3f:61:fc:65:f4:1e:78: cd:94:43:58:9c:67:84:47:b2:f6:f5:ab:72:5b:5a:a8:a1:40: f7:fa:51:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjYwOTI2MTYxOTI4WhcNMjYxMDAzMTYxOTI4WjAYMRYwFAYD VQQDEw02YWI3ZjA5MS1kZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCRnNcM8JFVh6u80ueRa++8W5CeYM/TZ4gI7SFwKWKeEXt2fhACm7TMsOo94 n/1Cs94ksl1APg8C7Z/JeKufYjz6ddL93m+63gxUvc21DFmH2YblMxSnZRuEb9gJ Oz3uIiXFHTX/2z0mxUW3/8Fnr5ulGvc4jgQ8WaxQNJcV+mH5Lv3ktQaR1xy4ZcRd sjiCBmeacvhWs2OF2g3OiJ3AojEaxv7ylt4ge2jSgIPZVNGjVeSPL9KAdQk2oEbv Yu9O/Dz+3GgA+YtTgUVn5b7UYbzRo7sFNGPbwghCyghg0+3+vJ3lzy4vGUyncBtl 6D0IpL2xMoVcsGbo8v/Gci/AnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIaJmHvt Ifa2xvTV52j9ZYLlQ/AtMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBNS8yNTgwQThENjRCNjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVH eHBtbGFiRWdPRWtKV0tveTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALOQFEMU0pRnNdS0eAXluSGmkQEbRxnuaX1gJkWbeGVUq/TwTn48WaAA6o7zb rsjVTAuWcmUt0qxNjjkjnu9sBSvLEOmOn7Zkdi1RKJM3QTfXRqM3vV+w5MFizDpv crzocj442Gvotf9xChgdzx1P8z0n5Dep+5YWW0uQXshyLaSj9ZE+h5FICzpWoKYC aeudlIEazzYsL7bbur0+EzCi1oxI3nReIWuofHtXqEHNuXyHpyVP0IHgPSCXF+0L +m722ph9TG4C1guE2nlUXVOp9PWc/I1pL378dgh1PvJePuneyQo/Yfxl9B54zZRD WJxnhEey9vWrcltaqKFA9/pR6g== -----END CERTIFICATE-----Generated at Sun Sep 27 12:32:09 2026 by rpki-client