$ rpki-client -vvvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: txqPEls3mefbue+kPI04FohFCbXzs8cZk4oly9vNEnc= Subject key identifier: F0:12:AF:EB:93:BE:EE:B7:3C:AF:4E:D1:B0:99:FC:CA:09:B0:5D:77 Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 06C6 Signing time: Sun 20 Sep 2026 22:16:47 +0000 Manifest this update: Sun 20 Sep 2026 22:16:47 +0000 Manifest next update: Sun 27 Sep 2026 22:16:47 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: ruR89pHJZNW1D7olTCAf3U9InHS7pXLrB2n1wA5pm9k=) 2: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: WtM7Gf9McV4dyBDihaoF7GIKprC8LiyJNTcZV2E7ygM=) 3: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: XThbuRDJ9AeBHR2f0+N9y3PVKHkkMbkQnJqbi1dA8dk=) 4: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: eA6mWyuVV1KikVqgTq4NzwsvdlA+Lo+7hoRNd7wEZiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Sep 20 22:16:47 2026 GMT Not After : Sep 27 22:16:47 2026 GMT Subject: CN=6ab05b4f-ee70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:93:b4:db:64:2e:c8:07:ae:c4:86:73:12:2b: 4c:eb:8a:cc:66:3c:4d:c4:df:5b:73:c6:37:0b:34: 4d:eb:fa:80:4a:88:a7:6a:a9:e0:b5:4f:8e:d6:5b: 98:8b:61:14:5a:9d:bf:3f:df:6b:15:f3:c5:63:46: 95:74:57:c7:87:ac:f1:c8:c5:1f:64:ac:10:16:3e: 74:01:4b:14:4f:fe:e5:1d:1e:3c:94:cf:87:8d:1d: a9:24:76:7f:1c:31:20:46:a2:34:bc:5a:46:38:09: 65:4b:85:19:87:f5:c0:0c:a3:d3:7c:3b:9e:01:41: 9e:8d:7f:63:47:3d:ae:27:bb:8b:7e:40:a3:f7:37: 97:77:be:40:4b:8d:8b:0b:6b:20:2b:59:a8:9b:5f: 35:f1:61:59:0f:1d:80:9f:9a:b6:63:f1:83:a1:c4: 1a:ad:43:a9:8b:b2:62:64:21:01:71:3c:ed:3c:64: c8:31:df:26:99:f3:17:84:d1:18:bf:54:48:ec:27: 63:09:8c:a3:21:b5:70:75:5c:58:e5:a4:7e:9e:9e: c7:3d:37:c7:12:4e:7e:fe:fd:25:47:d0:3d:05:9e: 8a:1a:99:1a:fe:d4:a1:e0:7b:52:00:79:27:7a:14: ad:6e:e9:aa:13:ac:0b:ce:a4:31:34:4b:82:26:57: 91:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:12:AF:EB:93:BE:EE:B7:3C:AF:4E:D1:B0:99:FC:CA:09:B0:5D:77 X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:af:e9:cd:b2:69:84:d8:76:46:0e:b6:68:1b:40:0e:d1:5d: b9:31:f5:ac:88:46:89:25:b9:36:4a:1a:95:34:44:e3:89:dd: 7a:fb:85:27:c4:53:b1:22:24:41:35:cf:0a:a1:4c:e8:bc:6d: 03:45:d7:73:a9:9f:36:e4:19:77:c2:e5:62:a0:1c:5f:44:0a: ce:fe:20:b2:a6:bf:f2:d3:d9:10:e2:b6:c9:9b:51:6e:f1:ea: 4a:a5:a0:45:c4:c3:c6:30:20:0e:79:b4:b2:dd:a1:65:4f:08: 70:9c:3c:d7:2b:1a:ba:0a:54:1f:60:5e:39:1e:29:3f:c6:37: 15:24:19:cf:4d:b8:60:2f:bd:dc:9a:2d:47:9d:79:85:c9:80: 74:92:1b:4e:5d:e1:7a:c2:73:f0:14:b3:1c:67:f7:47:93:e0: de:e5:b5:5e:c1:00:56:f8:42:be:fd:85:3d:eb:c6:78:34:ba: 13:d4:f8:28:cb:a6:00:be:bf:1e:1e:a0:fd:c2:bc:b7:5e:db: ed:18:31:26:27:ee:21:01:3e:b4:18:fc:8f:73:e7:9b:dd:da: dc:2c:4f:85:31:95:64:8e:03:da:03:74:93:c0:59:60:a3:38: a8:c4:ea:ac:e5:2e:a6:72:4e:bc:1a:7c:c0:86:55:bd:7e:90: ce:3c:13:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjYwOTIwMjIxNjQ3WhcNMjYwOTI3MjIxNjQ3WjAYMRYwFAYD VQQDEw02YWIwNWI0Zi1lZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ZO022QuyAeuxIZzEitM64rMZjxNxN9bc8Y3CzRN6/qASoinaqngtU+O1luY i2EUWp2/P99rFfPFY0aVdFfHh6zxyMUfZKwQFj50AUsUT/7lHR48lM+HjR2pJHZ/ HDEgRqI0vFpGOAllS4UZh/XADKPTfDueAUGejX9jRz2uJ7uLfkCj9zeXd75AS42L C2sgK1mom1818WFZDx2An5q2Y/GDocQarUOpi7JiZCEBcTztPGTIMd8mmfMXhNEY v1RI7CdjCYyjIbVwdVxY5aR+np7HPTfHEk5+/v0lR9A9BZ6KGpka/tSh4HtSAHkn ehStbumqE6wLzqQxNEuCJleRsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPASr+uT vu63PK9O0bCZ/MoJsF13MB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdK/pzbJphNh2Rg62aBtADtFduTH1rIhGiSW5NkoalTRE44ndevuFJ8RTsSIk QTXPCqFM6LxtA0XXc6mfNuQZd8LlYqAcX0QKzv4gsqa/8tPZEOK2yZtRbvHqSqWg RcTDxjAgDnm0st2hZU8IcJw81ysaugpUH2BeOR4pP8Y3FSQZz024YC+93JotR515 hcmAdJIbTl3hesJz8BSzHGf3R5Pg3uW1XsEAVvhCvv2FPevGeDS6E9T4KMumAL6/ Hh6g/cK8t17b7RgxJifuIQE+tBj8j3Pnm93a3CxPhTGVZI4D2gN0k8BZYKM4qMTq rOUupnJOvBp8wIZVvX6QzjwT+w== -----END CERTIFICATE-----Generated at Mon Sep 21 02:25:30 2026 by rpki-client