$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft File: 2n7tifhToFCqePhmgZCMmcNRBnA.mft (raw, json) Hash identifier: W1Xzu7nkPxsJPt3p1Efde/pVeR85KllFNTpSnRWptiE= Subject key identifier: 12:28:3C:B1:2E:A0:EB:F6:93:7A:14:E9:AA:2D:20:6A:3B:35:6B:CD Authority key identifier: DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70 Certificate issuer: /CN=A91C8A07/serialNumber=DA7EED89F853A050AA78F86681908C99C3510670 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft Manifest number: 3E Signing time: Fri 25 Sep 2026 08:42:00 +0000 Manifest this update: Fri 25 Sep 2026 08:42:00 +0000 Manifest next update: Fri 02 Oct 2026 08:42:00 +0000 Files and hashes: 1: 2n7tifhToFCqePhmgZCMmcNRBnA.crl (hash: vSsc4dnvGjsxfsjnwshdzwZpE8Yp2Ds3L67TPIMS+lo=) 2: F3CE961064A311F1A97DC0998B47A888.roa (hash: pejeTtYSguLZu0BW6m0RkH55kNdbMRCqIXu4V/iuKnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8A07, serialNumber=DA7EED89F853A050AA78F86681908C99C3510670 Validity Not Before: Sep 25 08:42:00 2026 GMT Not After : Oct 2 08:42:00 2026 GMT Subject: CN=6ab633d8-715a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:69:98:18:7d:d4:49:a7:c3:0a:76:92:21: 97:9a:07:6a:76:d3:3f:3e:1f:bb:bd:54:1a:27:be: 2b:f0:7b:0f:7c:74:1f:b2:ff:e3:98:28:bd:41:f1: 3b:06:de:8f:04:39:26:f2:39:64:06:23:3a:f0:21: e0:79:ac:81:4d:c2:81:f2:aa:4a:84:3c:fc:e7:f4: 29:29:1c:89:01:13:a4:c4:4a:38:41:5d:82:80:e8: 1e:51:e3:42:53:2c:01:ce:b9:fc:f4:ba:ed:8b:eb: 91:be:40:fe:0e:8a:83:7f:7e:d5:49:ae:5a:a1:ed: 80:d0:54:e5:6e:eb:19:46:80:c7:33:fe:2c:a5:ec: a9:3d:4b:62:d1:89:c8:1e:8f:b1:79:87:8d:e7:d0: 6a:1f:5b:e2:78:4d:39:e7:1a:b8:2c:e1:87:f9:96: 75:15:a3:83:b0:bc:b2:2e:e4:1b:13:05:71:1f:e3: 73:5d:f3:2e:e3:f2:07:03:c4:e1:48:af:00:fc:05: 73:c0:3f:e7:1b:7e:13:43:96:03:98:80:a9:e7:df: 1d:0d:27:3b:a1:9b:36:54:df:09:ae:d8:db:52:c1: aa:9e:4a:96:fc:14:ee:7b:90:17:4c:32:49:5d:f1: bd:49:f3:0a:20:bd:cb:e1:06:52:fc:f5:e9:b4:b1: fa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:28:3C:B1:2E:A0:EB:F6:93:7A:14:E9:AA:2D:20:6A:3B:35:6B:CD X509v3 Authority Key Identifier: keyid:DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:6d:cf:d6:af:c6:1d:db:18:a0:43:2c:1d:7d:70:3b:6f:21: 5c:db:2e:e7:ea:b3:eb:08:4a:1d:7f:64:3b:b7:c2:15:48:50: 67:c1:17:17:78:b0:f9:08:32:53:3f:7d:20:ca:1a:ec:63:3b: c7:28:68:e3:46:47:e1:b7:6b:2d:60:1f:c9:93:96:2c:f0:80: d2:83:7c:cc:8d:c5:8b:7d:4f:a9:12:c1:87:9e:e9:22:2c:39: 83:cc:69:22:4d:24:59:56:2d:4f:7d:22:48:a9:b7:84:70:b9: d7:e7:96:44:59:33:11:b4:48:1c:92:db:56:0d:7f:52:89:f5: bf:46:4b:4d:2f:ba:de:8c:21:52:0a:9f:29:73:c2:5a:b8:db: 93:42:cc:38:20:4b:65:cf:c9:8d:9e:fa:d1:b2:fe:a8:1e:1f: fb:2f:4a:77:3d:eb:69:ed:66:f6:45:c6:72:0b:bf:46:2c:0d: 56:2c:eb:ac:59:31:51:9f:31:04:26:fa:ec:3e:d7:0b:8d:f5: 66:33:be:d3:e3:cb:c0:a5:35:0e:cf:3b:86:3f:c5:f6:d5:9a: 2b:0b:13:b1:2b:c0:00:a3:a7:92:11:07:17:f1:36:d6:77:e0: 09:01:2d:56:96:97:2b:c8:9d:34:12:83:51:1b:81:47:98:8d: 29:a9:31:31 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OEEwNzExMC8GA1UEBRMoREE3RUVEODlGODUzQTA1MEFBNzhGODY2ODE5MDhDOTlD MzUxMDY3MDAeFw0yNjA5MjUwODQyMDBaFw0yNjEwMDIwODQyMDBaMBgxFjAUBgNV BAMTDTZhYjYzM2Q4LTcxNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRMWmYGH3USafDCnaSIZeaB2p20z8+H7u9VBonvivwew98dB+y/+OYKL1B8TsG 3o8EOSbyOWQGIzrwIeB5rIFNwoHyqkqEPPzn9CkpHIkBE6TESjhBXYKA6B5R40JT LAHOufz0uu2L65G+QP4OioN/ftVJrlqh7YDQVOVu6xlGgMcz/iyl7Kk9S2LRicge j7F5h43n0GofW+J4TTnnGrgs4Yf5lnUVo4OwvLIu5BsTBXEf43Nd8y7j8gcDxOFI rwD8BXPAP+cbfhNDlgOYgKnn3x0NJzuhmzZU3wmu2NtSwaqeSpb8FO57kBdMMkld 8b1J8wogvcvhBlL89em0sfrLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEig8sS6g 6/aTehTpqi0gajs1a80wHwYDVR0jBBgwFoAU2n7tifhToFCqePhmgZCMmcNRBnAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4QTA3LzA5Q0NDMUM4NjIx ODExRjE4QkZDN0I0MjZENDdBODg4LzJuN3RpZmhUb0ZDcWVQaG1nWkNNbWNOUkJu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMm43dGlmaFRvRkNxZVBobWdaQ01tY05SQm5BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 QTA3LzA5Q0NDMUM4NjIxODExRjE4QkZDN0I0MjZENDdBODg4LzJuN3RpZmhUb0ZD cWVQaG1nWkNNbWNOUkJuQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgbc/Wr8Yd2xigQywdfXA7byFc2y7n6rPrCEodf2Q7t8IVSFBnwRcXeLD5CDJT P30gyhrsYzvHKGjjRkfht2stYB/Jk5Ys8IDSg3zMjcWLfU+pEsGHnukiLDmDzGki TSRZVi1PfSJIqbeEcLnX55ZEWTMRtEgckttWDX9SifW/RktNL7rejCFSCp8pc8Ja uNuTQsw4IEtlz8mNnvrRsv6oHh/7L0p3Petp7Wb2RcZyC79GLA1WLOusWTFRnzEE JvrsPtcLjfVmM77T48vApTUOzzuGP8X21ZorCxOxK8AAo6eSEQcX8TbWd+AJAS1W lpcryJ00EoNRG4FHmI0pqTEx -----END CERTIFICATE-----Generated at Fri Sep 25 16:59:05 2026 by rpki-client