$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: c4l204MGiTaqrnzDzKhdrfKIlSPKzGhWPGu+xfUVEfQ= Subject key identifier: 8F:A9:4F:F1:B1:2C:6B:49:B8:2D:E1:DC:D3:6B:94:1F:64:B4:40:71 Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 0292 Signing time: Wed 23 Sep 2026 01:35:53 +0000 Manifest this update: Wed 23 Sep 2026 01:35:52 +0000 Manifest next update: Wed 30 Sep 2026 01:35:52 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: 1zwiEChCvOZGLzsb7pm1etVPsg04iUTHS1VSUr7UWkM=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: M7rxsuOrH2kuk/pXICO7DXTzFRaUh4fgHJe4Gm7Q1vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Sep 23 01:35:52 2026 GMT Not After : Sep 30 01:35:52 2026 GMT Subject: CN=6ab32cf8-b788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:d4:13:88:87:30:d3:dc:b7:7d:a9:77:8e: cd:9f:07:7d:39:ea:fa:64:1c:65:22:69:20:aa:60: b7:0a:ca:d4:cb:ca:b1:a8:ec:96:8d:91:4d:58:fd: b0:5f:6b:b2:71:9b:88:7c:f1:a3:62:96:04:67:56: b8:fe:d6:f5:fe:75:2c:b8:5c:dc:e3:89:79:f8:d9: 4b:c2:26:59:22:97:d8:72:4a:f4:77:21:38:6d:fe: b0:9c:b8:59:0f:0d:c9:54:c5:04:26:48:96:a0:fb: 27:8e:97:eb:45:fd:4c:a0:73:0b:4d:0c:3b:61:6d: 5e:57:b1:e0:01:66:95:63:c7:72:43:fc:4b:64:c4: 85:89:ce:f4:c0:4b:34:50:ec:92:b0:18:1a:0f:b7: 39:4e:e6:14:ae:d4:4e:20:9d:41:ec:31:2a:d7:4a: 7d:f6:0e:d4:ac:02:7b:85:fd:c8:67:e6:19:c6:58: 3b:f6:39:d0:09:ac:40:20:70:2d:35:b9:eb:fa:26: da:04:48:64:ae:de:53:37:6e:88:a8:3d:f7:ab:0e: 28:64:07:d0:db:5a:ea:e6:c7:76:96:de:98:29:ef: db:0f:be:4a:09:9c:7d:22:0d:88:6c:54:45:d0:7f: fe:9f:8b:37:2c:05:10:4f:d2:90:0e:d7:5b:70:7c: 20:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A9:4F:F1:B1:2C:6B:49:B8:2D:E1:DC:D3:6B:94:1F:64:B4:40:71 X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:99:c8:a4:0a:57:58:f7:48:c6:fa:df:1f:0b:25:72:2c:a7: d8:ef:ed:ad:52:05:c8:59:34:5e:9d:9e:b6:d8:d2:57:5a:a5: ae:e5:16:63:dd:51:07:4c:ea:64:04:28:28:f0:45:33:2c:ad: 54:ab:6e:ad:5b:d1:1f:1d:17:48:6b:9e:9a:ab:4e:0c:2b:b0: 74:06:d0:c5:47:d2:0d:61:23:ac:50:5d:14:c4:c2:28:84:95: b9:fe:f8:cc:37:14:9e:c0:dd:8d:99:87:7b:3d:eb:14:4f:be: 2b:7d:fe:e5:e7:2a:03:ad:df:52:fc:f7:6e:33:7d:8e:b9:52: 71:8f:3e:32:67:a0:27:46:b9:d7:a6:f5:18:b3:0e:36:e0:ca: 31:9f:52:f9:4d:a9:df:ef:fa:36:43:9f:b0:0b:b5:0c:85:c6: 24:ab:02:ca:a7:fe:61:00:56:21:14:86:ae:7a:55:59:eb:50: 92:c4:6f:cd:aa:1e:ae:e0:f6:b1:9b:a7:fd:29:17:ae:9e:4b: 88:57:84:70:86:db:fd:31:54:a9:d4:34:21:aa:f9:a8:b9:f3: 29:93:d8:b2:9e:1b:ce:32:9c:5c:32:16:aa:58:dc:02:b3:05: 61:a9:fa:50:11:21:a0:31:2c:58:37:d8:ab:3d:d1:02:d2:44: 07:84:e8:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjYwOTIzMDEzNTUyWhcNMjYwOTMwMDEzNTUyWjAYMRYwFAYD VQQDEw02YWIzMmNmOC1iNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHvUE4iHMNPct32pd47Nnwd9Oer6ZBxlImkgqmC3CsrUy8qxqOyWjZFNWP2w X2uycZuIfPGjYpYEZ1a4/tb1/nUsuFzc44l5+NlLwiZZIpfYckr0dyE4bf6wnLhZ Dw3JVMUEJkiWoPsnjpfrRf1MoHMLTQw7YW1eV7HgAWaVY8dyQ/xLZMSFic70wEs0 UOySsBgaD7c5TuYUrtROIJ1B7DEq10p99g7UrAJ7hf3IZ+YZxlg79jnQCaxAIHAt Nbnr+ibaBEhkrt5TN26IqD33qw4oZAfQ21rq5sd2lt6YKe/bD75KCZx9Ig2IbFRF 0H/+n4s3LAUQT9KQDtdbcHwg2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+pT/Gx LGtJuC3h3NNrlB9ktEBxMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZnIpApXWPdIxvrfHwslciyn2O/trVIFyFk0Xp2ettjSV1qlruUWY91RB0zq ZAQoKPBFMyytVKturVvRHx0XSGuemqtODCuwdAbQxUfSDWEjrFBdFMTCKISVuf74 zDcUnsDdjZmHez3rFE++K33+5ecqA63fUvz3bjN9jrlScY8+MmegJ0a516b1GLMO NuDKMZ9S+U2p3+/6NkOfsAu1DIXGJKsCyqf+YQBWIRSGrnpVWetQksRvzaoeruD2 sZun/SkXrp5LiFeEcIbb/TFUqdQ0Iar5qLnzKZPYsp4bzjKcXDIWqljcArMFYan6 UBEhoDEsWDfYqz3RAtJEB4Torg== -----END CERTIFICATE-----Generated at Thu Sep 24 12:50:34 2026 by rpki-client