$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: oKeAm8GNrLUMbPPxlMRp4wYgPuuuIOh2JUxQBLvMP6g= Subject key identifier: 9A:BD:20:CB:4D:0E:B3:8F:D4:4B:00:D4:4E:2A:8C:D7:25:09:41:76 Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 04CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 04BE Signing time: Fri 09 Oct 2026 00:00:55 +0000 Manifest this update: Fri 09 Oct 2026 00:00:55 +0000 Manifest next update: Fri 16 Oct 2026 00:00:55 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: L5q5Rro++hEfWBPm3PY1IVJ+yTPMwhknchz1w61iA0I=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: lRK5hM0+Ajz1Iu+TnpLxwj4NeRvEETgFEYDFPhqxkGM=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: SzKheHkyXGhCU9L9E9bj5O9UK/QqaZCVghpUUMIvziw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Oct 9 00:00:55 2026 GMT Not After : Oct 16 00:00:55 2026 GMT Subject: CN=6ac82eb7-c64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:64:0a:7e:54:ac:f2:d7:6a:1d:6b:aa:3c: 39:87:3c:6d:b9:84:6a:50:8f:fd:31:ea:3b:3a:2a: f5:3a:44:a9:b2:18:7a:56:6d:ba:7c:58:ef:d1:e8: 89:f4:7c:0b:11:bf:ab:63:88:72:d4:32:19:4b:70: 97:2c:ac:a7:cc:01:e2:cd:b4:33:71:ec:dc:ea:b7: 12:17:de:01:95:10:7d:9c:aa:9f:a3:b8:f7:c3:2d: 94:27:d5:62:10:cc:15:5e:8e:6b:22:b3:42:aa:8b: f5:76:2f:51:49:ca:ae:1c:f6:a2:c5:55:66:dd:f3: 49:68:b4:13:f4:73:f6:02:64:4b:85:81:3d:db:50: c2:e2:d1:81:75:48:f1:20:df:91:50:b2:55:90:c0: 88:4f:46:02:4a:62:9e:bc:f1:b9:10:bf:f8:71:06: 24:56:7c:36:17:bb:3d:a5:41:6b:05:08:a9:3f:bc: 62:a7:3e:60:67:37:22:8b:a2:59:92:1e:ea:b2:82: 9d:7d:64:c4:96:89:2e:36:9d:6b:5e:ad:92:b8:d0: e8:35:a0:a7:6b:32:05:22:45:df:72:4d:35:a0:f8: 0e:a2:b0:10:36:7e:1f:53:80:f9:21:22:c3:72:d9: 59:21:4f:d7:97:0d:03:98:74:92:b3:ca:12:db:3c: 22:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:20:CB:4D:0E:B3:8F:D4:4B:00:D4:4E:2A:8C:D7:25:09:41:76 X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:10:44:f1:fe:01:dc:16:73:5a:ca:50:38:8c:10:56:e9:c3: 46:ca:18:fd:fa:3a:97:17:d5:de:46:91:9f:2e:7c:cb:84:3d: e8:bb:96:d4:d7:7e:e8:c9:71:34:fb:93:c8:01:c3:34:82:f6: 2d:65:7c:cc:14:57:72:7b:43:3a:53:0b:54:3b:f1:2d:da:bb: 50:0e:61:47:4b:67:d4:4c:16:4c:e9:75:0d:ff:d8:a7:ce:e2: 3b:18:20:da:fb:5e:77:5d:de:58:7a:90:e4:f1:1c:7e:d4:1f: bf:ae:ac:50:05:bd:a4:25:fe:08:fe:98:d5:27:f2:bd:70:ec: 4b:26:48:bf:08:da:1e:d8:2d:7d:20:db:b0:f7:fe:d9:a0:c9: c4:69:87:c7:57:d4:00:18:54:13:5e:51:01:b2:97:a8:69:56: c7:84:ba:8d:52:bc:82:d5:8a:df:8f:df:81:9e:34:c8:e7:37: ca:ea:cc:c3:12:1d:4b:f0:f1:1e:8d:6a:1c:f9:91:00:89:6b: da:e8:ad:83:ab:4e:5c:66:83:f7:27:d4:a3:d6:f5:30:c6:9d: 1b:a8:23:f2:ed:c6:63:d2:7d:11:17:87:28:bb:47:1f:dd:9d: ef:31:4d:ae:00:e3:ce:54:f4:ff:1a:3d:28:5b:1b:e0:0a:1e: 84:a8:a3:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjYxMDA5MDAwMDU1WhcNMjYxMDE2MDAwMDU1WjAYMRYwFAYD VQQDEw02YWM4MmViNy1jNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAVkCn5UrPLXah1rqjw5hzxtuYRqUI/9Meo7Oir1OkSpshh6Vm26fFjv0eiJ 9HwLEb+rY4hy1DIZS3CXLKynzAHizbQzcezc6rcSF94BlRB9nKqfo7j3wy2UJ9Vi EMwVXo5rIrNCqov1di9RScquHPaixVVm3fNJaLQT9HP2AmRLhYE921DC4tGBdUjx IN+RULJVkMCIT0YCSmKevPG5EL/4cQYkVnw2F7s9pUFrBQipP7xipz5gZzcii6JZ kh7qsoKdfWTElokuNp1rXq2SuNDoNaCnazIFIkXfck01oPgOorAQNn4fU4D5ISLD ctlZIU/Xlw0DmHSSs8oS2zwi/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJq9IMtN DrOP1EsA1E4qjNclCUF2MB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnhBE8f4B3BZzWspQOIwQVunDRsoY/fo6lxfV3kaRny58y4Q96LuW1Nd+6Mlx NPuTyAHDNIL2LWV8zBRXcntDOlMLVDvxLdq7UA5hR0tn1EwWTOl1Df/Yp87iOxgg 2vted13eWHqQ5PEcftQfv66sUAW9pCX+CP6Y1SfyvXDsSyZIvwjaHtgtfSDbsPf+ 2aDJxGmHx1fUABhUE15RAbKXqGlWx4S6jVK8gtWK34/fgZ40yOc3yurMwxIdS/Dx Ho1qHPmRAIlr2uitg6tOXGaD9yfUo9b1MMadG6gj8u3GY9J9EReHKLtHH92d7zFN rgDjzlT0/xo9KFsb4AoehKijhQ== -----END CERTIFICATE-----Generated at Sat Oct 10 22:27:53 2026 by rpki-client