$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json) Hash identifier: 5TS7WOJSGsEYXF81uLCGMjCON0HhOxYz0ufzjtPDWos= Subject key identifier: 2E:B8:3B:AA:5C:14:BA:8C:F5:AD:81:EB:8F:8C:33:9C:C1:8A:32:14 Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Certificate serial: 090D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft Manifest number: 0905 Signing time: Tue 22 Sep 2026 20:04:26 +0000 Manifest this update: Tue 22 Sep 2026 20:04:26 +0000 Manifest next update: Tue 29 Sep 2026 20:04:26 +0000 Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: oz/VGyGYtJ+TYnKR56JLpu4VaxfIkm5msbBsMBBfeH8=) 2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: ye2w1MU0xLNOAhuqrYhDu4NrB2vk1m6TjmRZeLmnbh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Validity Not Before: Sep 22 20:04:26 2026 GMT Not After : Sep 29 20:04:26 2026 GMT Subject: CN=6ab2df4a-2a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:3b:22:ca:d8:ea:37:99:b3:bf:4d:fc:94: 68:92:4d:6d:b0:a7:47:d7:19:7e:69:58:7e:61:37: e5:53:ff:cb:6d:47:2e:30:f4:b4:bd:d8:a2:2e:64: 91:e9:40:1b:6a:b1:ee:fa:43:6b:3f:3c:2c:5c:f1: fb:f6:c6:b9:e2:0a:16:3c:73:a1:7f:11:59:9f:e4: dd:5c:c6:ca:1e:ba:eb:98:3c:c7:2e:6a:b6:5c:f6: ef:69:d0:ac:b6:f8:80:d8:8c:eb:6f:2e:01:82:d1: 97:cf:b1:35:1e:2a:30:91:1c:74:e3:2c:55:ac:37: 98:a4:36:ff:89:ff:39:cb:6a:a4:e7:35:7f:25:e7: 53:ce:c3:45:87:f3:bd:93:5d:16:40:f2:63:1f:b8: 7c:e9:af:94:89:a0:95:90:de:cf:eb:84:34:17:af: 38:dc:e6:be:90:a2:a3:67:9c:20:ec:25:54:4d:c7: 18:a2:14:dd:47:d8:61:9f:8e:71:ef:1e:0e:ed:6d: e9:84:e3:50:f6:28:17:69:25:77:57:0b:39:01:68: e5:5b:ab:e0:bb:53:f7:27:cd:d1:da:90:34:4d:1b: 48:5a:f7:f4:c3:59:15:d6:bf:d6:a3:f9:22:a0:d3: ab:ed:aa:65:00:81:86:28:e9:ee:e7:1c:b4:e4:5a: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B8:3B:AA:5C:14:BA:8C:F5:AD:81:EB:8F:8C:33:9C:C1:8A:32:14 X509v3 Authority Key Identifier: keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e7:7a:65:db:22:39:9a:90:32:55:83:76:fe:e7:49:f4:15: 0c:63:b5:7b:41:ed:b5:4d:a7:7a:ed:7d:d1:73:8f:f0:f3:28: 7b:82:77:db:4c:6f:31:ca:40:30:e4:bc:c4:38:6b:4d:bd:16: b7:30:24:0b:7b:7a:2f:93:f8:c5:01:67:a7:63:77:61:3e:de: 8d:fd:06:73:79:a2:ee:5e:84:3d:88:d3:d4:32:5a:77:59:4d: 36:a8:b9:76:dd:09:9f:97:39:56:6e:62:95:a6:dd:c2:98:c1: 5a:7a:2b:59:9b:6a:7e:26:81:82:02:3f:58:5c:2e:7f:0c:c8: 85:6c:2d:5a:28:10:e4:ac:b0:a0:a3:f4:45:63:25:bc:dd:69: 2c:c6:99:b0:f0:2b:39:af:2c:89:e1:d5:e7:cd:74:24:d7:c5: 33:c0:f5:b0:dd:51:00:db:8a:0e:32:d3:c2:0a:46:58:62:2c: 29:c0:93:71:75:1f:11:f6:66:04:b8:8a:f7:d2:cc:e2:1d:be: d8:a3:4b:ba:13:6b:7a:ff:29:59:af:9b:c7:f1:14:0c:0f:c8: 4f:da:43:a6:a4:61:1b:20:ba:c1:26:87:1e:21:6b:bd:ca:b7: 6a:3f:21:e4:ef:e8:c0:12:05:b3:66:a8:21:b3:69:33:d0:ed: 1c:08:f5:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFRDkxMTAvBgNVBAUTKENGNjY4Mzc0RUM3NUFCNUNBQ0QyRUE3MzA1MTVGN0I3 NzY0REQ5MjEwHhcNMjYwOTIyMjAwNDI2WhcNMjYwOTI5MjAwNDI2WjAYMRYwFAYD VQQDEw02YWIyZGY0YS0yYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApok7IsrY6jeZs79N/JRokk1tsKdH1xl+aVh+YTflU//LbUcuMPS0vdiiLmSR 6UAbarHu+kNrPzwsXPH79sa54goWPHOhfxFZn+TdXMbKHrrrmDzHLmq2XPbvadCs tviA2Izrby4BgtGXz7E1HiowkRx04yxVrDeYpDb/if85y2qk5zV/JedTzsNFh/O9 k10WQPJjH7h86a+UiaCVkN7P64Q0F6843Oa+kKKjZ5wg7CVUTccYohTdR9hhn45x 7x4O7W3phONQ9igXaSV3Vws5AWjlW6vgu1P3J83R2pA0TRtIWvf0w1kV1r/Wo/ki oNOr7aplAIGGKOnu5xy05FpvzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC64O6pc FLqM9a2B64+MM5zBijIUMB8GA1UdIwQYMBaAFM9mg3TsdatcrNLqcwUV97d2Tdkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0VEOS9GOEUwQjNCMkRC QTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXExeXMwdXB6QlJYM3QzWk4y U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyYURkT3gxcTF5czB1cHpCUlgzdDNaTjJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0VEOS9GOEUwQjNCMkRCQTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXEx eXMwdXB6QlJYM3QzWk4yU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsOd6ZdsiOZqQMlWDdv7nSfQVDGO1e0HttU2neu190XOP8PMoe4J320xvMcpA MOS8xDhrTb0WtzAkC3t6L5P4xQFnp2N3YT7ejf0Gc3mi7l6EPYjT1DJad1lNNqi5 dt0Jn5c5Vm5ilabdwpjBWnorWZtqfiaBggI/WFwufwzIhWwtWigQ5KywoKP0RWMl vN1pLMaZsPArOa8sieHV5810JNfFM8D1sN1RANuKDjLTwgpGWGIsKcCTcXUfEfZm BLiK99LM4h2+2KNLuhNrev8pWa+bx/EUDA/IT9pDpqRhGyC6wSaHHiFrvcq3aj8h 5O/owBIFs2aoIbNpM9DtHAj1lw== -----END CERTIFICATE-----Generated at Wed Sep 23 03:04:53 2026 by rpki-client