$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft File: tPvjSrdmEqnSCuUrCttB_PgKEv8.mft (raw, json) Hash identifier: Le5pP24JhI4k2DNYfbc6HIaX66/dbbL+WXR4uXPaI1g= Subject key identifier: 5E:04:16:92:6C:50:AB:65:A0:26:80:A0:66:B2:B6:98:19:25:E6:B9 Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF Certificate issuer: /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft Manifest number: CD Signing time: Wed 23 Sep 2026 06:32:37 +0000 Manifest this update: Wed 23 Sep 2026 06:32:36 +0000 Manifest next update: Wed 30 Sep 2026 06:32:36 +0000 Files and hashes: 1: tPvjSrdmEqnSCuUrCttB_PgKEv8.crl (hash: rspJVfEhqcP5FSDNYRfJeaCshgzT3Pam8nl+omPEAB8=) 2: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (hash: uyOU7OWturYo16z8/9jzgKBsXU3ESi7wumKHXnMPiW4=) 3: 3E99E81C816E11F0A5992F28C4F9AE02.roa (hash: PtxDOStSKg5v1Xktyj+xGCbDFKA4GPkHNsN6+Bx9sn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF Validity Not Before: Sep 23 06:32:36 2026 GMT Not After : Sep 30 06:32:36 2026 GMT Subject: CN=6ab37285-59f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:08:4b:4a:74:4f:a0:b3:f6:bc:ba:42:7a: 93:c5:3f:69:95:8c:3e:fb:a1:2c:9a:4b:7b:e1:ab: 57:79:f1:82:34:53:7f:88:ff:7d:d8:cc:98:70:f2: 29:9c:7f:0c:63:c1:df:a1:12:f9:25:29:ba:c7:35: 42:ab:2e:62:d3:98:4c:b6:a5:cd:1e:2a:90:f9:98: c0:d2:e2:2f:93:87:88:dc:b8:21:ce:7e:08:f5:be: 5f:89:25:68:89:07:35:da:96:9f:86:82:89:d5:54: 5d:e8:0d:f2:99:76:00:16:17:d4:a4:d0:7b:ac:72: 38:f2:53:2b:f0:ea:f6:19:3e:f2:0d:80:57:26:00: 2c:e4:93:32:ba:b7:d0:da:15:54:20:60:b8:d3:12: 6f:5e:cc:50:25:12:bc:c9:8f:23:f6:50:29:24:45: e0:61:4d:fb:9a:37:17:83:dc:50:6c:b6:71:bf:f1: e8:23:b5:f9:fd:84:77:c6:80:03:9b:0d:22:07:d9: dc:c5:39:2e:cb:f8:d5:4f:ee:b6:09:d5:c3:76:5f: da:d3:16:8a:c8:ec:d0:72:e8:60:9d:66:d3:3b:3e: b4:5a:15:0e:b0:a1:66:b1:8c:f2:e6:ce:7b:db:12: e5:d1:1c:39:42:57:f8:ea:b9:78:ef:84:74:8f:76: 47:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:04:16:92:6C:50:AB:65:A0:26:80:A0:66:B2:B6:98:19:25:E6:B9 X509v3 Authority Key Identifier: keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a2:62:58:d1:f6:bb:3e:bc:cf:e1:1c:2c:6e:bf:86:f5:07: 38:61:43:4d:d9:8f:51:3a:7f:f9:b3:a3:ad:e9:48:9c:ce:f2: 24:9a:21:af:50:bd:ad:17:89:d5:e5:0b:44:20:ba:5a:97:7e: da:0b:64:38:1a:46:d9:6c:82:88:2d:c8:17:cd:3f:80:fd:d2: 1d:e1:46:97:85:4a:f8:2f:5c:c3:bf:cb:a2:3a:dc:22:10:2e: 6d:38:b6:e3:a3:b9:dc:ec:c1:8d:81:54:bd:40:79:08:d0:3a: 7f:1d:7c:ef:55:ad:a5:27:f1:4c:ac:f5:ee:e5:b9:c8:41:fa: 71:8c:be:55:18:29:04:6c:2f:cc:25:6b:19:54:d4:50:2f:f4: b7:9d:95:13:a4:a0:1a:4c:f1:11:31:61:72:11:25:9b:fb:dd: df:b9:8e:72:69:93:96:17:3c:e4:89:0a:b1:a2:98:3d:a9:12: 69:93:37:4f:b7:11:fa:ab:a9:c7:60:8c:ba:96:10:cb:a5:d5: e6:d6:94:5f:3b:61:2f:ad:13:39:c9:9d:e6:bc:1f:92:9f:80: 74:99:97:8e:8e:88:53:ef:20:f4:f2:2a:c6:f8:08:87:ff:0b: 74:8a:98:ee:9e:f5:f9:84:ca:92:c4:49:45:4a:93:ae:3e:53: 9b:a9:a6:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY2Q0QxMTAvBgNVBAUTKEI0RkJFMzRBQjc2NjEyQTlEMjBBRTUyQjBBREI0MUZD RjgwQTEyRkYwHhcNMjYwOTIzMDYzMjM2WhcNMjYwOTMwMDYzMjM2WjAYMRYwFAYD VQQDEw02YWIzNzI4NS01OWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8gIS0p0T6Cz9ry6QnqTxT9plYw++6Esmkt74atXefGCNFN/iP992MyYcPIp nH8MY8HfoRL5JSm6xzVCqy5i05hMtqXNHiqQ+ZjA0uIvk4eI3Lghzn4I9b5fiSVo iQc12pafhoKJ1VRd6A3ymXYAFhfUpNB7rHI48lMr8Or2GT7yDYBXJgAs5JMyurfQ 2hVUIGC40xJvXsxQJRK8yY8j9lApJEXgYU37mjcXg9xQbLZxv/HoI7X5/YR3xoAD mw0iB9ncxTkuy/jVT+62CdXDdl/a0xaKyOzQcuhgnWbTOz60WhUOsKFmsYzy5s57 2xLl0Rw5Qlf46rl474R0j3ZHKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4EFpJs UKtloCaAoGaytpgZJea5MB8GA1UdIwQYMBaAFLT740q3ZhKp0grlKwrbQfz4ChL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjZDRC8zMzNCQzYwODgx NkQxMUYwQTkwNjZEMjVDNEY5QUUwMi90UHZqU3JkbUVxblNDdVVyQ3R0Ql9QZ0tF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQdmpTcmRtRXFuU0N1VXJDdHRCX1BnS0V2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjZDRC8zMzNCQzYwODgxNkQxMUYwQTkwNjZEMjVDNEY5QUUwMi90UHZqU3JkbUVx blNDdVVyQ3R0Ql9QZ0tFdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc6JiWNH2uz68z+EcLG6/hvUHOGFDTdmPUTp/+bOjrelInM7yJJohr1C9rReJ 1eULRCC6Wpd+2gtkOBpG2WyCiC3IF80/gP3SHeFGl4VK+C9cw7/LojrcIhAubTi2 46O53OzBjYFUvUB5CNA6fx1871WtpSfxTKz17uW5yEH6cYy+VRgpBGwvzCVrGVTU UC/0t52VE6SgGkzxETFhchElm/vd37mOcmmTlhc85IkKsaKYPakSaZM3T7cR+qup x2CMupYQy6XV5taUXzthL60TOcmd5rwfkp+AdJmXjo6IU+8g9PIqxvgIh/8LdIqY 7p71+YTKksRJRUqTrj5Tm6mmjw== -----END CERTIFICATE-----Generated at Thu Sep 24 01:18:41 2026 by rpki-client