$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: 2xs/YYpQauHlZZhSU00mrnRTW4XWRVGUcgq4yg3Gb10= Subject key identifier: 15:ED:3A:FE:5E:81:95:4A:02:BB:06:82:4C:AA:64:FD:E7:9F:2C:0C Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 02A5 Signing time: Fri 25 Sep 2026 01:34:52 +0000 Manifest this update: Fri 25 Sep 2026 01:34:51 +0000 Manifest next update: Fri 02 Oct 2026 01:34:51 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: yvtpYo6fqxjP2oYvI5TbDLoWgsYbeCT6LIzSUKJx9Zo=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 4E7B7eClCEG5d3gzWwa9hz6tdWf+XUY9sPo6EaTao1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Sep 25 01:34:51 2026 GMT Not After : Oct 2 01:34:51 2026 GMT Subject: CN=6ab5cfbc-89fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:73:f5:d6:f0:16:b0:50:cf:a7:9e:05:af: a3:7b:5d:30:d1:62:d4:44:d6:39:a5:5f:8b:4a:9e: 1b:d5:b5:4d:49:af:f9:f8:f1:0b:5a:ba:54:69:c0: 20:9d:3a:ee:11:27:ca:e9:e2:48:9a:53:71:fc:6d: 77:d1:01:9c:ac:a2:ce:b6:a8:8e:1a:41:e6:6c:46: 67:aa:11:8c:e4:51:06:39:b0:63:7b:44:0a:c5:2c: 12:9c:d3:80:b6:3b:96:60:c4:34:dc:e0:4e:62:ff: 20:7c:66:25:9b:46:9d:81:07:d1:ea:83:d7:f2:7a: 8e:a0:ed:d7:e3:17:72:b2:3e:e3:f1:82:1d:71:87: bd:65:1f:f0:c4:cf:e1:5c:6c:d7:aa:42:87:af:12: 43:20:02:d3:71:c4:56:99:ab:e2:15:c3:9a:d0:1f: ba:c1:da:50:6a:d8:d8:af:a0:16:44:9d:0c:e8:1a: a1:b3:34:c8:ce:bc:03:35:3e:e8:f7:fd:9d:63:52: 6c:5f:d6:eb:e5:9a:84:b9:99:55:55:00:51:c3:3f: 15:2a:f1:40:4b:18:b2:f9:e0:dc:39:2a:2c:ea:c6: e6:6a:b2:67:61:73:e5:e6:11:b0:ed:6f:bb:ab:e2: 40:94:b6:49:ae:ab:27:eb:f2:99:ef:86:c7:96:5b: dc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:ED:3A:FE:5E:81:95:4A:02:BB:06:82:4C:AA:64:FD:E7:9F:2C:0C X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:0b:86:41:17:73:44:c7:3d:07:91:a4:38:73:3f:70:7a:5b: 37:2c:5e:29:8b:78:05:9d:06:d4:de:01:99:08:d8:18:3e:b6: a7:2c:73:e7:bd:2c:24:8a:22:73:a4:99:78:b1:27:28:96:a7: 91:6e:00:ba:6c:ca:42:f8:1a:99:65:08:84:05:c7:11:d7:b0: 56:de:14:5c:ee:bf:ec:30:5d:d0:0f:ed:0d:5d:68:58:ef:be: 4c:e2:03:18:46:d3:09:55:3b:58:7f:7d:ab:5a:fb:fc:12:4b: 83:b0:8b:fb:02:8b:7a:8d:3a:ae:68:0a:e9:1a:10:03:79:8b: 00:87:de:dc:b4:e5:d1:16:7a:72:e7:4e:eb:34:ad:e1:b9:7d: b2:b4:d3:6e:50:c2:b3:89:4a:31:d1:2d:01:78:89:25:31:5e: f9:de:01:4f:6c:5b:92:6f:a3:dc:5b:02:f6:75:20:e0:c0:ed: b7:ff:25:80:b3:ba:fe:b3:e7:3a:1d:7b:07:a2:f7:ee:e7:94: 0b:cd:83:8f:fa:34:fa:05:75:4e:90:f5:8a:54:8d:2c:76:88: 4e:f7:3d:65:ad:23:e9:91:72:f6:3a:d2:f9:d5:91:4d:8d:18: d8:1e:98:5d:ad:bc:70:e3:dd:05:ca:00:ae:f3:fc:98:cf:38: da:ff:1a:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjYwOTI1MDEzNDUxWhcNMjYxMDAyMDEzNDUxWjAYMRYwFAYD VQQDEw02YWI1Y2ZiYy04OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxutz9dbwFrBQz6eeBa+je10w0WLURNY5pV+LSp4b1bVNSa/5+PELWrpUacAg nTruESfK6eJImlNx/G130QGcrKLOtqiOGkHmbEZnqhGM5FEGObBje0QKxSwSnNOA tjuWYMQ03OBOYv8gfGYlm0adgQfR6oPX8nqOoO3X4xdysj7j8YIdcYe9ZR/wxM/h XGzXqkKHrxJDIALTccRWmaviFcOa0B+6wdpQatjYr6AWRJ0M6BqhszTIzrwDNT7o 9/2dY1JsX9br5ZqEuZlVVQBRwz8VKvFASxiy+eDcOSos6sbmarJnYXPl5hGw7W+7 q+JAlLZJrqsn6/KZ74bHllvcsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBXtOv5e gZVKArsGgkyqZP3nnywMMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZguGQRdzRMc9B5GkOHM/cHpbNyxeKYt4BZ0G1N4BmQjYGD62pyxz570sJIoi c6SZeLEnKJankW4AumzKQvgamWUIhAXHEdewVt4UXO6/7DBd0A/tDV1oWO++TOID GEbTCVU7WH99q1r7/BJLg7CL+wKLeo06rmgK6RoQA3mLAIfe3LTl0RZ6cudO6zSt 4bl9srTTblDCs4lKMdEtAXiJJTFe+d4BT2xbkm+j3FsC9nUg4MDtt/8lgLO6/rPn Oh17B6L37ueUC82Dj/o0+gV1TpD1ilSNLHaITvc9Za0j6ZFy9jrS+dWRTY0Y2B6Y Xa28cOPdBcoArvP8mM842v8arg== -----END CERTIFICATE-----Generated at Sat Sep 26 12:32:52 2026 by rpki-client