$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json) Hash identifier: CNBvpijb2apfFF0EdHP2recxDfKP2pMtM7JoViukGWU= Subject key identifier: 15:43:F8:FE:16:96:05:4F:21:52:42:4A:AE:76:EA:40:AA:5D:1E:3D Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1B55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft Manifest number: 1B33 Signing time: Mon 28 Sep 2026 16:19:27 +0000 Manifest this update: Mon 28 Sep 2026 16:19:26 +0000 Manifest next update: Mon 05 Oct 2026 16:19:26 +0000 Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: JePv+ePa+0xNH7rtkYFZMZ+JNq0s7jO5lXVcznPCKas=) 2: C443D86A55A311E7896BED09C4F9AE02.roa (hash: hkXxeNyW6zU7R/3tjUaDIgOzon4gIXx8opB7l3LzhSA=) 3: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: p4+NsJe4a3MSde9nMZiDmlNln2JEYVPGVaWpxC5fnk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6997 (0x1b55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Sep 28 16:19:26 2026 GMT Not After : Oct 5 16:19:26 2026 GMT Subject: CN=6aba938f-b6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:05:0b:9f:aa:39:75:e1:09:e9:04:5d:aa:12: fa:0a:f2:9f:cd:e5:5a:1d:0c:16:20:82:29:f4:11: ef:cb:56:49:bd:2d:3e:64:ef:02:ce:ca:67:1e:d7: 8d:73:b0:94:28:2e:a6:19:ad:0b:6a:63:5c:3b:82: 2e:06:50:a4:92:03:65:fd:07:50:26:b6:44:72:80: 96:fa:af:cf:ce:64:5a:07:2d:b1:79:53:6b:40:8a: bc:32:a6:09:51:33:6d:5a:d0:45:06:9b:0f:31:a0: 49:b2:46:6c:0f:54:ec:27:ec:12:c4:45:21:21:69: 90:3e:72:57:86:0f:ed:fe:32:ca:0f:1b:c9:77:7a: 9d:2f:df:55:e6:31:1d:d1:a1:ca:a2:65:43:6b:be: b4:a9:ff:87:d7:53:e1:a1:7b:ec:d9:c4:be:b1:4f: 34:b7:fe:72:c7:da:7e:8d:f4:ea:2f:62:a7:ad:b9: f8:dc:c2:a4:5c:3f:20:df:5a:94:e4:13:eb:d2:38: 9c:fe:b8:16:e0:be:5e:ce:9a:48:e5:1a:c8:58:e1: 7f:a1:85:d8:87:c5:d5:42:98:0d:ea:f9:61:b3:a0: 71:05:8a:81:b1:9e:6a:6f:86:24:83:12:86:a6:c5: 1c:37:00:51:57:27:37:6e:f4:c1:f2:08:73:e1:49: f1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:43:F8:FE:16:96:05:4F:21:52:42:4A:AE:76:EA:40:AA:5D:1E:3D X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:92:9d:cc:4b:d3:97:05:61:4f:eb:11:4d:18:de:1a:2f:56: 4b:35:40:fb:2f:19:1f:4b:ee:52:ec:72:95:a9:78:dc:be:69: 3b:60:41:4e:ce:45:69:ab:c5:7f:6d:5a:88:cb:ae:43:95:c6: 1e:ae:76:16:84:49:e2:ec:b5:de:e6:b5:89:60:db:86:65:2d: 43:93:4c:3f:57:93:88:0f:0c:69:81:47:ba:11:e2:ba:05:c6: 67:e5:e5:80:af:21:d9:44:20:e1:78:a5:12:8e:cf:c6:38:7e: 57:c8:c0:e8:a9:8b:9c:11:53:00:52:fd:e3:64:b8:f1:cb:67: 3c:1b:55:3b:b9:e1:9b:6b:34:87:de:b4:ef:7a:cc:35:d2:8d: bd:2c:69:68:90:78:c8:83:b0:e6:dc:20:ff:a0:ae:c8:e6:3e: 57:41:51:60:f0:fb:67:e9:41:f3:bd:a0:70:9b:f4:ad:b3:e5: c5:e6:15:5f:67:6e:1c:33:9c:c6:2c:dd:df:cd:b5:3f:f6:81: 83:5d:9c:c1:c8:1d:8f:e8:42:e1:60:25:bd:19:9c:c6:7d:f8: 1f:d5:d1:50:6d:2f:53:0e:1d:90:0a:35:70:c2:1e:f9:ff:c7: 08:85:98:6d:93:7a:43:3d:40:9d:c0:5a:ce:e8:9e:b5:99:49: 5b:d1:b3:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjYwOTI4MTYxOTI2WhcNMjYxMDA1MTYxOTI2WjAYMRYwFAYD VQQDEw02YWJhOTM4Zi1iNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QULn6o5deEJ6QRdqhL6CvKfzeVaHQwWIIIp9BHvy1ZJvS0+ZO8CzspnHteN c7CUKC6mGa0LamNcO4IuBlCkkgNl/QdQJrZEcoCW+q/PzmRaBy2xeVNrQIq8MqYJ UTNtWtBFBpsPMaBJskZsD1TsJ+wSxEUhIWmQPnJXhg/t/jLKDxvJd3qdL99V5jEd 0aHKomVDa760qf+H11PhoXvs2cS+sU80t/5yx9p+jfTqL2Knrbn43MKkXD8g31qU 5BPr0jic/rgW4L5ezppI5RrIWOF/oYXYh8XVQpgN6vlhs6BxBYqBsZ5qb4YkgxKG psUcNwBRVyc3bvTB8ghz4UnxRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVD+P4W lgVPIVJCSq526kCqXR49MB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBNS8yNTgwQThENjRCNjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVH eHBtbGFiRWdPRWtKV0tveTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIpKdzEvTlwVhT+sRTRjeGi9WSzVA+y8ZH0vuUuxylal43L5pO2BBTs5FaavF f21aiMuuQ5XGHq52FoRJ4uy13ua1iWDbhmUtQ5NMP1eTiA8MaYFHuhHiugXGZ+Xl gK8h2UQg4XilEo7Pxjh+V8jA6KmLnBFTAFL942S48ctnPBtVO7nhm2s0h96073rM NdKNvSxpaJB4yIOw5twg/6CuyOY+V0FRYPD7Z+lB872gcJv0rbPlxeYVX2duHDOc xizd3821P/aBg12cwcgdj+hC4WAlvRmcxn34H9XRUG0vUw4dkAo1cMIe+f/HCIWY bZN6Qz1AncBazuietZlJW9Gzfg== -----END CERTIFICATE-----Generated at Tue Sep 29 02:36:24 2026 by rpki-client