$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: 5JngGWlpvqyoHApeVPfHtISN7pW+yiMga8nDEWEsVoE= Subject key identifier: E5:31:C8:15:49:2C:D4:D7:47:98:4F:CA:9A:7E:BD:AA:BD:40:8E:E2 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: 018F Signing time: Mon 21 Sep 2026 04:23:55 +0000 Manifest this update: Mon 21 Sep 2026 04:23:54 +0000 Manifest next update: Mon 28 Sep 2026 04:23:54 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: iUBNRjf0Cnee/n4c8EMaK/4lOucNfQQmF6TaargbFiY=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: a57NdJ1gk+iJiRBW3C9KSb5FNlrBpcnk273JBCCOK0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Sep 21 04:23:54 2026 GMT Not After : Sep 28 04:23:54 2026 GMT Subject: CN=6ab0b15b-6118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:56:02:ad:2b:f5:5e:3e:5a:fc:f8:bf:21:2e: 06:c4:ce:a3:ba:04:cd:86:0b:94:6e:52:b3:7b:8d: af:0c:54:ce:16:ac:b9:40:f3:70:be:5a:b4:99:45: 18:81:f3:8d:c9:a2:08:7f:e6:8e:18:b8:1c:39:f8: 7f:4f:1f:0a:86:0b:b8:6f:30:72:b3:5a:53:01:0e: 6e:c3:d2:fd:9d:3a:7d:24:bd:ae:6c:59:36:97:a3: 13:aa:45:10:23:1d:3d:7d:7c:c6:12:a1:4b:10:d6: 13:60:b6:f5:12:e0:b4:9e:da:a6:3d:7a:64:91:50: f1:f6:bd:23:84:7b:f5:c1:8f:6d:c2:c9:26:d2:bf: bf:9a:42:e5:dd:cf:3c:63:9b:1f:0e:01:5e:15:94: 7f:ea:f5:b1:df:9d:6a:f6:91:8d:21:ff:e3:20:b9: 8f:cf:04:c1:8f:bf:83:e0:e7:17:2b:76:c8:3a:9e: ca:17:23:10:0b:e6:98:0f:1e:88:e7:94:b2:02:18: 9d:d4:fe:7a:86:02:20:1b:7a:7a:ec:47:ae:e7:4a: 3f:8d:ff:0a:b4:ff:92:e1:7f:8b:c7:13:da:ca:9e: 4d:86:c2:a1:63:b7:15:55:4d:a5:28:1a:ab:22:e4: ae:79:0c:fb:73:c0:a1:90:1a:7d:3a:48:30:8e:81: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:31:C8:15:49:2C:D4:D7:47:98:4F:CA:9A:7E:BD:AA:BD:40:8E:E2 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:97:e7:71:36:8e:e8:a7:e3:e1:87:46:14:d3:1c:3f:70:9e: 34:f9:1e:38:e7:d7:aa:58:0e:54:89:ab:b8:6f:dc:a8:0d:78: fa:58:94:de:01:dc:3b:19:d8:3c:c8:15:d1:dc:a1:ce:81:44: bb:a2:78:0f:d5:09:f0:38:be:70:66:d4:66:99:77:aa:f4:a2: 35:a5:ad:79:22:15:be:8b:c3:05:8f:c5:bb:7c:bc:7e:f9:e7: e3:8f:51:63:5d:9d:fa:e9:8e:bd:32:cf:15:cb:7f:c9:64:f8: cb:2f:d0:aa:c4:b6:e3:dd:15:3a:99:6e:17:58:6d:62:b7:10: d2:c6:5d:fc:8d:3d:bc:18:68:5c:f1:d7:fd:ce:d4:f8:b8:f1: fb:41:a6:70:86:2e:9f:8f:51:4c:fb:3c:3e:e6:24:a3:ff:3a: 07:de:e5:94:40:77:c1:5f:63:a3:a3:a3:9a:d6:6a:a1:8b:96: 44:32:d6:7b:3b:03:d1:0c:af:ba:56:3f:86:34:c1:1a:72:b2: 28:fd:cb:f8:ee:19:91:cc:38:18:38:42:d0:81:4b:bf:06:fb: 53:61:46:19:6e:c3:b9:c5:24:24:0a:72:43:92:1e:cf:54:46: 9c:41:79:53:87:83:22:1f:4c:7e:69:1f:6e:a3:50:ea:f8:82: b4:df:46:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjYwOTIxMDQyMzU0WhcNMjYwOTI4MDQyMzU0WjAYMRYwFAYD VQQDEw02YWIwYjE1Yi02MTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVYCrSv1Xj5a/Pi/IS4GxM6jugTNhguUblKze42vDFTOFqy5QPNwvlq0mUUY gfONyaIIf+aOGLgcOfh/Tx8Khgu4bzBys1pTAQ5uw9L9nTp9JL2ubFk2l6MTqkUQ Ix09fXzGEqFLENYTYLb1EuC0ntqmPXpkkVDx9r0jhHv1wY9twskm0r+/mkLl3c88 Y5sfDgFeFZR/6vWx351q9pGNIf/jILmPzwTBj7+D4OcXK3bIOp7KFyMQC+aYDx6I 55SyAhid1P56hgIgG3p67Eeu50o/jf8KtP+S4X+LxxPayp5NhsKhY7cVVU2lKBqr IuSueQz7c8ChkBp9OkgwjoGpRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUxyBVJ LNTXR5hPypp+vaq9QI7iMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn5fncTaO6Kfj4YdGFNMcP3CeNPkeOOfXqlgOVImruG/cqA14+liU3gHcOxnY PMgV0dyhzoFEu6J4D9UJ8Di+cGbUZpl3qvSiNaWteSIVvovDBY/Fu3y8fvnn449R Y12d+umOvTLPFct/yWT4yy/QqsS2490VOpluF1htYrcQ0sZd/I09vBhoXPHX/c7U +Ljx+0GmcIYun49RTPs8PuYko/86B97llEB3wV9jo6OjmtZqoYuWRDLWezsD0Qyv ulY/hjTBGnKyKP3L+O4Zkcw4GDhC0IFLvwb7U2FGGW7DucUkJApyQ5Iez1RGnEF5 U4eDIh9MfmkfbqNQ6viCtN9GNQ== -----END CERTIFICATE-----Generated at Tue Sep 22 08:58:23 2026 by rpki-client