$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: /IjWY+Z/XAxEKJhAo+LRq8FCTvQ9TodU9U6+DH3huBg= Subject key identifier: F2:43:88:66:FA:76:D3:F3:11:CC:FE:C8:35:5C:C3:8E:7B:50:CE:C9 Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0E00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0DD5 Signing time: Tue 22 Sep 2026 17:46:48 +0000 Manifest this update: Tue 22 Sep 2026 17:46:47 +0000 Manifest next update: Tue 29 Sep 2026 17:46:47 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: rFDtDvB3pcVd5Ut31odj/JxE0T1wHYKLdGkgdrFRemY=) 2: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: 1LoYhNhbrJS2K/AOCU0/gnT+ZLyx3HtIk+zT/REHe2Q=) 3: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: BGhkN0LDIdO9R5rWchzdTcKrPQRLiD8mPb9ml74T/wM=) 4: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: v/cYedkAqRKh3ztstNufD8S6zF7j1cUxZPyvJUeefHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3584 (0xe00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Sep 22 17:46:47 2026 GMT Not After : Sep 29 17:46:47 2026 GMT Subject: CN=6ab2bf08-17df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:57:1a:7e:bb:a5:72:ff:a5:5f:ad:08:84: ed:a0:a5:23:18:8b:c6:0c:84:81:32:a8:58:00:87: 59:c0:b6:e0:e0:e7:4f:fd:38:e9:02:a8:e1:ef:15: b6:6c:3c:ad:cb:9a:04:45:96:9b:7b:8b:b1:3f:85: 5a:d7:2b:3b:65:61:5b:52:02:20:e3:1b:86:4e:dd: d0:7b:1b:ce:3a:92:a1:02:30:a5:c2:b1:cf:6b:93: d8:52:90:75:e5:f9:40:83:c3:ab:57:b1:81:da:ca: f1:e0:51:f1:15:07:51:6d:ad:66:75:69:5a:5f:97: 7e:94:16:20:6d:79:70:c3:41:e4:10:5d:4a:9e:8d: b9:62:9a:9d:41:ed:dc:44:3e:78:55:c7:9e:60:e9: 37:8f:7c:94:3d:d7:5b:c0:3b:31:9e:83:c9:85:a3: 31:3c:1b:00:a7:d8:70:99:08:11:45:c5:aa:9f:50: dc:f9:92:ed:e5:e1:de:3b:ab:5f:25:21:6b:64:f2: 41:05:fa:d1:7b:60:89:25:0e:06:0a:fb:cc:23:ed: 7a:8d:99:7c:5c:82:ad:15:d6:f7:28:e0:e8:24:32: 32:73:1e:87:c1:c2:6d:1f:fb:a2:19:35:e0:32:6e: b7:f0:ee:ff:40:2d:18:f3:4d:66:07:ee:bb:ad:7a: 12:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:43:88:66:FA:76:D3:F3:11:CC:FE:C8:35:5C:C3:8E:7B:50:CE:C9 X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:70:9a:2a:6c:6d:54:44:56:36:6b:a8:af:c4:a1:7b:4f:51: 2e:11:7a:f9:93:20:d1:bc:8c:00:67:ca:e6:0f:df:79:56:17: 98:20:ca:c8:aa:f6:e9:fb:82:be:9c:ed:98:d0:09:db:e7:0d: c9:4e:36:4c:5d:a5:40:1f:50:09:da:61:8a:04:78:a2:bd:33: 6d:99:78:e9:86:21:e6:e0:8a:c6:a1:ea:2d:a4:3b:81:14:e2: d0:8a:ca:b3:ed:96:b7:48:cd:3b:aa:0e:70:00:9a:19:36:a8: 41:2e:90:40:12:09:23:a7:75:c0:fb:b5:2a:60:05:3f:9b:eb: 3e:a8:59:96:c8:52:02:5c:51:9e:60:fa:70:db:80:87:f6:32: bf:4a:83:b1:c9:c9:64:f6:a7:99:df:f2:fa:ea:79:10:df:44: 55:13:b2:a4:5a:d3:2f:09:3c:f9:7a:da:85:e8:66:de:b3:2a: c9:23:30:2f:55:55:78:b7:03:70:a4:ca:c7:bd:4a:57:ef:ff: f9:e3:b5:c7:40:45:77:4f:0e:9c:6a:9f:33:09:62:b2:e9:04: 47:4e:7c:03:46:d3:03:99:3a:7f:7b:fb:a3:0e:53:42:10:0a: 57:9e:f6:a6:6c:43:e5:49:66:92:4e:d9:f3:00:a0:c3:18:53: a3:48:43:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjYwOTIyMTc0NjQ3WhcNMjYwOTI5MTc0NjQ3WjAYMRYwFAYD VQQDEw02YWIyYmYwOC0xN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtFXGn67pXL/pV+tCITtoKUjGIvGDISBMqhYAIdZwLbg4OdP/TjpAqjh7xW2 bDyty5oERZabe4uxP4Va1ys7ZWFbUgIg4xuGTt3QexvOOpKhAjClwrHPa5PYUpB1 5flAg8OrV7GB2srx4FHxFQdRba1mdWlaX5d+lBYgbXlww0HkEF1Kno25YpqdQe3c RD54VceeYOk3j3yUPddbwDsxnoPJhaMxPBsAp9hwmQgRRcWqn1Dc+ZLt5eHeO6tf JSFrZPJBBfrRe2CJJQ4GCvvMI+16jZl8XIKtFdb3KODoJDIycx6HwcJtH/uiGTXg Mm638O7/QC0Y801mB+67rXoSKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJDiGb6 dtPzEcz+yDVcw457UM7JMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACHCaKmxtVERWNmuor8She09RLhF6+ZMg0byMAGfK5g/feVYXmCDKyKr26fuC vpztmNAJ2+cNyU42TF2lQB9QCdphigR4or0zbZl46YYh5uCKxqHqLaQ7gRTi0IrK s+2Wt0jNO6oOcACaGTaoQS6QQBIJI6d1wPu1KmAFP5vrPqhZlshSAlxRnmD6cNuA h/Yyv0qDscnJZPanmd/y+up5EN9EVROypFrTLwk8+Xrahehm3rMqySMwL1VVeLcD cKTKx71KV+//+eO1x0BFd08OnGqfMwlisukER058A0bTA5k6f3v7ow5TQhAKV572 pmxD5Ulmkk7Z8wCgwxhTo0hDnA== -----END CERTIFICATE-----Generated at Wed Sep 23 22:21:50 2026 by rpki-client