$ rpki-client -vvvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft File: nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json) Hash identifier: xtxzooxiAibJpOyM4P4ljoV3tkSJLeHC3genfihN7w0= Subject key identifier: DA:2D:7D:09:B3:AD:2D:6B:41:FD:E1:2C:1C:55:AE:3A:58:4E:E5:A5 Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft Manifest number: E3 Signing time: Mon 21 Sep 2026 06:35:56 +0000 Manifest this update: Mon 21 Sep 2026 06:35:56 +0000 Manifest next update: Mon 28 Sep 2026 06:35:56 +0000 Files and hashes: 1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: 7ve2SrzsDiQThH+TGJGn5hhLPMHw/uY2t37+Cms2xwc=) 2: 8C538C5AEFCF11F0889DE39E746F56BC.roa (hash: IYXOhXL6bJ68pYNK/kTrLKmd+mngJz9PldPbItCSzvQ=) 3: 224FBC52EFCF11F0A018F59D746F56BC.roa (hash: mEE2s8TFrbg3u/2M8DQXMANj0UbWZqDl7u6JBf6OnyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Sep 21 06:35:56 2026 GMT Not After : Sep 28 06:35:56 2026 GMT Subject: CN=6ab0d04c-d4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:16:90:a0:70:95:f4:41:95:6b:cd:7c:58: 71:39:bb:79:d2:65:2a:cc:c2:50:ca:b7:9d:ed:90: 5d:1f:53:17:04:9e:33:31:bb:a2:9d:13:23:34:87: 63:6c:e4:af:80:5b:cb:7e:de:fd:c0:04:7f:0b:62: b4:ac:b2:3b:22:f9:6c:05:dd:06:92:e0:35:11:74: 7b:1c:87:6f:78:4f:83:fe:19:e6:f1:f7:9e:1c:d4: cd:85:3b:b2:4b:3a:68:3f:18:47:ed:5d:e3:38:8c: a6:da:7c:a8:e4:4e:ba:11:66:58:71:7e:f2:7b:b2: 14:ed:94:27:dc:d1:4d:2b:45:e6:4e:38:cc:8c:19: 7c:8c:48:10:19:2d:61:7d:bf:9e:3d:4f:5f:5b:cf: b9:89:67:55:c1:53:ed:19:c6:e3:12:3f:2f:b3:76: f4:a0:4e:c9:36:b1:b1:60:6c:4a:02:46:eb:d3:71: 21:82:11:e3:01:d0:b9:90:dc:70:3c:42:c3:17:f6: 6e:1e:4d:5e:9e:85:97:d6:c4:b3:84:b3:94:ad:21: 8e:41:e3:77:94:64:78:f4:c6:e7:2c:e5:91:eb:4e: b6:ea:64:ca:cc:80:5f:9d:f3:0f:d9:27:c3:ee:5b: 38:92:a0:b8:46:a1:a6:f2:ca:19:64:8e:26:07:94: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2D:7D:09:B3:AD:2D:6B:41:FD:E1:2C:1C:55:AE:3A:58:4E:E5:A5 X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6a:d3:89:e6:3a:63:6b:f8:45:18:b5:ed:33:cf:5a:c2:1e: b8:7a:67:86:83:0a:d8:69:71:35:a3:d1:1b:a1:5c:c6:f8:24: 42:8e:4c:c1:62:b8:83:94:80:c2:5e:a3:e8:4b:65:ab:f3:19: 87:93:e2:83:10:bb:b2:a7:63:72:2f:f4:ab:e1:60:ad:f3:12: c9:b9:2f:4d:f1:f1:0e:99:ce:ec:dc:8e:d6:82:1b:82:98:f0: 51:e8:77:44:cc:ae:7a:8b:af:0b:00:0a:8a:ec:d8:c4:59:85: ad:fe:5b:53:e9:f9:61:b8:90:47:33:2a:95:90:97:e2:d3:67: f8:77:eb:10:8e:83:09:8e:7c:63:83:81:c5:4e:f9:8d:de:2d: 43:91:f5:a0:fb:85:d1:d2:16:70:e3:0c:06:8b:c4:1d:4b:42: ed:92:53:45:e2:4c:43:28:82:b2:f5:6d:b6:4d:ed:47:7f:c3: 13:e0:16:ef:a4:f6:20:3e:06:73:72:07:47:69:47:e6:a0:df: af:dc:74:8a:e8:6f:42:63:3b:bd:3c:6f:f1:c0:01:33:e9:bc: b8:2f:85:4b:c0:6d:7c:3d:a3:b5:ab:3e:fa:8c:dc:26:19:ba: 3a:2d:00:a7:f1:a3:30:92:ed:0b:8f:ed:a8:84:87:e8:00:53: d6:83:d9:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1QzMxMTAvBgNVBAUTKDlFQkRBMTIzRDlFRTgzMDk0MzA1QTExODBDMkEwODA1 N0ZFNTQwNkEwHhcNMjYwOTIxMDYzNTU2WhcNMjYwOTI4MDYzNTU2WjAYMRYwFAYD VQQDEw02YWIwZDA0Yy1kNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAUWkKBwlfRBlWvNfFhxObt50mUqzMJQyred7ZBdH1MXBJ4zMbuinRMjNIdj bOSvgFvLft79wAR/C2K0rLI7IvlsBd0GkuA1EXR7HIdveE+D/hnm8feeHNTNhTuy SzpoPxhH7V3jOIym2nyo5E66EWZYcX7ye7IU7ZQn3NFNK0XmTjjMjBl8jEgQGS1h fb+ePU9fW8+5iWdVwVPtGcbjEj8vs3b0oE7JNrGxYGxKAkbr03EhghHjAdC5kNxw PELDF/ZuHk1enoWX1sSzhLOUrSGOQeN3lGR49MbnLOWR60626mTKzIBfnfMP2SfD 7ls4kqC4RqGm8soZZI4mB5TgIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNotfQmz rS1rQf3hLBxVrjpYTuWlMB8GA1UdIwQYMBaAFJ69oSPZ7oMJQwWhGAwqCAV/5UBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yMzI2QzYzRTY2 MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3bERCYUVZRENvSUJYX2xR R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3 bERCYUVZRENvSUJYX2xRR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADmrTieY6Y2v4RRi17TPPWsIeuHpnhoMK2GlxNaPRG6FcxvgkQo5MwWK4g5SA wl6j6Etlq/MZh5PigxC7sqdjci/0q+FgrfMSybkvTfHxDpnO7NyO1oIbgpjwUeh3 RMyueouvCwAKiuzYxFmFrf5bU+n5YbiQRzMqlZCX4tNn+HfrEI6DCY58Y4OBxU75 jd4tQ5H1oPuF0dIWcOMMBovEHUtC7ZJTReJMQyiCsvVttk3tR3/DE+AW76T2ID4G c3IHR2lH5qDfr9x0iuhvQmM7vTxv8cABM+m8uC+FS8BtfD2jtas++ozcJhm6Oi0A p/GjMJLtC4/tqISH6ABT1oPZTQ== -----END CERTIFICATE-----Generated at Tue Sep 22 16:57:21 2026 by rpki-client