$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: MK8d04h572nIwexuM8T7eVz216D6KFIHJhH+bEf1ndM= Subject key identifier: 24:31:C9:8A:B4:DA:D6:A4:A7:DF:86:33:4A:20:BE:B3:C8:E9:F4:0C Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: C2 Signing time: Tue 22 Sep 2026 22:53:18 +0000 Manifest this update: Tue 22 Sep 2026 22:53:17 +0000 Manifest next update: Tue 29 Sep 2026 22:53:17 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: JAqZYKxQ8nh8PmZOA9lKdung3JfsvfdL9Pu12Ki3Z4g=) 2: 3D85F9E653BB11F19AC0B954B9833773.roa (hash: kXyzSAEuWraJGLeRl8Ev4HWfqkONz/RaOPivNONbhAA=) 3: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=) 4: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=) 5: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=) 6: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=) 7: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Sep 22 22:53:17 2026 GMT Not After : Sep 29 22:53:17 2026 GMT Subject: CN=6ab306de-f555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:5e:b6:56:94:94:58:22:bd:26:ad:20:84: 45:50:89:98:e5:d2:05:6b:1a:32:9f:f2:61:10:7f: f1:99:7b:6c:38:c9:50:54:df:b7:54:74:d1:50:f9: 17:8e:03:c1:70:38:84:39:a7:69:5e:79:f5:84:3b: 03:25:b4:0d:01:0b:1e:9a:84:c9:11:c9:e1:32:25: c3:a0:1f:1a:35:f6:36:67:00:4c:b4:91:8e:57:67: 8b:4a:0f:a9:c4:41:ea:d5:47:98:fc:95:45:7b:2d: f0:2d:64:89:dd:17:b5:58:13:8e:13:5b:af:7b:44: ef:f2:ae:ef:31:99:49:61:b8:4b:27:c4:26:4b:0d: 3e:0e:bc:63:40:fd:df:33:c5:22:b0:07:85:17:db: 19:c7:21:55:a1:2c:37:7f:b8:d7:86:e6:48:4a:bd: 8a:04:5d:7a:b5:ec:21:90:03:69:e4:73:88:73:b1: ab:c4:b7:61:f2:6a:5e:64:93:a0:76:52:48:74:84: a1:2b:cb:1c:f0:21:c6:06:c0:7d:be:0e:a4:24:c9: f0:0c:0d:65:0d:24:62:f2:fa:e5:c9:1c:28:bf:5e: 48:1a:4c:17:1b:a1:65:6f:51:56:9c:90:9e:42:47: 54:7a:aa:c3:cc:dc:87:f7:88:e3:46:90:66:45:fb: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:31:C9:8A:B4:DA:D6:A4:A7:DF:86:33:4A:20:BE:B3:C8:E9:F4:0C X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:90:40:fe:dc:7f:b5:cc:05:5d:d3:eb:ff:fb:35:4b:4b:2e: 2f:71:f3:3e:1d:6f:5d:17:15:95:ef:de:0c:2f:d1:0e:7d:51: d9:3e:76:69:4b:39:46:47:0b:57:ae:c4:a2:6d:20:74:cc:5e: 32:02:bb:fd:db:22:d9:f8:e5:52:e3:4a:91:68:7f:c0:30:b3: 2a:06:37:45:76:10:99:55:93:c0:d1:eb:30:82:e3:7d:46:00: 8f:5a:a5:54:e5:89:d7:6f:17:eb:9d:33:8f:5b:a0:54:c5:e3: 71:9e:2e:89:5a:00:8d:bb:1a:a3:bc:e8:a7:c0:c6:dd:db:2f: 0c:45:f5:8b:df:2d:93:d4:8d:c8:a9:85:91:5f:25:0e:1f:be: 3e:56:d0:3f:05:24:75:3f:cd:a0:6f:77:31:a2:cc:82:cf:4a: 55:47:69:83:4f:11:10:cd:ca:5b:ef:d7:99:e7:00:a6:f2:81: 10:0a:fd:cc:e7:ea:72:d8:85:eb:22:e2:3d:cf:d0:3a:06:3c: e1:7d:de:4f:84:90:8c:99:13:05:75:fe:b3:ec:54:f5:b9:87: 93:a6:dd:03:a5:1d:ea:3a:a9:20:09:1f:06:49:96:d3:50:8f: a7:c0:67:37:1a:20:e3:3a:c1:e6:c8:04:7d:15:b9:4f:aa:b3: bc:f8:a3:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYwOTIyMjI1MzE3WhcNMjYwOTI5MjI1MzE3WjAYMRYwFAYD VQQDEw02YWIzMDZkZS1mNTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgpetlaUlFgivSatIIRFUImY5dIFaxoyn/JhEH/xmXtsOMlQVN+3VHTRUPkX jgPBcDiEOadpXnn1hDsDJbQNAQsemoTJEcnhMiXDoB8aNfY2ZwBMtJGOV2eLSg+p xEHq1UeY/JVFey3wLWSJ3Re1WBOOE1uve0Tv8q7vMZlJYbhLJ8QmSw0+DrxjQP3f M8UisAeFF9sZxyFVoSw3f7jXhuZISr2KBF16tewhkANp5HOIc7GrxLdh8mpeZJOg dlJIdIShK8sc8CHGBsB9vg6kJMnwDA1lDSRi8vrlyRwov15IGkwXG6Flb1FWnJCe QkdUeqrDzNyH94jjRpBmRfvJaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQxyYq0 2takp9+GM0ogvrPI6fQMMB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5 YlE1cmF6a1dlMlhDRUpJUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApJBA/tx/tcwFXdPr//s1S0suL3HzPh1vXRcVle/eDC/RDn1R2T52aUs5RkcL V67Eom0gdMxeMgK7/dsi2fjlUuNKkWh/wDCzKgY3RXYQmVWTwNHrMILjfUYAj1ql VOWJ128X650zj1ugVMXjcZ4uiVoAjbsao7zop8DG3dsvDEX1i98tk9SNyKmFkV8l Dh++PlbQPwUkdT/NoG93MaLMgs9KVUdpg08REM3KW+/XmecApvKBEAr9zOfqctiF 6yLiPc/QOgY84X3eT4SQjJkTBXX+s+xU9bmHk6bdA6Ud6jqpIAkfBkmW01CPp8Bn Nxog4zrB5sgEfRW5T6qzvPijDA== -----END CERTIFICATE-----Generated at Wed Sep 23 09:56:53 2026 by rpki-client