$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: C7eFzjqvHFCAUbcn2nYt78d7Zy8uDdU4DrO/V0x6tJo= Subject key identifier: A4:C5:CA:D3:FE:AA:05:DB:D9:AF:9B:E3:55:36:61:FC:2A:05:C3:53 Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0DFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0DD4 Signing time: Sun 20 Sep 2026 17:51:09 +0000 Manifest this update: Sun 20 Sep 2026 17:51:09 +0000 Manifest next update: Sun 27 Sep 2026 17:51:09 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: 8AUje1SALDjI1ez8+R53Hamk6v2F2xtaZ70boHfRKkk=) 2: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: BGhkN0LDIdO9R5rWchzdTcKrPQRLiD8mPb9ml74T/wM=) 3: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: 1LoYhNhbrJS2K/AOCU0/gnT+ZLyx3HtIk+zT/REHe2Q=) 4: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: v/cYedkAqRKh3ztstNufD8S6zF7j1cUxZPyvJUeefHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3583 (0xdff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Sep 20 17:51:09 2026 GMT Not After : Sep 27 17:51:09 2026 GMT Subject: CN=6ab01d0d-3039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:5a:a1:c9:c9:dc:c4:1a:e8:97:12:e1:16: a1:71:bd:e2:15:4c:4c:06:7c:48:a1:12:b7:5e:3e: a9:03:42:e3:55:64:81:74:ba:a9:8f:4c:da:ff:96: ee:c5:ee:d2:c8:96:52:c5:9d:48:62:1c:ce:d7:17: 24:a2:f0:93:56:73:87:da:c6:08:9b:97:39:52:d2: f8:02:63:af:4f:39:c0:9e:40:57:98:29:10:ab:8f: d1:30:64:84:36:e4:28:e5:26:d8:ae:a8:7a:b9:87: 10:5e:d7:51:d9:0a:01:50:ab:83:8d:e8:5d:0c:b1: f2:e2:e4:ff:41:1c:a9:34:08:92:06:ef:76:6a:6c: 76:8b:46:04:cf:28:7a:78:f5:87:19:9e:bc:9f:f9: b0:fe:2d:fd:f4:d8:21:eb:61:e5:86:a6:39:98:0b: 05:6f:44:a7:23:f3:af:5b:3e:62:57:0f:37:22:de: 8a:01:7d:5f:83:a0:95:00:01:ee:4d:1b:8e:42:67: f6:d9:b9:6e:02:4a:90:ec:39:8f:5b:ce:ef:35:b7: 03:0c:22:f5:c0:dd:76:21:d8:39:b1:f5:04:5e:a8: d5:75:c1:43:e4:0c:37:5f:10:7a:92:03:76:ac:46: 17:4b:eb:93:2b:0d:af:cf:bf:00:06:d7:76:81:10: 37:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C5:CA:D3:FE:AA:05:DB:D9:AF:9B:E3:55:36:61:FC:2A:05:C3:53 X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:94:8e:d8:b4:00:29:17:95:04:22:ad:07:81:cf:e7:32:19: 1c:a1:53:aa:09:df:d3:9e:b4:6a:01:1f:16:d0:3d:a3:3f:20: 70:2d:c1:bb:60:1f:0c:1d:c6:84:11:cf:43:31:32:70:5b:f7: a6:f0:87:4a:08:c3:4e:3e:0a:88:93:5a:19:b3:94:cc:f2:d5: dc:dc:e9:ed:0b:2b:50:97:1d:fa:51:a5:f9:0f:63:93:a0:7b: f5:76:7c:e1:96:1d:e7:21:c7:d5:26:77:e6:65:50:fd:c4:ed: b0:e9:ed:2a:c6:54:ba:ef:92:fb:cc:fb:b8:b9:8a:64:c6:a5: 38:f9:b5:ee:3d:6c:42:de:16:05:30:0d:30:38:2a:53:2e:a7: 05:66:82:af:2d:ed:4f:08:e3:69:85:24:40:17:7d:0b:61:26: 99:a0:6f:d9:74:b2:24:f4:5f:7a:9f:0d:aa:d2:06:a7:df:01: 37:ba:93:a8:ba:c0:ad:49:da:42:b5:07:b2:9d:8f:4b:d8:f3: 82:fe:26:4f:2e:d1:88:1b:26:ae:51:05:45:05:8f:cf:8b:a6: 10:c6:ec:cb:77:50:a5:ad:5b:a8:b3:06:df:bd:7e:7a:b7:f1: 83:0c:35:1a:2d:93:77:41:c4:7b:83:fc:29:a1:63:49:69:7a: bc:86:fd:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjYwOTIwMTc1MTA5WhcNMjYwOTI3MTc1MTA5WjAYMRYwFAYD VQQDEw02YWIwMWQwZC0zMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2laocnJ3MQa6JcS4Rahcb3iFUxMBnxIoRK3Xj6pA0LjVWSBdLqpj0za/5bu xe7SyJZSxZ1IYhzO1xckovCTVnOH2sYIm5c5UtL4AmOvTznAnkBXmCkQq4/RMGSE NuQo5SbYrqh6uYcQXtdR2QoBUKuDjehdDLHy4uT/QRypNAiSBu92amx2i0YEzyh6 ePWHGZ68n/mw/i399Ngh62HlhqY5mAsFb0SnI/OvWz5iVw83It6KAX1fg6CVAAHu TRuOQmf22bluAkqQ7DmPW87vNbcDDCL1wN12Idg5sfUEXqjVdcFD5Aw3XxB6kgN2 rEYXS+uTKw2vz78ABtd2gRA3DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTFytP+ qgXb2a+b41U2YfwqBcNTMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAepSO2LQAKReVBCKtB4HP5zIZHKFTqgnf0560agEfFtA9oz8gcC3Bu2AfDB3G hBHPQzEycFv3pvCHSgjDTj4KiJNaGbOUzPLV3Nzp7QsrUJcd+lGl+Q9jk6B79XZ8 4ZYd5yHH1SZ35mVQ/cTtsOntKsZUuu+S+8z7uLmKZMalOPm17j1sQt4WBTANMDgq Uy6nBWaCry3tTwjjaYUkQBd9C2EmmaBv2XSyJPRfep8NqtIGp98BN7qTqLrArUna QrUHsp2PS9jzgv4mTy7RiBsmrlEFRQWPz4umEMbsy3dQpa1bqLMG371+erfxgww1 Gi2Td0HEe4P8KaFjSWl6vIb9eg== -----END CERTIFICATE-----Generated at Mon Sep 21 14:50:18 2026 by rpki-client