$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft File: TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json) Hash identifier: nR/w+J7qUoeqtTyR5CvhHXjLjbYLJlzcFR5rjM+8Lxw= Subject key identifier: 43:05:9F:1F:CD:30:A8:C7:AC:55:82:81:43:ED:8C:93:90:55:EA:66 Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft Manifest number: D5 Signing time: Mon 21 Sep 2026 06:39:50 +0000 Manifest this update: Mon 21 Sep 2026 06:39:50 +0000 Manifest next update: Mon 28 Sep 2026 06:39:50 +0000 Files and hashes: 1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: gQCTqhrn6HkDo83NKTSbUDT/YvSR2GDr8v06dZCO5Vc=) 2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Validity Not Before: Sep 21 06:39:50 2026 GMT Not After : Sep 28 06:39:50 2026 GMT Subject: CN=6ab0d136-4e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:36:ef:cc:f0:99:43:96:bc:c9:8e:83:fe: d0:0f:a7:7a:5e:fb:96:79:4b:c4:53:f9:53:6c:6a: 17:53:09:e2:98:29:ab:78:79:91:31:ee:19:fe:6f: ab:f4:1f:77:03:e0:6a:d8:3d:ad:8f:4a:bb:3b:90: b2:ed:b6:a3:ab:fc:50:88:4b:3c:cc:0d:0a:5f:3a: 3a:fe:c6:6e:cc:1a:c4:33:42:d2:31:3a:a9:49:b4: 18:08:13:c5:79:81:26:f0:87:3b:ca:2b:d6:28:d4: 7e:a3:93:03:90:d8:36:a3:97:33:22:78:d6:08:5d: 44:b0:45:45:a6:eb:d0:ae:b5:d7:e7:8d:99:23:0e: 1a:90:fd:08:76:2e:56:29:fe:d6:c6:a4:ae:ca:67: c3:d1:82:f4:20:ef:fa:11:63:e0:ca:68:7e:ab:ce: 47:3f:1b:13:09:80:ed:1e:b0:92:33:05:4b:bf:30: 38:36:0f:0b:3e:57:50:c6:bb:37:17:f5:bf:fe:63: cc:73:a4:8b:95:7d:d8:f1:b5:0b:83:97:dc:8e:28: 65:51:54:aa:a6:fc:6c:ce:04:aa:a1:b7:32:57:e2: 75:97:14:54:6a:58:1e:8a:6f:09:1a:88:a6:61:b9: 34:4d:dc:87:03:46:4c:08:3c:e4:8d:59:f2:ec:07: 01:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:05:9F:1F:CD:30:A8:C7:AC:55:82:81:43:ED:8C:93:90:55:EA:66 X509v3 Authority Key Identifier: keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:28:26:a4:d6:1e:b3:b7:22:b4:bc:9a:f0:bd:36:2e:5f:a0: c2:d8:22:2f:8c:50:76:f1:59:f5:85:6e:b5:0d:df:eb:80:96: b1:03:47:77:33:37:03:84:80:91:40:12:2a:93:a6:f4:47:bb: 5d:5f:80:94:f7:98:67:c2:94:50:09:42:35:6a:e4:ea:3a:c8: 76:71:90:90:c8:f3:83:2e:c0:3e:6f:16:6b:6f:31:04:f7:d1: 47:98:f9:97:b9:f7:ca:75:62:36:8e:b5:cc:15:bc:80:a1:31: 97:45:d4:42:62:26:95:c6:d9:71:64:ef:9a:88:ac:4d:5a:08: 1c:fa:d2:d9:84:e9:d6:07:4c:96:20:8a:e5:bf:e4:f1:6c:17: 2e:79:e9:ea:97:18:17:93:ff:79:1d:d9:cc:14:8f:46:1a:93: a2:1c:20:6b:f8:3d:fb:28:10:45:67:f3:45:ad:26:fd:df:fe: e5:34:6e:07:4f:6b:3a:e4:16:29:bb:91:e3:66:d7:bd:e4:48: 91:76:69:85:61:76:a1:e0:be:08:3f:58:2d:1f:42:0d:00:d3: 91:47:6c:b3:4d:b9:7e:8f:7f:cb:96:79:19:c3:e4:8b:87:15: 12:e4:f8:0e:5e:5d:ef:c0:6b:0a:97:37:4b:ee:6d:25:75:b6: 27:de:8f:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCNkQxMTAvBgNVBAUTKDRENEYzQUFDQzczOTVBMTNENjQyMDA3Rjk5MTBERjg4 MDQwRTRCQUIwHhcNMjYwOTIxMDYzOTUwWhcNMjYwOTI4MDYzOTUwWjAYMRYwFAYD VQQDEw02YWIwZDEzNi00ZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuS8278zwmUOWvMmOg/7QD6d6XvuWeUvEU/lTbGoXUwnimCmreHmRMe4Z/m+r 9B93A+Bq2D2tj0q7O5Cy7bajq/xQiEs8zA0KXzo6/sZuzBrEM0LSMTqpSbQYCBPF eYEm8Ic7yivWKNR+o5MDkNg2o5czInjWCF1EsEVFpuvQrrXX542ZIw4akP0Idi5W Kf7WxqSuymfD0YL0IO/6EWPgymh+q85HPxsTCYDtHrCSMwVLvzA4Ng8LPldQxrs3 F/W//mPMc6SLlX3Y8bULg5fcjihlUVSqpvxszgSqobcyV+J1lxRUalgeim8JGoim Ybk0TdyHA0ZMCDzkjVny7AcB/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMFnx/N MKjHrFWCgUPtjJOQVepmMB8GA1UdIwQYMBaAFE1POqzHOVoT1kIAf5kQ34gEDkur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI2RC84NkRGNkM3RTcx MDUxMUYwODU0RjVBMTRDNEY5QUUwMi9UVTg2ck1jNVdoUFdRZ0JfbVJEZmlBUU9T NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVODZyTWM1V2hQV1FnQl9tUkRmaUFRT1M2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI2RC84NkRGNkM3RTcxMDUxMUYwODU0RjVBMTRDNEY5QUUwMi9UVTg2ck1jNVdo UFdRZ0JfbVJEZmlBUU9TNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWygmpNYes7citLya8L02Ll+gwtgiL4xQdvFZ9YVutQ3f64CWsQNHdzM3A4SA kUASKpOm9Ee7XV+AlPeYZ8KUUAlCNWrk6jrIdnGQkMjzgy7APm8Wa28xBPfRR5j5 l7n3ynViNo61zBW8gKExl0XUQmImlcbZcWTvmoisTVoIHPrS2YTp1gdMliCK5b/k 8WwXLnnp6pcYF5P/eR3ZzBSPRhqTohwga/g9+ygQRWfzRa0m/d/+5TRuB09rOuQW KbuR42bXveRIkXZphWF2oeC+CD9YLR9CDQDTkUdss025fo9/y5Z5GcPki4cVEuT4 Dl5d78BrCpc3S+5tJXW2J96P3Q== -----END CERTIFICATE-----Generated at Mon Sep 21 20:08:09 2026 by rpki-client