$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft File: 2itDzBg8qOD2qPbapUzdcwb4Yig.mft (raw, json) Hash identifier: 6ycVrlsYtjou+CgCus6yhC/d/7b9EUjtAj9ct4TaVa4= Subject key identifier: AB:29:1D:F1:01:75:F8:AD:C1:1E:96:99:0B:D8:20:02:2E:14:22:71 Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft Manifest number: 0AF4 Signing time: Sun 20 Sep 2026 19:19:34 +0000 Manifest this update: Sun 20 Sep 2026 19:19:33 +0000 Manifest next update: Sun 27 Sep 2026 19:19:33 +0000 Files and hashes: 1: 2itDzBg8qOD2qPbapUzdcwb4Yig.crl (hash: nj2M59X+R5LdnEBsj/dbhNGNM8s9P28Yl8Mu3iSmtW8=) 2: FD114232912711EFBCB4ED6EC4F9AE02.roa (hash: m31d9LY6Fb+rpx0iPU2nTzyFxPrcr/nSM8utNGuQQUI=) 3: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (hash: T6idJL8aHggzjv6s1JmSSpHwZuTbLSQAyDk/XLJrS3o=) 4: 0DBF860C6FB111F1A2CD02AE78A30FBC.roa (hash: HcbMw2rn7TZMWXGPZnCmUILsaTL6x9o/58aT8kV7J4E=) 5: C8A0E422831611EA95762453C4F9AE02.roa (hash: zy8s2JOSWvYwBrRrmYSE0kwJEPoK1AaNF1yfDHC6Css=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Sep 20 19:19:33 2026 GMT Not After : Sep 27 19:19:33 2026 GMT Subject: CN=6ab031c5-b3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:ea:1e:a4:d7:01:a3:f7:e9:24:95:7a:51: de:3e:da:2a:ec:4c:59:94:4b:0b:5f:fc:36:ec:92: 0d:6f:fc:01:3d:7c:c2:e3:fe:02:8c:ec:4f:c8:25: 3f:5d:72:04:d3:9f:56:b9:2b:25:2b:ac:8f:e3:ab: 98:40:03:f5:d1:21:5b:b9:cb:cc:b9:4e:9c:47:6d: 59:37:1e:c5:5a:80:cc:0f:3a:bf:b4:fe:f3:5f:36: d8:b5:54:78:8c:40:58:9c:f7:5c:05:ac:d5:2b:0f: 2f:fa:37:82:b1:77:d6:dc:f8:70:dc:eb:0f:f3:9b: cb:04:a2:2a:14:d4:d0:26:e4:ec:df:b9:d4:a0:ef: 66:37:b4:73:a4:9b:87:e8:76:6b:c9:25:6a:5c:29: 94:6a:3c:48:f2:5c:80:b7:7e:59:5a:42:ce:95:83: 43:4b:28:f4:71:7f:c3:86:69:a1:fe:a0:6c:89:cb: 15:eb:cb:4c:ee:cb:cd:4f:07:e2:cf:34:0c:92:ec: 0b:20:a4:26:d9:85:92:c8:c5:85:72:f3:ab:01:5a: c3:f3:6d:3b:00:d9:31:17:b3:3d:0a:06:14:bb:ae: 61:ea:63:49:e1:d2:fa:ab:52:49:90:b7:15:ab:e0: 35:11:b5:ee:32:37:6a:4b:7f:da:cb:54:c5:8a:da: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:29:1D:F1:01:75:F8:AD:C1:1E:96:99:0B:D8:20:02:2E:14:22:71 X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:70:d3:f0:29:d5:84:29:6e:b1:5c:22:6f:57:16:59:04:fc: 2a:fc:d4:2a:79:4e:4f:fb:ed:b4:db:65:84:66:fb:c4:58:f8: 12:e3:1a:9f:cf:1e:78:7c:8e:e3:35:24:1b:57:11:f4:f7:cf: f8:9f:72:ed:70:ae:81:f6:51:3e:8a:64:76:f9:1d:c3:4d:ac: 27:9b:e2:43:65:9b:13:40:0b:25:e6:2d:ab:11:a8:ce:11:92: f1:7e:b2:4b:3e:6f:33:68:57:86:ab:0e:c5:b3:b4:56:85:7f: ca:39:fd:41:4f:a7:e3:99:d7:93:55:03:99:4b:f6:63:22:41: fb:2b:56:cd:1c:76:24:d5:63:ef:c9:1b:20:4d:6d:f2:e6:c1: 8c:1a:9c:52:02:6a:80:55:52:85:ca:60:c6:59:d7:33:82:c3: f0:82:1a:c7:96:8d:89:56:fb:de:93:88:fb:ba:d1:78:af:94: 79:2d:e2:13:d8:8c:c8:8d:bf:ad:da:aa:80:0b:a7:ed:d2:38: 9e:3b:d2:e8:9b:45:36:05:5e:30:63:8d:0e:91:f4:f0:26:bb: 18:f4:d9:7b:54:e5:43:b1:85:60:0c:5e:8e:b5:49:32:1c:01: 14:06:1f:f3:94:53:73:96:90:7b:76:0b:cb:d1:fe:8d:67:32: 13:2b:b8:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjYwOTIwMTkxOTMzWhcNMjYwOTI3MTkxOTMzWjAYMRYwFAYD VQQDEw02YWIwMzFjNS1iM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMfqHqTXAaP36SSVelHePtoq7ExZlEsLX/w27JINb/wBPXzC4/4CjOxPyCU/ XXIE059WuSslK6yP46uYQAP10SFbucvMuU6cR21ZNx7FWoDMDzq/tP7zXzbYtVR4 jEBYnPdcBazVKw8v+jeCsXfW3Phw3OsP85vLBKIqFNTQJuTs37nUoO9mN7RzpJuH 6HZrySVqXCmUajxI8lyAt35ZWkLOlYNDSyj0cX/Dhmmh/qBsicsV68tM7svNTwfi zzQMkuwLIKQm2YWSyMWFcvOrAVrD8207ANkxF7M9CgYUu65h6mNJ4dL6q1JJkLcV q+A1EbXuMjdqS3/ay1TFitqhgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKspHfEB dfitwR6WmQvYIAIuFCJxMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBFQy85OTFDRUY3RTc5NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFP RDJxUGJhcFV6ZGN3YjRZaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEHDT8CnVhClusVwib1cWWQT8KvzUKnlOT/vttNtlhGb7xFj4EuMan88eeHyO 4zUkG1cR9PfP+J9y7XCugfZRPopkdvkdw02sJ5viQ2WbE0ALJeYtqxGozhGS8X6y Sz5vM2hXhqsOxbO0VoV/yjn9QU+n45nXk1UDmUv2YyJB+ytWzRx2JNVj78kbIE1t 8ubBjBqcUgJqgFVShcpgxlnXM4LD8IIax5aNiVb73pOI+7rReK+UeS3iE9iMyI2/ rdqqgAun7dI4njvS6JtFNgVeMGONDpH08Ca7GPTZe1TlQ7GFYAxejrVJMhwBFAYf 85RTc5aQe3YLy9H+jWcyEyu4bg== -----END CERTIFICATE-----Generated at Tue Sep 22 19:11:54 2026 by rpki-client