$ rpki-client -vvvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json) Hash identifier: 6yGmKc4je9H3NOMCR1LSHGbxNZz70uFW6V2qqPcZTVc= Subject key identifier: FF:9C:90:DA:EA:33:6F:6D:42:75:7E:2F:90:84:B9:8A:54:B7:FC:01 Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Certificate serial: 034B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft Manifest number: 0342 Signing time: Thu 01 Oct 2026 01:23:10 +0000 Manifest this update: Thu 01 Oct 2026 01:23:10 +0000 Manifest next update: Thu 08 Oct 2026 01:23:10 +0000 Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: 0QSIZiwWK9NvkrRU+FP9riozar/dfHD/OiONZXZtDVs=) 2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 01:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Validity Not Before: Oct 1 01:23:10 2026 GMT Not After : Oct 8 01:23:10 2026 GMT Subject: CN=6abdb5fe-f96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:b5:e6:3d:e0:6f:a1:b9:e1:b8:19:6d:be: 7f:b8:bb:ae:f0:2c:c2:ed:19:97:44:4d:22:44:0a: 67:b3:3a:05:31:9b:3a:30:95:0d:11:b1:f1:05:f7: a7:ba:3c:87:bb:41:f7:1f:5d:ba:e3:16:99:42:02: 48:a1:d2:10:7b:22:14:97:16:72:f5:75:c3:f7:16: 14:3b:52:ea:cb:0e:07:e8:87:a2:7d:71:e8:aa:70: 70:6b:0e:55:74:38:28:5f:26:da:e1:28:9e:38:c5: ab:79:e8:30:4c:99:05:cc:00:9b:52:bd:6e:ab:d4: 83:c1:31:c0:23:94:2e:49:41:2b:57:08:08:ec:47: 50:25:2c:b3:2c:0b:df:69:bc:72:81:08:ce:da:8d: 10:16:b6:f7:6e:3d:18:ae:ca:87:fa:a7:e6:b4:45: 35:80:c7:66:23:43:9d:c6:b9:c3:4f:86:fb:1c:77: 8c:d5:91:7a:2a:5a:e4:12:59:d8:ca:a2:a0:3e:bc: e4:5f:51:25:d1:34:b2:f5:d3:c1:13:b1:1e:18:d4: f3:44:f8:5a:d8:70:20:e7:fe:2d:31:61:07:c6:ff: 22:87:d3:b2:60:b9:14:66:e4:6f:8f:9c:f9:ba:4b: 54:21:e8:2e:9d:d1:84:77:5d:c9:9a:a2:fe:15:63: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9C:90:DA:EA:33:6F:6D:42:75:7E:2F:90:84:B9:8A:54:B7:FC:01 X509v3 Authority Key Identifier: keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ed:9a:b0:52:2d:65:40:67:4e:55:f7:b8:21:37:19:30:17: f7:a1:48:37:e8:6f:66:5f:d7:06:54:0d:cd:80:a0:d9:59:d6: 47:e1:af:c8:59:89:15:e9:2e:52:1d:6c:4e:db:76:58:d0:77: f4:89:84:93:f6:5d:08:a7:51:18:cc:27:c8:89:12:40:4a:cb: d7:c0:65:a1:0e:e1:3a:29:c7:9b:65:47:ca:68:0a:52:f0:74: b8:a4:02:10:3d:f4:94:93:2c:28:44:9f:91:96:48:bb:43:b8: f4:bc:fa:fb:63:1d:a4:3a:d8:1f:9c:1f:4c:ae:8b:78:51:9b: 8d:2e:ab:50:bc:52:b1:c9:0a:53:df:e0:0f:ad:9b:84:de:8e: 72:6a:fe:d4:06:9f:8f:b5:16:ac:61:ba:92:3d:a4:33:b8:97: 43:16:f8:79:e3:0e:ba:18:05:ab:1d:cf:59:32:4d:f1:b2:10: c2:4a:e2:ba:87:02:11:5e:45:e5:7e:97:5c:9e:3c:d2:ac:28: 47:c6:66:cb:ab:52:1c:07:d0:f1:1c:6c:79:05:64:26:c8:51: 77:dc:b7:e1:e0:2a:d1:1b:36:48:38:66:59:60:51:75:06:bc: f3:aa:ec:a4:46:45:45:7c:47:5c:ca:27:4b:ca:4e:a5:e2:91: 47:a3:44:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0 QTAwRUFFRTgwHhcNMjYxMDAxMDEyMzEwWhcNMjYxMDA4MDEyMzEwWjAYMRYwFAYD VQQDEw02YWJkYjVmZS1mOTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlWu15j3gb6G54bgZbb5/uLuu8CzC7RmXRE0iRApnszoFMZs6MJUNEbHxBfen ujyHu0H3H1264xaZQgJIodIQeyIUlxZy9XXD9xYUO1Lqyw4H6IeifXHoqnBwaw5V dDgoXyba4SieOMWreegwTJkFzACbUr1uq9SDwTHAI5QuSUErVwgI7EdQJSyzLAvf abxygQjO2o0QFrb3bj0YrsqH+qfmtEU1gMdmI0OdxrnDT4b7HHeM1ZF6KlrkElnY yqKgPrzkX1El0TSy9dPBE7EeGNTzRPha2HAg5/4tMWEHxv8ih9OyYLkUZuRvj5z5 uktUIegundGEd13JmqL+FWM+ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP+ckNrq M29tQnV+L5CEuYpUt/wBMB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN SUF4YWxyY3UydjFLQU9ydWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmO2asFItZUBnTlX3uCE3GTAX96FIN+hvZl/XBlQNzYCg2VnWR+GvyFmJFeku Uh1sTtt2WNB39ImEk/ZdCKdRGMwnyIkSQErL18BloQ7hOinHm2VHymgKUvB0uKQC ED30lJMsKESfkZZIu0O49Lz6+2MdpDrYH5wfTK6LeFGbjS6rULxSsckKU9/gD62b hN6Ocmr+1Aafj7UWrGG6kj2kM7iXQxb4eeMOuhgFqx3PWTJN8bIQwkriuocCEV5F 5X6XXJ480qwoR8Zmy6tSHAfQ8RxseQVkJshRd9y34eAq0Rs2SDhmWWBRdQa886rs pEZFRXxHXMonS8pOpeKRR6NEnQ== -----END CERTIFICATE-----Generated at Thu Oct 1 14:09:26 2026 by rpki-client