$ rpki-client -vvvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json) Hash identifier: hQ043ygZRwmcFU78+hseQSsnH8nckxsAXh990EYL6vE= Subject key identifier: CD:28:CA:D2:9F:43:BD:BC:33:63:9E:ED:B6:B2:59:7E:59:EB:08:D1 Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Certificate serial: 3588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft Manifest number: 3582 Signing time: Sun 20 Sep 2026 14:48:28 +0000 Manifest this update: Sun 20 Sep 2026 14:48:27 +0000 Manifest next update: Sun 27 Sep 2026 14:48:27 +0000 Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: nr3qSdpDPBfO3NSxDjI6hC5SZtXejsGrMcGo10RgUes=) 2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: RTpAZwruc7NuoT/Wh4GeFBLqLMrhtkNDUYMQpCl+t8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13704 (0x3588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Validity Not Before: Sep 20 14:48:27 2026 GMT Not After : Sep 27 14:48:27 2026 GMT Subject: CN=6aaff23c-131b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:41:43:fe:ef:67:7b:0c:0c:dc:be:fe:28: 29:e8:a4:f0:ff:56:8c:ba:31:3a:2e:d1:7c:85:3c: 52:2f:9f:30:a6:44:f2:65:48:97:75:f6:28:08:59: a6:75:50:37:ec:82:9e:03:8f:e4:8e:95:3c:5b:87: a3:46:c0:e7:e1:8d:91:94:be:ff:d0:a7:01:18:66: 96:8d:60:d4:13:18:f3:fe:27:40:64:66:16:be:50: d9:bb:f4:68:c0:65:b6:16:4f:3f:5f:4f:b1:0b:8d: e9:c8:7d:dc:d4:61:b3:9b:9f:aa:f7:86:57:97:9b: 96:10:8c:be:c5:1f:37:1b:0c:8a:33:e8:89:2d:3c: 4b:ff:69:85:fc:6a:1e:95:84:13:b4:e2:aa:2a:29: c5:f0:49:6d:6e:1d:5a:f6:dc:41:98:eb:7e:f0:27: 47:f9:20:c1:cb:b1:b8:83:59:06:ca:88:54:55:3c: 1b:3f:19:f6:da:50:ae:ab:c3:03:3a:f2:2e:6a:fc: 98:12:91:74:62:f4:eb:4f:98:49:3a:5a:19:14:7c: 30:31:14:52:97:18:f4:7d:fc:4b:4c:54:0e:4a:44: a0:33:b1:77:40:d6:37:50:30:24:b9:2a:ec:c3:2d: b4:c7:54:f4:82:55:b9:23:e6:dc:15:c0:17:45:8e: c7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:28:CA:D2:9F:43:BD:BC:33:63:9E:ED:B6:B2:59:7E:59:EB:08:D1 X509v3 Authority Key Identifier: keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:03:47:f2:6c:3d:2a:af:14:4c:59:bc:c7:97:c6:79:8c:c7: 63:d8:7a:9c:bd:c2:cc:f3:b7:e3:c7:31:d7:5d:23:91:76:37: 3a:ee:e6:07:9d:f9:81:2c:d7:89:2b:96:59:24:35:8e:e0:48: d0:71:27:a2:97:35:a2:7b:4b:00:df:e0:0c:7a:28:7b:90:38: 5e:94:81:d2:20:95:2f:4f:67:d3:fd:e2:c9:77:f9:97:ca:35: 53:d8:77:90:3c:d0:95:2b:13:11:68:c1:af:1d:00:58:6e:f4: 2d:04:6d:0f:0a:06:41:7e:13:e8:85:cb:4d:be:c9:74:96:6f: f0:85:a0:d4:e6:f4:af:ba:d4:02:d1:02:1a:26:0e:8a:57:0a: ec:f3:2f:34:e2:94:e6:05:7c:91:59:f2:1d:43:e7:9c:09:5a: 7a:28:d6:6b:92:c4:26:5c:0d:3d:f6:39:8b:5d:7d:91:28:30: 10:20:e2:92:ae:15:ef:92:6e:2e:11:0f:9a:b2:5e:34:87:e1: 23:a0:9b:44:5f:14:7c:21:bf:df:ae:d4:f3:c5:89:4c:c1:77: 8c:15:18:1a:0a:2d:73:2e:3e:1e:35:1e:9d:d8:11:a3:10:ce: 5e:e2:79:96:51:7e:d8:f7:86:d1:b2:60:c4:fb:85:e5:c2:a7: 20:c5:80:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE NUZGQkQ4MzgwHhcNMjYwOTIwMTQ0ODI3WhcNMjYwOTI3MTQ0ODI3WjAYMRYwFAYD VQQDEw02YWFmZjIzYy0xMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA1BQ/7vZ3sMDNy+/igp6KTw/1aMujE6LtF8hTxSL58wpkTyZUiXdfYoCFmm dVA37IKeA4/kjpU8W4ejRsDn4Y2RlL7/0KcBGGaWjWDUExjz/idAZGYWvlDZu/Ro wGW2Fk8/X0+xC43pyH3c1GGzm5+q94ZXl5uWEIy+xR83GwyKM+iJLTxL/2mF/Goe lYQTtOKqKinF8Eltbh1a9txBmOt+8CdH+SDBy7G4g1kGyohUVTwbPxn22lCuq8MD OvIuavyYEpF0YvTrT5hJOloZFHwwMRRSlxj0ffxLTFQOSkSgM7F3QNY3UDAkuSrs wy20x1T0glW5I+bcFcAXRY7HiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0oytKf Q728M2Oe7bayWX5Z6wjRMB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8zOUFBMEEwMjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhX MFpVRkR0eUxZVDdWXzcyRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqANH8mw9Kq8UTFm8x5fGeYzHY9h6nL3CzPO348cx110jkXY3Ou7mB535gSzX iSuWWSQ1juBI0HEnopc1ontLAN/gDHooe5A4XpSB0iCVL09n0/3iyXf5l8o1U9h3 kDzQlSsTEWjBrx0AWG70LQRtDwoGQX4T6IXLTb7JdJZv8IWg1Ob0r7rUAtECGiYO ilcK7PMvNOKU5gV8kVnyHUPnnAlaeijWa5LEJlwNPfY5i119kSgwECDikq4V75Ju LhEPmrJeNIfhI6CbRF8UfCG/367U88WJTMF3jBUYGgotcy4+HjUendgRoxDOXuJ5 llF+2PeG0bJgxPuF5cKnIMWAvw== -----END CERTIFICATE-----Generated at Tue Sep 22 04:22:29 2026 by rpki-client