$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft File: X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft (raw, json) Hash identifier: wUAxKtVcZHqDTf5T2XnuRS30ugWh1a+xl1H9LiWmSDw= Subject key identifier: FD:16:CD:98:B6:1F:01:5E:0E:55:B1:29:F9:EB:83:DB:74:4F:0E:EF Authority key identifier: 5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D Certificate issuer: /CN=A91DF856/serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft Manifest number: 0112 Signing time: Mon 21 Sep 2026 06:03:06 +0000 Manifest this update: Mon 21 Sep 2026 06:03:05 +0000 Manifest next update: Mon 28 Sep 2026 06:03:05 +0000 Files and hashes: 1: X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl (hash: +ywb08CTcPLGSQ5TBNlnEqEfxxOBS2qoJP5t9/oMNa8=) 2: D522C16CBAEB11F09547BA51C4F9AE02.roa (hash: gWwM8BCGpWWubDG2MVtbVJvT2zPmgCLxqAql3fBRxFQ=) 3: B245BA601C4311F08254DE40C4F9AE02.roa (hash: dWmVj4jtVJHc4wNWMusSMHmYNjBn61d8/+MaIxcv/eU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF856, serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Validity Not Before: Sep 21 06:03:05 2026 GMT Not After : Sep 28 06:03:05 2026 GMT Subject: CN=6ab0c89a-3eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:01:6a:1c:94:ff:d5:f5:d9:1f:57:b6:a0: ba:96:cc:e5:8c:57:c6:c4:17:4c:82:f1:68:a3:28: 9b:21:fc:dd:83:44:f3:27:6a:95:78:5d:b8:e9:7e: d9:5d:78:eb:f8:e6:60:50:a1:f8:c0:01:99:31:88: 2f:29:ed:18:ee:ea:c2:3f:27:c2:ea:8c:49:d2:b5: 87:f6:28:39:a0:fb:d5:0c:67:74:a9:72:e3:a0:f1: a9:3b:1c:76:a3:28:c2:5f:1c:23:78:4e:23:57:49: 3f:88:dc:89:14:cd:05:c4:55:31:50:df:c3:1c:be: ad:f2:1f:ca:67:51:42:d2:34:fb:6c:57:bf:bc:0a: b5:d1:69:83:a3:1b:88:50:d6:c6:a1:49:13:f7:2d: 60:e7:30:43:e3:77:e9:83:d9:8c:bf:5e:9f:9a:84: 83:b1:48:9c:42:35:0d:72:bf:b9:78:f3:e0:91:3a: 7c:05:13:a2:40:91:ad:91:06:9e:fb:a0:78:01:b9: ea:f3:8c:d4:ea:74:6a:4e:32:bb:d3:20:10:48:a8: 04:68:8c:b7:de:58:a0:58:05:6d:04:82:83:ba:10: 38:0c:95:f1:e7:cd:77:3f:7e:23:0e:91:75:79:d8: 49:4a:2d:a4:91:2c:7c:7a:f4:25:93:b0:29:69:dd: 33:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:16:CD:98:B6:1F:01:5E:0E:55:B1:29:F9:EB:83:DB:74:4F:0E:EF X509v3 Authority Key Identifier: keyid:5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f2:c3:84:df:b8:ef:74:f2:07:73:6e:be:dd:c7:f4:4b:4e: 4b:e0:56:96:ab:35:5f:90:8b:76:86:47:73:d1:80:bc:a7:2f: 48:60:13:09:cd:05:20:60:f3:e1:1a:31:2d:6d:e2:87:00:90: ad:f7:d3:70:55:01:b7:cd:3f:de:3d:95:77:e2:18:7b:c5:6b: 01:d5:e2:3c:ab:d9:ae:ba:53:99:06:2a:61:bd:3a:9d:5f:a7: a5:ed:35:7e:33:3a:72:e5:f5:b5:c5:34:23:d3:73:13:10:37: 12:77:00:07:d8:35:0c:d4:bd:2c:49:de:f0:ff:6c:04:c2:41: 4e:ae:2d:6a:ad:c1:46:9d:a1:b1:9c:b6:37:e1:b7:f6:53:00: 11:75:32:c3:e0:a0:c0:a9:83:5d:f8:a9:a6:86:ee:04:c2:52: 9c:2b:f3:2d:0e:b2:8e:7b:9c:74:80:e5:a8:98:45:1a:42:cd: 77:81:9c:f0:b4:65:1a:eb:ac:fb:45:9e:5e:f0:e5:3d:c0:ed: d9:01:9d:d7:2a:5d:5c:71:2b:ae:2f:bd:eb:4f:32:8b:c5:28: 85:9f:66:b9:82:c1:9e:1e:b0:e7:71:50:cb:0e:25:fd:0e:90: b3:3a:0e:c4:18:13:75:ad:fc:dd:0f:a0:da:51:8e:41:c4:c3: e6:b8:a3:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTYxMTAvBgNVBAUTKDVGNjk5MTg2QTJFQkNENDVCMUZGNkEwQTRBRjYwNjA2 RjNCM0QwOEQwHhcNMjYwOTIxMDYwMzA1WhcNMjYwOTI4MDYwMzA1WjAYMRYwFAYD VQQDEw02YWIwYzg5YS0zZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYIBahyU/9X12R9XtqC6lszljFfGxBdMgvFooyibIfzdg0TzJ2qVeF246X7Z XXjr+OZgUKH4wAGZMYgvKe0Y7urCPyfC6oxJ0rWH9ig5oPvVDGd0qXLjoPGpOxx2 oyjCXxwjeE4jV0k/iNyJFM0FxFUxUN/DHL6t8h/KZ1FC0jT7bFe/vAq10WmDoxuI UNbGoUkT9y1g5zBD43fpg9mMv16fmoSDsUicQjUNcr+5ePPgkTp8BROiQJGtkQae +6B4Abnq84zU6nRqTjK70yAQSKgEaIy33ligWAVtBIKDuhA4DJXx5813P34jDpF1 edhJSi2kkSx8evQlk7Apad0z8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP0WzZi2 HwFeDlWxKfnrg9t0Tw7vMB8GA1UdIwQYMBaAFF9pkYai681Fsf9qCkr2Bgbzs9CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Ni9FRkYyQTBBMDFD NDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpVV3hfMm9LU3ZZR0J2T3ow STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybVJocUxyelVXeF8yb0tTdllHQnZPejBJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Ni9FRkYyQTBBMDFDNDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpV V3hfMm9LU3ZZR0J2T3owSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF/LDhN+473TyB3Nuvt3H9EtOS+BWlqs1X5CLdoZHc9GAvKcvSGATCc0FIGDz 4RoxLW3ihwCQrffTcFUBt80/3j2Vd+IYe8VrAdXiPKvZrrpTmQYqYb06nV+npe01 fjM6cuX1tcU0I9NzExA3EncAB9g1DNS9LEne8P9sBMJBTq4taq3BRp2hsZy2N+G3 9lMAEXUyw+CgwKmDXfippobuBMJSnCvzLQ6yjnucdIDlqJhFGkLNd4Gc8LRlGuus +0WeXvDlPcDt2QGd1ypdXHErri+9608yi8UohZ9muYLBnh6w53FQyw4l/Q6QszoO xBgTda383Q+g2lGOQcTD5rijsg== -----END CERTIFICATE-----Generated at Tue Sep 22 11:37:50 2026 by rpki-client