$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json) Hash identifier: 5wZ8mzPzXYr1ECkJNd5m0Bi3v7jsrdDys4Qkm9Z+LR0= Subject key identifier: 4D:EF:C6:F6:DC:E8:E4:9C:92:43:AB:16:4B:51:31:BB:F7:C6:C5:E2 Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft Manifest number: 01B7 Signing time: Mon 21 Sep 2026 03:59:13 +0000 Manifest this update: Mon 21 Sep 2026 03:59:13 +0000 Manifest next update: Mon 28 Sep 2026 03:59:13 +0000 Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: opbhUI6XVasA+DbjW6mnj9piOcXb364uBUp9qbaaS7E=) 2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: bs1Xgw6z8UHVdG8cs/XzlMBqu7GicIxeKJC8ZxwnNXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Sep 21 03:59:13 2026 GMT Not After : Sep 28 03:59:13 2026 GMT Subject: CN=6ab0ab91-3753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:7e:d2:89:9d:51:36:31:db:b1:d9:41:f0: 41:6d:a1:9c:f9:74:79:e9:ca:b9:78:da:e6:ae:cd: a9:20:b7:9a:cc:97:c0:4e:0a:c0:e6:67:d5:1c:77: d7:fa:b3:8f:db:71:0c:ab:75:ac:d8:7c:2a:72:08: 7c:52:20:ae:49:e2:f3:ef:ee:b4:2b:17:9d:60:e2: 87:5c:1e:6b:fd:0a:e2:92:57:6a:59:88:3f:a5:9a: 18:3e:74:75:4f:ba:1a:5d:6b:5e:78:2b:15:2e:1b: 36:17:68:ea:15:50:88:19:c1:76:8f:5f:5b:c3:b2: d2:24:91:f7:35:a2:1f:f9:62:d6:1e:92:31:ba:5c: 8e:d7:5e:45:4d:67:52:5a:b6:32:ab:d1:7a:7d:3e: be:e2:44:e4:54:a7:85:64:8c:9e:b1:58:9c:45:0b: 18:9b:cf:ae:fe:4d:56:23:57:d5:60:54:48:3a:f6: 54:08:43:9a:86:2a:0a:da:55:74:43:c3:b2:18:a0: 37:4c:2b:73:bf:53:7a:2e:65:30:97:3a:95:e2:c7: ac:c7:d5:60:10:cd:56:dd:af:bd:cc:bd:11:f1:7d: 9e:0d:37:56:a4:18:c7:5d:c5:e2:bd:9c:7c:55:0e: 87:82:b5:15:52:ea:29:46:82:29:3a:0d:ca:76:47: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EF:C6:F6:DC:E8:E4:9C:92:43:AB:16:4B:51:31:BB:F7:C6:C5:E2 X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7f:06:7b:68:08:24:4a:e2:b8:d6:5e:c5:2b:a7:ac:4e:f9: a2:ee:12:06:1c:43:9c:51:74:97:08:9b:11:41:bc:bd:76:98: e9:fb:a9:0c:75:80:8c:9b:41:84:13:1e:ba:2f:94:65:7c:70: 54:f1:7b:4c:d3:4e:32:d6:2d:d1:94:df:94:a9:c1:b5:d7:63: 08:96:ca:91:d1:fe:e2:0b:55:45:da:e6:c8:54:c4:a4:be:84: 16:57:3a:ca:db:64:c7:bb:b9:84:c3:c8:ff:0e:a7:a0:84:00: 70:d1:ae:c8:84:01:36:3b:cb:80:c1:ff:c4:0d:87:ac:c6:d5: db:d3:e9:af:cd:91:1c:28:12:88:84:15:77:30:36:7c:54:a9: ac:3c:a0:d2:00:88:36:6b:8d:78:80:83:06:99:fd:20:92:4e: e1:a5:82:1a:19:9b:23:ac:df:c1:84:42:ac:65:e4:a2:72:ac: f2:e2:64:a6:cf:be:3e:e0:0e:be:41:28:c0:b4:4a:85:ac:8c: b3:c6:95:56:67:62:76:36:21:40:db:9f:62:0b:24:3f:b5:42: 70:2a:4a:ee:45:7e:5d:0a:f7:1c:d9:70:1d:e1:e7:db:e5:c9: 20:23:38:73:cc:1f:ae:a0:32:a7:07:26:b5:4f:d1:53:1f:d0: 35:ff:1f:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjYwOTIxMDM1OTEzWhcNMjYwOTI4MDM1OTEzWjAYMRYwFAYD VQQDEw02YWIwYWI5MS0zNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7x+0omdUTYx27HZQfBBbaGc+XR56cq5eNrmrs2pILeazJfATgrA5mfVHHfX +rOP23EMq3Ws2Hwqcgh8UiCuSeLz7+60KxedYOKHXB5r/QrikldqWYg/pZoYPnR1 T7oaXWteeCsVLhs2F2jqFVCIGcF2j19bw7LSJJH3NaIf+WLWHpIxulyO115FTWdS WrYyq9F6fT6+4kTkVKeFZIyesVicRQsYm8+u/k1WI1fVYFRIOvZUCEOahioK2lV0 Q8OyGKA3TCtzv1N6LmUwlzqV4sesx9VgEM1W3a+9zL0R8X2eDTdWpBjHXcXivZx8 VQ6HgrUVUuopRoIpOg3KdkeKewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3vxvbc 6OSckkOrFktRMbv3xsXiMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm UVozelBmc0dpRndjTklpeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPH8Ge2gIJEriuNZexSunrE75ou4SBhxDnFF0lwibEUG8vXaY6fupDHWAjJtB hBMeui+UZXxwVPF7TNNOMtYt0ZTflKnBtddjCJbKkdH+4gtVRdrmyFTEpL6EFlc6 yttkx7u5hMPI/w6noIQAcNGuyIQBNjvLgMH/xA2HrMbV29Ppr82RHCgSiIQVdzA2 fFSprDyg0gCINmuNeICDBpn9IJJO4aWCGhmbI6zfwYRCrGXkonKs8uJkps++PuAO vkEowLRKhayMs8aVVmdidjYhQNufYgskP7VCcCpK7kV+XQr3HNlwHeHn2+XJICM4 c8wfrqAypwcmtU/RUx/QNf8flQ== -----END CERTIFICATE-----Generated at Tue Sep 22 22:27:02 2026 by rpki-client