$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: lMXSUtAWJCaB5MAl4m5tVMrR0acRWaHdRMjekSnsV68= Subject key identifier: 27:58:10:96:43:CB:D5:AC:10:5C:4C:DC:FD:B1:20:8C:5D:9B:C1:75 Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 0598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 055F Signing time: Sun 20 Sep 2026 23:13:02 +0000 Manifest this update: Sun 20 Sep 2026 23:13:01 +0000 Manifest next update: Sun 27 Sep 2026 23:13:01 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: 83wCL4sianu9Qbv8MYCQqAQnCwS6ugU839R9NlzceiM=) 2: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: dY+BZEOINurtJjOA3yhjmWQ4kx2Zua1d5uXKZrya/Kk=) 3: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=) 4: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7xZPQJy4FlDqQRK4ZNxBOqn11xvYRCTnG5Hl+SBa0kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Sep 20 23:13:01 2026 GMT Not After : Sep 27 23:13:01 2026 GMT Subject: CN=6ab0687e-3b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:64:99:c2:37:34:2b:19:85:af:8c:0a:bd: e7:8f:1c:5c:60:49:28:b2:b6:6c:8f:73:00:69:3c: 00:52:63:5f:b9:fb:50:8d:23:18:1a:5f:11:2e:75: 2f:dd:7d:41:29:ea:73:83:6e:10:df:38:bd:41:35: 62:7a:b9:fd:44:39:3e:b9:61:2d:52:ea:44:e2:9b: 3e:6d:34:2c:70:a1:1c:d8:c4:ab:6c:ac:47:3a:29: 19:1a:fc:06:ae:d1:1d:6f:43:96:c6:3f:7d:a8:78: fa:96:d4:b1:5f:42:70:60:33:cb:dc:fe:de:2b:ea: a9:8f:ee:8f:36:1e:d1:7a:d4:bc:90:9f:a9:c6:e0: 2d:25:e6:ec:02:f6:cd:e4:37:33:57:1d:37:6b:4f: 8a:9a:c8:f5:94:e5:b5:54:4f:1e:d3:2e:79:ec:0a: e4:1d:0d:24:41:e5:c3:e5:d6:dc:21:b2:c0:52:2b: cb:c7:95:4c:05:40:19:fd:6d:3b:07:c9:91:a4:d5: ad:da:e9:b3:d4:28:d7:b2:6e:a6:1a:c1:77:7d:dc: 3f:ee:b7:12:51:fe:00:28:6e:29:d0:b5:bf:30:12: 91:8d:51:4a:12:a4:0f:2c:07:74:79:12:4f:36:73: 22:20:6a:bd:8e:1a:2d:38:47:a3:7f:61:58:91:c7: 83:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:58:10:96:43:CB:D5:AC:10:5C:4C:DC:FD:B1:20:8C:5D:9B:C1:75 X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bd:ec:bb:a3:b2:06:5f:2b:8e:f7:72:db:33:82:82:3a:90: d3:39:16:e0:13:f3:31:12:12:de:32:00:a7:ec:ce:cd:ce:28: 8e:55:5c:c4:7a:aa:31:9a:a6:22:e1:f5:6a:1c:ca:11:0b:a6: 53:18:d9:1f:c3:15:11:b7:69:69:e3:82:5d:16:1f:d1:ce:00: 2c:5f:b5:e9:03:13:e3:8f:82:d2:57:3c:85:a0:21:ce:65:18: 4d:82:ba:01:46:0e:37:fa:6d:df:c2:f4:ea:97:5a:a1:a8:99: 7e:72:dc:f7:4f:69:3e:47:e1:72:d9:8f:01:41:af:a6:99:b7: f8:11:d8:e5:24:bc:d6:66:9b:61:57:22:8c:6c:01:a2:4c:7f: 21:50:44:27:c2:a6:61:15:4e:44:d5:08:e9:40:27:75:fc:16: be:24:04:c3:73:c1:1e:76:5c:ba:6c:d3:63:4e:82:4c:fa:0e: 73:53:a3:37:70:15:36:a8:b2:3f:e4:3b:6c:16:0b:02:0c:e9: 97:a0:41:02:34:c5:ff:5f:4d:ad:e8:a6:e2:17:f1:73:26:c4: f3:c6:a2:d5:41:6b:fc:ee:56:3c:0b:d3:63:e8:e5:57:76:ca: 5a:1f:70:9d:ed:6d:ac:50:f2:35:cb:7f:6e:d4:7d:58:fa:cb: be:ac:c2:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYwOTIwMjMxMzAxWhcNMjYwOTI3MjMxMzAxWjAYMRYwFAYD VQQDEw02YWIwNjg3ZS0zYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDxkmcI3NCsZha+MCr3njxxcYEkosrZsj3MAaTwAUmNfuftQjSMYGl8RLnUv 3X1BKepzg24Q3zi9QTViern9RDk+uWEtUupE4ps+bTQscKEc2MSrbKxHOikZGvwG rtEdb0OWxj99qHj6ltSxX0JwYDPL3P7eK+qpj+6PNh7RetS8kJ+pxuAtJebsAvbN 5DczVx03a0+Kmsj1lOW1VE8e0y557ArkHQ0kQeXD5dbcIbLAUivLx5VMBUAZ/W07 B8mRpNWt2umz1CjXsm6mGsF3fdw/7rcSUf4AKG4p0LW/MBKRjVFKEqQPLAd0eRJP NnMiIGq9jhotOEejf2FYkceD5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdYEJZD y9WsEFxM3P2xIIxdm8F1MB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWr3su6OyBl8rjvdy2zOCgjqQ0zkW4BPzMRIS3jIAp+zOzc4ojlVcxHqqMZqm IuH1ahzKEQumUxjZH8MVEbdpaeOCXRYf0c4ALF+16QMT44+C0lc8haAhzmUYTYK6 AUYON/pt38L06pdaoaiZfnLc909pPkfhctmPAUGvppm3+BHY5SS81mabYVcijGwB okx/IVBEJ8KmYRVORNUI6UAndfwWviQEw3PBHnZcumzTY06CTPoOc1OjN3AVNqiy P+Q7bBYLAgzpl6BBAjTF/19Nreim4hfxcybE88ai1UFr/O5WPAvTY+jlV3bKWh9w ne1trFDyNct/btR9WPrLvqzC2A== -----END CERTIFICATE-----Generated at Mon Sep 21 17:39:57 2026 by rpki-client