$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft File: tkP-swMnQhSPOvnDU5M41VSTcig.mft (raw, json) Hash identifier: AfyKZkZiE84jqHu5+EyJatgQjAWi2CBA7y2PRGMfNQY= Subject key identifier: D0:49:2C:2F:0C:12:AC:B4:1D:8A:AA:4C:17:46:8C:80:CC:4B:5D:D1 Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 Certificate issuer: /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft Manifest number: B1 Signing time: Mon 21 Sep 2026 07:57:47 +0000 Manifest this update: Mon 21 Sep 2026 07:57:46 +0000 Manifest next update: Mon 28 Sep 2026 07:57:46 +0000 Files and hashes: 1: tkP-swMnQhSPOvnDU5M41VSTcig.crl (hash: itdF/gsTpbKzy1mRt24wBrJexMgU+XWZ2Cro68VUv1w=) 2: 341BBBECA99411F093BBAA15C4F9AE02.roa (hash: pkkx4zZGCNXTpRTSxpbchOTdZve5NBSRW5RTVv6mqwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Validity Not Before: Sep 21 07:57:46 2026 GMT Not After : Sep 28 07:57:46 2026 GMT Subject: CN=6ab0e37a-2bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:54:14:72:e4:ff:8a:c5:0b:5f:6b:a1:37:2c: 0c:f0:ae:06:32:26:b2:45:e8:a2:67:53:16:0c:7e: c8:9f:3a:d6:8d:06:9b:49:df:7d:91:fd:6a:8c:db: 33:fd:12:e7:7a:b3:d2:84:d8:c7:34:96:f7:4c:06: 64:49:00:72:b8:77:7c:68:7a:49:ac:46:8f:a8:79: 4d:cf:e0:1e:39:f1:4c:3a:32:26:6a:27:44:78:fb: 79:62:5f:07:fb:2d:c5:a7:bf:a1:80:b2:c3:c8:eb: 12:f6:e6:7e:84:83:70:98:2a:95:c7:cf:43:ee:48: 17:36:27:de:f0:1a:53:83:5e:17:61:b5:24:19:94: af:73:e6:eb:09:16:0b:9c:b0:06:b7:66:66:76:b9: f7:2c:66:6f:19:16:92:e0:31:ed:8a:c6:2e:16:b5: 5b:05:83:03:8d:55:6d:6a:f8:6e:00:79:7e:b6:e4: 6c:a9:ac:61:29:c3:03:33:f8:49:0d:e1:28:8f:3e: 62:da:d7:d0:f3:49:41:fc:ba:4e:af:a5:a4:5e:a0: 9f:9e:d8:65:c6:e8:7a:0e:7d:62:36:70:ee:3e:69: 94:38:83:d2:36:b4:a0:bc:a9:19:7a:d8:30:1e:31: b6:ad:3f:cc:c4:3d:78:bb:55:2c:ed:0c:6d:68:5f: 71:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:49:2C:2F:0C:12:AC:B4:1D:8A:AA:4C:17:46:8C:80:CC:4B:5D:D1 X509v3 Authority Key Identifier: keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fd:bb:a7:d4:d8:49:30:d0:a7:2b:12:b4:c0:6e:20:b2:52: fb:f4:d6:fc:92:3a:85:e0:d6:ea:d0:e4:53:31:47:b5:76:a9: 3d:2c:60:7d:81:3f:71:5c:cd:f9:f0:39:7c:16:64:9f:85:6a: 45:76:ef:86:bb:f1:71:ed:ce:68:fa:83:43:5c:e7:44:2d:8d: 03:d6:5c:f6:bd:cd:37:28:e5:93:fd:99:da:38:a3:10:37:2d: 1b:ed:7b:d7:f2:dc:18:6d:ea:7a:02:20:bc:e5:3d:ea:72:50: e1:44:bb:0f:de:50:da:ed:fc:93:b1:62:3b:e2:f7:82:21:a0: dc:1b:41:63:a9:d7:37:70:02:92:ec:38:c8:ba:06:fc:80:6d: 27:b6:2c:07:75:65:c9:32:2b:81:27:6d:70:63:d5:f8:6a:0c: a5:cb:fb:43:48:1d:d1:a7:be:0a:f5:79:76:54:98:d1:8e:9b: 2f:a5:a8:5f:14:4e:c1:5d:98:27:46:ae:b5:d8:20:0d:29:dd: f8:3c:9b:d1:3d:40:6c:a1:5f:c2:9e:14:80:e6:13:29:32:ef: 64:a6:f0:11:8c:95:fe:fd:07:5a:c7:5c:90:98:97:a4:e0:16: 67:60:45:0b:6b:19:61:03:6f:52:0e:88:c5:85:06:3a:24:09: 95:da:9a:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwREUxMTAvBgNVBAUTKEI2NDNGRUIzMDMyNzQyMTQ4RjNBRjlDMzUzOTMzOEQ1 NTQ5MzcyMjgwHhcNMjYwOTIxMDc1NzQ2WhcNMjYwOTI4MDc1NzQ2WjAYMRYwFAYD VQQDEw02YWIwZTM3YS0yYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51QUcuT/isULX2uhNywM8K4GMiayReiiZ1MWDH7InzrWjQabSd99kf1qjNsz /RLnerPShNjHNJb3TAZkSQByuHd8aHpJrEaPqHlNz+AeOfFMOjImaidEePt5Yl8H +y3Fp7+hgLLDyOsS9uZ+hINwmCqVx89D7kgXNife8BpTg14XYbUkGZSvc+brCRYL nLAGt2Zmdrn3LGZvGRaS4DHtisYuFrVbBYMDjVVtavhuAHl+tuRsqaxhKcMDM/hJ DeEojz5i2tfQ80lB/LpOr6WkXqCfnthlxuh6Dn1iNnDuPmmUOIPSNrSgvKkZetgw HjG2rT/MxD14u1Us7QxtaF9xbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNBJLC8M Eqy0HYqqTBdGjIDMS13RMB8GA1UdIwQYMBaAFLZD/rMDJ0IUjzr5w1OTONVUk3Io MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDBERS80Rjc2OUQ1OEE5 OEYxMUYwQjFGQTUwNjZDNEY5QUUwMi90a1Atc3dNblFoU1BPdm5EVTVNNDFWU1Rj aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RrUC1zd01uUWhTUE92bkRVNU00MVZTVGNpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDBERS80Rjc2OUQ1OEE5OEYxMUYwQjFGQTUwNjZDNEY5QUUwMi90a1Atc3dNblFo U1BPdm5EVTVNNDFWU1RjaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO/27p9TYSTDQpysStMBuILJS+/TW/JI6heDW6tDkUzFHtXapPSxgfYE/cVzN +fA5fBZkn4VqRXbvhrvxce3OaPqDQ1znRC2NA9Zc9r3NNyjlk/2Z2jijEDctG+17 1/LcGG3qegIgvOU96nJQ4US7D95Q2u38k7FiO+L3giGg3BtBY6nXN3ACkuw4yLoG /IBtJ7YsB3VlyTIrgSdtcGPV+GoMpcv7Q0gd0ae+CvV5dlSY0Y6bL6WoXxROwV2Y J0autdggDSnd+Dyb0T1AbKFfwp4UgOYTKTLvZKbwEYyV/v0HWsdckJiXpOAWZ2BF C2sZYQNvUg6IxYUGOiQJldqacw== -----END CERTIFICATE-----Generated at Tue Sep 22 06:56:33 2026 by rpki-client