$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft File: 2nWrD7Oqh1r631o4-FK9zB3YJvc.mft (raw, json) Hash identifier: 0qjwIEUUd4wvwnUpDSapV4Q5aX4SAtH32QtjjcFsVwM= Subject key identifier: EC:DB:53:82:90:38:F7:E0:C2:D5:D9:66:41:B1:87:C1:EA:80:00:17 Authority key identifier: DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7 Certificate issuer: /CN=A91FEFBB/serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft Manifest number: 0287 Signing time: Sat 03 Oct 2026 02:28:52 +0000 Manifest this update: Sat 03 Oct 2026 02:28:52 +0000 Manifest next update: Sat 10 Oct 2026 02:28:52 +0000 Files and hashes: 1: 2nWrD7Oqh1r631o4-FK9zB3YJvc.crl (hash: 3Yd2Pdp9647tQqbkdhQgG7iRSHVeEDAwsgk9Wb1QJN0=) 2: 881C3F9CABD311EFBFED7130C4F9AE02.roa (hash: JS1ZBhltkdXyrySkpU8SpuqRR1QN77GhpUZ60d1ygSU=) 3: DE10576881C811F19DD5355C67A30FBC.roa (hash: Mybp7xu69McndoDjQ+vpXUAVd2ngNEP7A3p6m2zUXBk=) 4: 261D3B8AEE4611ED9BEFED31C4F9AE02.roa (hash: 2kSM4B/k8NdFJAL4ebPd/o/E0Fw58aj47tXGXUAxnss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEFBB, serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7 Validity Not Before: Oct 3 02:28:52 2026 GMT Not After : Oct 10 02:28:52 2026 GMT Subject: CN=6ac06864-2d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:3e:51:5e:8c:34:d4:ad:7b:23:3a:29:a3: ad:39:8c:b6:66:2e:27:71:4d:56:05:9c:9c:81:cd: a4:a5:f0:f9:c7:87:16:c9:0f:49:81:b4:fd:b8:1d: 15:2c:53:bd:b6:55:59:17:78:c3:7b:49:2b:5f:50: 3b:1a:ff:a9:ef:3c:3d:bb:37:27:17:d5:1e:90:a6: 64:be:21:64:99:72:57:bc:9a:5a:0d:df:a0:a0:35: a9:2e:44:82:1f:e1:61:17:d6:29:e0:2a:56:ea:92: 2f:2a:35:09:10:f2:2a:3c:19:a3:b1:c0:31:2c:9e: f3:ab:f5:34:64:12:ef:56:2d:39:30:9e:a8:3b:3c: 27:64:96:6f:f3:5e:bf:a8:0b:9b:6d:8c:81:81:38: 3a:94:e6:d5:c0:20:7f:75:04:d3:7e:55:7c:f8:1a: 9a:4f:b5:2f:7b:70:3c:e1:29:84:ab:76:cb:62:e5: a6:ab:f5:15:c1:85:94:3d:4c:83:95:29:f2:2e:2f: 6e:db:8e:21:53:1a:bc:52:35:29:7e:b5:87:a0:22: aa:37:0b:23:7d:9d:18:6a:15:6a:83:d7:7f:59:c4: e3:06:ad:a5:3a:29:d4:92:3e:aa:86:57:fd:db:2e: 22:fd:68:19:b3:d5:16:54:d7:a7:f4:dd:eb:78:c3: e4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DB:53:82:90:38:F7:E0:C2:D5:D9:66:41:B1:87:C1:EA:80:00:17 X509v3 Authority Key Identifier: keyid:DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c8:f8:6b:9a:3b:51:38:5e:ac:ab:7d:c7:54:c3:d9:97:ec: 02:57:e7:41:92:11:13:69:78:83:2d:2a:ed:07:f0:f2:6e:99: 08:a9:46:5f:05:f7:b5:02:a1:cc:fd:19:20:3f:cc:65:1b:a0: 2e:37:4a:f4:b2:12:40:a9:49:1f:dc:8f:5d:22:21:4b:37:7e: 5e:88:50:53:8b:88:a8:8d:a4:5c:87:fc:8d:88:b4:e9:7d:09: 5c:55:37:d4:51:e1:dd:cf:53:91:cc:19:0e:1d:b6:27:5c:35: 3c:fa:80:c3:08:9f:16:00:18:b0:fb:59:8c:49:e4:98:b1:ad: b3:2f:fb:4f:45:77:01:9f:23:00:de:48:37:8c:25:81:1d:40: 82:72:6f:58:1d:b4:b6:61:b2:1d:b2:8f:7c:8f:ae:ad:2b:d4: c5:17:3f:e6:63:28:f0:e2:97:c9:8f:90:9a:b5:f6:e4:fe:37: c0:a2:a6:59:da:b2:b4:c2:0d:95:0e:28:2a:47:93:1c:e9:31: 0a:1f:f6:3f:f1:c1:b3:de:87:03:e2:c4:69:42:08:8d:83:6f: e8:33:ff:f8:eb:20:9a:8d:45:ca:65:b8:d5:d2:1a:d2:90:53: 0a:cb:62:50:11:49:8d:eb:75:f0:c1:04:f0:36:d0:cf:ce:c7: 57:46:4d:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVGQkIxMTAvBgNVBAUTKERBNzVBQjBGQjNBQTg3NUFGQURGNUEzOEY4NTJCREND MUREODI2RjcwHhcNMjYxMDAzMDIyODUyWhcNMjYxMDEwMDIyODUyWjAYMRYwFAYD VQQDEw02YWMwNjg2NC0yZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOg+UV6MNNSteyM6KaOtOYy2Zi4ncU1WBZycgc2kpfD5x4cWyQ9JgbT9uB0V LFO9tlVZF3jDe0krX1A7Gv+p7zw9uzcnF9UekKZkviFkmXJXvJpaDd+goDWpLkSC H+FhF9Yp4CpW6pIvKjUJEPIqPBmjscAxLJ7zq/U0ZBLvVi05MJ6oOzwnZJZv816/ qAubbYyBgTg6lObVwCB/dQTTflV8+BqaT7Uve3A84SmEq3bLYuWmq/UVwYWUPUyD lSnyLi9u244hUxq8UjUpfrWHoCKqNwsjfZ0YahVqg9d/WcTjBq2lOinUkj6qhlf9 2y4i/WgZs9UWVNen9N3reMPkZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzbU4KQ OPfgwtXZZkGxh8HqgAAXMB8GA1UdIwQYMBaAFNp1qw+zqoda+t9aOPhSvcwd2Cb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUZCQi9EODk2QjVDOEVB NkExMUVEQjVCNkI1NUVDNEY5QUUwMi8ybldyRDdPcWgxcjYzMW80LUZLOXpCM1lK dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuV3JEN09xaDFyNjMxbzQtRks5ekIzWUp2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUZCQi9EODk2QjVDOEVBNkExMUVEQjVCNkI1NUVDNEY5QUUwMi8ybldyRDdPcWgx cjYzMW80LUZLOXpCM1lKdmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvMj4a5o7UTherKt9x1TD2ZfsAlfnQZIRE2l4gy0q7Qfw8m6ZCKlGXwX3tQKh zP0ZID/MZRugLjdK9LISQKlJH9yPXSIhSzd+XohQU4uIqI2kXIf8jYi06X0JXFU3 1FHh3c9TkcwZDh22J1w1PPqAwwifFgAYsPtZjEnkmLGtsy/7T0V3AZ8jAN5IN4wl gR1AgnJvWB20tmGyHbKPfI+urSvUxRc/5mMo8OKXyY+QmrX25P43wKKmWdqytMIN lQ4oKkeTHOkxCh/2P/HBs96HA+LEaUIIjYNv6DP/+Osgmo1FymW41dIa0pBTCsti UBFJjet18MEE8DbQz87HV0ZN6A== -----END CERTIFICATE-----Generated at Sun Oct 4 22:31:07 2026 by rpki-client