$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft File: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft (raw, json) Hash identifier: wrl9bujqF09X5y8SkLt46R6/THGGX44fJDf9g8q1P5E= Subject key identifier: 7F:D4:20:55:09:D8:85:D8:FF:5D:4C:3D:B0:B0:DC:BD:1D:B8:66:D2 Authority key identifier: D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A Certificate issuer: /CN=A91F0AF0/serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A Certificate serial: 0D76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft Manifest number: 1F7A Signing time: Thu 24 Sep 2026 17:06:06 +0000 Manifest this update: Thu 24 Sep 2026 17:06:06 +0000 Manifest next update: Thu 01 Oct 2026 17:06:06 +0000 Files and hashes: 1: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl (hash: aSgYco1t7j0BlWG9hQS2qsMjcNHp+ZeQZyHjYXPbbzA=) 2: CE3C7EF66FEB11EB91967864C4F9AE02.roa (hash: PoMZXZYHdteODhPAtacBWSXCAi/gVbSsN+xQtOQaEQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0AF0, serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A Validity Not Before: Sep 24 17:06:06 2026 GMT Not After : Oct 1 17:06:06 2026 GMT Subject: CN=6ab5587e-ac1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:83:06:b4:00:f5:68:a9:ba:a4:6c:b0:b6: a2:94:76:71:fa:7b:ec:d0:e9:39:d6:fc:d4:b4:9d: c1:ef:91:8c:a6:31:8a:dd:7e:57:c6:2e:f0:7a:b4: 94:63:3e:0f:72:f5:ea:9c:15:80:69:73:09:3c:cb: fd:ce:64:52:54:0f:23:8c:81:50:fd:22:ea:58:99: 81:58:08:c5:9e:5f:a4:7e:20:ad:8d:cd:90:f0:df: 17:3d:6c:ea:c2:1c:f7:12:75:fb:cf:30:69:e2:53: 9f:a4:18:5c:d6:3b:9c:61:27:2a:68:6c:a8:92:b8: bc:d3:87:d3:db:c5:27:2b:ee:48:23:ed:d7:9f:32: f2:e3:7c:de:9e:d8:b3:e6:ff:46:77:51:e3:2a:ca: 4e:90:7b:aa:e8:0f:2e:34:5b:c9:3b:9d:c1:50:51: 65:c7:9a:77:aa:3a:2b:3c:af:1d:5e:d0:bf:8b:c5: be:03:a1:66:ba:7b:24:37:c3:69:22:99:bc:a8:c9: ec:d8:90:e7:e3:a5:9e:4c:2e:93:a8:d4:64:26:c0: 70:38:a3:46:f2:07:a4:07:75:7b:50:01:24:ab:ad: 1e:c2:a7:f2:da:af:e7:8c:2c:0b:2d:2f:1a:48:36: 7b:88:00:43:df:8a:f0:6a:9c:dc:92:aa:c5:6b:71: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D4:20:55:09:D8:85:D8:FF:5D:4C:3D:B0:B0:DC:BD:1D:B8:66:D2 X509v3 Authority Key Identifier: keyid:D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3c:9b:bc:01:09:ed:31:09:63:9d:95:38:dd:aa:b9:52:03: cc:66:b5:79:d4:d5:57:c9:5d:a7:f7:8f:ce:36:a2:21:19:50: 72:e1:eb:d2:cb:a5:88:95:d7:f0:d6:e7:25:bf:0e:8c:f0:a9: 71:ed:be:04:47:b4:a6:76:59:ca:34:70:bf:7c:7f:30:2e:84: d6:f6:a1:82:f7:fd:64:09:36:24:ef:c7:2f:ee:c3:c5:ab:c1: 51:fa:be:12:e6:37:91:5f:a0:12:89:d6:66:b6:89:fd:c9:1a: 2e:16:d8:6b:37:64:80:77:60:64:bd:53:c3:f0:43:78:f3:45: f7:ff:a7:7d:83:e2:18:02:94:e7:b4:c9:bc:ba:d9:bb:4b:e6: db:23:b1:91:76:28:cf:f9:88:bf:0d:7e:17:52:7a:f5:11:4f: d0:b6:78:6c:65:95:dd:97:3c:1b:f8:ee:33:1a:e0:19:18:96: 54:37:e8:ec:66:d5:e1:19:e3:a3:3d:b2:14:b4:ee:f8:c1:a7: 9f:b9:69:cb:c9:e6:7d:f6:f3:87:b8:82:60:c4:8d:bb:f5:ec: a7:fb:f5:31:14:3a:1f:b8:81:90:60:90:f5:6e:a6:75:a6:be: c5:7a:db:57:3f:5a:db:b6:88:51:8f:c1:60:07:70:ac:2b:a2: 05:93:eb:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBBRjAxMTAvBgNVBAUTKEQ5QkQ3MEU3NzdGODYxQUU1NDM4NTcxNDhFNjMzNTJG REE4NEMwN0EwHhcNMjYwOTI0MTcwNjA2WhcNMjYxMDAxMTcwNjA2WjAYMRYwFAYD VQQDEw02YWI1NTg3ZS1hYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoL+DBrQA9WipuqRssLailHZx+nvs0Ok51vzUtJ3B75GMpjGK3X5Xxi7werSU Yz4PcvXqnBWAaXMJPMv9zmRSVA8jjIFQ/SLqWJmBWAjFnl+kfiCtjc2Q8N8XPWzq whz3EnX7zzBp4lOfpBhc1jucYScqaGyokri804fT28UnK+5II+3XnzLy43zentiz 5v9Gd1HjKspOkHuq6A8uNFvJO53BUFFlx5p3qjorPK8dXtC/i8W+A6FmunskN8Np Ipm8qMns2JDn46WeTC6TqNRkJsBwOKNG8gekB3V7UAEkq60ewqfy2q/njCwLLS8a SDZ7iABD34rwapzckqrFa3HHxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/UIFUJ 2IXY/11MPbCw3L0duGbSMB8GA1UdIwQYMBaAFNm9cOd3+GGuVDhXFI5jNS/ahMB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlhNVVPRmNVam1NMUw5cUV3 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJiMXc1M2Y0WWE1VU9GY1VqbU0xTDlxRXdIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlh NVVPRmNVam1NMUw5cUV3SG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXjybvAEJ7TEJY52VON2quVIDzGa1edTVV8ldp/ePzjaiIRlQcuHr0suliJXX 8NbnJb8OjPCpce2+BEe0pnZZyjRwv3x/MC6E1vahgvf9ZAk2JO/HL+7DxavBUfq+ EuY3kV+gEonWZraJ/ckaLhbYazdkgHdgZL1Tw/BDePNF9/+nfYPiGAKU57TJvLrZ u0vm2yOxkXYoz/mIvw1+F1J69RFP0LZ4bGWV3Zc8G/juMxrgGRiWVDfo7GbV4Rnj oz2yFLTu+MGnn7lpy8nmffbzh7iCYMSNu/Xsp/v1MRQ6H7iBkGCQ9W6mdaa+xXrb Vz9a27aIUY/BYAdwrCuiBZPrqA== -----END CERTIFICATE-----Generated at Fri Sep 25 22:32:26 2026 by rpki-client