$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft File: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft (raw, json) Hash identifier: n29+Z8huxsV1JGK4rxA8/qcTiYcwpRuKuHsRxWQYp+c= Subject key identifier: 24:49:DC:F5:66:75:6D:BA:FF:57:A8:F2:36:DF:84:7B:D7:37:CC:66 Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5 Certificate issuer: /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft Manifest number: 7D Signing time: Fri 09 Oct 2026 08:42:32 +0000 Manifest this update: Fri 09 Oct 2026 08:42:31 +0000 Manifest next update: Fri 16 Oct 2026 08:42:31 +0000 Files and hashes: 1: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl (hash: JK5rfEuwzu+HJnFfLFTnAZf6iJVZVvAnI6xgCtKtCf8=) 2: CE93738EBE0811F19E65C7285411F970.roa (hash: eTePzZthCLCfAO4M8nOmebFDRGb48Mw6WRdsRQl/fUA=) 3: 65E54028BE0911F1B07D70305411F970.roa (hash: qsVWxHxDV1XO+u2dkDtoW+PXZvBZ2AgdkW90LlAc/bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5 Validity Not Before: Oct 9 08:42:31 2026 GMT Not After : Oct 16 08:42:31 2026 GMT Subject: CN=6ac8a8f8-23a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:ee:b8:6e:12:f8:20:cb:0a:85:a1:05:45: a9:20:31:45:e8:5d:06:f9:b9:a7:1f:ec:30:64:08: f0:b4:58:6f:05:1d:0c:15:a6:10:d6:26:61:fc:6d: f9:ce:08:fe:eb:0c:ca:67:7d:67:99:d3:db:78:76: 07:75:fe:45:be:43:14:21:f3:0e:97:59:50:e8:f2: 20:3f:c9:4e:0a:88:8b:94:67:ae:fc:95:d3:2c:cb: 83:ec:55:3d:a7:95:0b:ca:75:23:6b:35:a1:40:f1: e9:5a:b6:a3:ec:0d:91:42:b2:17:c1:d9:c1:e5:2a: 11:9f:70:0e:06:aa:c6:73:14:84:ab:60:31:1e:17: bc:d8:a5:4c:03:03:2f:5f:ea:b8:ef:71:18:ba:7f: a4:24:12:e6:0e:61:32:14:8c:55:e4:4f:0f:09:16: 82:0a:dc:da:c6:15:2e:48:df:bd:04:98:eb:64:0c: 7f:f3:71:ba:ff:fb:d4:15:fb:24:8a:06:c9:e3:3f: 1d:75:50:b7:4d:96:9e:eb:0f:bf:75:1f:68:3d:7a: aa:46:52:55:f7:6c:49:ff:9a:bc:04:83:f8:23:2b: e6:65:e4:e8:10:16:46:67:d3:0f:e5:f9:5f:e9:3e: 33:66:d8:c9:01:07:b2:05:a0:f2:89:a0:31:c9:3f: 6c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:49:DC:F5:66:75:6D:BA:FF:57:A8:F2:36:DF:84:7B:D7:37:CC:66 X509v3 Authority Key Identifier: keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:78:4f:67:39:df:8c:84:c3:10:42:11:8f:d8:5a:b9:67:d2: 60:32:8c:31:d1:00:00:2c:d3:a1:35:13:4f:46:eb:bc:02:7f: 44:ed:bf:db:a5:68:c9:6f:37:90:82:47:11:b8:15:03:c5:81: c1:52:44:e7:6d:d5:ba:37:e3:52:8d:56:7a:2a:01:2d:55:19: 8e:6f:4e:64:ae:b6:7a:00:1a:67:27:49:a8:69:cf:b9:10:56: 02:68:5d:e3:e0:c1:48:ee:f2:07:73:26:8d:67:9c:dc:cd:a9: 91:6c:38:90:38:f5:d1:25:7a:01:c7:05:ec:06:70:ef:07:21: a7:77:cb:ec:ef:a5:48:a6:f1:81:d7:28:fd:29:2f:51:ae:fb: 51:f6:f6:ec:b0:b0:ef:03:da:15:92:9c:93:13:1f:f5:20:13: 8e:6e:53:05:86:98:f9:ed:19:4d:7e:0f:52:47:00:b6:ee:22: b0:b4:2d:95:02:26:2b:fa:1a:52:b1:45:12:78:8a:a9:d2:0b: b6:25:d9:2c:56:c5:db:c4:a3:90:25:93:6a:fa:66:2d:24:f8: ab:6b:f0:9f:49:d5:06:17:d1:9f:2c:51:bc:4a:58:8b:23:cb: 02:4b:de:ae:53:54:56:f1:5e:53:b4:50:61:ef:b4:12:f4:a0: 55:b8:4e:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA4QzAxMTAvBgNVBAUTKEQ4MDczODAzRUVDRkY0RjE5RUZGOTk1N0M3MTQ3QUZD Q0FBMDE5RjUwHhcNMjYxMDA5MDg0MjMxWhcNMjYxMDE2MDg0MjMxWjAYMRYwFAYD VQQDEw02YWM4YThmOC0yM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKLuuG4S+CDLCoWhBUWpIDFF6F0G+bmnH+wwZAjwtFhvBR0MFaYQ1iZh/G35 zgj+6wzKZ31nmdPbeHYHdf5FvkMUIfMOl1lQ6PIgP8lOCoiLlGeu/JXTLMuD7FU9 p5ULynUjazWhQPHpWraj7A2RQrIXwdnB5SoRn3AOBqrGcxSEq2AxHhe82KVMAwMv X+q473EYun+kJBLmDmEyFIxV5E8PCRaCCtzaxhUuSN+9BJjrZAx/83G6//vUFfsk igbJ4z8ddVC3TZae6w+/dR9oPXqqRlJV92xJ/5q8BIP4IyvmZeToEBZGZ9MP5flf 6T4zZtjJAQeyBaDyiaAxyT9s7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRJ3PVm dW26/1eo8jbfhHvXN8xmMB8GA1UdIwQYMBaAFNgHOAPuz/Txnv+ZV8cUevzKoBn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhDMC83OTZBQTE0MjIx NEMxMUYxQTM2Q0ExQTUzNzNEOEM2Ny8yQWM0QS03UDlQR2VfNWxYeHhSNl9NcWdH ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBYzRBLTdQOVBHZV81bFh4eFI2X01xZ0dmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDhDMC83OTZBQTE0MjIxNEMxMUYxQTM2Q0ExQTUzNzNEOEM2Ny8yQWM0QS03UDlQ R2VfNWxYeHhSNl9NcWdHZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX3hPZznfjITDEEIRj9hauWfSYDKMMdEAACzToTUTT0brvAJ/RO2/26VoyW83 kIJHEbgVA8WBwVJE523VujfjUo1WeioBLVUZjm9OZK62egAaZydJqGnPuRBWAmhd 4+DBSO7yB3MmjWec3M2pkWw4kDj10SV6AccF7AZw7wchp3fL7O+lSKbxgdco/Skv Ua77Ufb27LCw7wPaFZKckxMf9SATjm5TBYaY+e0ZTX4PUkcAtu4isLQtlQImK/oa UrFFEniKqdILtiXZLFbF28SjkCWTavpmLST4q2vwn0nVBhfRnyxRvEpYiyPLAkve rlNUVvFeU7RQYe+0EvSgVbhO7g== -----END CERTIFICATE-----Generated at Sat Oct 10 22:28:12 2026 by rpki-client