$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: MssFAruGrmJZTCQubZcQrDEhIpG2bW7LWLk7BlmPI6o= Subject key identifier: 92:73:5F:70:C2:97:E8:EF:9C:37:32:F2:27:35:E5:DC:0F:9A:99:B8 Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 02A4 Signing time: Fri 25 Sep 2026 01:39:07 +0000 Manifest this update: Fri 25 Sep 2026 01:39:06 +0000 Manifest next update: Fri 02 Oct 2026 01:39:06 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: Kna57Mg6O7jwXkR40+A3j2mSvLIub6ui1GtKixVGVA4=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: PvZuO5e4GchVGqAm1QbEBiq8YBp2L+bhbVxt20o+A5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Sep 25 01:39:06 2026 GMT Not After : Oct 2 01:39:06 2026 GMT Subject: CN=6ab5d0ba-0699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:59:52:55:bc:e1:e7:50:55:90:f7:79:3a: 63:08:ad:00:dc:5a:54:5e:64:64:50:38:70:5e:dd: b2:30:ef:20:19:ec:98:07:b4:b3:5c:83:2a:c7:19: 93:0b:6d:e2:5c:5c:de:01:44:6e:e4:89:e4:e3:00: a3:cf:cb:47:8b:dc:1e:7a:2d:c0:fc:cf:b5:db:ec: fa:31:39:39:0b:f3:14:f2:cf:14:e2:b2:07:1d:63: 2c:8a:62:da:6a:8e:cd:8b:40:19:d0:0e:1c:9c:05: bc:89:d4:fc:7c:34:c8:00:c7:53:74:38:7a:cd:fc: 6b:f8:a1:55:de:cd:41:4f:85:21:66:84:ad:ae:11: ab:9a:5f:aa:7b:28:c5:2a:48:0d:f1:ac:14:a4:42: f7:0c:f9:39:09:3b:04:35:08:8f:97:c6:fb:97:78: e3:bd:aa:85:ca:97:53:68:64:f2:04:10:05:b0:5a: 0d:ef:a3:e2:53:8b:d8:4a:50:25:a6:49:63:25:33: 0e:fc:77:38:33:2d:a7:3c:86:47:7b:5e:d3:d2:94: 24:6a:1a:63:9f:5a:45:38:c1:81:2f:d8:87:59:07: 0e:51:6c:6c:91:70:f8:dd:49:ba:d7:ef:5e:1f:05: 17:fa:27:d7:54:33:3a:b6:26:6b:1e:01:ea:e4:36: cb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:73:5F:70:C2:97:E8:EF:9C:37:32:F2:27:35:E5:DC:0F:9A:99:B8 X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:6c:c8:ba:09:80:9d:52:4f:44:41:89:06:1d:b5:3c:6d:73: 67:dc:8c:ce:8e:d2:78:68:db:c4:08:30:dd:bc:b8:18:63:30: 39:9d:01:d1:65:59:4b:a0:b4:67:50:24:cc:de:5c:16:49:ed: f1:93:0d:b4:6e:35:ec:bf:49:de:5c:6c:00:bc:f8:32:c7:90: 8f:e0:ec:f0:b1:13:02:15:f2:10:51:1d:03:04:cc:76:50:33: ef:8f:e9:0b:04:76:6e:38:1d:c4:25:16:fb:f7:67:c2:18:e7: 86:06:e5:2f:1a:3d:b0:12:59:6f:0f:5a:79:a2:f9:cb:60:66: 60:9b:d2:29:27:45:8e:e6:65:4b:ca:09:35:c4:d4:2b:c6:e4: 77:50:9b:37:c5:07:91:55:61:8a:58:27:72:88:e0:20:64:f7: 23:cb:e4:cb:e7:a3:f8:b5:8c:c6:9b:a4:91:b4:67:cb:81:6c: 58:71:23:bf:95:c5:00:46:b6:39:d8:4a:a2:1c:b2:8d:a3:ed: 33:27:dc:63:3b:54:d9:d2:25:07:4b:27:dc:b7:2e:36:04:21: ff:5c:3b:93:e7:c1:4a:92:cc:b7:52:3d:a8:c4:7a:13:d4:61: 17:29:9f:ab:43:0d:a3:ad:15:7b:b8:cd:52:c8:fe:33:01:b7: 2c:f2:fb:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjYwOTI1MDEzOTA2WhcNMjYxMDAyMDEzOTA2WjAYMRYwFAYD VQQDEw02YWI1ZDBiYS0wNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcJZUlW84edQVZD3eTpjCK0A3FpUXmRkUDhwXt2yMO8gGeyYB7SzXIMqxxmT C23iXFzeAURu5Ink4wCjz8tHi9weei3A/M+12+z6MTk5C/MU8s8U4rIHHWMsimLa ao7Ni0AZ0A4cnAW8idT8fDTIAMdTdDh6zfxr+KFV3s1BT4UhZoStrhGrml+qeyjF KkgN8awUpEL3DPk5CTsENQiPl8b7l3jjvaqFypdTaGTyBBAFsFoN76PiU4vYSlAl pkljJTMO/Hc4My2nPIZHe17T0pQkahpjn1pFOMGBL9iHWQcOUWxskXD43Um61+9e HwUX+ifXVDM6tiZrHgHq5DbL0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJzX3DC l+jvnDcy8ic15dwPmpm4MB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsGzIugmAnVJPREGJBh21PG1zZ9yMzo7SeGjbxAgw3by4GGMwOZ0B0WVZS6C0 Z1AkzN5cFknt8ZMNtG417L9J3lxsALz4MseQj+Ds8LETAhXyEFEdAwTMdlAz74/p CwR2bjgdxCUW+/dnwhjnhgblLxo9sBJZbw9aeaL5y2BmYJvSKSdFjuZlS8oJNcTU K8bkd1CbN8UHkVVhilgncojgIGT3I8vky+ej+LWMxpukkbRny4FsWHEjv5XFAEa2 OdhKohyyjaPtMyfcYztU2dIlB0sn3LcuNgQh/1w7k+fBSpLMt1I9qMR6E9RhFymf q0MNo60Ve7jNUsj+MwG3LPL7kQ== -----END CERTIFICATE-----Generated at Sat Sep 26 16:12:31 2026 by rpki-client