$ rpki-client -vvvf rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft File: 2CVmixrBt_OBXwe82lfnSMSWSpo.mft (raw, json) Hash identifier: GGQZjRSEjNiaxdTRdz8e3It3SdII8d3EtYvJBxJRfuI= Subject key identifier: 05:1F:69:56:39:4E:27:10:58:6C:9F:50:52:E0:59:17:C9:12:3A:0C Authority key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A Certificate issuer: /CN=A91756C3/serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft Manifest number: 0138 Signing time: Mon 21 Sep 2026 08:31:20 +0000 Manifest this update: Mon 21 Sep 2026 08:31:19 +0000 Manifest next update: Mon 28 Sep 2026 08:31:19 +0000 Files and hashes: 1: 2CVmixrBt_OBXwe82lfnSMSWSpo.crl (hash: /Fm20b0/Ujj03XvTNTeU+XPbJVzDKBCmtb10P7e/saM=) 2: 00078764E06811EF8716401DC4F9AE02.roa (hash: JAiUHomtiUqiqYTLwAToU1Zg3aNGAOGf/55bKHeBYC4=) 3: BPfmVXHNj0cLBBvHN68-D9Sw9jo.asa (hash: jSYUP8eA41eKB7H8u3DmMSb87n/WwOnrfSBvQ1R3M3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756C3, serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Validity Not Before: Sep 21 08:31:19 2026 GMT Not After : Sep 28 08:31:19 2026 GMT Subject: CN=6ab0eb58-8f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:68:c4:4a:c0:d2:c7:05:2c:f8:95:e0:0e: 41:97:c7:cf:03:fe:c0:67:7c:dc:36:9e:74:6e:aa: 21:aa:d1:de:ee:f3:8c:4b:fd:6c:02:30:55:c0:31: 4c:54:c7:9b:be:c6:3d:4e:b0:4f:74:71:c8:34:0b: 3d:d3:b7:49:f4:1f:3b:88:b9:3b:86:1c:e5:cf:79: cc:85:d4:af:84:44:d6:a3:6d:92:f5:95:44:8b:18: 06:37:49:49:bc:c6:fd:71:ec:e9:d5:2b:4a:06:87: 89:ab:24:43:63:69:ba:27:44:12:89:68:76:40:0a: e9:af:60:d1:45:7e:09:85:1a:e0:b1:af:09:46:ab: ad:4b:33:4d:39:d0:da:34:34:dc:5f:a3:c1:01:81: 47:15:6e:49:e5:08:cd:b6:60:e8:73:21:f0:40:86: d4:ed:dc:2f:74:fb:95:5b:bc:29:0b:c3:8a:be:73: 02:02:a0:d5:f7:73:3b:1f:f3:2e:17:48:d8:b5:21: eb:58:6d:17:2e:d3:b1:b2:10:d5:a8:b1:00:00:ef: 46:6e:33:c3:57:70:77:44:98:36:f3:00:33:52:91: 24:29:a3:ee:9f:b2:d1:06:52:d6:26:62:97:8f:2c: cf:2c:3a:51:31:ca:67:72:5f:bc:82:f6:ee:9e:3e: a2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1F:69:56:39:4E:27:10:58:6C:9F:50:52:E0:59:17:C9:12:3A:0C X509v3 Authority Key Identifier: keyid:D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f8:eb:8c:29:83:97:e1:2f:c2:6d:3e:63:4b:4b:ad:d3:2c: 51:c4:41:2d:dd:f5:e4:09:0f:cf:cf:07:9f:7a:f7:eb:f1:bb: a4:ec:7a:3d:93:b5:c8:fc:30:a8:f2:5c:2a:cf:12:5a:9a:d9: d7:97:f8:48:57:12:cf:1f:56:51:7c:c4:2c:fd:d4:03:99:f0: c5:ed:a6:57:af:8e:b1:df:c5:09:98:a9:11:12:ad:0b:b1:c7: 13:59:f8:5d:ca:1d:8e:ea:27:90:0e:de:c8:ee:b5:69:2a:fd: 89:e1:00:6f:10:8b:53:6b:33:e5:18:e4:5c:9f:19:af:f9:32: 73:cd:4a:fb:f2:96:c3:aa:1a:b5:17:fb:a6:b6:57:31:4d:d3: 16:fe:19:d1:24:7b:e6:97:70:e8:55:97:d3:47:38:9e:9b:35: 28:2f:3e:44:a9:a9:44:42:86:03:63:03:6c:49:58:76:c0:a9: f1:9b:3c:7c:50:40:12:ac:4f:c6:12:15:39:b3:9f:f5:56:90: c6:75:bd:32:88:3a:4e:e0:ce:36:8c:45:60:04:ce:a7:21:b6: 04:2d:0b:9b:de:0d:b7:01:66:1a:dd:1a:17:75:25:4c:9b:1d: 81:29:7d:da:92:35:81:82:99:86:7a:a7:ca:85:5e:78:19:b5: 86:9c:9c:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QzMxMTAvBgNVBAUTKEQ4MjU2NjhCMUFDMUI3RjM4MTVGMDdCQ0RBNTdFNzQ4 QzQ5NjRBOUEwHhcNMjYwOTIxMDgzMTE5WhcNMjYwOTI4MDgzMTE5WjAYMRYwFAYD VQQDEw02YWIwZWI1OC04ZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppVoxErA0scFLPiV4A5Bl8fPA/7AZ3zcNp50bqohqtHe7vOMS/1sAjBVwDFM VMebvsY9TrBPdHHINAs907dJ9B87iLk7hhzlz3nMhdSvhETWo22S9ZVEixgGN0lJ vMb9cezp1StKBoeJqyRDY2m6J0QSiWh2QArpr2DRRX4JhRrgsa8JRqutSzNNOdDa NDTcX6PBAYFHFW5J5QjNtmDocyHwQIbU7dwvdPuVW7wpC8OKvnMCAqDV93M7H/Mu F0jYtSHrWG0XLtOxshDVqLEAAO9GbjPDV3B3RJg28wAzUpEkKaPun7LRBlLWJmKX jyzPLDpRMcpncl+8gvbunj6iTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUfaVY5 TicQWGyfUFLgWRfJEjoMMB8GA1UdIwQYMBaAFNglZosawbfzgV8HvNpX50jElkqa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZDMy81QkY1MTkyQUUw NjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhyQnRfT0JYd2U4MmxmblNNU1dT cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDVm1peHJCdF9PQlh3ZTgybGZuU01TV1Nwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTZDMy81QkY1MTkyQUUwNjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhyQnRf T0JYd2U4MmxmblNNU1dTcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC/jrjCmDl+Evwm0+Y0tLrdMsUcRBLd315AkPz88Hn3r36/G7pOx6PZO1yPww qPJcKs8SWprZ15f4SFcSzx9WUXzELP3UA5nwxe2mV6+Osd/FCZipERKtC7HHE1n4 XcodjuonkA7eyO61aSr9ieEAbxCLU2sz5RjkXJ8Zr/kyc81K+/KWw6oatRf7prZX MU3TFv4Z0SR75pdw6FWX00c4nps1KC8+RKmpREKGA2MDbElYdsCp8Zs8fFBAEqxP xhIVObOf9VaQxnW9Mog6TuDONoxFYATOpyG2BC0Lm94NtwFmGt0aF3UlTJsdgSl9 2pI1gYKZhnqnyoVeeBm1hpycfQ== -----END CERTIFICATE-----Generated at Tue Sep 22 00:29:31 2026 by rpki-client