$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: muum/KLk/jH70N4scjbGNGtMxUWkDdezk9DIayVwBUQ= Subject key identifier: 89:B8:FC:5F:CC:66:BA:60:34:D5:8E:35:0B:29:41:36:84:4D:08:95 Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0F07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0EEA Signing time: Sun 20 Sep 2026 17:38:29 +0000 Manifest this update: Sun 20 Sep 2026 17:38:28 +0000 Manifest next update: Sun 27 Sep 2026 17:38:28 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: nnZgIstbxY5U9wNO+yoaDui62bcd0uJx63DhSnlQnHY=) 2: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 8cuyoSN28q4uL8xy1DF6fDKydmWDLPM+OObCbWczh0k=) 3: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: otCvD2+70hExeG7UwhAKqvYl8H+cUijlEBEY7BdlZms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3847 (0xf07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Sep 20 17:38:28 2026 GMT Not After : Sep 27 17:38:28 2026 GMT Subject: CN=6ab01a15-5766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:5e:5e:79:01:2d:f7:a4:98:24:c4:51:1a: 85:e2:71:66:f8:96:db:e7:f3:46:ab:8f:43:4f:78: ec:fe:e9:32:71:4c:3a:34:a5:93:c2:11:a3:3a:2a: b3:e7:f1:dd:e0:63:96:46:89:81:72:04:64:c7:fb: 37:00:f1:20:05:7c:79:23:7d:c7:83:a9:83:03:93: c2:56:f8:f5:0a:ae:79:5d:c2:b7:80:03:eb:d9:66: 5e:09:d2:20:43:1c:de:71:ec:0d:4b:19:7f:5c:68: a6:96:a4:60:9d:74:b2:fe:65:c0:e5:03:d3:d3:ee: 46:5c:ce:42:74:38:fd:71:92:66:7f:d9:f3:ab:97: a7:26:dc:3b:4e:ca:fe:03:43:5c:8c:7b:6b:2c:db: 5b:2f:20:4f:c4:82:07:47:b4:71:6a:67:6f:5e:ad: f7:ce:c3:e6:22:64:f9:ed:b5:93:aa:5d:03:c1:e8: 9a:78:92:f8:d5:fa:88:a7:be:7a:43:dd:2c:84:c2: 71:d5:ec:96:f5:e3:ac:98:af:33:21:69:10:c3:72: c5:2c:14:4d:97:ce:2a:7c:f2:9c:fa:8c:66:2b:fb: a6:27:b1:66:80:63:0e:ac:59:6c:8f:3e:14:3e:7c: 5b:df:55:f9:96:6c:64:ab:b9:92:8a:34:ea:97:ba: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B8:FC:5F:CC:66:BA:60:34:D5:8E:35:0B:29:41:36:84:4D:08:95 X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ae:07:7a:a8:20:17:d7:93:89:3d:dc:35:78:c0:4a:c5:e6: fa:a0:6e:47:10:ec:09:60:0a:9f:3d:04:4a:62:3f:50:9e:66: f8:d8:4a:e8:4f:1c:8a:43:bd:23:21:83:68:10:36:a9:99:9c: 72:e7:b7:d3:bb:59:d1:1d:71:af:c3:02:75:13:59:05:71:e5: 24:ec:cc:32:1b:20:ce:2f:b0:34:cb:fe:fe:37:71:e6:b1:71: 3c:a6:70:87:d5:3e:58:01:f7:5b:cd:0e:98:88:ce:ff:6c:76: 04:44:59:b7:21:b4:f4:e2:58:02:ef:6c:8d:84:16:60:09:a7: 92:27:db:bb:ae:e5:56:b1:c8:15:b9:0a:24:c3:ed:93:3f:8e: 0c:a5:61:ed:e5:fe:06:5e:c3:dc:14:24:f7:74:93:1e:d4:73: a0:09:e0:b4:29:c0:24:f1:14:69:d1:61:21:aa:2e:44:21:af: 21:9f:f0:9b:8e:8b:78:f2:f8:1d:d3:39:e1:e0:0e:77:f2:72: 9e:42:b2:3e:44:b0:96:2b:19:8c:7a:1e:02:44:a2:b2:be:54: 97:3a:57:b6:fc:03:cb:f8:2a:57:57:0f:1c:e9:76:34:6f:fc: 02:59:69:d8:95:da:67:f6:96:6a:44:ed:54:fb:c2:e2:99:b1: 19:f8:11:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjYwOTIwMTczODI4WhcNMjYwOTI3MTczODI4WjAYMRYwFAYD VQQDEw02YWIwMWExNS01NzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsl9eXnkBLfekmCTEURqF4nFm+Jbb5/NGq49DT3js/ukycUw6NKWTwhGjOiqz 5/Hd4GOWRomBcgRkx/s3APEgBXx5I33Hg6mDA5PCVvj1Cq55XcK3gAPr2WZeCdIg QxzecewNSxl/XGimlqRgnXSy/mXA5QPT0+5GXM5CdDj9cZJmf9nzq5enJtw7Tsr+ A0NcjHtrLNtbLyBPxIIHR7RxamdvXq33zsPmImT57bWTql0DweiaeJL41fqIp756 Q90shMJx1eyW9eOsmK8zIWkQw3LFLBRNl84qfPKc+oxmK/umJ7FmgGMOrFlsjz4U Pnxb31X5lmxkq7mSijTql7rLFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIm4/F/M ZrpgNNWONQspQTaETQiVMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFK4HeqggF9eTiT3cNXjASsXm+qBuRxDsCWAKnz0ESmI/UJ5m+NhK6E8cikO9 IyGDaBA2qZmccue307tZ0R1xr8MCdRNZBXHlJOzMMhsgzi+wNMv+/jdx5rFxPKZw h9U+WAH3W80OmIjO/2x2BERZtyG09OJYAu9sjYQWYAmnkifbu67lVrHIFbkKJMPt kz+ODKVh7eX+Bl7D3BQk93STHtRzoAngtCnAJPEUadFhIaouRCGvIZ/wm46LePL4 HdM54eAOd/JynkKyPkSwlisZjHoeAkSisr5UlzpXtvwDy/gqV1cPHOl2NG/8Allp 2JXaZ/aWakTtVPvC4pmxGfgRhw== -----END CERTIFICATE-----Generated at Mon Sep 21 15:32:21 2026 by rpki-client