$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: +vjs3trlVqN7cV4LUv2d8cYmEADlkKBk6zqHiEFYZSc= Subject key identifier: 46:F0:1C:5A:8D:72:8A:C0:63:A2:96:AB:88:61:C1:26:0B:5D:F6:FB Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 021B Signing time: Sun 27 Sep 2026 03:19:42 +0000 Manifest this update: Sun 27 Sep 2026 03:19:42 +0000 Manifest next update: Sun 04 Oct 2026 03:19:42 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: c1Fr6hFG+D4ezbeYJpx3XvoDyEQJocYZzUQVSqyM/Sw=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: McXWsXXcIZmHr1+c7MXfi1yOdfqnkuMIhVjsAcxCbA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Sep 27 03:19:42 2026 GMT Not After : Oct 4 03:19:42 2026 GMT Subject: CN=6ab88b4e-4047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:27:a8:9d:04:08:82:3c:2f:1a:8d:0c:bb:9c: 1d:15:1d:4d:4b:db:e7:71:e8:c0:12:60:d3:a7:6b: d9:a3:a0:c1:c8:62:15:00:48:33:3a:94:1a:1e:3e: f3:82:a3:73:3c:ee:9e:1b:20:af:e9:50:9b:2e:c7: 1f:9a:20:4b:15:0c:8d:35:3a:0b:34:f4:87:69:8b: 34:b5:0b:30:f6:0d:02:39:09:9b:3e:4a:e0:50:71: 86:d2:43:ee:6e:54:21:b7:9a:e4:54:28:31:a6:53: 24:41:d3:04:52:b1:38:92:dd:6b:bb:9c:dc:d3:2a: f9:77:57:96:3e:a3:c1:0d:ce:e5:7c:f5:d4:c8:53: c5:1b:0c:b1:62:74:f7:9a:e9:6a:3e:d0:ca:b1:c6: f2:b4:30:0b:0f:04:51:16:67:9f:35:60:cd:52:f1: 62:74:db:66:2e:97:55:6a:ff:e9:24:54:be:24:23: 8e:ab:92:ae:2a:0d:4f:a8:26:e6:05:9e:29:03:13: 58:69:9b:62:d7:25:15:ce:a3:50:c9:89:22:de:7a: 4d:91:e2:fd:e6:4c:cd:75:7d:08:19:41:3d:d1:f7: e6:e2:dc:8d:35:79:d0:dc:b7:28:8f:01:d0:70:e7: d6:5a:34:5d:96:d0:e5:e1:23:dc:34:4f:d6:62:48: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F0:1C:5A:8D:72:8A:C0:63:A2:96:AB:88:61:C1:26:0B:5D:F6:FB X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f3:13:fe:0c:ea:c6:34:76:be:e2:3e:32:df:a2:d2:59:46: 44:5c:58:21:53:f5:f7:cb:31:b8:dc:28:c7:07:f6:36:8a:2b: 05:66:1c:94:ef:fb:44:ea:9b:05:e3:af:5f:06:89:ea:b4:70: 41:82:ec:3b:27:fa:af:6a:39:88:26:5e:e3:b5:b4:5f:97:74: 36:ca:20:44:18:d6:08:63:33:a7:0c:13:89:0f:81:a0:3c:c4: 57:b7:ef:b6:af:8d:a5:c2:90:f6:1e:9b:53:02:86:4c:a5:b3: 48:f6:ad:1b:5d:66:d8:4a:78:06:b3:79:f8:1d:e2:b6:a5:91: cb:bc:ef:0a:fb:48:b3:d6:ac:18:9b:f5:0a:e3:44:18:99:a7: 23:15:1b:4f:2a:07:39:95:88:e2:64:ef:70:73:8a:8f:6d:0a: d1:eb:4c:dc:be:91:82:5e:9f:24:9a:42:b7:08:7d:25:39:55: 25:f8:8c:88:98:64:9f:bc:fb:18:7c:55:93:b9:df:df:01:00: 58:a3:1b:50:29:8d:55:92:b3:1d:05:8e:4a:ac:f2:18:88:25: d1:50:95:4a:ee:bf:18:28:e3:9c:1e:17:8a:c4:3f:e9:d6:7e: d7:76:5c:69:34:5e:71:c2:68:af:cc:16:18:c3:83:00:99:65: ed:94:ea:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjYwOTI3MDMxOTQyWhcNMjYxMDA0MDMxOTQyWjAYMRYwFAYD VQQDEw02YWI4OGI0ZS00MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ieonQQIgjwvGo0Mu5wdFR1NS9vncejAEmDTp2vZo6DByGIVAEgzOpQaHj7z gqNzPO6eGyCv6VCbLscfmiBLFQyNNToLNPSHaYs0tQsw9g0COQmbPkrgUHGG0kPu blQht5rkVCgxplMkQdMEUrE4kt1ru5zc0yr5d1eWPqPBDc7lfPXUyFPFGwyxYnT3 mulqPtDKscbytDALDwRRFmefNWDNUvFidNtmLpdVav/pJFS+JCOOq5KuKg1PqCbm BZ4pAxNYaZti1yUVzqNQyYki3npNkeL95kzNdX0IGUE90ffm4tyNNXnQ3LcojwHQ cOfWWjRdltDl4SPcNE/WYkjG3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbwHFqN corAY6KWq4hhwSYLXfb7MB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI/MT/gzqxjR2vuI+Mt+i0llGRFxYIVP198sxuNwoxwf2NoorBWYclO/7ROqb BeOvXwaJ6rRwQYLsOyf6r2o5iCZe47W0X5d0NsogRBjWCGMzpwwTiQ+BoDzEV7fv tq+NpcKQ9h6bUwKGTKWzSPatG11m2Ep4BrN5+B3itqWRy7zvCvtIs9asGJv1CuNE GJmnIxUbTyoHOZWI4mTvcHOKj20K0etM3L6Rgl6fJJpCtwh9JTlVJfiMiJhkn7z7 GHxVk7nf3wEAWKMbUCmNVZKzHQWOSqzyGIgl0VCVSu6/GCjjnB4XisQ/6dZ+13Zc aTReccJor8wWGMODAJll7ZTqNQ== -----END CERTIFICATE-----Generated at Mon Sep 28 18:57:22 2026 by rpki-client