$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json) Hash identifier: sOkhX3iY6b8dGUuzXsbPDmKUZPj4WMf3xiDu8H9yQFU= Subject key identifier: B4:3C:3B:BD:9E:79:16:C4:E0:27:BB:5C:27:01:9D:9E:E3:55:38:8A Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft Manifest number: 01F2 Signing time: Sun 27 Sep 2026 03:44:43 +0000 Manifest this update: Sun 27 Sep 2026 03:44:42 +0000 Manifest next update: Sun 04 Oct 2026 03:44:42 +0000 Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: Wuq0PId99N+sbSCpMsXDanH9hVFFssn/Dv47ZGIba8U=) 2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: Nm/9k1bK/nJvJq+EeJ6k6OoJJzoZhznxyzIVifoqxa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Validity Not Before: Sep 27 03:44:42 2026 GMT Not After : Oct 4 03:44:42 2026 GMT Subject: CN=6ab8912b-d0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:4b:fd:8c:66:7c:2a:72:f5:ec:98:55:74: d8:7b:d6:3e:10:d7:3d:a3:7f:b1:b9:7a:26:47:eb: 77:bf:67:a4:0b:e6:4b:71:ce:a2:59:f1:c9:90:3d: c7:75:42:ae:57:57:04:75:8e:f0:d5:ea:e0:d4:f3: 74:9a:68:38:3a:51:8a:9c:d3:ac:b7:d1:8e:5b:ba: cd:57:90:a3:08:01:d1:ab:06:df:2a:d1:2b:d0:56: 18:5a:23:72:78:0e:ef:90:e8:ef:6f:16:ec:e8:77: 06:d2:4a:14:6e:73:ed:3c:b2:8e:b2:e4:10:5e:c5: 24:1a:86:c7:00:09:cc:8f:05:35:7a:57:79:65:23: be:c7:d8:c7:16:48:48:b7:47:0d:17:c1:b3:fc:02: 39:53:56:ba:94:87:b5:db:c0:b9:b1:48:c2:93:ff: c4:6c:14:5d:26:6b:11:3d:1d:7c:86:dd:6a:1a:f6: 3c:37:5a:a3:8a:e0:fc:b7:9e:da:b0:98:f4:8a:5b: 01:91:05:ec:3a:33:76:2f:7e:bf:bb:3c:7c:dc:54: b6:d5:11:9d:16:29:4a:c4:79:3f:37:d5:20:5e:3f: 48:33:72:4f:05:79:a1:30:1c:fc:fc:42:a3:79:4f: a5:7d:82:af:ca:8e:c9:6c:fc:c1:f6:52:99:70:92: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:3B:BD:9E:79:16:C4:E0:27:BB:5C:27:01:9D:9E:E3:55:38:8A X509v3 Authority Key Identifier: keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:3a:ed:61:f5:d0:16:07:3b:0b:e8:dc:40:01:84:7e:4c:8d: 3c:76:3c:ff:d7:3e:61:7b:22:74:26:64:fe:4d:28:ce:f0:8d: 6d:6b:c2:01:c6:0b:1e:f3:fd:8c:4e:0f:07:76:60:09:6b:4e: 79:e7:c5:f6:3a:98:5f:98:30:cc:d9:78:fe:ee:4f:64:3a:8c: 1c:66:00:c3:ab:dd:7e:23:b9:b0:7a:52:51:b3:60:28:8f:55: 49:9b:00:78:79:b9:ef:33:ec:ec:83:b2:64:be:12:80:cc:26: b2:4c:69:1a:7b:23:a5:2d:85:f9:2d:a0:e0:9f:cd:2b:a0:74: 34:04:cf:a5:57:c5:7c:30:27:8f:03:b0:48:47:9f:99:e3:02: f9:7f:33:d7:27:bf:36:a5:53:13:6f:af:de:99:9b:aa:37:0e: 3b:55:84:ec:d8:df:0d:40:fa:21:8f:b0:2c:2d:a2:c8:43:55: 88:a8:b8:7a:f3:cc:e6:c8:d7:98:65:cd:46:df:5d:f4:31:fb: 63:ef:23:f0:89:df:66:6f:08:cb:62:57:3f:cd:b4:8b:09:c4: f0:85:84:4f:8d:b9:f5:6b:ac:6b:50:1d:51:cb:66:68:10:1c: fd:fa:18:07:c1:c6:d8:3f:95:0d:b0:f0:f5:87:98:ee:30:ae: 86:ff:f5:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKEQ4RkM3OTVCNjNDQzQyNTczRkQ1REI0NEYwQTgzODZD OEQ2NDNCODQwHhcNMjYwOTI3MDM0NDQyWhcNMjYxMDA0MDM0NDQyWjAYMRYwFAYD VQQDEw02YWI4OTEyYi1kMGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJ5L/YxmfCpy9eyYVXTYe9Y+ENc9o3+xuXomR+t3v2ekC+ZLcc6iWfHJkD3H dUKuV1cEdY7w1erg1PN0mmg4OlGKnNOst9GOW7rNV5CjCAHRqwbfKtEr0FYYWiNy eA7vkOjvbxbs6HcG0koUbnPtPLKOsuQQXsUkGobHAAnMjwU1eld5ZSO+x9jHFkhI t0cNF8Gz/AI5U1a6lIe128C5sUjCk//EbBRdJmsRPR18ht1qGvY8N1qjiuD8t57a sJj0ilsBkQXsOjN2L36/uzx83FS21RGdFilKxHk/N9UgXj9IM3JPBXmhMBz8/EKj eU+lfYKvyo7JbPzB9lKZcJI/vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQ8O72e eRbE4Ce7XCcBnZ7jVTiKMB8GA1UdIwQYMBaAFNj8eVtjzEJXP9XbRPCoOGyNZDuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CMzk2RjNDMEM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFsY18xZHRFOEtnNGJJMWtP NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJQeDVXMlBNUWxjXzFkdEU4S2c0Ykkxa080US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CMzk2RjNDMEM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFs Y18xZHRFOEtnNGJJMWtPNFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqzrtYfXQFgc7C+jcQAGEfkyNPHY8/9c+YXsidCZk/k0ozvCNbWvCAcYLHvP9 jE4PB3ZgCWtOeefF9jqYX5gwzNl4/u5PZDqMHGYAw6vdfiO5sHpSUbNgKI9VSZsA eHm57zPs7IOyZL4SgMwmskxpGnsjpS2F+S2g4J/NK6B0NATPpVfFfDAnjwOwSEef meMC+X8z1ye/NqVTE2+v3pmbqjcOO1WE7NjfDUD6IY+wLC2iyENViKi4evPM5sjX mGXNRt9d9DH7Y+8j8InfZm8Iy2JXP820iwnE8IWET4259Wusa1AdUctmaBAc/foY B8HG2D+VDbDw9YeY7jCuhv/1UQ== -----END CERTIFICATE-----Generated at Sun Sep 27 12:11:33 2026 by rpki-client