$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft File: 2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft (raw, json) Hash identifier: FAA2gHsX1Na1xI9H8dwLhQJIJeeE9zwhSTcrHHTRd5M= Subject key identifier: 55:23:4C:EC:2D:A9:07:F9:C0:91:E0:13:8A:90:CA:05:60:5F:FE:30 Authority key identifier: D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE Certificate issuer: /CN=A91689B9/serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft Manifest number: 2A Signing time: Mon 21 Sep 2026 08:43:51 +0000 Manifest this update: Mon 21 Sep 2026 08:43:51 +0000 Manifest next update: Mon 28 Sep 2026 08:43:51 +0000 Files and hashes: 1: 2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl (hash: Rz5ho6C6/ZwdDZoJx2LnWHNtwugJqb6zIc+r+etG6lg=) 2: 9D1E103C79BD11F1A56111AD5AA30FBC.roa (hash: v5LCMSJ7unsotsj1CUAFikFHoJMXhj0hIvgSsrnsLqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B9, serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE Validity Not Before: Sep 21 08:43:51 2026 GMT Not After : Sep 28 08:43:51 2026 GMT Subject: CN=6ab0ee47-1d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:15:f3:55:7a:c4:4b:f7:83:9b:0b:e9:e5:b2: 72:ba:e3:85:3e:91:42:3b:b8:47:76:96:d6:47:e1: 48:63:1d:b3:cb:2a:a5:50:16:93:c6:07:14:92:ac: e8:9a:e7:66:11:a5:66:ba:ce:80:5d:e7:88:3d:91: e2:82:d1:1d:0c:0a:f3:76:6d:de:92:52:fd:d2:c0: 8c:6c:6a:89:31:9a:3f:cf:55:1a:9b:37:b1:b0:a6: 8a:24:ef:76:ab:ad:e0:3b:cc:bb:dd:4a:a9:ee:03: a6:78:9c:db:c1:46:99:ee:2e:0d:2c:2d:f8:0c:7a: cf:b7:b7:09:63:9b:68:d4:ab:5b:cc:02:91:33:81: 26:64:90:7a:1c:fb:5a:8a:65:2e:f9:5a:78:ce:4d: 2f:25:4c:9b:40:8b:d2:26:a4:06:df:15:81:b6:db: be:ca:25:2d:d2:53:e1:9d:6f:e0:50:bb:43:3c:b3: 30:63:0d:9d:3f:85:d0:92:a7:28:8f:a4:96:14:bc: 61:b8:2c:2b:ae:2a:e4:fb:6d:16:ca:e0:d1:64:79: d7:b4:11:65:3f:58:ca:ec:a0:b3:90:cb:c1:ee:7e: 58:c9:93:29:c1:c0:be:05:00:26:83:4d:02:44:45: 36:df:15:5a:db:d3:70:d9:a1:50:de:cb:80:1c:e4: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:23:4C:EC:2D:A9:07:F9:C0:91:E0:13:8A:90:CA:05:60:5F:FE:30 X509v3 Authority Key Identifier: keyid:D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:dc:48:14:fd:ac:99:b2:b3:ea:d2:bc:44:82:a1:66:97:ef: 95:bb:b4:6c:bd:b4:cf:1e:0d:d1:a1:52:2f:bd:c2:d4:75:66: 17:82:3c:85:23:2e:c5:ff:1d:01:53:bd:a4:54:d3:b8:83:c0: 7d:b1:54:c6:dd:15:12:c7:c7:c6:0f:86:5e:7a:3c:af:df:ce: 96:38:9a:10:83:2b:6a:44:07:a6:11:8a:99:90:a4:01:3c:be: a0:3b:53:c3:bb:6c:bd:97:e0:e8:11:92:ce:2d:27:24:f5:93: ab:ac:bb:e1:b1:42:94:7c:60:d0:18:a2:0e:05:ff:6a:e0:08: 55:48:4c:1a:25:cf:87:d6:f1:e7:25:87:fc:f1:46:b7:91:3e: 2b:5f:0d:03:eb:78:d0:f9:5d:f9:c1:c4:cf:20:06:65:3c:42: 3d:11:13:b8:65:2c:92:31:01:60:f3:e6:07:56:83:15:42:8b: aa:31:1b:de:05:ca:b0:c9:37:86:8c:5a:02:f7:b9:cd:6d:e2: 7f:70:04:7e:ad:ae:3a:81:8c:3e:28:d3:c9:e4:84:2b:8f:e8: 4b:73:be:06:f2:93:97:69:47:59:dc:82:52:48:9f:cf:75:f9: 2a:85:3b:ef:d2:59:33:1c:4e:d7:2f:de:17:7b:d8:10:e4:6d: db:58:cf:01 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlCOTExMC8GA1UEBRMoRDg2OURCRUEyNjMwNjQzQ0Q2RDFENEI2MzhENDZFNTM0 RDNGNkVBRTAeFw0yNjA5MjEwODQzNTFaFw0yNjA5MjgwODQzNTFaMBgxFjAUBgNV BAMTDTZhYjBlZTQ3LTFkOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+FfNVesRL94ObC+nlsnK644U+kUI7uEd2ltZH4UhjHbPLKqVQFpPGBxSSrOia 52YRpWa6zoBd54g9keKC0R0MCvN2bd6SUv3SwIxsaokxmj/PVRqbN7Gwpook73ar reA7zLvdSqnuA6Z4nNvBRpnuLg0sLfgMes+3twljm2jUq1vMApEzgSZkkHoc+1qK ZS75WnjOTS8lTJtAi9ImpAbfFYG2277KJS3SU+Gdb+BQu0M8szBjDZ0/hdCSpyiP pJYUvGG4LCuuKuT7bRbK4NFkede0EWU/WMrsoLOQy8HufljJkynBwL4FACaDTQJE RTbfFVrb03DZoVDey4Ac5F8JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVSNM7C2p B/nAkeATipDKBWBf/jAwHwYDVR0jBBgwFoAU2Gnb6iYwZDzW0dS2ONRuU00/bq4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzAwQ0U1QzQwNzky RDExRjFCQzg4OTA5MDZGQTMwRkJDLzJHbmI2aVl3WkR6VzBkUzJPTlJ1VTAwX2Jx NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkduYjZpWXdaRHpXMGRTMk9OUnVVMDBfYnE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUI5LzAwQ0U1QzQwNzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzJHbmI2aVl3WkR6 VzBkUzJPTlJ1VTAwX2JxNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBm3EgU/ayZsrPq0rxEgqFml++Vu7RsvbTPHg3RoVIvvcLUdWYXgjyFIy7F/x0B U72kVNO4g8B9sVTG3RUSx8fGD4Zeejyv386WOJoQgytqRAemEYqZkKQBPL6gO1PD u2y9l+DoEZLOLSck9ZOrrLvhsUKUfGDQGKIOBf9q4AhVSEwaJc+H1vHnJYf88Ua3 kT4rXw0D63jQ+V35wcTPIAZlPEI9ERO4ZSySMQFg8+YHVoMVQouqMRveBcqwyTeG jFoC97nNbeJ/cAR+ra46gYw+KNPJ5IQrj+hLc74G8pOXaUdZ3IJSSJ/PdfkqhTvv 0lkzHE7XL94Xe9gQ5G3bWM8B -----END CERTIFICATE-----Generated at Tue Sep 22 21:10:56 2026 by rpki-client