$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft File: 2x_5ooQq3wDKEBQTx5pvACFsWvA.mft (raw, json) Hash identifier: hOvWMUxxFlJFaqTXRpOpwkSzZV+ZPzF6FzxtD23DwiQ= Subject key identifier: AA:DA:6C:BD:39:85:07:19:92:4D:3D:E4:37:3A:BA:F4:29:10:C5:97 Authority key identifier: DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0 Certificate issuer: /CN=A91E0E7D/serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft Manifest number: 11 Signing time: Mon 21 Sep 2026 09:04:57 +0000 Manifest this update: Mon 21 Sep 2026 09:04:57 +0000 Manifest next update: Mon 28 Sep 2026 09:04:57 +0000 Files and hashes: 1: 2x_5ooQq3wDKEBQTx5pvACFsWvA.crl (hash: Pdu2D4q4AEoNb1Yg7SxJUfZf48IA09JfeJKnZ7MNMdw=) 2: EC73EAD29FD611F18710A9255A11F970.roa (hash: PYfOG4e8SZv7qBS6pP7VFhdv6C3gDR1/cZ2xk75pc7M=) 3: mSalsaSx3s8-1Xmu44FW2V79p_U.asa (hash: cQ7zPkIfMI9Uzv7GDBaTWME53Sx0bcFmhB8OL1zDBHk=) 4: EDA0097C9FD611F18710A9255A11F970.roa (hash: kFPd6ZCCWKwkoa/r2Uhma7Kd/IQDW1PTBDgDOoC0aIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.crl rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E7D, serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0 Validity Not Before: Sep 21 09:04:57 2026 GMT Not After : Sep 28 09:04:57 2026 GMT Subject: CN=6ab0f339-0ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:d9:94:de:82:64:d2:e9:9a:d2:71:ba:03: da:19:d5:ff:73:68:15:e5:d1:25:e9:d5:aa:72:7c: 5f:e6:c0:b0:8f:b1:42:43:8a:05:4d:29:ac:95:47: a2:b3:d3:e1:82:2e:a6:72:0e:8a:bc:6e:92:e2:8a: 24:ca:ba:96:25:31:0a:9c:f9:a3:f1:16:6b:7e:34: 76:af:3b:1a:7c:e4:66:06:45:31:79:be:e8:bf:11: 91:1c:1e:8a:63:d6:62:c3:b3:f8:ec:46:5d:fd:23: 6b:8b:f3:8f:79:23:d0:db:c8:2a:61:34:95:15:6a: ba:a8:ad:e0:a9:e7:3b:50:e8:fb:fd:bc:44:c3:44: c5:bb:49:94:f2:93:32:c8:80:b8:20:51:e5:a9:a8: 2b:72:13:44:1a:8f:5e:16:04:60:00:a3:78:70:ac: fb:69:fd:a4:b0:b9:7d:93:2f:58:a1:c5:4c:50:08: f0:3e:5c:a2:f7:6f:78:f0:24:41:53:9b:a9:17:26: d9:e4:da:c9:2e:5c:ff:19:83:7e:d4:93:9d:82:48: 81:f7:e2:58:1e:9c:4d:56:36:30:48:da:5c:1c:89: 4b:c5:14:65:76:9c:88:43:4f:26:74:3d:c1:0c:5d: 9a:43:4e:ed:56:e1:1e:3b:5c:9a:9a:78:ff:a6:ae: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DA:6C:BD:39:85:07:19:92:4D:3D:E4:37:3A:BA:F4:29:10:C5:97 X509v3 Authority Key Identifier: keyid:DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6a:1c:6d:99:b5:71:25:df:58:8b:17:fc:ce:40:65:33:61: 73:74:c1:72:15:42:36:33:8f:8d:1b:40:58:e3:e5:4e:b2:d0: e4:c2:71:c3:56:2c:d2:06:21:6d:57:36:32:dc:3d:e9:c4:1a: 70:5b:96:94:2f:c7:37:ad:e2:57:28:bf:bf:c4:a0:2d:8a:8d: 37:9a:57:7e:4d:32:88:40:cd:a3:b0:0d:54:e8:a0:33:ba:e6: ec:41:5c:1c:66:af:af:a2:ae:ba:34:9d:05:68:50:75:1a:84: b6:30:d1:ba:4f:f2:5c:6a:03:f3:64:28:dc:5f:bb:fe:2d:55: 4a:10:68:ba:6e:2c:aa:4b:e7:b1:d2:f7:c5:f7:15:c6:ce:2b: 89:a6:1e:4e:fe:3c:b8:bc:78:c4:64:5e:99:40:ec:dd:98:c8: 28:0f:55:3b:9a:39:ea:12:ba:32:9f:4b:ee:8b:bf:00:37:ca: ef:67:57:12:72:c3:fc:4c:52:c5:c8:af:12:58:26:df:b3:47: c2:c8:b3:ce:63:34:48:6a:2b:e6:43:9c:10:27:b0:ed:22:7e: 46:0e:3b:3f:11:bd:57:9e:e5:37:32:62:d3:cf:30:16:1e:3d: 97:ff:14:76:66:c4:57:f9:49:af:db:91:76:b5:f7:33:ac:21: 67:85:52:b6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MEU3RDExMC8GA1UEBRMoREIxRkY5QTI4NDJBREYwMENBMTAxNDEzQzc5QTZGMDAy MTZDNUFGMDAeFw0yNjA5MjEwOTA0NTdaFw0yNjA5MjgwOTA0NTdaMBgxFjAUBgNV BAMTDTZhYjBmMzM5LTBhZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBa9mU3oJk0uma0nG6A9oZ1f9zaBXl0SXp1apyfF/mwLCPsUJDigVNKayVR6Kz 0+GCLqZyDoq8bpLiiiTKupYlMQqc+aPxFmt+NHavOxp85GYGRTF5vui/EZEcHopj 1mLDs/jsRl39I2uL8495I9DbyCphNJUVarqoreCp5ztQ6Pv9vETDRMW7SZTykzLI gLggUeWpqCtyE0Qaj14WBGAAo3hwrPtp/aSwuX2TL1ihxUxQCPA+XKL3b3jwJEFT m6kXJtnk2skuXP8Zg37Uk52CSIH34lgenE1WNjBI2lwciUvFFGV2nIhDTyZ0PcEM XZpDTu1W4R47XJqaeP+mrpO7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqtpsvTmF BxmSTT3kNzq69CkQxZcwHwYDVR0jBBgwFoAU2x/5ooQq3wDKEBQTx5pvACFsWvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwRTdELzU5NkNENTRFOUZE MzExRjFCMUE2MTI4QzU4MTFGOTcwLzJ4XzVvb1FxM3dES0VCUVR4NXB2QUNGc1d2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnhfNW9vUXEzd0RLRUJRVHg1cHZBQ0ZzV3ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw RTdELzU5NkNENTRFOUZEMzExRjFCMUE2MTI4QzU4MTFGOTcwLzJ4XzVvb1FxM3dE S0VCUVR4NXB2QUNGc1d2QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApahxtmbVxJd9Yixf8zkBlM2FzdMFyFUI2M4+NG0BY4+VOstDkwnHDVizSBiFt VzYy3D3pxBpwW5aUL8c3reJXKL+/xKAtio03mld+TTKIQM2jsA1U6KAzuubsQVwc Zq+voq66NJ0FaFB1GoS2MNG6T/JcagPzZCjcX7v+LVVKEGi6biyqS+ex0vfF9xXG ziuJph5O/jy4vHjEZF6ZQOzdmMgoD1U7mjnqEroyn0vui78AN8rvZ1cScsP8TFLF yK8SWCbfs0fCyLPOYzRIaivmQ5wQJ7DtIn5GDjs/Eb1XnuU3MmLTzzAWHj2X/xR2 ZsRX+Umv25F2tfczrCFnhVK2 -----END CERTIFICATE-----Generated at Tue Sep 22 08:03:16 2026 by rpki-client