$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: bMn2ebkgT+METdeP9PRjjzOI1YGy8cILeob6G5lxCVs= Subject key identifier: 74:CA:56:D8:57:C8:CF:BE:10:D1:0B:B6:7B:D1:CB:51:DD:45:E7:AA Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 02AD Signing time: Fri 25 Sep 2026 01:33:02 +0000 Manifest this update: Fri 25 Sep 2026 01:33:02 +0000 Manifest next update: Fri 02 Oct 2026 01:33:02 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: B4Wnpi7tNoIYOnfYkCBQOtMvv5hpFTBexFPSbLcQVXI=) 2: 05BD1998108D11F197077311333D8C67.roa (hash: ZxF538zON35iTObIR2PUbabLdiG79qM6J447o9x0f0c=) 3: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 8ooMgmV7Ud+S1xspsx7qZBXNFAFm0OtpaMWTTHwLKP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Sep 25 01:33:02 2026 GMT Not After : Oct 2 01:33:02 2026 GMT Subject: CN=6ab5cf4e-add1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:4f:e2:39:4e:9b:84:ca:84:59:a3:87:d1: d7:08:67:6c:ea:2d:06:db:9d:9a:32:22:de:d0:49: 50:6f:3f:aa:64:18:06:03:93:d9:52:7c:c3:91:aa: 10:b0:52:80:50:d1:06:c5:bc:6c:d8:35:7f:f2:e5: d9:60:2e:75:c0:15:30:7b:0f:04:b4:99:59:31:4f: 0d:7e:32:67:50:cd:54:ba:fd:50:6d:18:21:e5:0a: 36:f7:73:6d:e5:63:41:69:b1:7a:e8:f5:cc:ad:83: 81:aa:f1:7a:d1:50:b8:0a:9b:b3:1a:5f:d9:7b:61: 0d:ee:a0:0e:46:8a:9b:46:5e:20:5c:95:a0:99:cf: 79:4d:3d:bf:3a:96:a9:70:94:4f:6d:68:3a:2f:1b: 9e:68:b2:6f:c8:59:bb:a4:ba:bd:35:8d:74:69:23: 24:55:24:e6:f4:02:c6:bc:29:5a:ce:65:08:ab:0b: aa:ac:78:59:66:4b:89:a3:df:1a:4a:04:3a:80:1f: e5:4b:e4:6e:59:e3:0c:4c:2d:12:dd:c8:84:01:73: 52:25:1d:b6:87:f6:3f:a8:ce:fa:d2:34:a5:21:c1: 5b:3c:b8:1d:b2:43:75:3b:ce:a8:16:38:2d:0b:6d: d9:0e:5e:1d:f8:9b:e5:11:47:9b:4b:c2:08:93:b0: 42:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CA:56:D8:57:C8:CF:BE:10:D1:0B:B6:7B:D1:CB:51:DD:45:E7:AA X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:42:4c:8d:6d:d3:fa:0c:48:25:e4:e0:4e:47:fc:d7:c2:57: 64:99:d6:5d:ca:4f:89:75:87:5d:a1:1c:2f:a4:b4:b5:05:8a: 11:9d:77:01:47:a9:83:a3:83:8f:78:50:d8:6b:d7:f3:46:57: af:09:7f:f3:3d:9e:f6:2d:32:a8:64:ad:9a:7e:a4:c1:ae:9e: 3f:9b:b4:fa:4f:f7:85:96:d4:bc:ef:9e:28:c6:7d:cb:87:7d: 39:9a:1d:2d:c0:92:db:14:65:0c:d3:51:0d:63:8b:ae:d4:a8: fc:98:e2:1c:f0:4d:0f:c9:ee:87:d2:e4:44:cd:0f:c7:ae:5d: 53:8b:3c:46:02:12:93:88:e9:de:1a:c7:a8:48:35:ce:86:07: 79:48:7a:80:5d:af:65:7f:a5:24:e9:1a:d1:48:3c:85:a7:16: df:4c:40:18:fa:3c:d9:b8:ed:6c:90:e6:ab:d2:06:66:53:72: da:a0:6b:ec:7d:e3:be:3d:43:21:8b:bd:e8:09:de:89:75:cd: 8a:e4:81:23:94:23:ba:9b:db:6a:c1:a5:b0:b1:2e:ea:7c:e9: e6:d3:e0:5f:d5:f3:69:d9:74:2a:d7:41:09:9c:78:49:7b:c5: 0d:e8:60:51:bc:e9:26:8b:d9:c5:ee:1b:01:ed:a6:6b:a8:17: 78:42:49:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjYwOTI1MDEzMzAyWhcNMjYxMDAyMDEzMzAyWjAYMRYwFAYD VQQDEw02YWI1Y2Y0ZS1hZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEFP4jlOm4TKhFmjh9HXCGds6i0G252aMiLe0ElQbz+qZBgGA5PZUnzDkaoQ sFKAUNEGxbxs2DV/8uXZYC51wBUwew8EtJlZMU8NfjJnUM1Uuv1QbRgh5Qo293Nt 5WNBabF66PXMrYOBqvF60VC4CpuzGl/Ze2EN7qAORoqbRl4gXJWgmc95TT2/Opap cJRPbWg6LxueaLJvyFm7pLq9NY10aSMkVSTm9ALGvClazmUIqwuqrHhZZkuJo98a SgQ6gB/lS+RuWeMMTC0S3ciEAXNSJR22h/Y/qM760jSlIcFbPLgdskN1O86oFjgt C23ZDl4d+JvlEUebS8IIk7BCOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTKVthX yM++ENELtnvRy1HdReeqMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD0JMjW3T+gxIJeTgTkf818JXZJnWXcpPiXWHXaEcL6S0tQWKEZ13AUepg6OD j3hQ2GvX80ZXrwl/8z2e9i0yqGStmn6kwa6eP5u0+k/3hZbUvO+eKMZ9y4d9OZod LcCS2xRlDNNRDWOLrtSo/JjiHPBND8nuh9LkRM0Px65dU4s8RgISk4jp3hrHqEg1 zoYHeUh6gF2vZX+lJOka0Ug8hacW30xAGPo82bjtbJDmq9IGZlNy2qBr7H3jvj1D IYu96AneiXXNiuSBI5QjupvbasGlsLEu6nzp5tPgX9Xzadl0KtdBCZx4SXvFDehg UbzpJovZxe4bAe2ma6gXeEJJkg== -----END CERTIFICATE-----Generated at Sat Sep 26 05:57:37 2026 by rpki-client