$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft File: TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json) Hash identifier: ALRnXLgBM72eOMiQ1Iw5hSBQDmF9qREmq0SXRp5B59g= Subject key identifier: 11:4E:EE:39:9C:CC:68:79:2F:1E:B0:27:DE:04:28:53:B6:58:CF:4E Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft Manifest number: 0267 Signing time: Mon 21 Sep 2026 02:16:04 +0000 Manifest this update: Mon 21 Sep 2026 02:16:04 +0000 Manifest next update: Mon 28 Sep 2026 02:16:04 +0000 Files and hashes: 1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: ZMeXM8MYzdp+aeAooGxruJZp20bxEDx8ADt/VyM2//I=) 2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: T4FmHotpF1HHb51u8RCZ4c2+jncHifjTPC5b1o41MQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Validity Not Before: Sep 21 02:16:04 2026 GMT Not After : Sep 28 02:16:04 2026 GMT Subject: CN=6ab09364-3045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:91:fa:83:37:6d:98:37:e7:8a:dd:36:5f:3d: 26:bc:12:a6:07:7f:1c:0a:11:89:4e:4f:6f:74:d5: 33:55:11:8b:36:ee:63:b8:cf:c8:68:4d:e2:5f:71: 2c:af:ef:df:1d:c5:1f:d0:28:19:37:7c:01:e2:87: e6:3d:46:f4:aa:0c:04:58:cf:3f:2a:0d:87:00:62: 5f:e6:fa:d4:37:c1:8f:3d:21:cd:a0:99:05:a8:ec: dd:2d:05:95:a5:4a:32:4a:a6:98:b7:d7:f8:22:97: af:06:e2:1f:af:f8:78:9d:1d:ba:13:29:a9:59:9d: fa:9b:17:bc:0e:d4:f0:7a:32:9d:c9:10:65:57:86: 95:15:c0:8a:7d:ad:8d:9c:4e:b0:94:4d:8b:87:ed: eb:16:73:97:2f:1b:73:03:84:18:6d:8f:ce:08:96: a5:72:b6:f6:29:b3:49:80:da:7f:89:dd:a3:10:96: 7a:45:89:b2:8f:75:77:1e:12:16:5f:32:d3:06:eb: 79:9b:10:20:3f:b8:62:5d:a6:35:25:c6:44:c5:60: f9:de:1c:0c:94:22:c4:1d:09:bb:44:f4:9d:b3:dc: c0:c2:a3:0b:52:17:fd:33:31:fb:69:9e:5b:55:4b: 85:f2:58:c8:6d:97:8b:9c:91:f2:11:4e:12:84:cb: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4E:EE:39:9C:CC:68:79:2F:1E:B0:27:DE:04:28:53:B6:58:CF:4E X509v3 Authority Key Identifier: keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ad:e4:2c:e3:63:23:97:34:80:fa:dc:96:a6:aa:54:d4:e1: a5:f9:f5:24:65:1c:38:68:1e:20:e6:6b:85:3b:57:20:dd:7b: e9:45:b5:b7:84:ec:cd:6e:ae:7b:c2:97:23:01:5c:94:4a:d7: ce:31:7c:63:6d:15:5c:5a:36:f7:95:70:f7:06:75:d9:51:9b: 35:3f:50:78:12:bf:29:66:60:10:bd:e7:bd:7e:47:aa:2c:3f: 46:0a:51:2b:34:3f:c2:a4:f1:33:f0:f6:89:02:d9:0a:93:f1: a6:97:2d:c2:29:e6:14:49:fc:b8:07:77:b5:41:d5:62:d8:d7: ef:e3:d2:b5:39:c7:2e:74:b6:4b:bc:b4:dd:0d:1e:d4:6a:2b: 55:00:bd:30:a2:b1:bf:7b:1d:68:9b:ae:e9:f7:93:ed:49:2e: e6:a9:6f:fa:26:7d:f0:64:ea:30:e6:a0:9a:7e:94:c0:c8:dc: 0e:58:01:6d:25:e6:39:e7:f9:e8:be:8c:ac:d3:70:6d:47:c5: ec:02:6b:ed:53:18:77:70:a5:d2:54:68:fc:61:3f:cf:a4:db: 63:5f:31:1f:09:0b:09:da:4d:66:3e:f9:1d:3b:19:ee:6e:87: bc:b0:c1:e2:94:c1:33:e4:ed:7b:70:b4:5d:b3:92:97:cf:52: 06:b9:2e:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDUxMTAvBgNVBAUTKDRDN0RBQzIxMjAzREFFNDE2QzFGQ0VFQUZDNTU2NTcy MDIyMjA4QTEwHhcNMjYwOTIxMDIxNjA0WhcNMjYwOTI4MDIxNjA0WjAYMRYwFAYD VQQDEw02YWIwOTM2NC0zMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65H6gzdtmDfnit02Xz0mvBKmB38cChGJTk9vdNUzVRGLNu5juM/IaE3iX3Es r+/fHcUf0CgZN3wB4ofmPUb0qgwEWM8/Kg2HAGJf5vrUN8GPPSHNoJkFqOzdLQWV pUoySqaYt9f4IpevBuIfr/h4nR26EympWZ36mxe8DtTwejKdyRBlV4aVFcCKfa2N nE6wlE2Lh+3rFnOXLxtzA4QYbY/OCJalcrb2KbNJgNp/id2jEJZ6RYmyj3V3HhIW XzLTBut5mxAgP7hiXaY1JcZExWD53hwMlCLEHQm7RPSds9zAwqMLUhf9MzH7aZ5b VUuF8ljIbZeLnJHyEU4ShMueFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFO7jmc zGh5Lx6wJ94EKFO2WM9OMB8GA1UdIwQYMBaAFEx9rCEgPa5BbB/O6vxVZXICIgih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENENS9DRDJCNEI0NDFE MEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJrRnNIODdxX0ZWbGNnSWlD S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIMnNJU0E5cmtGc0g4N3FfRlZsY2dJaUNLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENENS9DRDJCNEI0NDFEMEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJr RnNIODdxX0ZWbGNnSWlDS0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIq3kLONjI5c0gPrclqaqVNThpfn1JGUcOGgeIOZrhTtXIN176UW1t4TszW6u e8KXIwFclErXzjF8Y20VXFo295Vw9wZ12VGbNT9QeBK/KWZgEL3nvX5Hqiw/RgpR KzQ/wqTxM/D2iQLZCpPxppctwinmFEn8uAd3tUHVYtjX7+PStTnHLnS2S7y03Q0e 1GorVQC9MKKxv3sdaJuu6feT7Uku5qlv+iZ98GTqMOagmn6UwMjcDlgBbSXmOef5 6L6MrNNwbUfF7AJr7VMYd3Cl0lRo/GE/z6TbY18xHwkLCdpNZj75HTsZ7m6HvLDB 4pTBM+Tte3C0XbOSl89SBrkuAA== -----END CERTIFICATE-----Generated at Mon Sep 21 23:30:23 2026 by rpki-client