$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft File: X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft (raw, json) Hash identifier: G84Wl4r+Rqb7OYtn7/5xw9Y39qKucCWkIEhw1yGrK88= Subject key identifier: FF:AC:40:64:86:1C:E6:DA:7B:F7:9B:D6:1B:C3:63:48:36:EC:FD:67 Authority key identifier: 5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D Certificate issuer: /CN=A91DF856/serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft Manifest number: 0114 Signing time: Fri 25 Sep 2026 06:06:09 +0000 Manifest this update: Fri 25 Sep 2026 06:06:09 +0000 Manifest next update: Fri 02 Oct 2026 06:06:09 +0000 Files and hashes: 1: X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl (hash: qcoKN9K+0omCxgU85otCe4c3e8tAjPAffTWbLB8Rimg=) 2: D522C16CBAEB11F09547BA51C4F9AE02.roa (hash: gWwM8BCGpWWubDG2MVtbVJvT2zPmgCLxqAql3fBRxFQ=) 3: B245BA601C4311F08254DE40C4F9AE02.roa (hash: dWmVj4jtVJHc4wNWMusSMHmYNjBn61d8/+MaIxcv/eU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF856, serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Validity Not Before: Sep 25 06:06:09 2026 GMT Not After : Oct 2 06:06:09 2026 GMT Subject: CN=6ab60f51-ec5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:30:d6:f3:8a:d5:0c:fc:02:50:b1:18:b2: 50:3a:70:95:62:6c:7d:ab:f6:03:a6:c5:d3:5c:c3: 91:2e:a1:3b:6f:f8:ec:80:bf:98:46:88:57:43:7d: 01:80:70:07:18:cc:d5:29:d2:59:6f:ea:8e:f8:f5: b7:36:33:96:9f:98:93:56:7a:a7:74:0b:a6:d2:1f: 8c:54:62:4a:40:2e:7b:0b:c2:66:99:e0:26:66:79: 69:04:54:ff:0f:49:fd:c5:89:a1:38:cd:d5:c0:60: 4e:9c:03:5c:34:69:a1:78:96:e7:bc:95:43:56:26: 55:2d:70:c1:4c:14:1c:e8:0b:f4:be:ab:ea:41:c7: 43:fb:fe:ef:8a:47:c7:e0:be:4c:70:3c:9a:27:46: 00:58:6f:d7:0b:a9:49:94:59:79:b0:b4:e4:80:84: d2:c1:bb:ef:16:dd:f1:aa:c0:af:c6:63:32:22:e4: 7c:8f:ff:dc:ca:b3:ea:dd:40:56:94:b6:0f:8a:d6: ac:62:57:cd:9c:a6:4c:46:67:d8:f6:bb:93:95:eb: 0b:61:d0:ce:0c:91:15:40:80:83:30:e3:85:1f:e1: 2e:fa:51:98:57:39:a6:6f:d2:29:65:6b:e2:9b:8b: a2:a5:5d:20:30:a5:a5:b6:e6:3b:3e:98:9a:1b:7b: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AC:40:64:86:1C:E6:DA:7B:F7:9B:D6:1B:C3:63:48:36:EC:FD:67 X509v3 Authority Key Identifier: keyid:5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f0:3c:2e:bc:5e:83:77:2a:3a:45:d2:db:96:60:83:ce:7e: 10:e7:c0:55:7f:a7:2f:63:3f:bc:9e:0a:74:fc:1f:7e:f9:ca: 30:bb:0f:65:9d:10:05:f2:00:30:99:ba:df:44:03:03:2a:4a: 57:1d:8b:2b:48:2d:eb:3a:b7:ea:28:31:fd:ee:51:13:f2:33: 0e:97:5a:fe:59:02:ac:11:c8:cc:1d:1a:e6:0f:04:da:5d:ba: 87:d2:c3:06:f3:36:02:7e:f1:ba:07:a7:13:6d:09:7c:5d:3a: ec:10:eb:d8:2f:f7:c7:23:09:9a:a8:34:f4:ec:4b:4a:08:61: e4:3f:f1:6b:1f:2d:e2:df:64:47:d4:c3:e7:97:6e:41:3b:f0: d9:a2:a8:74:71:ab:d9:ce:7c:e7:25:f2:2b:34:a6:c4:f2:d4: 03:78:76:56:87:a3:aa:7f:71:6a:45:fc:67:24:ba:a7:dd:0e: 39:40:15:a6:2e:7c:13:d4:03:f7:45:1a:b5:ef:b4:55:aa:e6: f4:26:4d:48:cb:57:3f:f1:65:bb:b9:30:e4:b4:26:52:64:a9: bb:86:9f:ad:6f:7a:86:e4:24:8a:a8:39:8b:12:68:f7:79:04: 5d:5e:54:a9:c6:a5:62:f9:8d:b9:09:ff:99:d0:13:7e:03:fb: 07:68:96:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTYxMTAvBgNVBAUTKDVGNjk5MTg2QTJFQkNENDVCMUZGNkEwQTRBRjYwNjA2 RjNCM0QwOEQwHhcNMjYwOTI1MDYwNjA5WhcNMjYxMDAyMDYwNjA5WjAYMRYwFAYD VQQDEw02YWI2MGY1MS1lYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmP8w1vOK1Qz8AlCxGLJQOnCVYmx9q/YDpsXTXMORLqE7b/jsgL+YRohXQ30B gHAHGMzVKdJZb+qO+PW3NjOWn5iTVnqndAum0h+MVGJKQC57C8JmmeAmZnlpBFT/ D0n9xYmhOM3VwGBOnANcNGmheJbnvJVDViZVLXDBTBQc6Av0vqvqQcdD+/7vikfH 4L5McDyaJ0YAWG/XC6lJlFl5sLTkgITSwbvvFt3xqsCvxmMyIuR8j//cyrPq3UBW lLYPitasYlfNnKZMRmfY9ruTlesLYdDODJEVQICDMOOFH+Eu+lGYVzmmb9IpZWvi m4uipV0gMKWltuY7PpiaG3uW4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP+sQGSG HObae/eb1hvDY0g27P1nMB8GA1UdIwQYMBaAFF9pkYai681Fsf9qCkr2Bgbzs9CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Ni9FRkYyQTBBMDFD NDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpVV3hfMm9LU3ZZR0J2T3ow STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybVJocUxyelVXeF8yb0tTdllHQnZPejBJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Ni9FRkYyQTBBMDFDNDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpV V3hfMm9LU3ZZR0J2T3owSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGvA8Lrxeg3cqOkXS25Zgg85+EOfAVX+nL2M/vJ4KdPwffvnKMLsPZZ0QBfIA MJm630QDAypKVx2LK0gt6zq36igx/e5RE/IzDpda/lkCrBHIzB0a5g8E2l26h9LD BvM2An7xugenE20JfF067BDr2C/3xyMJmqg09OxLSghh5D/xax8t4t9kR9TD55du QTvw2aKodHGr2c585yXyKzSmxPLUA3h2Voejqn9xakX8ZyS6p90OOUAVpi58E9QD 90Uate+0Varm9CZNSMtXP/Flu7kw5LQmUmSpu4afrW96huQkiqg5ixJo93kEXV5U qcalYvmNuQn/mdATfgP7B2iWrQ== -----END CERTIFICATE-----Generated at Sun Sep 27 08:42:05 2026 by rpki-client