$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json) Hash identifier: vsAp4kGdTUxDtIga24y8DkxcFr76v51SSURLkosFj+A= Subject key identifier: 6D:42:F5:9A:B8:18:8F:FB:D3:FD:83:9B:27:EE:4D:D2:DE:7D:E5:AF Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft Manifest number: 0427 Signing time: Tue 22 Sep 2026 23:54:39 +0000 Manifest this update: Tue 22 Sep 2026 23:54:38 +0000 Manifest next update: Tue 29 Sep 2026 23:54:38 +0000 Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: WdYGXfkbmAsgCYpMqZa1+24rPA8oX8xwULu/bjidpjU=) 2: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: 6ChvL5bIW0nd/LEwk1GkYjUq9x3wU+NsnqxaoPxGr+c=) 3: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: SAmq2qut5svZXJTr/IN8K0rrvVU2RQUex9B9Y/hGwvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: Sep 22 23:54:38 2026 GMT Not After : Sep 29 23:54:38 2026 GMT Subject: CN=6ab3153e-2c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:28:f6:fd:19:3f:ec:21:ea:5b:fc:e3:cb: 2f:29:65:04:8c:53:32:20:eb:93:ec:38:97:4a:cc: a5:45:8e:33:c0:ba:d8:83:f0:91:ea:1a:03:45:b2: 22:30:93:a0:dc:ce:60:aa:25:33:fa:d6:b1:a3:7f: e7:60:bc:e8:bc:cb:dc:ff:48:3a:05:66:01:29:c5: 30:0e:fb:30:d5:f9:d4:d4:72:ac:57:36:c9:67:1c: 9a:48:c4:63:4d:98:f5:11:ed:19:d9:a7:25:10:dc: 91:23:29:91:a0:32:33:c2:0e:28:9f:38:13:f5:58: d2:30:f1:ba:a6:25:80:c3:ce:17:4b:b5:1d:d0:91: e7:e6:78:dc:d5:2c:15:7f:d8:8a:0d:0b:6a:d6:d1: 61:29:cf:5e:d7:71:34:af:8e:8b:a4:b4:cf:aa:f5: ce:a8:4a:34:f7:12:46:ea:fd:71:33:02:f7:05:ab: b9:1f:65:ab:18:49:32:ac:37:f3:56:24:8e:09:50: fd:d1:9c:55:e7:75:70:7c:27:4c:53:25:64:a8:82: 2c:d9:47:79:0b:22:9a:0e:61:af:7c:34:1e:e6:02: 11:3c:06:5f:2a:70:66:51:ed:6a:6d:64:92:aa:d6: f4:e0:56:ad:bd:88:c3:36:c8:db:33:77:8d:a1:a3: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:42:F5:9A:B8:18:8F:FB:D3:FD:83:9B:27:EE:4D:D2:DE:7D:E5:AF X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:67:a3:05:60:1f:be:11:10:fd:80:e8:d7:a4:e5:02:4a:7c: b1:75:48:e5:35:4f:14:91:b5:87:76:1a:d2:20:1e:3f:56:ca: 97:4a:57:93:3f:85:11:41:7d:b3:50:2c:7c:69:49:2f:c8:6d: 5b:36:e5:ed:24:b8:db:18:39:eb:75:10:28:6b:79:cb:89:96: 80:8d:15:83:2d:f3:7c:56:05:c3:4c:94:b2:ae:5a:75:bc:76: 42:e7:55:cb:bc:a2:09:cc:ce:1f:b4:66:fc:6c:ef:29:8d:9f: 9d:0d:7b:47:a7:82:c9:c6:6a:7c:ae:9d:ef:7a:7a:a4:b3:f7: 87:39:a5:28:b8:1e:57:51:50:41:08:40:55:b9:30:d1:b4:5a: c4:2a:98:f0:c4:55:60:db:77:50:62:fc:c5:9f:94:75:dc:51: e4:d9:c7:bb:84:ff:14:95:cc:c4:b9:1a:73:08:fa:99:4c:0f: 9b:9b:70:25:d7:25:a1:bb:13:d0:b9:40:b0:6b:e8:c5:bc:f3: 8c:65:10:1a:1f:29:b8:9e:81:38:55:77:95:ff:d5:e9:ca:15: 98:b2:6e:5e:4b:74:09:0b:ba:db:d6:56:5b:34:b7:0b:b5:72: 59:0b:15:02:4e:89:51:10:ff:d5:df:04:6b:8a:ff:7b:63:4c: cb:0d:01:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjYwOTIyMjM1NDM4WhcNMjYwOTI5MjM1NDM4WjAYMRYwFAYD VQQDEw02YWIzMTUzZS0yYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygAo9v0ZP+wh6lv848svKWUEjFMyIOuT7DiXSsylRY4zwLrYg/CR6hoDRbIi MJOg3M5gqiUz+taxo3/nYLzovMvc/0g6BWYBKcUwDvsw1fnU1HKsVzbJZxyaSMRj TZj1Ee0Z2aclENyRIymRoDIzwg4onzgT9VjSMPG6piWAw84XS7Ud0JHn5njc1SwV f9iKDQtq1tFhKc9e13E0r46LpLTPqvXOqEo09xJG6v1xMwL3Bau5H2WrGEkyrDfz ViSOCVD90ZxV53VwfCdMUyVkqIIs2Ud5CyKaDmGvfDQe5gIRPAZfKnBmUe1qbWSS qtb04FatvYjDNsjbM3eNoaOFGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1C9Zq4 GI/70/2DmyfuTdLefeWvMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDAwQy9DQUE4ODYxRUM2MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1v akZBTTM4T3VIaV9xQko5UlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfGejBWAfvhEQ/YDo16TlAkp8sXVI5TVPFJG1h3Ya0iAeP1bKl0pXkz+FEUF9 s1AsfGlJL8htWzbl7SS42xg563UQKGt5y4mWgI0Vgy3zfFYFw0yUsq5adbx2QudV y7yiCczOH7Rm/GzvKY2fnQ17R6eCycZqfK6d73p6pLP3hzmlKLgeV1FQQQhAVbkw 0bRaxCqY8MRVYNt3UGL8xZ+UddxR5NnHu4T/FJXMxLkacwj6mUwPm5twJdclobsT 0LlAsGvoxbzzjGUQGh8puJ6BOFV3lf/V6coVmLJuXkt0CQu629ZWWzS3C7VyWQsV Ak6JURD/1d8Ea4r/e2NMyw0BCQ== -----END CERTIFICATE-----Generated at Thu Sep 24 07:09:46 2026 by rpki-client