$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: s2vnF6NiSIKxfybc2XLPwF8k00z4ONGrccPUD+i4V5g= Subject key identifier: 18:38:CE:31:96:2A:EB:7E:9B:8E:13:A6:05:FE:D6:4A:5E:66:5E:C1 Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 0AB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 0AAF Signing time: Sun 20 Sep 2026 19:27:56 +0000 Manifest this update: Sun 20 Sep 2026 19:27:55 +0000 Manifest next update: Sun 27 Sep 2026 19:27:55 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: gj0+O8xoTxbqvkFgqMyh5efJtelKmTls+ScY+hNCbCM=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: 6IXTKp13HuxMWhW3hn1g3ZSbEaBP+PUeVbQIJFfugEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2743 (0xab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: Sep 20 19:27:55 2026 GMT Not After : Sep 27 19:27:55 2026 GMT Subject: CN=6ab033bc-6e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:f3:e1:cc:6d:96:7a:40:4c:6c:fc:2f:86: b6:1a:53:66:a8:75:8d:a6:23:e6:9a:9f:12:93:91: 9b:45:4c:85:95:69:9c:2b:7c:c1:0f:a3:d6:f6:2b: 34:b2:0c:73:92:cf:ef:80:b3:8d:f2:e8:01:e2:10: df:b4:77:56:ce:9f:09:15:c2:44:72:bb:f6:15:88: a2:2d:f6:55:d4:a0:4e:32:3f:2d:9b:8c:97:8b:01: c1:cf:23:1c:15:14:16:c9:02:21:11:17:1d:9a:c5: 2d:20:b3:2a:c0:d1:d9:1e:eb:8c:01:3b:a8:9d:02: 65:19:a1:4e:f5:a9:8e:4e:6b:53:36:17:60:8e:c3: 56:8c:d1:4a:26:d6:f8:dd:9c:04:c8:be:95:e3:26: 7b:f9:0d:89:1b:f6:44:c2:dd:a0:16:24:33:b7:82: 68:fe:d9:2a:3c:0d:69:cd:1a:d6:6d:e7:01:33:05: a5:07:b9:e1:06:61:a0:7c:f9:02:77:6c:10:7a:69: 9c:67:55:fd:be:3d:70:11:f0:04:f2:ce:c0:05:73: e2:6e:e3:cb:41:41:a8:d0:0e:0b:cf:8f:f0:a9:99: ed:67:46:fc:18:ed:d7:23:9c:3b:4e:71:85:68:6b: 82:87:cc:5a:cf:d5:ca:c7:0e:62:e5:81:80:41:1f: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:38:CE:31:96:2A:EB:7E:9B:8E:13:A6:05:FE:D6:4A:5E:66:5E:C1 X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f7:97:fa:06:52:1e:81:d5:4e:42:be:68:3a:32:33:fc:a4: 52:c1:e8:cd:c7:e5:22:54:08:b0:b8:e4:eb:e5:43:e6:2b:96: d3:06:d7:ec:27:5e:da:ae:aa:31:27:97:ba:9a:1a:46:88:06: 84:01:eb:87:22:4a:55:85:5a:2f:9f:45:c1:da:2f:76:d3:0e: 74:45:fb:5b:19:29:d7:a3:ce:63:a1:64:af:6d:7f:d2:97:ff: df:a9:0f:4d:35:5d:32:6f:c4:4b:2e:c9:31:d7:4c:0b:5b:a5: 3d:58:22:38:db:a2:93:9f:ed:75:64:5f:51:b8:ef:ea:75:e8: a4:01:d4:ea:c3:d1:12:30:d3:56:d9:5b:8c:18:41:06:45:e5: 11:f0:3c:4a:80:73:1c:ff:5d:89:76:dd:d9:88:1a:d9:6b:39: ce:24:08:e4:ff:88:d4:7d:99:1a:91:99:b4:76:88:c0:cf:1f: e9:d8:f5:07:d5:f6:75:8d:6c:3d:43:14:bd:a8:93:63:4f:68: 8f:ac:c0:c3:60:bd:7c:3b:37:0a:5a:fe:cc:3e:c3:02:b7:4e: 1d:8a:93:18:75:dd:b3:56:21:7d:c2:86:06:2e:aa:34:7f:e6: 18:a5:ea:53:2e:08:a9:ee:d4:d3:03:13:f5:76:92:5d:1d:0f: 2c:20:8b:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjYwOTIwMTkyNzU1WhcNMjYwOTI3MTkyNzU1WjAYMRYwFAYD VQQDEw02YWIwMzNiYy02ZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0r7z4cxtlnpATGz8L4a2GlNmqHWNpiPmmp8Sk5GbRUyFlWmcK3zBD6PW9is0 sgxzks/vgLON8ugB4hDftHdWzp8JFcJEcrv2FYiiLfZV1KBOMj8tm4yXiwHBzyMc FRQWyQIhERcdmsUtILMqwNHZHuuMATuonQJlGaFO9amOTmtTNhdgjsNWjNFKJtb4 3ZwEyL6V4yZ7+Q2JG/ZEwt2gFiQzt4Jo/tkqPA1pzRrWbecBMwWlB7nhBmGgfPkC d2wQemmcZ1X9vj1wEfAE8s7ABXPibuPLQUGo0A4Lz4/wqZntZ0b8GO3XI5w7TnGF aGuCh8xaz9XKxw5i5YGAQR+zWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBg4zjGW Kut+m44TpgX+1kpeZl7BMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO/eX+gZSHoHVTkK+aDoyM/ykUsHozcflIlQIsLjk6+VD5iuW0wbX7Cde2q6q MSeXupoaRogGhAHrhyJKVYVaL59FwdovdtMOdEX7Wxkp16POY6Fkr21/0pf/36kP TTVdMm/ESy7JMddMC1ulPVgiONuik5/tdWRfUbjv6nXopAHU6sPREjDTVtlbjBhB BkXlEfA8SoBzHP9diXbd2Yga2Ws5ziQI5P+I1H2ZGpGZtHaIwM8f6dj1B9X2dY1s PUMUvaiTY09oj6zAw2C9fDs3Clr+zD7DArdOHYqTGHXds1YhfcKGBi6qNH/mGKXq Uy4Iqe7U0wMT9XaSXR0PLCCL/w== -----END CERTIFICATE-----Generated at Mon Sep 21 16:36:23 2026 by rpki-client