$ rpki-client -vvvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: WUf20x+SwKVUI9SFX2rXzlxCe+aO0B0QMcEBB/j26zc= Subject key identifier: 7A:84:26:55:59:E2:17:33:E2:B3:CC:02:CD:4A:91:D1:61:F6:DC:E6 Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: 01A5 Signing time: Mon 21 Sep 2026 04:11:57 +0000 Manifest this update: Mon 21 Sep 2026 04:11:57 +0000 Manifest next update: Mon 28 Sep 2026 04:11:57 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: UwSLDzndSQvC+DazNOglZ/TBtkYTKR4dqMJB8NDhCBs=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: VxdztqIyeKdq6Y1gZHMxA5mA6eKYSPyJZb/jS0HIv30=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: oEK7UbEneVnN8s/S/N5Woyft7ItBdFqqTJalpL6CP44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Sep 21 04:11:57 2026 GMT Not After : Sep 28 04:11:57 2026 GMT Subject: CN=6ab0ae8d-1763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:70:0f:f4:33:cb:db:ce:59:43:4e:3e:93: 25:80:a1:84:fa:57:72:fe:da:c7:18:a6:0c:78:16: ed:41:50:e1:13:86:21:62:bf:ab:06:1e:29:84:23: 60:10:84:48:bf:f9:c4:2e:06:90:64:7b:ba:6c:5e: bb:5a:b6:87:86:4d:36:84:50:93:40:00:81:e1:6b: f6:33:7f:75:9e:3d:13:09:ee:0e:41:df:6c:a6:f3: 90:ab:bf:7a:cc:1c:b5:6f:cb:68:fa:b5:b1:b7:82: 5b:23:81:75:b2:9c:f9:11:dc:33:b7:19:a8:2c:bb: af:54:b1:f0:6c:01:34:6b:60:0e:1e:c0:32:00:35: ea:15:05:e1:80:19:07:28:8f:33:87:f8:cc:60:f1: 4a:e3:44:d8:fa:8d:f9:3f:41:0b:9a:94:92:2f:dd: ab:79:05:d1:c6:af:2c:77:68:c0:2c:77:82:62:fd: 6c:9c:dc:6d:d4:05:05:58:f6:fe:00:84:ec:5a:0f: f2:c5:08:16:c3:75:b3:c9:c1:e4:0e:cb:ba:03:9a: 15:1d:78:e4:5a:56:09:5f:24:06:ee:c2:3b:36:64: 50:14:aa:59:ae:e5:87:4a:39:d9:a5:c9:a4:53:7b: de:14:6b:28:d7:00:db:97:46:dc:46:af:34:ca:51: fa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:84:26:55:59:E2:17:33:E2:B3:CC:02:CD:4A:91:D1:61:F6:DC:E6 X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:35:cb:03:f7:53:3c:3f:dc:f3:32:9f:83:31:a5:21:38:52: 8e:5c:ed:29:43:08:23:7c:43:96:3e:20:b0:c0:69:98:5a:be: 0a:7c:f5:c4:ee:eb:ea:a1:33:31:f6:28:7d:6f:b2:e2:de:88: ae:5b:5e:b5:d3:18:75:60:7c:b9:1f:e4:05:3d:3b:9b:bd:60: e2:65:bd:53:04:bb:ce:14:83:db:fb:dd:15:03:92:d1:15:14: ad:d3:79:8d:03:df:bb:6e:c9:28:5f:85:d1:c0:7a:19:2d:8d: 3b:45:d3:2e:d7:77:d7:85:0a:98:c5:ea:61:d4:d8:59:2a:a3: 4e:d4:8e:4f:b0:33:18:64:b7:4d:63:3d:f0:d2:c5:f2:6d:79: b5:b3:dc:f9:cd:56:cb:ea:76:f0:25:b9:a5:e9:9b:2f:33:63: 3d:32:7f:ce:37:37:01:be:3c:0b:ba:84:40:b2:c5:bc:80:86: 0e:c1:8f:0f:68:1f:33:92:d2:0d:77:6d:45:80:43:38:49:18: ad:93:67:41:6e:19:47:bb:27:fe:02:25:5c:9a:95:9a:89:de: 07:61:c2:c9:eb:76:11:54:6e:2e:ce:c0:93:08:80:47:be:ff: 8c:fc:09:21:1c:61:43:76:e9:d2:1f:d8:3a:e2:50:53:68:55: 80:f3:b9:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjYwOTIxMDQxMTU3WhcNMjYwOTI4MDQxMTU3WjAYMRYwFAYD VQQDEw02YWIwYWU4ZC0xNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfVwD/Qzy9vOWUNOPpMlgKGE+ldy/trHGKYMeBbtQVDhE4YhYr+rBh4phCNg EIRIv/nELgaQZHu6bF67WraHhk02hFCTQACB4Wv2M391nj0TCe4OQd9spvOQq796 zBy1b8to+rWxt4JbI4F1spz5EdwztxmoLLuvVLHwbAE0a2AOHsAyADXqFQXhgBkH KI8zh/jMYPFK40TY+o35P0ELmpSSL92reQXRxq8sd2jALHeCYv1snNxt1AUFWPb+ AITsWg/yxQgWw3WzycHkDsu6A5oVHXjkWlYJXyQG7sI7NmRQFKpZruWHSjnZpcmk U3veFGso1wDbl0bcRq80ylH6CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqEJlVZ 4hcz4rPMAs1KkdFh9tzmMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzDXLA/dTPD/c8zKfgzGlIThSjlztKUMII3xDlj4gsMBpmFq+Cnz1xO7r6qEz MfYofW+y4t6IrltetdMYdWB8uR/kBT07m71g4mW9UwS7zhSD2/vdFQOS0RUUrdN5 jQPfu27JKF+F0cB6GS2NO0XTLtd314UKmMXqYdTYWSqjTtSOT7AzGGS3TWM98NLF 8m15tbPc+c1Wy+p28CW5pembLzNjPTJ/zjc3Ab48C7qEQLLFvICGDsGPD2gfM5LS DXdtRYBDOEkYrZNnQW4ZR7sn/gIlXJqVmoneB2HCyet2EVRuLs7AkwiAR77/jPwJ IRxhQ3bp0h/YOuJQU2hVgPO5bg== -----END CERTIFICATE-----Generated at Tue Sep 22 10:32:42 2026 by rpki-client