$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: WgkbpjLHofwTuOtZYVh0dniWgepXzwPDYkx4npxY9rk= Subject key identifier: 58:6F:DE:B2:35:18:97:5B:B7:0D:A2:A1:78:F3:1F:B3:4A:B4:6E:C4 Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 0294 Signing time: Sun 27 Sep 2026 02:02:33 +0000 Manifest this update: Sun 27 Sep 2026 02:02:32 +0000 Manifest next update: Sun 04 Oct 2026 02:02:32 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: WJJ1wlzOFDT2C9ahzY2e1vBNFs4s4D7KPy4f37sy5h4=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: M7rxsuOrH2kuk/pXICO7DXTzFRaUh4fgHJe4Gm7Q1vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Sep 27 02:02:32 2026 GMT Not After : Oct 4 02:02:32 2026 GMT Subject: CN=6ab87939-339f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:88:a6:c9:3f:ac:fd:1a:9b:6b:ee:32:09: 61:a5:17:db:2e:bc:0d:62:2b:74:89:fa:b5:4e:f6: 00:dc:32:30:b1:13:8d:d0:6f:4e:ed:2c:da:ce:b4: 50:42:e8:93:af:90:b5:19:7a:70:30:40:1a:6f:67: 78:8f:1c:af:f4:b2:de:39:74:2c:0a:c4:ca:35:80: d3:7b:94:ed:eb:bf:17:62:f1:5d:1d:c1:3d:43:9e: fb:80:41:ec:bd:83:65:d7:51:f7:aa:02:02:ce:c8: 6b:39:bc:38:ac:45:6a:18:ad:c7:dc:fe:1c:2d:af: 02:56:56:04:98:98:18:49:83:93:c1:1f:ca:8c:f6: ea:f9:2b:32:c6:13:02:9d:db:7c:2b:57:0c:bb:5e: 3c:66:ae:e7:1e:fb:e8:68:ee:a3:c9:1b:4d:55:98: 70:27:d0:30:4c:d0:86:f9:fc:ab:66:ef:ba:73:ee: 5c:1f:f0:ba:91:75:58:62:92:09:a1:fd:45:9b:de: 37:5d:60:e1:8e:03:13:5e:ef:d7:29:d1:3a:1a:5f: 51:0f:e6:cf:32:f9:52:8e:d7:b1:73:22:a3:b9:35: 90:a6:d2:76:f3:40:e4:56:89:3c:3e:8e:f5:2e:d2: 80:f8:4f:d5:1e:d0:21:02:2c:6d:a3:0a:a6:3d:75: f0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6F:DE:B2:35:18:97:5B:B7:0D:A2:A1:78:F3:1F:B3:4A:B4:6E:C4 X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:0c:5e:7e:44:66:80:c3:6e:eb:b4:8d:16:25:34:b4:e4:7f: af:08:18:8f:9c:f6:ad:ad:bb:5c:7d:89:65:d9:c3:70:ac:3c: f2:fc:48:3e:17:d0:33:9e:81:48:ce:ae:0f:b7:92:f0:dc:dc: d9:7e:57:0a:0a:ce:51:16:fe:0e:2f:4d:54:66:4c:a8:2a:06: 71:56:da:6f:26:fb:c5:73:38:ff:c4:b8:20:4d:6d:90:8b:dc: 03:ca:4d:1e:78:4a:96:95:e9:88:e3:65:09:47:36:db:8c:26: 93:2d:59:41:0b:81:b4:c8:57:f3:11:93:1a:67:cd:98:77:72: d8:65:eb:31:9a:47:1f:82:d0:23:be:5e:11:53:81:7c:a6:77: 26:0c:36:2c:be:8e:cc:46:c1:cc:ae:07:ba:46:96:0b:ff:bd: 11:57:95:e0:93:7f:a0:ba:03:77:6c:9d:b6:93:5a:5b:17:2e: 37:0b:41:b8:7d:f8:25:81:67:f5:5a:fb:71:50:50:73:7f:05: 0d:5e:77:59:aa:4d:42:58:cc:2c:f5:be:53:d7:d2:ff:e0:82: 54:25:58:84:be:51:e9:1b:3b:9e:67:fc:4d:29:7f:c3:cc:b1: 61:1e:4d:8a:da:8c:a1:68:e3:04:16:6b:f7:70:46:c3:bf:c9: 04:9a:44:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjYwOTI3MDIwMjMyWhcNMjYxMDA0MDIwMjMyWjAYMRYwFAYD VQQDEw02YWI4NzkzOS0zMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6CIpsk/rP0am2vuMglhpRfbLrwNYit0ifq1TvYA3DIwsRON0G9O7SzazrRQ QuiTr5C1GXpwMEAab2d4jxyv9LLeOXQsCsTKNYDTe5Tt678XYvFdHcE9Q577gEHs vYNl11H3qgICzshrObw4rEVqGK3H3P4cLa8CVlYEmJgYSYOTwR/KjPbq+SsyxhMC ndt8K1cMu148Zq7nHvvoaO6jyRtNVZhwJ9AwTNCG+fyrZu+6c+5cH/C6kXVYYpIJ of1Fm943XWDhjgMTXu/XKdE6Gl9RD+bPMvlSjtexcyKjuTWQptJ280DkVok8Po71 LtKA+E/VHtAhAixtowqmPXXwzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhv3rI1 GJdbtw2ioXjzH7NKtG7EMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEwxefkRmgMNu67SNFiU0tOR/rwgYj5z2ra27XH2JZdnDcKw88vxIPhfQM56B SM6uD7eS8Nzc2X5XCgrOURb+Di9NVGZMqCoGcVbabyb7xXM4/8S4IE1tkIvcA8pN HnhKlpXpiONlCUc224wmky1ZQQuBtMhX8xGTGmfNmHdy2GXrMZpHH4LQI75eEVOB fKZ3Jgw2LL6OzEbBzK4HukaWC/+9EVeV4JN/oLoDd2ydtpNaWxcuNwtBuH34JYFn 9Vr7cVBQc38FDV53WapNQljMLPW+U9fS/+CCVCVYhL5R6Rs7nmf8TSl/w8yxYR5N itqMoWjjBBZr93BGw7/JBJpEQg== -----END CERTIFICATE-----Generated at Sun Sep 27 12:40:32 2026 by rpki-client