$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft File: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft (raw, json) Hash identifier: 6tPyc6xrvq2L1PiH8VZaSQtcriR65RhC50SQDU9SwM0= Subject key identifier: 29:9B:C5:49:61:B4:23:7B:40:7E:61:2E:3B:61:AE:D0:84:49:39:61 Authority key identifier: D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F Certificate issuer: /CN=A91758EC/serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft Manifest number: EE Signing time: Mon 05 Oct 2026 06:56:43 +0000 Manifest this update: Mon 05 Oct 2026 06:56:42 +0000 Manifest next update: Mon 12 Oct 2026 06:56:42 +0000 Files and hashes: 1: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl (hash: SzUIK16aydY9c6dUiMwwSO2+SO7FA4Z2RBeFBqZ5Kzc=) 2: 1B34EF06FC1C11F0AA0D3BE4396F56BC.roa (hash: iqYV9/xnKXVfiZZcxAVxMjO3LAkmh0lLnZhQciHJSJg=) 3: 1AC14F60FC1C11F0AA0D3BE4396F56BC.roa (hash: aYDnHlZZ14KegbsrCL1Glj9EDgxGx2Y0U5BoskwOni4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 06:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758EC, serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F Validity Not Before: Oct 5 06:56:42 2026 GMT Not After : Oct 12 06:56:42 2026 GMT Subject: CN=6ac34a2b-8c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:f5:83:4c:1d:8c:d7:57:84:a8:66:53:be: d8:e0:37:57:db:e6:29:8a:a6:e6:f3:4c:71:b9:bc: a2:98:c1:12:ee:42:8e:2e:8d:9a:af:fb:2b:8d:3e: 8a:a1:98:da:2d:68:e9:b6:3d:a2:51:63:09:7e:a4: 0b:d1:68:20:db:61:b9:05:56:a0:a0:83:36:37:ea: 3f:33:14:f5:b7:94:24:8f:43:d8:8e:04:4b:15:25: 08:05:6c:38:90:a2:30:6d:2f:89:ef:ad:d1:73:25: 71:24:bd:76:18:f8:1c:36:72:77:f6:09:78:79:c1: 9e:86:71:e0:3b:33:cc:ba:37:d7:06:67:c9:d2:02: e6:38:5e:0b:a0:7e:6d:4d:1c:fa:8d:2e:c4:52:44: b7:52:40:65:78:a9:97:29:b5:f3:b2:8d:94:a7:15: ee:a9:41:6e:45:3e:bf:0f:72:94:55:aa:cb:1b:e4: b0:9b:25:b7:d5:3b:6f:43:d8:79:82:fb:96:45:86: 5b:45:9a:83:18:56:9b:35:cc:3c:f8:a4:ba:dd:b9: b9:7a:6d:1a:e7:a8:9d:99:eb:1c:9a:3a:b1:cb:a8: 3c:18:b8:1b:7c:c7:78:01:16:c4:74:73:d4:ba:d6: 9f:96:be:9e:43:bf:a0:9e:cb:07:c2:67:a0:66:13: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9B:C5:49:61:B4:23:7B:40:7E:61:2E:3B:61:AE:D0:84:49:39:61 X509v3 Authority Key Identifier: keyid:D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:7b:a7:9b:3e:0d:b7:1f:d9:60:8f:9d:ab:45:d4:73:5c:96: 57:4a:44:1a:66:38:eb:9e:37:fd:68:b3:a4:32:41:4b:fb:82: e4:08:a1:14:71:c4:ab:f8:fd:ca:93:77:4f:c2:71:c6:f6:22: e4:16:4f:06:97:24:67:d6:d7:1f:f2:3c:ea:ba:47:fc:9f:c0: df:67:12:e5:b6:78:de:31:5b:55:d4:a1:92:ff:c2:62:ce:d5: 53:42:76:66:41:aa:84:42:5c:dd:d4:07:7d:43:f7:df:11:20: 38:e3:10:47:b8:92:f3:c3:45:30:a3:ec:e8:63:0c:94:fc:97: 48:6b:91:46:60:f6:73:b1:7b:11:a2:5b:e8:cd:33:d0:de:1b: 80:99:f4:4c:82:0a:32:f8:05:44:a1:14:41:3f:dc:91:c9:11: 58:4e:2a:de:76:44:ba:81:08:6c:eb:61:eb:37:40:38:81:65: 6d:7f:85:d6:56:ec:3b:05:59:37:ab:24:ad:ab:e6:12:9e:4b: 92:72:16:bb:49:87:c4:f4:f0:2b:46:1b:57:b9:fb:7c:2f:17: 10:f5:38:1e:c2:6c:09:57:29:d7:a1:2b:80:52:31:ee:f1:e9: e6:01:35:a5:95:21:f8:0f:05:9c:ef:ab:0c:8c:2c:33:b9:3c: f2:32:3c:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4RUMxMTAvBgNVBAUTKEQ4MjdCNjg0M0VCN0Y2QjlGMEVENUYyRkY3MjM0NEE1 MkMwNEI0OUYwHhcNMjYxMDA1MDY1NjQyWhcNMjYxMDEyMDY1NjQyWjAYMRYwFAYD VQQDEw02YWMzNGEyYi04YzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubT1g0wdjNdXhKhmU77Y4DdX2+Ypiqbm80xxubyimMES7kKOLo2ar/srjT6K oZjaLWjptj2iUWMJfqQL0Wgg22G5BVagoIM2N+o/MxT1t5Qkj0PYjgRLFSUIBWw4 kKIwbS+J763RcyVxJL12GPgcNnJ39gl4ecGehnHgOzPMujfXBmfJ0gLmOF4LoH5t TRz6jS7EUkS3UkBleKmXKbXzso2UpxXuqUFuRT6/D3KUVarLG+SwmyW31TtvQ9h5 gvuWRYZbRZqDGFabNcw8+KS63bm5em0a56idmescmjqxy6g8GLgbfMd4ARbEdHPU utaflr6eQ7+gnssHwmegZhM7VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmbxUlh tCN7QH5hLjthrtCESTlhMB8GA1UdIwQYMBaAFNgntoQ+t/a58O1fL/cjRKUsBLSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThFQy82QkY4NkI4NDY2 MzAxMUYwQjlEQzRFNjRDNEY5QUUwMi8yQ2UyaEQ2Mzlybnc3Vjh2OXlORXBTd0V0 SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDZTJoRDYzOXJudzdWOHY5eU5FcFN3RXRKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThFQy82QkY4NkI4NDY2MzAxMUYwQjlEQzRFNjRDNEY5QUUwMi8yQ2UyaEQ2Mzly bnc3Vjh2OXlORXBTd0V0SjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtXunmz4Ntx/ZYI+dq0XUc1yWV0pEGmY46543/WizpDJBS/uC5AihFHHEq/j9 ypN3T8JxxvYi5BZPBpckZ9bXH/I86rpH/J/A32cS5bZ43jFbVdShkv/CYs7VU0J2 ZkGqhEJc3dQHfUP33xEgOOMQR7iS88NFMKPs6GMMlPyXSGuRRmD2c7F7EaJb6M0z 0N4bgJn0TIIKMvgFRKEUQT/ckckRWE4q3nZEuoEIbOth6zdAOIFlbX+F1lbsOwVZ N6skravmEp5LknIWu0mHxPTwK0YbV7n7fC8XEPU4HsJsCVcp16ErgFIx7vHp5gE1 pZUh+A8FnO+rDIwsM7k88jI8og== -----END CERTIFICATE-----Generated at Tue Oct 6 01:58:05 2026 by rpki-client