$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json) Hash identifier: Q0pUFU1191zyg+KFH4RNrJRlm8Cs0uugboqkXaDFXYk= Subject key identifier: 6E:D2:52:AA:FC:E8:C3:CF:5F:29:D7:22:A8:CC:76:9B:FC:8B:86:F3 Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft Manifest number: 01C7 Signing time: Fri 25 Sep 2026 03:50:51 +0000 Manifest this update: Fri 25 Sep 2026 03:50:50 +0000 Manifest next update: Fri 02 Oct 2026 03:50:50 +0000 Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: Zd51vUWAnP7QjBDaMnjpCIwv9NL2ndX+irwfk447FFs=) 2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=) 3: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: i2+AU5JC1CnIuV2WebgbR1MhXzhp17jyG1HTb2dIKP0=) 4: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Sep 25 03:50:50 2026 GMT Not After : Oct 2 03:50:50 2026 GMT Subject: CN=6ab5ef9a-80e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:d6:f9:56:77:38:9b:4a:37:74:58:a5:1d: ea:2a:9a:d9:d4:ba:1f:6e:a3:34:d1:1e:4e:c8:d2: 37:0b:52:8e:a7:fd:af:d9:c2:b8:2e:d3:b7:0c:32: 2c:3c:45:d2:00:a7:b5:8e:87:07:91:0c:62:10:64: 24:0e:26:3a:1d:e6:c5:41:99:67:61:0a:a9:70:bb: 8c:8e:50:13:d7:bf:3d:9d:cf:84:33:c4:58:0d:91: e2:a8:08:2f:ce:b6:f1:0a:ec:a5:3b:51:d8:aa:a5: c2:a1:9a:25:3e:41:8f:ca:a0:b3:1c:8d:a0:e6:41: 4e:14:48:b9:a5:b0:ce:d5:da:1d:6b:66:97:1e:1b: 8d:fc:57:fe:70:3a:da:49:b3:a7:7f:a3:31:19:6e: df:85:5e:bd:47:c4:8b:d3:3a:6e:d4:4d:2f:59:52: ca:a9:69:90:ae:5e:99:0d:b2:21:70:89:fb:ea:4b: d2:21:57:c7:98:29:e9:cd:eb:a0:27:62:3c:79:f1: 28:f2:a6:83:43:ff:c6:fe:25:0e:64:17:b3:bd:0c: d1:66:0b:b7:19:80:9f:a5:07:e4:6f:9b:c3:4d:e9: a7:80:b4:2b:ef:d3:81:2f:9f:20:8d:37:7e:8e:79: 94:80:b3:f1:d9:db:9e:88:75:8c:34:84:66:e8:88: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D2:52:AA:FC:E8:C3:CF:5F:29:D7:22:A8:CC:76:9B:FC:8B:86:F3 X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:1e:30:07:36:ef:9d:e0:5b:f7:92:0b:f7:68:31:19:a5:e7: e9:89:59:c9:71:4c:32:41:71:ef:12:46:38:bf:70:80:59:9a: 8a:aa:1b:75:5f:bb:92:ec:71:24:0d:05:bf:fb:dc:a7:45:80: fd:f4:b3:3c:07:80:79:7f:f4:31:4c:40:9f:17:cf:ce:c7:20: 2f:03:be:dd:30:31:03:f8:da:2f:97:94:7b:5e:85:43:9a:b2: 74:fc:cb:af:d4:a7:70:0c:05:1c:8b:0c:0d:a2:0f:ae:03:d8: 34:29:1c:0a:14:58:6c:4c:8b:4f:3c:e9:69:99:8e:58:46:3d: d0:47:c9:02:7f:8d:60:cc:67:7f:ab:a4:2c:f1:65:e6:66:fe: 17:4d:08:f6:f3:a9:54:c6:c7:cb:e7:72:33:e1:ae:8c:40:dd: e6:64:85:a9:83:29:a0:3e:33:80:b4:0c:98:58:72:cf:26:a2: 81:0e:cc:5b:e5:ca:4e:5e:3f:ac:b9:74:e4:9f:60:80:31:3d: 56:f4:60:78:3f:a2:0b:80:9c:53:1d:7e:9d:e0:65:e6:de:55: d8:c8:5f:cb:ee:b8:8f:d0:05:71:f8:2a:d0:65:5a:4d:a2:ab: 8b:fb:09:37:46:73:f6:df:01:4f:86:b6:6c:bf:7c:13:26:38: 0c:b5:89:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG MERDNTkzM0QwHhcNMjYwOTI1MDM1MDUwWhcNMjYxMDAyMDM1MDUwWjAYMRYwFAYD VQQDEw02YWI1ZWY5YS04MGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvLW+VZ3OJtKN3RYpR3qKprZ1LofbqM00R5OyNI3C1KOp/2v2cK4LtO3DDIs PEXSAKe1jocHkQxiEGQkDiY6HebFQZlnYQqpcLuMjlAT1789nc+EM8RYDZHiqAgv zrbxCuylO1HYqqXCoZolPkGPyqCzHI2g5kFOFEi5pbDO1doda2aXHhuN/Ff+cDra SbOnf6MxGW7fhV69R8SL0zpu1E0vWVLKqWmQrl6ZDbIhcIn76kvSIVfHmCnpzeug J2I8efEo8qaDQ//G/iUOZBezvQzRZgu3GYCfpQfkb5vDTemngLQr79OBL58gjTd+ jnmUgLPx2dueiHWMNIRm6IgvYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7SUqr8 6MPPXynXIqjMdpv8i4bzMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF QWJ6eURVdklERVB3M0ZrejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlB4wBzbvneBb95IL92gxGaXn6YlZyXFMMkFx7xJGOL9wgFmaiqobdV+7kuxx JA0Fv/vcp0WA/fSzPAeAeX/0MUxAnxfPzscgLwO+3TAxA/jaL5eUe16FQ5qydPzL r9SncAwFHIsMDaIPrgPYNCkcChRYbEyLTzzpaZmOWEY90EfJAn+NYMxnf6ukLPFl 5mb+F00I9vOpVMbHy+dyM+GujEDd5mSFqYMpoD4zgLQMmFhyzyaigQ7MW+XKTl4/ rLl05J9ggDE9VvRgeD+iC4CcUx1+neBl5t5V2Mhfy+64j9AFcfgq0GVaTaKri/sJ N0Zz9t8BT4a2bL98EyY4DLWJCg== -----END CERTIFICATE-----Generated at Fri Sep 25 23:42:19 2026 by rpki-client