$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.mft File: TUhBSCTT6xYIJkSGXtNmcgDvokk.mft (raw, json) Hash identifier: Xm/9BIvYPkuZE4zeasiLJceasMqlNggg/I2olcTG3Yk= Subject key identifier: CB:32:23:18:38:70:C9:2F:F6:32:7B:87:D5:5D:48:9C:64:D9:18:38 Authority key identifier: 4D:48:41:48:24:D3:EB:16:08:26:44:86:5E:D3:66:72:00:EF:A2:49 Certificate issuer: /CN=A91B54AA/serialNumber=4D48414824D3EB16082644865ED3667200EFA249 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUhBSCTT6xYIJkSGXtNmcgDvokk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.mft Manifest number: 10 Signing time: Thu 01 Oct 2026 10:36:23 +0000 Manifest this update: Thu 01 Oct 2026 10:36:23 +0000 Manifest next update: Thu 08 Oct 2026 10:36:23 +0000 Files and hashes: 1: TUhBSCTT6xYIJkSGXtNmcgDvokk.crl (hash: u6B6drc+6bX6CyF5HlToyUat25d4D+hMzWWmWIbWqVU=) 2: 6B8CDE00AD8311F1BD3BEF4C6311F970.roa (hash: Xk34jMLA9RbZ2gRnU7+OBryJYCQuz2GD+FIkP6ye+HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.crl rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUhBSCTT6xYIJkSGXtNmcgDvokk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54AA, serialNumber=4D48414824D3EB16082644865ED3667200EFA249 Validity Not Before: Oct 1 10:36:23 2026 GMT Not After : Oct 8 10:36:23 2026 GMT Subject: CN=6abe37a7-82d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:50:55:6b:df:07:7a:10:ea:c0:cb:81:0b: 54:f7:d0:fb:56:a9:fb:32:40:51:9c:33:c0:b8:c3: 68:2d:d7:25:88:cc:87:2a:e3:18:b5:ed:9a:84:8c: 78:84:82:c7:3e:af:aa:5d:ad:aa:f0:49:45:1f:12: 3f:8b:e0:f4:79:80:3e:f1:27:a0:22:b7:35:88:a5: 9a:d5:0c:85:d7:fc:30:0f:f4:96:cc:b6:83:0b:4b: 45:38:ef:ac:73:39:ed:c4:ac:9f:2f:b3:3e:32:f5: a3:8d:62:36:0a:23:5e:8b:da:03:43:9a:e0:cf:bd: 9b:04:5e:ae:a1:3a:51:61:7b:fc:ff:9b:ec:5d:56: d2:c7:de:06:02:48:76:7d:02:08:10:45:9f:1e:44: 85:b4:62:c7:09:ec:bb:75:bc:10:44:89:7a:a9:1d: 5b:8e:ae:95:8e:5a:e3:73:a1:d4:a6:42:88:65:0b: 80:91:2e:4a:81:14:ce:91:04:58:ed:78:73:20:46: ce:8d:72:ae:47:f6:eb:22:fd:9a:26:6a:e9:fa:1f: 27:34:dd:fb:87:d3:b9:95:d8:f7:4b:4a:d7:b6:11: 3a:f6:ff:48:b2:51:f8:64:85:df:f1:cf:86:5e:15: d0:a9:aa:d3:ba:d1:51:5e:f6:72:c5:3c:da:aa:16: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:32:23:18:38:70:C9:2F:F6:32:7B:87:D5:5D:48:9C:64:D9:18:38 X509v3 Authority Key Identifier: keyid:4D:48:41:48:24:D3:EB:16:08:26:44:86:5E:D3:66:72:00:EF:A2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUhBSCTT6xYIJkSGXtNmcgDvokk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:10:d9:09:a1:bf:33:d3:6c:1f:e9:e6:ce:14:38:81:d4:0a: 7c:7c:d7:19:93:6f:63:34:0e:8a:10:ef:9f:7f:86:35:14:7d: b5:a8:27:58:29:cc:c5:0d:8e:53:c0:1f:08:72:64:d9:f2:bd: 86:81:c8:e4:b7:b6:02:44:e6:45:02:4b:2c:c4:c0:30:9f:ba: b9:53:54:ed:73:b4:32:f7:46:a8:cc:17:7d:58:f8:44:42:6a: 79:7a:f8:85:8f:08:4c:cc:e7:ed:bd:99:7b:ed:70:6a:03:f9: 3c:90:58:70:db:7d:34:82:13:a8:50:b1:ea:b6:82:c9:45:16: b1:d6:c1:c9:30:0c:85:1a:03:c6:41:a1:1e:fb:82:79:d0:cb: 58:40:8a:e0:6c:bf:92:8c:dd:3e:7c:1e:88:4c:36:70:31:14: 18:ca:48:bf:1a:19:e5:a7:b4:88:72:7f:54:c4:50:8d:05:c5: b8:e0:03:00:32:81:15:d7:49:d5:0e:ea:57:00:18:03:06:38: da:26:37:8b:b0:af:06:90:47:2d:64:8a:7e:ac:12:61:cc:66: 98:6e:1e:cf:cf:71:bf:5f:71:84:ee:81:b5:75:41:00:f8:94: a1:22:97:ee:94:e8:62:47:38:0a:c6:f8:a9:03:4c:00:2c:f2: 29:72:47:0e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTRBQTExMC8GA1UEBRMoNEQ0ODQxNDgyNEQzRUIxNjA4MjY0NDg2NUVEMzY2NzIw MEVGQTI0OTAeFw0yNjEwMDExMDM2MjNaFw0yNjEwMDgxMDM2MjNaMBgxFjAUBgNV BAMTDTZhYmUzN2E3LTgyZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm51BVa98HehDqwMuBC1T30PtWqfsyQFGcM8C4w2gt1yWIzIcq4xi17ZqEjHiE gsc+r6pdrarwSUUfEj+L4PR5gD7xJ6AitzWIpZrVDIXX/DAP9JbMtoMLS0U476xz Oe3ErJ8vsz4y9aONYjYKI16L2gNDmuDPvZsEXq6hOlFhe/z/m+xdVtLH3gYCSHZ9 AggQRZ8eRIW0YscJ7Lt1vBBEiXqpHVuOrpWOWuNzodSmQohlC4CRLkqBFM6RBFjt eHMgRs6Ncq5H9usi/Zomaun6Hyc03fuH07mV2PdLSte2ETr2/0iyUfhkhd/xz4Ze FdCpqtO60VFe9nLFPNqqFm5tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyzIjGDhw yS/2MnuH1V1InGTZGDgwHwYDVR0jBBgwFoAUTUhBSCTT6xYIJkSGXtNmcgDvokkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1NEFBLzBCOTk3RkQ0QUNG RDExRjFCQTVBNTZFMTM2MTFGOTcwL1RVaEJTQ1RUNnhZSUprU0dYdE5tY2dEdm9r ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFVoQlNDVFQ2eFlJSmtTR1h0Tm1jZ0R2b2trLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 NEFBLzBCOTk3RkQ0QUNGRDExRjFCQTVBNTZFMTM2MTFGOTcwL1RVaEJTQ1RUNnhZ SUprU0dYdE5tY2dEdm9ray5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4ENkJob8z02wf6ebOFDiB1Ap8fNcZk29jNA6KEO+ff4Y1FH21qCdYKczFDY5T wB8IcmTZ8r2Ggcjkt7YCROZFAkssxMAwn7q5U1Ttc7Qy90aozBd9WPhEQmp5eviF jwhMzOftvZl77XBqA/k8kFhw2300ghOoULHqtoLJRRax1sHJMAyFGgPGQaEe+4J5 0MtYQIrgbL+SjN0+fB6ITDZwMRQYyki/Ghnlp7SIcn9UxFCNBcW44AMAMoEV10nV DupXABgDBjjaJjeLsK8GkEctZIp+rBJhzGaYbh7Pz3G/X3GE7oG1dUEA+JShIpfu lOhiRzgKxvipA0wALPIpckcO -----END CERTIFICATE-----Generated at Fri Oct 2 04:43:00 2026 by rpki-client