$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: zTeCv/jdnU+YX9SpElvG+VS8QtmIs+mq2LR+UB00wBE= Subject key identifier: 2E:B8:20:C4:B6:83:9E:A2:E9:3F:7D:52:7C:C5:AD:CA:9B:0B:C9:AB Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 16F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 16DE Signing time: Tue 06 Oct 2026 16:42:49 +0000 Manifest this update: Tue 06 Oct 2026 16:42:49 +0000 Manifest next update: Tue 13 Oct 2026 16:42:49 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: J0aWDIofuz8geKqByL7Wm9uVNSwSMrWtzalwkOi/Gds=) 2: 21A4183096D111F1A11E4B235711F970.roa (hash: k2+qx+drmH//e+9qGHsf2iYVzrlk7nrWgE6t8MQWTRQ=) 3: 3F202DE4993911F18F87526B4F11F970.roa (hash: GSAC+7o5SvtGwbHQMbuD2JkQo56sQ3KcyyGSI1Idma8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5877 (0x16f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Oct 6 16:42:49 2026 GMT Not After : Oct 13 16:42:49 2026 GMT Subject: CN=6ac52509-adb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:49:27:2e:de:fe:52:bf:6c:6a:c9:5a:b5: f0:52:3c:7d:06:75:76:20:b2:48:57:6c:14:56:a8: 7b:a2:ff:dc:94:be:ab:6e:fe:7b:5c:f6:b7:d6:e6: 1f:17:eb:ce:5e:b8:93:49:88:91:56:5a:1c:df:d2: f2:ad:a8:a7:5a:14:e2:27:59:b4:4d:43:85:63:47: 11:4e:e9:fa:f8:1e:71:20:eb:d5:e6:7b:c1:56:66: c7:90:d7:16:8e:00:ca:e3:71:c0:26:e3:a9:06:90: 6c:0c:29:16:50:f5:f0:57:07:bf:db:ad:ac:30:a4: 1d:d4:75:a4:f7:fc:ba:ea:f2:ec:c4:13:11:3b:16: 3e:b0:da:ec:0e:93:e5:52:9a:0f:19:e5:25:27:30: e0:63:b2:9f:2c:43:e3:48:95:ed:d3:2c:5f:30:ad: ec:df:09:af:be:be:ed:51:02:ec:5f:4e:3e:7f:94: a8:39:1d:cf:f6:eb:45:2a:b1:ec:e3:e8:f7:4f:88: a9:af:f4:d9:8f:e6:b5:c9:3f:90:96:d9:ee:4d:49: 90:97:f2:c6:8c:39:d8:55:65:df:71:4f:87:64:23: a7:68:bd:29:cc:2f:61:3b:94:ab:77:d5:5b:6b:4b: 2b:84:86:94:45:da:68:4f:91:af:ca:76:cb:90:82: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B8:20:C4:B6:83:9E:A2:E9:3F:7D:52:7C:C5:AD:CA:9B:0B:C9:AB X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:99:25:09:7a:c2:0a:90:0e:dd:a4:a7:13:cd:ad:36:5f:ba: df:1d:da:1a:a1:94:2f:f8:d2:67:4c:ca:74:27:bc:37:aa:92: 92:bc:45:40:ae:6c:0a:d8:ec:77:e3:3e:b1:23:fa:c2:9c:c4: 31:95:07:43:f2:8f:89:0d:2a:11:02:58:e5:25:9f:d1:54:ca: d9:e3:77:91:27:45:17:a0:c0:4d:f3:60:44:0d:8f:06:24:f1: a1:1e:9e:b1:bd:d9:e2:54:78:f8:57:98:42:49:7f:d8:b5:18: 5f:bc:93:34:af:ae:36:9b:84:00:29:d1:b5:4b:c0:12:fb:c2: f5:08:a1:5f:98:0e:e5:3d:5c:b7:7b:81:f8:38:bc:8d:44:0e: b1:97:96:fa:d9:f7:f0:6b:f2:73:4a:75:1f:72:cc:62:70:fc: a0:7e:f0:39:7c:ee:cd:02:a8:e8:0a:77:93:69:a5:92:0b:6d: e8:69:1b:98:fb:4a:ed:61:ba:2a:74:a4:34:ec:f2:73:32:93: e4:06:16:37:1c:0d:3a:46:1c:73:10:86:9d:f3:7c:10:c6:70: 51:b6:1e:50:69:b4:d0:4c:3a:ff:84:9d:12:14:49:db:a9:96: 80:0c:46:91:dd:2c:08:f7:17:5c:38:ac:dc:43:f5:ed:68:9c: 17:73:d8:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjYxMDA2MTY0MjQ5WhcNMjYxMDEzMTY0MjQ5WjAYMRYwFAYD VQQDEw02YWM1MjUwOS1hZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvspJJy7e/lK/bGrJWrXwUjx9BnV2ILJIV2wUVqh7ov/clL6rbv57XPa31uYf F+vOXriTSYiRVloc39LyrainWhTiJ1m0TUOFY0cRTun6+B5xIOvV5nvBVmbHkNcW jgDK43HAJuOpBpBsDCkWUPXwVwe/262sMKQd1HWk9/y66vLsxBMROxY+sNrsDpPl UpoPGeUlJzDgY7KfLEPjSJXt0yxfMK3s3wmvvr7tUQLsX04+f5SoOR3P9utFKrHs 4+j3T4ipr/TZj+a1yT+QltnuTUmQl/LGjDnYVWXfcU+HZCOnaL0pzC9hO5Srd9Vb a0srhIaURdpoT5GvynbLkIIYHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC64IMS2 g56i6T99UnzFrcqbC8mrMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQpklCXrCCpAO3aSnE82tNl+63x3aGqGUL/jSZ0zKdCe8N6qSkrxFQK5sCtjs d+M+sSP6wpzEMZUHQ/KPiQ0qEQJY5SWf0VTK2eN3kSdFF6DATfNgRA2PBiTxoR6e sb3Z4lR4+FeYQkl/2LUYX7yTNK+uNpuEACnRtUvAEvvC9QihX5gO5T1ct3uB+Di8 jUQOsZeW+tn38Gvyc0p1H3LMYnD8oH7wOXzuzQKo6Ap3k2mlkgtt6GkbmPtK7WG6 KnSkNOzyczKT5AYWNxwNOkYccxCGnfN8EMZwUbYeUGm00Ew6/4SdEhRJ26mWgAxG kd0sCPcXXDis3EP17WicF3PYpg== -----END CERTIFICATE-----Generated at Thu Oct 8 13:19:39 2026 by rpki-client