$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft File: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft (raw, json) Hash identifier: wTVnbTAQaCVOdJ2gNIv1gbRgCzwoebhNJ4jKHi5SDsg= Subject key identifier: A8:60:8A:31:FC:86:62:61:1E:08:26:1B:F2:0D:62:67:43:75:25:E2 Authority key identifier: D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A Certificate issuer: /CN=A91F0AF0/serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A Certificate serial: 0D74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft Manifest number: 1F76 Signing time: Sun 20 Sep 2026 17:06:29 +0000 Manifest this update: Sun 20 Sep 2026 17:06:28 +0000 Manifest next update: Sun 27 Sep 2026 17:06:28 +0000 Files and hashes: 1: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl (hash: 3ijJcHtMrV73jqoyrLul5GNCY5fVibJaCMq45T6PF3s=) 2: CE3C7EF66FEB11EB91967864C4F9AE02.roa (hash: PoMZXZYHdteODhPAtacBWSXCAi/gVbSsN+xQtOQaEQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3444 (0xd74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0AF0, serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A Validity Not Before: Sep 20 17:06:28 2026 GMT Not After : Sep 27 17:06:28 2026 GMT Subject: CN=6ab01294-194e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:df:cc:77:00:3b:03:48:c9:ab:81:9a:80: da:ab:eb:73:c4:21:9c:62:80:98:3d:45:1c:d2:67: e9:dc:a8:cf:68:ed:75:3c:01:dc:6a:90:41:34:68: 6d:df:5b:a9:0d:6d:80:bf:08:86:9c:58:59:b4:8a: 7f:c9:b2:89:e8:a3:17:9b:5c:65:ec:9c:e3:1d:46: ea:54:6a:42:b1:e1:d3:50:7b:9f:5b:fa:81:cf:97: c2:59:10:d9:66:74:98:19:c7:c8:3a:d3:7a:da:df: 12:e1:2d:84:b0:44:45:85:7a:68:fe:78:98:4d:63: e0:30:ad:b0:30:e3:45:e4:91:62:e5:85:36:6c:61: d3:4c:7f:09:9e:bb:47:05:7d:52:76:9e:a6:b2:0c: 90:c7:e8:d4:1a:ec:2b:e5:01:1d:c9:a5:83:b8:52: e4:e8:72:bc:b9:74:b7:96:65:fc:72:ee:91:b3:df: 1a:3b:b6:0e:f7:bb:6f:6c:0a:44:ca:a8:38:e5:be: 7b:08:7e:bd:7c:c6:c2:5c:11:f3:97:c5:e5:8a:62: 12:31:99:85:d6:24:f2:0d:59:d8:a8:1a:a0:e3:78: c2:b5:ef:f8:e9:8d:44:8a:52:df:3b:48:f4:8e:04: 34:2a:99:c0:91:16:51:30:ed:23:5e:bd:aa:2f:2d: fd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:8A:31:FC:86:62:61:1E:08:26:1B:F2:0D:62:67:43:75:25:E2 X509v3 Authority Key Identifier: keyid:D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d4:9b:91:ed:5b:b5:2b:1e:bd:56:58:19:0b:e6:d8:36:d6: 86:6c:b7:09:1e:8f:3c:87:2d:9c:eb:bf:89:df:d8:88:30:c0: df:bc:05:ef:11:70:a8:35:98:a7:25:35:47:ae:af:5e:db:de: 68:9d:50:f4:de:52:74:64:6b:8b:23:7d:53:93:41:f6:26:1f: 76:20:d8:9e:fb:9a:83:de:0c:87:23:6b:d6:1a:5a:78:d0:44: 1c:8a:6c:f3:56:fb:3c:e7:ff:8a:a5:c2:3a:3c:4e:c8:5a:2b: 5c:40:23:ca:aa:fe:09:35:d1:0d:85:99:5a:8c:c2:67:3c:95: f8:3c:f2:40:ff:81:83:1b:89:98:39:b2:57:d9:2a:2f:e5:54: a3:91:ba:c0:1c:26:2b:99:bd:f5:4a:cd:78:db:1c:d8:c0:25: dc:ef:3a:35:c4:98:75:e6:39:ba:c0:20:0f:e4:33:01:2d:2c: e8:aa:21:24:0d:8c:10:8e:04:16:df:6b:2f:b8:cf:5f:b8:d0: e5:e7:6f:26:53:fc:72:5e:db:6d:e8:64:29:0d:3b:b9:41:eb: 4d:f8:f1:f0:35:a7:bb:1c:de:93:8c:19:7c:64:77:9d:d7:9c: 77:ba:ae:7e:10:24:e4:38:65:e6:14:ce:03:08:3c:71:ec:8e: 77:3d:01:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBBRjAxMTAvBgNVBAUTKEQ5QkQ3MEU3NzdGODYxQUU1NDM4NTcxNDhFNjMzNTJG REE4NEMwN0EwHhcNMjYwOTIwMTcwNjI4WhcNMjYwOTI3MTcwNjI4WjAYMRYwFAYD VQQDEw02YWIwMTI5NC0xOTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYXfzHcAOwNIyauBmoDaq+tzxCGcYoCYPUUc0mfp3KjPaO11PAHcapBBNGht 31upDW2AvwiGnFhZtIp/ybKJ6KMXm1xl7JzjHUbqVGpCseHTUHufW/qBz5fCWRDZ ZnSYGcfIOtN62t8S4S2EsERFhXpo/niYTWPgMK2wMONF5JFi5YU2bGHTTH8JnrtH BX1Sdp6msgyQx+jUGuwr5QEdyaWDuFLk6HK8uXS3lmX8cu6Rs98aO7YO97tvbApE yqg45b57CH69fMbCXBHzl8XlimISMZmF1iTyDVnYqBqg43jCte/46Y1EilLfO0j0 jgQ0KpnAkRZRMO0jXr2qLy39WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhgijH8 hmJhHggmG/INYmdDdSXiMB8GA1UdIwQYMBaAFNm9cOd3+GGuVDhXFI5jNS/ahMB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlhNVVPRmNVam1NMUw5cUV3 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJiMXc1M2Y0WWE1VU9GY1VqbU0xTDlxRXdIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlh NVVPRmNVam1NMUw5cUV3SG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMdSbke1btSsevVZYGQvm2DbWhmy3CR6PPIctnOu/id/YiDDA37wF7xFwqDWY pyU1R66vXtveaJ1Q9N5SdGRriyN9U5NB9iYfdiDYnvuag94MhyNr1hpaeNBEHIps 81b7POf/iqXCOjxOyForXEAjyqr+CTXRDYWZWozCZzyV+DzyQP+BgxuJmDmyV9kq L+VUo5G6wBwmK5m99UrNeNsc2MAl3O86NcSYdeY5usAgD+QzAS0s6KohJA2MEI4E Ft9rL7jPX7jQ5edvJlP8cl7bbehkKQ07uUHrTfjx8DWnuxzek4wZfGR3ndecd7qu fhAk5Dhl5hTOAwg8ceyOdz0BkQ== -----END CERTIFICATE-----Generated at Tue Sep 22 00:33:46 2026 by rpki-client