$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: 6lbobB1gXiIU6ENT9TvkqXCuZIRGEC+b8bkVvcuGZDg= Subject key identifier: 43:37:B2:39:CB:66:AF:DA:FE:11:BA:92:7D:81:77:12:F2:3A:33:C5 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 031B Signing time: Mon 21 Sep 2026 00:53:00 +0000 Manifest this update: Mon 21 Sep 2026 00:52:59 +0000 Manifest next update: Mon 28 Sep 2026 00:52:59 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: +iznFlFDlRGUaeNkkxULZVAkjTr/1oWdffiVVtFcAb8=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: 41XnV0Dfd97uGyPbDbqHHH2dJuzZIdcHH6ek0SjFVbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Sep 21 00:52:59 2026 GMT Not After : Sep 28 00:52:59 2026 GMT Subject: CN=6ab07feb-4521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7e:49:f8:23:30:a6:b4:9c:1f:cc:2b:da:94: 1f:75:11:08:cd:1f:2d:95:57:2a:10:8c:c8:6d:93: 0a:4f:23:19:d1:ec:44:2d:3e:6d:ff:10:60:d8:26: 1f:18:77:3d:1a:50:e4:62:f1:bb:13:04:60:ad:02: d4:cd:e1:ce:4e:39:90:a0:c2:5c:21:7b:1f:ac:35: fd:60:3e:a7:c2:d3:35:ed:fd:bb:1d:a1:71:ef:a4: 2b:97:88:73:d3:f3:c2:a9:ac:be:dd:f9:ec:fd:fb: c9:ef:51:cc:f4:7d:e9:25:38:cf:a6:9f:0e:b0:aa: e0:46:bb:b3:22:fe:38:81:5e:aa:22:86:7f:56:4e: 9d:f8:f5:a4:e0:fb:2f:47:ed:54:b2:c5:51:d9:6e: a3:31:fe:91:dd:72:1d:29:4e:23:81:45:24:1e:13: 37:f0:55:63:e8:eb:b2:89:d9:25:ab:3d:2c:be:b8: 7d:fc:31:6d:6d:8d:05:4d:43:86:7a:6e:7e:2c:d7: 79:56:fa:e3:e6:c5:df:f3:d8:00:d4:ac:50:17:a1: d2:9f:de:0a:79:59:3a:88:e6:51:34:31:9c:2d:b1: c1:8b:e9:2d:2f:e3:fc:70:fa:e2:a1:0d:1c:47:9b: 0f:7b:42:33:99:76:be:fb:50:29:c0:46:3b:50:13: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:37:B2:39:CB:66:AF:DA:FE:11:BA:92:7D:81:77:12:F2:3A:33:C5 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8d:03:51:7c:88:d3:bb:c1:69:76:d5:44:af:83:50:59:f9: 67:83:de:12:a2:b5:eb:55:e5:a6:f8:99:49:e6:62:45:a1:eb: bb:ef:fe:2d:33:2d:7f:c6:bf:ee:4b:ac:bf:61:2d:a9:26:e4: e3:64:51:63:4c:8d:63:94:3c:66:21:7b:98:9c:12:96:d3:90: a6:24:c7:84:c4:09:7c:55:2a:b6:25:89:84:be:cf:13:d1:ac: 0e:b2:9e:36:66:06:13:24:50:d6:9c:06:f3:5a:6f:6f:ca:06: 86:6a:e6:d4:5e:63:0e:bf:05:c5:2f:21:13:a1:bc:7c:28:45: f8:b9:b6:d7:64:d0:3f:2d:a2:50:e2:d6:4a:c7:76:39:80:25: a8:43:eb:a0:94:bd:90:50:ae:23:70:6e:6c:ba:e3:4c:30:5f: 73:cc:3c:b9:cb:29:85:f9:26:cb:1c:ad:28:23:20:28:b2:54: db:70:82:d8:c9:c1:3f:2b:47:e7:ff:8d:68:1b:48:df:de:1d: 86:1c:87:69:62:3d:56:9e:a4:ee:5f:d5:4c:f6:27:bc:86:ae: 5f:65:b2:de:4e:1e:d6:73:c9:d6:6b:51:4f:3d:19:b2:bf:79: fc:15:97:32:2b:fe:e9:ec:6b:81:48:6d:17:7e:b9:f0:55:cb: 0c:3b:76:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjYwOTIxMDA1MjU5WhcNMjYwOTI4MDA1MjU5WjAYMRYwFAYD VQQDEw02YWIwN2ZlYi00NTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5H5J+CMwprScH8wr2pQfdREIzR8tlVcqEIzIbZMKTyMZ0exELT5t/xBg2CYf GHc9GlDkYvG7EwRgrQLUzeHOTjmQoMJcIXsfrDX9YD6nwtM17f27HaFx76Qrl4hz 0/PCqay+3fns/fvJ71HM9H3pJTjPpp8OsKrgRruzIv44gV6qIoZ/Vk6d+PWk4Psv R+1UssVR2W6jMf6R3XIdKU4jgUUkHhM38FVj6Ouyidklqz0svrh9/DFtbY0FTUOG em5+LNd5Vvrj5sXf89gA1KxQF6HSn94KeVk6iOZRNDGcLbHBi+ktL+P8cPrioQ0c R5sPe0IzmXa++1ApwEY7UBP7lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEM3sjnL Zq/a/hG6kn2BdxLyOjPFMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd40DUXyI07vBaXbVRK+DUFn5Z4PeEqK161XlpviZSeZiRaHru+/+LTMtf8a/ 7kusv2EtqSbk42RRY0yNY5Q8ZiF7mJwSltOQpiTHhMQJfFUqtiWJhL7PE9GsDrKe NmYGEyRQ1pwG81pvb8oGhmrm1F5jDr8FxS8hE6G8fChF+Lm212TQPy2iUOLWSsd2 OYAlqEProJS9kFCuI3BubLrjTDBfc8w8ucsphfkmyxytKCMgKLJU23CC2MnBPytH 5/+NaBtI394dhhyHaWI9Vp6k7l/VTPYnvIauX2Wy3k4e1nPJ1mtRTz0Zsr95/BWX Miv+6exrgUhtF3658FXLDDt2Ww== -----END CERTIFICATE-----Generated at Mon Sep 21 10:00:46 2026 by rpki-client