$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft File: tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json) Hash identifier: dN4Jg87GHh0BiQCHy5YvWh1c9026usH4OC4alllmYX0= Subject key identifier: 86:23:1C:8C:0F:D7:38:B4:55:3A:7B:B1:FD:E0:E1:BF:74:4B:B3:64 Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Certificate serial: 0D93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft Manifest number: 0D60 Signing time: Tue 22 Sep 2026 18:01:32 +0000 Manifest this update: Tue 22 Sep 2026 18:01:32 +0000 Manifest next update: Tue 29 Sep 2026 18:01:32 +0000 Files and hashes: 1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: pB1qUgAEp8WouUSRadpdqJhIS5PkeFoXHJ3o7UKq2hI=) 2: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: l1iCGSn/PX7oFU8pYAYmto407lNna+dcfVIeQPwpey4=) 3: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: hFVkKE+Qi5ASFcR8wJP4hxF2ONROpTw8ANjmt7CoeCQ=) 4: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: 98uYds8I1pxO4Y6dKdHlz74HRamQ9x93aGa9N7uQZao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3475 (0xd93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Validity Not Before: Sep 22 18:01:32 2026 GMT Not After : Sep 29 18:01:32 2026 GMT Subject: CN=6ab2c27c-4e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:75:2c:3f:72:88:8a:a0:e0:83:eb:bd:da: df:07:61:55:ea:61:2f:76:0f:33:23:0f:42:42:90: 5c:5e:cb:14:2b:97:91:5a:fb:d6:cf:b0:e1:87:dc: 81:de:70:61:fa:8d:37:8a:7c:e0:2b:d9:ad:6b:55: a8:5a:86:a6:7e:d5:6f:88:f6:b2:c5:65:bd:d0:20: 51:12:99:3e:36:0c:45:4b:65:38:a2:6c:cb:4c:f2: 81:7b:5c:d1:48:e9:96:b5:6d:07:e0:9e:bf:d0:3e: ef:95:55:dd:a9:9e:a2:6b:45:54:ba:a2:6e:22:4b: 5a:fe:27:83:f7:8d:dd:3a:7f:27:df:55:e8:16:81: 6d:2d:d6:ee:20:70:4e:85:d0:82:df:7f:53:13:26: 50:25:91:0a:02:ec:51:0b:eb:04:43:85:7e:ef:d3: 6d:d7:a5:e6:cb:61:5d:18:d6:fd:b8:57:8f:c7:c1: 6e:bb:04:cc:0a:81:8b:dc:e8:e5:7a:84:10:88:07: ab:36:c3:26:30:58:5c:68:fe:a3:33:f1:0d:20:05: 98:67:4b:6a:46:03:fa:90:ae:85:92:5c:57:00:14: 6e:94:75:9a:d9:72:8e:02:74:b2:44:d5:a4:9c:ee: b2:f2:9e:39:6b:3e:75:11:ec:ed:e7:a5:ee:00:ae: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:23:1C:8C:0F:D7:38:B4:55:3A:7B:B1:FD:E0:E1:BF:74:4B:B3:64 X509v3 Authority Key Identifier: keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:50:7b:b4:08:e4:b8:55:32:67:54:39:c7:f1:bb:e5:6c:33: fe:14:9e:4b:b4:30:75:37:63:d2:6d:6b:07:7b:0b:22:f8:3c: 0a:db:d1:8d:68:17:a2:bb:27:27:6a:43:38:c4:4d:60:8f:5f: 46:d5:1c:01:18:b8:8b:72:95:26:61:0a:53:08:28:1a:45:f9: c5:97:9b:b3:b0:84:08:06:1c:87:11:2d:35:f2:fa:78:7d:a6: 1a:06:d7:e1:96:69:32:a7:6c:26:c4:3f:87:ec:1b:92:e8:e1: 08:3e:99:00:ec:01:bc:81:c0:78:6a:95:f6:db:34:f2:23:55: 89:f6:4b:e3:86:b7:69:2d:27:d1:72:a7:42:c4:53:27:15:a4: 35:9c:d4:dd:6a:c5:e6:0f:5b:4d:1f:b8:58:dd:ae:71:ab:61: c2:b5:6f:f8:cf:8f:a2:58:95:48:ef:d9:46:1f:6b:4c:a2:26: 13:a0:be:af:b3:97:68:f2:b3:3b:00:35:c9:db:d9:e5:e2:47: 58:f4:5c:b8:c1:8a:20:97:94:b7:34:87:86:18:12:1a:d1:75: 4c:b9:a1:1e:20:7b:8b:55:74:19:ff:46:21:5b:f7:80:7c:2e: 2e:84:35:62:ae:cd:71:0d:aa:a1:ba:93:e3:37:67:ef:c0:d9: bc:34:a6:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKEI0QjEwRTZDQjM4RDUzNjVEMDU0RThEQkU5MEYzNEYy QzM4OEIxMEMwHhcNMjYwOTIyMTgwMTMyWhcNMjYwOTI5MTgwMTMyWjAYMRYwFAYD VQQDEw02YWIyYzI3Yy00ZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzl1LD9yiIqg4IPrvdrfB2FV6mEvdg8zIw9CQpBcXssUK5eRWvvWz7Dhh9yB 3nBh+o03inzgK9mta1WoWoamftVviPayxWW90CBREpk+NgxFS2U4omzLTPKBe1zR SOmWtW0H4J6/0D7vlVXdqZ6ia0VUuqJuIkta/ieD943dOn8n31XoFoFtLdbuIHBO hdCC339TEyZQJZEKAuxRC+sEQ4V+79Nt16Xmy2FdGNb9uFePx8FuuwTMCoGL3Ojl eoQQiAerNsMmMFhcaP6jM/ENIAWYZ0tqRgP6kK6FklxXABRulHWa2XKOAnSyRNWk nO6y8p45az51Eezt56XuAK45JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYjHIwP 1zi0VTp7sf3g4b90S7NkMB8GA1UdIwQYMBaAFLSxDmyzjVNl0FTo2+kPNPLDiLEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8yMDkxREM4RTA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUyWFFWT2piNlE4MDhzT0lz UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMRU9iTE9OVTJYUVZPamI2UTgwOHNPSXNRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8yMDkxREM4RTA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUy WFFWT2piNlE4MDhzT0lzUXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAolB7tAjkuFUyZ1Q5x/G75Wwz/hSeS7QwdTdj0m1rB3sLIvg8CtvRjWgXorsn J2pDOMRNYI9fRtUcARi4i3KVJmEKUwgoGkX5xZebs7CECAYchxEtNfL6eH2mGgbX 4ZZpMqdsJsQ/h+wbkujhCD6ZAOwBvIHAeGqV9ts08iNVifZL44a3aS0n0XKnQsRT JxWkNZzU3WrF5g9bTR+4WN2ucathwrVv+M+PoliVSO/ZRh9rTKImE6C+r7OXaPKz OwA1ydvZ5eJHWPRcuMGKIJeUtzSHhhgSGtF1TLmhHiB7i1V0Gf9GIVv3gHwuLoQ1 Yq7NcQ2qobqT4zdn78DZvDSmrg== -----END CERTIFICATE-----Generated at Wed Sep 23 15:34:00 2026 by rpki-client