$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft File: 2x_5ooQq3wDKEBQTx5pvACFsWvA.mft (raw, json) Hash identifier: DZ8gknA2KuRt9umiKzxYv1tM1ncEjbyOruHW2hm5LEQ= Subject key identifier: 38:EC:6E:E0:18:F8:D1:B4:53:A7:C3:97:D0:E5:F3:2D:FC:6A:28:2F Authority key identifier: DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0 Certificate issuer: /CN=A91E0E7D/serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft Manifest number: 12 Signing time: Wed 23 Sep 2026 08:50:18 +0000 Manifest this update: Wed 23 Sep 2026 08:50:18 +0000 Manifest next update: Wed 30 Sep 2026 08:50:18 +0000 Files and hashes: 1: 2x_5ooQq3wDKEBQTx5pvACFsWvA.crl (hash: xCyH2S508RWwviwc0W5V8Goe8cVQ1DBhJO68JT6IZDY=) 2: EC73EAD29FD611F18710A9255A11F970.roa (hash: PYfOG4e8SZv7qBS6pP7VFhdv6C3gDR1/cZ2xk75pc7M=) 3: mSalsaSx3s8-1Xmu44FW2V79p_U.asa (hash: cQ7zPkIfMI9Uzv7GDBaTWME53Sx0bcFmhB8OL1zDBHk=) 4: EDA0097C9FD611F18710A9255A11F970.roa (hash: kFPd6ZCCWKwkoa/r2Uhma7Kd/IQDW1PTBDgDOoC0aIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.crl rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E7D, serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0 Validity Not Before: Sep 23 08:50:18 2026 GMT Not After : Sep 30 08:50:18 2026 GMT Subject: CN=6ab392ca-a089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:50:be:0f:12:7a:f7:ba:a2:41:f6:58:7b: 42:e3:c1:58:eb:29:e6:3c:9e:25:81:a4:47:cf:85: 08:86:56:82:04:04:c3:1c:7d:48:9d:76:c4:8f:40: 65:8b:1c:67:bc:4c:50:1c:1e:ad:84:dc:ba:b6:4a: 1a:fd:c4:db:58:eb:30:26:dd:09:25:b8:52:c8:93: d8:f3:06:e1:64:7f:53:71:a4:37:54:b0:ef:8d:c6: f7:fb:ea:af:43:63:2d:21:21:30:aa:c8:5b:39:a1: 59:ed:eb:87:b4:41:86:e3:21:56:f8:04:81:1e:6f: e6:4e:4d:54:f6:74:50:74:56:1e:f7:28:af:06:6b: 18:4d:34:d1:b7:ee:c0:28:bd:d5:95:d5:8c:b1:5c: 12:ce:85:f7:24:54:30:bc:01:da:15:44:09:15:e7: 6b:d7:c8:9c:82:84:23:86:20:63:d5:78:a2:64:3a: 4f:3e:62:c3:64:8b:a0:2a:85:b3:00:e7:a9:c5:82: 59:ec:9b:79:e8:74:4e:1f:1e:19:8e:d3:e9:f7:d8: c8:c2:3b:b0:59:65:36:5c:8b:ff:54:03:c6:e0:cb: b4:17:ed:48:f2:3a:e0:c2:3d:13:77:54:f5:cc:13: 56:07:ba:9f:10:68:92:71:a2:73:af:24:16:52:ad: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EC:6E:E0:18:F8:D1:B4:53:A7:C3:97:D0:E5:F3:2D:FC:6A:28:2F X509v3 Authority Key Identifier: keyid:DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0e:b9:3d:55:6f:2c:04:58:11:d6:8c:ee:73:04:a9:55:c0: a8:9e:bc:3a:96:22:1f:cd:2e:a4:c6:45:6b:97:94:63:e4:30: 19:af:5e:d8:3d:ee:2b:9e:e3:0a:fc:42:1f:ae:43:24:4f:a0: 23:0b:ec:6e:ed:de:cd:f2:25:9d:96:cb:05:3e:5d:5f:15:2c: c1:9b:2b:96:c7:fc:69:12:25:05:7d:1f:31:52:cb:d6:ce:62: af:42:d7:8f:a2:4b:40:f7:2d:31:66:89:6d:8e:0f:a0:d6:26: 7b:07:57:f8:3c:19:52:3c:68:d1:85:90:fc:b5:c2:60:59:27: fe:80:8d:d9:e2:af:0a:f1:a9:63:fa:8c:26:16:72:1b:f4:35: 58:58:f1:8b:7e:d2:88:9f:80:9d:1c:82:87:3a:e8:fa:c4:38: 8e:98:db:5a:e8:d2:71:05:e0:db:d5:6c:8d:b8:74:77:58:81: 61:cc:93:76:f1:6b:6a:40:36:1b:f4:b5:c7:3d:30:96:b8:c6: 95:de:bd:1d:17:8d:9e:43:08:e0:4a:46:f0:11:6b:b7:4e:80: 2e:c4:4e:6e:22:84:76:94:50:f2:3b:92:04:c7:25:f9:76:e5: b7:04:f5:92:65:82:be:58:9a:6b:34:6b:1d:fe:d2:dd:44:94: 94:87:94:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MEU3RDExMC8GA1UEBRMoREIxRkY5QTI4NDJBREYwMENBMTAxNDEzQzc5QTZGMDAy MTZDNUFGMDAeFw0yNjA5MjMwODUwMThaFw0yNjA5MzAwODUwMThaMBgxFjAUBgNV BAMTDTZhYjM5MmNhLWEwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChLVC+DxJ697qiQfZYe0LjwVjrKeY8niWBpEfPhQiGVoIEBMMcfUiddsSPQGWL HGe8TFAcHq2E3Lq2Shr9xNtY6zAm3QkluFLIk9jzBuFkf1NxpDdUsO+Nxvf76q9D Yy0hITCqyFs5oVnt64e0QYbjIVb4BIEeb+ZOTVT2dFB0Vh73KK8GaxhNNNG37sAo vdWV1YyxXBLOhfckVDC8AdoVRAkV52vXyJyChCOGIGPVeKJkOk8+YsNki6AqhbMA 56nFglnsm3nodE4fHhmO0+n32MjCO7BZZTZci/9UA8bgy7QX7UjyOuDCPRN3VPXM E1YHup8QaJJxonOvJBZSrbPfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOOxu4Bj4 0bRTp8OX0OXzLfxqKC8wHwYDVR0jBBgwFoAU2x/5ooQq3wDKEBQTx5pvACFsWvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwRTdELzU5NkNENTRFOUZE MzExRjFCMUE2MTI4QzU4MTFGOTcwLzJ4XzVvb1FxM3dES0VCUVR4NXB2QUNGc1d2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnhfNW9vUXEzd0RLRUJRVHg1cHZBQ0ZzV3ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw RTdELzU5NkNENTRFOUZEMzExRjFCMUE2MTI4QzU4MTFGOTcwLzJ4XzVvb1FxM3dE S0VCUVR4NXB2QUNGc1d2QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKDrk9VW8sBFgR1ozucwSpVcConrw6liIfzS6kxkVrl5Rj5DAZr17YPe4rnuMK /EIfrkMkT6AjC+xu7d7N8iWdlssFPl1fFSzBmyuWx/xpEiUFfR8xUsvWzmKvQteP oktA9y0xZoltjg+g1iZ7B1f4PBlSPGjRhZD8tcJgWSf+gI3Z4q8K8alj+owmFnIb 9DVYWPGLftKIn4CdHIKHOuj6xDiOmNta6NJxBeDb1WyNuHR3WIFhzJN28WtqQDYb 9LXHPTCWuMaV3r0dF42eQwjgSkbwEWu3ToAuxE5uIoR2lFDyO5IExyX5duW3BPWS ZYK+WJprNGsd/tLdRJSUh5Rb -----END CERTIFICATE-----Generated at Thu Sep 24 07:14:00 2026 by rpki-client