$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: swYzzTfgFYpcDRdpiAykD/DFynbU7Xg9ZcfZa6Vmyks= Subject key identifier: 0F:97:C0:03:BB:BF:C4:F0:B6:13:19:27:85:A0:34:F0:94:D7:09:AC Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 071A Signing time: Fri 18 Sep 2026 22:17:36 +0000 Manifest this update: Fri 18 Sep 2026 22:17:36 +0000 Manifest next update: Fri 25 Sep 2026 22:17:36 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: 5UwPicYWNZZG/0yBXzEOotT1WXzah680JOn5/EEPD3M=) 2: 617AEF02C0A211F0834F0B2EC4F9AE02.roa (hash: KgeNZjOBJ42HpJACCb711eHire6fiDgLEF/Xo0eMJeA=) 3: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: JTbKsHFx+JSM84iW9xko9N7Okk/mqyrOefd13JgYJNw=) 4: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 2brVbLcxFpkOdqJzW7e08UEC0cEZEhN9mp+0lEZR2Nc=) 5: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: LsZss9o8fjCvnbyvSBibOl6q+s/uuecXP0U4tl/bNBg=) 6: 845606CEC0A211F08C07402EC4F9AE02.roa (hash: lKlHcPk4OtOc4NS/UdbE4j0ub1XPeST9dptNnvXi284=) 7: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: mPpc2gVSiIA4mhoDYgTXEf2CYWV9o2k7934LA3uchfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Sep 18 22:17:36 2026 GMT Not After : Sep 25 22:17:36 2026 GMT Subject: CN=6aadb880-4f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:a3:bc:c4:ea:67:b7:fa:42:6f:cd:db:b9: 89:f3:87:73:5b:0c:22:60:91:69:fb:81:b6:e9:2e: d6:aa:f8:63:a7:6d:42:67:f7:4f:58:db:67:98:a8: b5:e1:57:be:0c:0c:34:d9:95:c8:76:a3:2b:3f:8e: b1:1d:33:3e:b3:eb:f3:28:e9:1d:4b:fa:91:59:d5: 4c:4c:ce:55:64:8d:12:7c:21:1f:11:ac:53:7e:80: f3:04:c6:0a:47:e4:65:1c:0a:2b:11:f9:6d:5c:cd: 2f:f4:0c:83:d7:f7:2a:7d:24:89:df:27:a4:43:19: 2b:2f:1a:ee:5a:66:16:18:e4:b5:0c:67:96:f1:0c: cb:c9:aa:dd:94:ed:e0:73:79:16:13:12:ab:d8:df: 30:d9:56:56:bd:38:fb:00:64:42:87:4d:81:5f:74: ca:b5:8f:bb:dd:dc:03:76:c9:83:fa:ab:68:88:8c: 30:80:33:73:e4:5e:1e:a2:44:36:80:03:7d:13:5b: 64:c9:bc:90:c7:53:2f:9f:72:78:2a:c7:95:83:94: 8b:a3:5b:3b:b4:d2:3a:e2:a5:58:0a:50:be:dc:26: b3:67:50:8a:6f:fb:6b:f6:ca:80:ba:27:d8:31:6f: db:16:58:72:a0:7e:d8:53:e2:54:54:35:6f:3a:9f: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:97:C0:03:BB:BF:C4:F0:B6:13:19:27:85:A0:34:F0:94:D7:09:AC X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:c1:18:b7:c7:d0:f6:16:84:bc:1d:bf:58:94:78:fd:c0:fd: c5:e0:b8:c6:54:cd:17:74:b0:15:a7:cc:c8:cf:0e:03:23:18: 0f:da:8b:79:de:4e:bf:49:15:f1:d5:cf:30:d9:20:91:87:11: 2b:b3:28:63:30:41:a2:e2:45:a1:04:8d:4b:84:94:a4:1b:62: b4:1f:73:c8:86:70:df:4e:51:04:af:b0:fa:3f:77:06:63:3b: e1:04:5a:c4:7b:ba:c4:c1:e2:d8:2f:27:f6:d7:2b:55:1b:60: 26:c8:03:34:cc:41:dc:42:02:aa:3d:4f:8d:54:92:35:a8:05: 01:04:4f:ba:5d:50:e0:88:73:5a:88:fb:cb:f3:57:1b:3d:a9: 9e:45:aa:85:91:b1:8d:87:c3:44:9c:4e:c4:21:0e:74:4f:9c: 31:be:1b:be:14:66:87:d3:4b:73:fe:06:59:a6:4a:46:c0:f2: 1e:f2:19:b2:77:2e:87:9b:ed:7e:a5:91:8f:0d:4b:e7:0a:87: 9c:da:d6:8e:c4:ab:89:4a:ef:1e:d2:99:d5:eb:e2:81:91:ff: c3:7b:bf:bc:09:80:84:c1:75:81:be:e4:9a:6d:1d:48:56:9f: c5:fd:c2:70:c2:01:31:1e:e0:14:41:93:ae:36:54:0d:71:63: 7e:e3:ab:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjYwOTE4MjIxNzM2WhcNMjYwOTI1MjIxNzM2WjAYMRYwFAYD VQQDEw02YWFkYjg4MC00ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHyjvMTqZ7f6Qm/N27mJ84dzWwwiYJFp+4G26S7Wqvhjp21CZ/dPWNtnmKi1 4Ve+DAw02ZXIdqMrP46xHTM+s+vzKOkdS/qRWdVMTM5VZI0SfCEfEaxTfoDzBMYK R+RlHAorEfltXM0v9AyD1/cqfSSJ3yekQxkrLxruWmYWGOS1DGeW8QzLyardlO3g c3kWExKr2N8w2VZWvTj7AGRCh02BX3TKtY+73dwDdsmD+qtoiIwwgDNz5F4eokQ2 gAN9E1tkybyQx1Mvn3J4KseVg5SLo1s7tNI64qVYClC+3CazZ1CKb/tr9sqAuifY MW/bFlhyoH7YU+JUVDVvOp/6EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+XwAO7 v8TwthMZJ4WgNPCU1wmsMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqcEYt8fQ9haEvB2/WJR4/cD9xeC4xlTNF3SwFafMyM8OAyMYD9qLed5Ov0kV 8dXPMNkgkYcRK7MoYzBBouJFoQSNS4SUpBtitB9zyIZw305RBK+w+j93BmM74QRa xHu6xMHi2C8n9tcrVRtgJsgDNMxB3EICqj1PjVSSNagFAQRPul1Q4IhzWoj7y/NX Gz2pnkWqhZGxjYfDRJxOxCEOdE+cMb4bvhRmh9NLc/4GWaZKRsDyHvIZsncuh5vt fqWRjw1L5wqHnNrWjsSriUrvHtKZ1evigZH/w3u/vAmAhMF1gb7kmm0dSFafxf3C cMIBMR7gFEGTrjZUDXFjfuOr9w== -----END CERTIFICATE-----Generated at Mon Sep 21 00:10:35 2026 by rpki-client