$ rpki-client -vvvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: /f8MWHoSj+mq7pnmvVI5PkRTf78EjbtxuVRS287aQas= Subject key identifier: 58:A5:AA:52:BB:7D:88:D3:A4:B1:4E:30:5C:11:66:E9:23:A7:56:0F Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 28B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 27EC Signing time: Sun 20 Sep 2026 15:37:04 +0000 Manifest this update: Sun 20 Sep 2026 15:37:04 +0000 Manifest next update: Sun 27 Sep 2026 15:37:04 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: M83bNra1XTq+wGtwSjAqTj2ovoeZY1w4/bsHmv2Aoqo=) 2: 95F76942870611F18212677BADEE528E.roa (hash: SOLLv4/IIVbij9uBLzZ1io1DQY7xHAS/qiToU32P5kU=) 3: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: H6EDGgrRbesY/HC/4QOk7KDGC4ogtYE/w/DKgTKt0yw=) 4: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: FVQ+j69/Aeib4yBQpBYMh3Ioo2GLCobZFDyx7BhU9SY=) 5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: SiLYgZw1OeMIYBqXEe6pyhNgEn9BwkIumVDHZgIIEaI=) 6: 75CF2F9A873011F1B6B4C8A97AEE528E.roa (hash: mEYn2nIRyTCP8ZVcA/82XOrMyUlLvHd+g8HTmkjqqZU=) 7: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: Z4xoQcPBvcW/VbL6OWwtgSaSohFPMeVXuxF8gcgjMds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10422 (0x28b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Sep 20 15:37:04 2026 GMT Not After : Sep 27 15:37:04 2026 GMT Subject: CN=6aaffda0-c16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:9a:9c:93:f0:19:ba:9e:51:2d:12:d8:38: bc:d2:13:f3:ca:bb:23:1a:aa:99:0e:56:b9:c9:05: ad:f6:c7:10:e3:5e:3b:34:6d:0c:77:63:02:85:80: e1:70:a2:14:91:07:df:0f:a7:3d:7e:42:46:73:c9: 01:04:21:32:83:5c:9a:7c:54:7f:c6:41:e7:2b:0c: df:2c:54:c3:a9:80:d9:68:6d:ce:b5:74:f0:1a:f1: b6:ff:0b:85:fa:53:b9:31:57:63:34:49:1c:ad:01: 4f:c4:ea:16:81:ce:60:77:98:46:f7:3f:f5:4e:69: b7:82:91:47:e3:50:aa:fe:cc:a3:fc:ff:19:4e:a9: d0:b1:3f:e6:e2:45:9d:db:40:8b:14:9b:89:93:05: 13:04:c9:37:63:74:99:f1:5b:97:13:6f:53:02:62: 73:38:16:ae:79:53:fc:a8:05:50:57:9b:be:8e:34: e4:c9:eb:3c:c8:09:1f:f1:5e:31:c9:e5:2e:a7:de: ae:ef:1f:60:3a:2f:e8:c0:1c:46:f0:08:f1:e3:7a: 00:12:67:fa:54:8b:68:43:d1:d3:c8:fb:56:9c:d2: dc:4e:14:16:e4:13:be:09:c9:59:94:6c:20:7e:12: 3b:1d:ff:17:d4:4f:5e:ba:d8:f8:da:6e:41:a9:aa: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A5:AA:52:BB:7D:88:D3:A4:B1:4E:30:5C:11:66:E9:23:A7:56:0F X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:70:9e:7b:77:d7:e5:58:37:6b:09:de:e6:37:14:66:72:28: f5:1d:cc:e5:9f:cf:03:db:20:0e:ca:9d:be:01:d3:0b:6d:6f: 24:a2:e9:9e:13:1d:81:20:fc:99:7c:6e:83:80:c7:74:1b:a8: 21:10:20:5c:3e:2b:3e:46:e8:a1:9d:ba:17:c2:a9:d5:c2:ab: 82:84:27:ec:9c:f1:33:e7:ec:0a:f0:ed:02:0e:ee:9f:89:33: 90:d8:c4:fd:b7:96:a7:59:0b:27:3b:58:42:c3:1b:9c:6d:d3: 3b:d8:e6:54:c0:80:f7:29:3a:23:83:57:17:20:d7:f6:5d:42: f0:e8:30:f1:da:0d:81:a9:59:ee:96:7c:9c:40:57:8e:7b:0f: 7e:3a:c6:7f:4c:35:ae:c5:b0:cd:79:d5:f6:2b:4a:ac:b4:7c: 70:02:27:55:0b:a4:83:87:6c:44:12:3e:dc:0b:04:14:61:4b: 25:14:81:2e:bd:13:3f:42:de:20:cc:7a:b8:e8:4b:1d:f0:85: 3e:2b:d9:b0:ce:da:73:f3:16:61:c6:fe:e9:49:0c:03:ae:3f: 30:b3:35:03:16:3a:f2:bb:07:0c:be:9d:77:58:a8:6a:97:34: 72:3b:37:79:97:74:46:bb:17:36:88:07:a4:f9:d3:00:cf:62: 4a:3a:1e:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjYwOTIwMTUzNzA0WhcNMjYwOTI3MTUzNzA0WjAYMRYwFAYD VQQDEw02YWFmZmRhMC1jMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjOanJPwGbqeUS0S2Di80hPzyrsjGqqZDla5yQWt9scQ4147NG0Md2MChYDh cKIUkQffD6c9fkJGc8kBBCEyg1yafFR/xkHnKwzfLFTDqYDZaG3OtXTwGvG2/wuF +lO5MVdjNEkcrQFPxOoWgc5gd5hG9z/1Tmm3gpFH41Cq/syj/P8ZTqnQsT/m4kWd 20CLFJuJkwUTBMk3Y3SZ8VuXE29TAmJzOBaueVP8qAVQV5u+jjTkyes8yAkf8V4x yeUup96u7x9gOi/owBxG8Ajx43oAEmf6VItoQ9HTyPtWnNLcThQW5BO+CclZlGwg fhI7Hf8X1E9eutj42m5BqaoWewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFilqlK7 fYjTpLFOMFwRZukjp1YPMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANnCee3fX5Vg3awne5jcUZnIo9R3M5Z/PA9sgDsqdvgHTC21vJKLpnhMdgSD8 mXxug4DHdBuoIRAgXD4rPkbooZ26F8Kp1cKrgoQn7JzxM+fsCvDtAg7un4kzkNjE /beWp1kLJztYQsMbnG3TO9jmVMCA9yk6I4NXFyDX9l1C8Ogw8doNgalZ7pZ8nEBX jnsPfjrGf0w1rsWwzXnV9itKrLR8cAInVQukg4dsRBI+3AsEFGFLJRSBLr0TP0Le IMx6uOhLHfCFPivZsM7ac/MWYcb+6UkMA64/MLM1AxY68rsHDL6dd1ioapc0cjs3 eZd0RrsXNogHpPnTAM9iSjoe/g== -----END CERTIFICATE-----Generated at Mon Sep 21 14:06:10 2026 by rpki-client