$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: q+gEnTc/2rrIOVstXv6G+RorPXf8IB7nb2cFMlPGR5U= Subject key identifier: 90:FB:35:A4:26:C1:BF:6D:44:DF:F5:23:CA:46:21:48:37:03:41:26 Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 02A3 Signing time: Mon 21 Sep 2026 01:33:48 +0000 Manifest this update: Mon 21 Sep 2026 01:33:48 +0000 Manifest next update: Mon 28 Sep 2026 01:33:48 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: hxM/+1xwhh7KdQ3u25rMcMnMNPgB2k4JSY06A9D5Jkc=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 4E7B7eClCEG5d3gzWwa9hz6tdWf+XUY9sPo6EaTao1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Sep 21 01:33:48 2026 GMT Not After : Sep 28 01:33:48 2026 GMT Subject: CN=6ab0897c-882e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:d3:17:09:65:60:41:ef:6a:6e:84:44:e1: d5:e1:20:10:89:28:a2:c7:c3:52:31:b7:49:78:aa: 29:e0:bb:40:57:f4:a5:e6:6e:c6:8a:1f:2b:99:a6: 9f:50:e0:3c:ac:f9:6c:7b:58:f0:db:cd:bc:c9:9b: 83:c2:3b:b3:14:15:ff:2d:ee:2e:e6:16:03:15:ee: fa:16:e0:e6:28:92:48:56:03:36:1b:1c:9c:b4:bc: 28:02:76:fe:fd:f5:a3:56:7d:18:ca:36:ee:b4:b6: 67:a0:ef:bf:2d:73:90:77:24:b2:37:82:b9:47:f5: 8b:1b:c6:4f:59:d3:29:bb:af:62:2f:3b:52:38:1e: 11:dc:c3:91:2d:1d:63:20:ae:29:7b:37:cd:61:30: 9a:a7:46:00:c4:94:92:e7:8f:d3:29:2b:5a:e0:80: ba:e3:85:49:0f:81:c1:4e:62:be:23:77:11:a6:31: 6e:30:27:ba:87:f8:c6:b2:38:6f:4c:ed:c7:c4:6a: 65:c5:67:39:e2:87:e5:32:8c:b4:00:ee:0c:41:4d: e6:f6:5f:2d:87:31:e9:a3:44:50:51:e7:67:69:67: f7:18:2c:62:72:b5:38:ba:c4:b9:b5:7e:10:45:dc: 25:97:0d:d4:bb:cf:a7:53:8b:d5:5f:50:cd:14:1b: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FB:35:A4:26:C1:BF:6D:44:DF:F5:23:CA:46:21:48:37:03:41:26 X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d5:ff:14:27:21:42:60:8b:a3:33:25:b5:a8:13:6c:ce:a6: 64:cc:9c:5a:00:51:93:9b:ab:8f:bc:60:35:e8:b8:80:5c:9f: 4b:14:f7:62:8b:5f:40:0b:40:5b:fb:d0:ce:fb:01:11:e7:31: 11:ca:b5:24:36:5d:7d:a1:fd:f2:95:75:28:2d:2f:28:af:54: 0c:25:4f:82:53:85:fb:80:9a:e6:c0:59:54:d7:f4:97:07:0c: 51:eb:f0:68:cd:2b:04:ed:44:fe:6b:76:73:4e:30:e0:85:17: 49:09:46:5d:83:1a:92:99:15:6b:4d:61:a7:da:4b:9c:5b:96: 82:5b:c5:2c:e6:b4:88:01:b6:dd:c7:ec:da:27:95:01:64:58: 15:07:b4:97:3b:20:ab:56:c1:fa:38:5e:19:3d:6f:b7:22:f5: d6:7d:51:d8:41:78:ec:c0:6b:5c:05:6b:ae:43:5a:3b:e3:68: 46:9c:56:46:76:46:f9:02:b6:b0:9a:16:06:02:a3:dc:67:5a: 80:12:aa:66:82:7a:47:c0:22:b5:0a:f5:58:4a:ae:3b:de:87: 86:73:b6:eb:be:2b:c3:4c:e1:f5:f6:13:01:bd:53:8f:18:a9: 34:fa:99:7a:76:d5:a8:f3:ba:f9:10:5b:d6:2a:37:00:7c:c2: 30:3c:10:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjYwOTIxMDEzMzQ4WhcNMjYwOTI4MDEzMzQ4WjAYMRYwFAYD VQQDEw02YWIwODk3Yy04ODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkKbTFwllYEHvam6EROHV4SAQiSiix8NSMbdJeKop4LtAV/Sl5m7Gih8rmaaf UOA8rPlse1jw2828yZuDwjuzFBX/Le4u5hYDFe76FuDmKJJIVgM2GxyctLwoAnb+ /fWjVn0YyjbutLZnoO+/LXOQdySyN4K5R/WLG8ZPWdMpu69iLztSOB4R3MORLR1j IK4pezfNYTCap0YAxJSS54/TKSta4IC644VJD4HBTmK+I3cRpjFuMCe6h/jGsjhv TO3HxGplxWc54oflMoy0AO4MQU3m9l8thzHpo0RQUednaWf3GCxicrU4usS5tX4Q Rdwllw3Uu8+nU4vVX1DNFBvsUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJD7NaQm wb9tRN/1I8pGIUg3A0EmMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAitX/FCchQmCLozMltagTbM6mZMycWgBRk5urj7xgNei4gFyfSxT3YotfQAtA W/vQzvsBEecxEcq1JDZdfaH98pV1KC0vKK9UDCVPglOF+4Ca5sBZVNf0lwcMUevw aM0rBO1E/mt2c04w4IUXSQlGXYMakpkVa01hp9pLnFuWglvFLOa0iAG23cfs2ieV AWRYFQe0lzsgq1bB+jheGT1vtyL11n1R2EF47MBrXAVrrkNaO+NoRpxWRnZG+QK2 sJoWBgKj3GdagBKqZoJ6R8AitQr1WEquO96HhnO2674rw0zh9fYTAb1TjxipNPqZ enbVqPO6+RBb1io3AHzCMDwQHg== -----END CERTIFICATE-----Generated at Mon Sep 21 14:52:34 2026 by rpki-client