$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft File: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft (raw, json) Hash identifier: iLoIqTshhCPlJ2FNJo0MwbVlQd/cR6Q28k6bZl5SCgU= Subject key identifier: 8F:E7:5B:C1:8B:A7:09:F4:27:5E:1A:93:9A:B2:5F:08:53:0D:39:47 Authority key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED Certificate issuer: /CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Certificate serial: 14E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft Manifest number: 14B7 Signing time: Tue 22 Sep 2026 15:22:58 +0000 Manifest this update: Tue 22 Sep 2026 15:22:58 +0000 Manifest next update: Tue 29 Sep 2026 15:22:58 +0000 Files and hashes: 1: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl (hash: ANjQi8ia+cOh1bbZpAb1XcjGeYYS1nVaAC/tOhvgQPU=) 2: B969D2D0BA4A11EC90B53115C4F9AE02.roa (hash: ifpIwtwH21MGtyhP0efYlv476sZB8oAZKR7P4ILcbsU=) 3: 49678FBCB72B11EC8C8E3017C4F9AE02.roa (hash: +w2vcpHK75X0Tet8/CGiCfjrwOEMZcMJWwhe54Tggdg=) 4: 76C6BCF6B72811ECAEFC180DC4F9AE02.roa (hash: Ud5rGXdsvm2mwszq8gV1a3f93uHlsVz51C6UOk64thk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5344 (0x14e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Validity Not Before: Sep 22 15:22:58 2026 GMT Not After : Sep 29 15:22:58 2026 GMT Subject: CN=6ab29d52-9e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:50:74:1d:85:31:9c:30:f2:73:eb:3a:b5: be:80:09:5f:1a:6f:55:d0:3e:4f:92:0f:bf:0c:65: 1c:c6:7b:35:d4:e6:1d:1b:4c:42:43:9d:59:a2:28: ae:53:94:7b:b7:a7:4f:1d:88:0a:b5:9e:d1:2a:8a: 80:02:4d:64:fc:51:76:83:73:57:c4:d5:fc:25:bc: aa:0c:87:92:40:42:da:78:ef:26:14:34:8e:de:dc: c7:d2:43:28:e3:e8:cb:f7:34:09:cf:70:20:74:0d: c2:3a:2b:e8:57:85:07:32:88:45:87:f7:fe:c3:e0: fa:bf:7b:8c:b4:56:6f:6b:31:4d:c0:44:75:db:3e: 00:91:35:11:53:67:03:06:b2:fd:c8:1b:95:46:4e: de:d4:23:3a:5c:30:09:01:c4:0b:12:0c:7e:26:5d: 0e:94:dd:ba:c4:c1:39:8b:1d:a8:fe:d6:9a:6c:de: 3d:df:09:90:c6:ee:9e:f7:52:fd:c8:93:c1:27:76: d8:0e:94:92:da:b2:10:9e:79:46:73:20:25:21:f2: d3:ca:66:24:37:a2:ad:df:16:c3:17:f7:00:6d:5a: f0:bf:11:1f:aa:a1:64:b4:3e:9a:cd:11:0b:40:97: 3f:cd:75:11:70:ff:82:b3:33:c2:93:89:32:f7:e4: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E7:5B:C1:8B:A7:09:F4:27:5E:1A:93:9A:B2:5F:08:53:0D:39:47 X509v3 Authority Key Identifier: keyid:DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b1:4b:2e:3d:c7:96:45:2d:b3:5b:d9:5d:69:d1:a1:b1:5f: b8:c1:97:6d:7a:17:06:0b:c5:4b:70:9d:d7:d4:83:12:8e:78: db:c2:87:8c:cd:d1:20:09:a0:0a:b8:76:8a:aa:b8:6f:d7:94: 03:c8:8e:48:09:40:61:78:05:b9:7a:e7:9e:0d:f1:60:fd:05: 3e:3f:e4:7c:1f:4d:7b:65:2b:ab:ae:73:90:d6:d9:92:06:29: c5:d9:af:88:4c:27:63:fe:3a:e9:30:39:29:be:07:a1:e6:d8: 0e:6a:64:52:37:f4:f9:1c:5f:42:94:e3:12:cc:1c:a8:9b:ee: 0c:da:18:cf:2d:c6:95:03:11:22:73:4e:27:aa:fd:5c:30:5f: 70:f7:50:8b:93:18:f7:4b:3d:ef:59:4f:19:a7:39:2e:db:cc: 64:83:01:ce:ad:07:e2:af:1e:ed:71:90:3e:92:b0:fb:84:6a: b4:9a:16:30:ab:78:12:dc:74:42:f6:1a:68:75:e4:a2:39:e4: 96:d2:23:9d:bd:5d:be:ce:80:af:62:19:4d:ae:7c:a5:b0:dd: c1:67:d1:22:21:92:12:2c:ed:3b:c9:c7:b4:ae:96:64:4f:4f: f9:5c:e6:6f:d5:a2:14:bb:1d:1e:f1:84:3a:9f:cf:b2:71:b6: 73:4b:79:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKERBNEI1QzIxMjNCQTlEMEY4MDIzNzhEQURERDQ4MDFC NTY3MEEzRUQwHhcNMjYwOTIyMTUyMjU4WhcNMjYwOTI5MTUyMjU4WjAYMRYwFAYD VQQDEw02YWIyOWQ1Mi05ZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhlQdB2FMZww8nPrOrW+gAlfGm9V0D5Pkg+/DGUcxns11OYdG0xCQ51Zoiiu U5R7t6dPHYgKtZ7RKoqAAk1k/FF2g3NXxNX8JbyqDIeSQELaeO8mFDSO3tzH0kMo 4+jL9zQJz3AgdA3COivoV4UHMohFh/f+w+D6v3uMtFZvazFNwER12z4AkTURU2cD BrL9yBuVRk7e1CM6XDAJAcQLEgx+Jl0OlN26xME5ix2o/taabN493wmQxu6e91L9 yJPBJ3bYDpSS2rIQnnlGcyAlIfLTymYkN6Kt3xbDF/cAbVrwvxEfqqFktD6azREL QJc/zXURcP+CszPCk4ky9+Rs8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/nW8GL pwn0J14ak5qyXwhTDTlHMB8GA1UdIwQYMBaAFNpLXCEjup0PgCN42t3UgBtWcKPt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wNzQ5NTg5MDkx ODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5RLUFJM2phM2RTQUcxWndv LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJrdGNJU082blEtQUkzamEzZFNBRzFad28tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wNzQ5NTg5MDkxODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5R LUFJM2phM2RTQUcxWndvLTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAArFLLj3HlkUts1vZXWnRobFfuMGXbXoXBgvFS3Cd19SDEo5428KHjM3RIAmg Crh2iqq4b9eUA8iOSAlAYXgFuXrnng3xYP0FPj/kfB9Ne2Urq65zkNbZkgYpxdmv iEwnY/466TA5Kb4HoebYDmpkUjf0+RxfQpTjEswcqJvuDNoYzy3GlQMRInNOJ6r9 XDBfcPdQi5MY90s971lPGac5LtvMZIMBzq0H4q8e7XGQPpKw+4RqtJoWMKt4Etx0 QvYaaHXkojnkltIjnb1dvs6Ar2IZTa58pbDdwWfRIiGSEiztO8nHtK6WZE9P+Vzm b9WiFLsdHvGEOp/PsnG2c0t5nw== -----END CERTIFICATE-----Generated at Wed Sep 23 01:32:21 2026 by rpki-client