$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft File: 2QDd8konYiv5ZDdX7byv-u4yHDc.mft (raw, json) Hash identifier: VlQ3G/URxO0e5KQ+B4EiSolod1FJVDQ0diaJC/CeEV4= Subject key identifier: 1E:A7:0D:6F:4F:DB:17:3B:71:16:22:E9:19:35:9E:61:CD:7F:B8:1A Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Certificate serial: 0F65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft Manifest number: 0F46 Signing time: Tue 22 Sep 2026 17:29:24 +0000 Manifest this update: Tue 22 Sep 2026 17:29:24 +0000 Manifest next update: Tue 29 Sep 2026 17:29:24 +0000 Files and hashes: 1: 2QDd8konYiv5ZDdX7byv-u4yHDc.crl (hash: OdbkpzlRh1xes2yhmTrkVRLCK2iEp9ZqTwLpCboWWxY=) 2: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (hash: c9S7+kwjScDv1EnjDtuUHgRxKdbpYUp5OTdjbknm8O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3941 (0xf65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7773, serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Validity Not Before: Sep 22 17:29:24 2026 GMT Not After : Sep 29 17:29:24 2026 GMT Subject: CN=6ab2baf4-7745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:5a:46:ca:24:a1:d5:df:0c:bf:c8:c9:b1: 8d:7e:bd:51:e5:93:f0:fe:13:0f:28:4c:7a:6a:06: da:77:e8:9b:67:f8:a3:f6:cd:db:7f:ec:79:c4:78: 2a:85:5c:3d:df:11:ef:17:5e:d5:4c:d6:0a:55:67: d0:4e:6a:60:a5:35:d4:0b:9f:10:47:0c:4f:e4:ad: b4:dc:94:9c:ac:3f:f0:f1:e6:90:20:00:eb:18:09: 63:4f:83:2c:9e:5f:18:9a:10:10:b0:9f:c0:ed:30: 01:d4:41:c6:1a:13:68:5d:b2:2e:24:2e:65:18:9f: af:27:a5:c6:ff:c4:69:8e:41:ce:a1:73:09:42:19: bf:fa:a3:6d:f0:a5:ad:62:7d:b6:2d:2e:8a:38:e4: a9:82:97:fc:c9:51:af:ad:88:ae:08:3a:08:b6:e4: 42:0b:b4:46:93:8d:4c:fa:c2:e1:28:d8:6d:31:5a: 4f:61:6f:da:a3:a4:10:36:ca:4b:ab:35:8f:7f:a9: 42:40:25:2a:0e:bd:e6:b4:8f:f8:75:43:4d:7b:4e: f2:12:e5:2e:bc:1a:ff:bc:bc:0e:a9:cf:65:2e:57: a2:0b:47:a4:d3:59:ae:35:62:91:04:57:0b:90:1a: e5:f6:24:46:eb:7d:b7:7b:dc:0a:08:7c:22:96:c6: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A7:0D:6F:4F:DB:17:3B:71:16:22:E9:19:35:9E:61:CD:7F:B8:1A X509v3 Authority Key Identifier: keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:67:44:ee:5f:db:f7:cf:c3:bb:11:cc:e2:ab:5f:9a:38:b9: e9:40:25:1f:ac:4b:da:bf:c9:f4:f0:ce:fd:00:a4:ac:6d:a0: 06:74:aa:6f:d5:0a:c5:49:26:91:d4:58:43:1d:5e:d1:fd:a4: 22:21:b3:4f:95:8b:b6:a8:92:10:e2:73:2f:90:da:2f:18:db: 15:cd:ca:09:be:ec:48:78:f6:d1:5a:69:09:48:d2:2e:44:2e: 46:e7:b1:ca:f5:67:84:89:5c:03:50:10:e4:2b:cb:4b:9b:96: f4:39:56:f6:19:9a:43:67:c4:f2:f3:53:cb:a1:25:f1:2d:56: 36:3a:21:ce:36:28:64:e8:62:7b:60:6c:3a:64:9b:da:02:6c: 04:30:91:31:9e:3f:19:16:26:bb:7b:95:31:ee:70:40:c1:8e: 61:e0:ed:2e:42:2b:f6:c1:2c:7a:f9:6d:5e:e1:b1:97:11:7a: fd:1f:4d:48:32:1d:91:7a:7f:29:fa:6a:89:94:97:d5:2b:02: 31:26:dd:59:f4:1b:ad:49:e8:ba:b2:08:c8:66:a8:7e:d5:dc: b1:08:ac:f1:b6:96:a2:3a:90:a1:66:d4:d7:85:b0:65:14:3f: ec:53:fa:87:90:c1:d9:52:61:76:26:0d:13:27:07:a8:79:1b: fa:6f:0d:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB RUUzMjFDMzcwHhcNMjYwOTIyMTcyOTI0WhcNMjYwOTI5MTcyOTI0WjAYMRYwFAYD VQQDEw02YWIyYmFmNC03NzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoH1aRsokodXfDL/IybGNfr1R5ZPw/hMPKEx6agbad+ibZ/ij9s3bf+x5xHgq hVw93xHvF17VTNYKVWfQTmpgpTXUC58QRwxP5K203JScrD/w8eaQIADrGAljT4Ms nl8YmhAQsJ/A7TAB1EHGGhNoXbIuJC5lGJ+vJ6XG/8RpjkHOoXMJQhm/+qNt8KWt Yn22LS6KOOSpgpf8yVGvrYiuCDoItuRCC7RGk41M+sLhKNhtMVpPYW/ao6QQNspL qzWPf6lCQCUqDr3mtI/4dUNNe07yEuUuvBr/vLwOqc9lLleiC0ek01muNWKRBFcL kBrl9iRG6323e9wKCHwilsbuPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6nDW9P 2xc7cRYi6Rk1nmHNf7gaMB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc3My9BRDMyMjM3Q0EyRTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllp djVaRGRYN2J5di11NHlIRGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAImdE7l/b98/DuxHM4qtfmji56UAlH6xL2r/J9PDO/QCkrG2gBnSqb9UKxUkm kdRYQx1e0f2kIiGzT5WLtqiSEOJzL5DaLxjbFc3KCb7sSHj20VppCUjSLkQuRuex yvVnhIlcA1AQ5CvLS5uW9DlW9hmaQ2fE8vNTy6El8S1WNjohzjYoZOhie2BsOmSb 2gJsBDCRMZ4/GRYmu3uVMe5wQMGOYeDtLkIr9sEsevltXuGxlxF6/R9NSDIdkXp/ KfpqiZSX1SsCMSbdWfQbrUnourIIyGaoftXcsQis8baWojqQoWbU14WwZRQ/7FP6 h5DB2VJhdiYNEycHqHkb+m8N4w== -----END CERTIFICATE-----Generated at Wed Sep 23 13:28:42 2026 by rpki-client