$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: 5l2OaVoC86aC1zrEdXoKP9qwLivHVDqshF8V16ZfnbY= Subject key identifier: 59:06:AD:F1:EE:20:69:3A:59:66:4A:55:1C:37:5D:1E:77:93:D6:D3 Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 051C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0E34 Signing time: Sun 20 Sep 2026 20:07:35 +0000 Manifest this update: Sun 20 Sep 2026 20:07:35 +0000 Manifest next update: Sun 27 Sep 2026 20:07:35 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: WGohF1WE8WXqqV2mSZ42X+sIRj1JwHKd7/8T2kLE5h8=) 2: 8E4BBF50F5C511EF89110646C4F9AE02.roa (hash: SV52PCZ2QLtu2V0EGB8QTkXhOJlyBxhJjpVrFVWrla4=) 3: A1B8D10EF5C511EF83B21246C4F9AE02.roa (hash: mXAMy97Aa670ZhM2hALSQp3avmcppB/5FPkm9qaohYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1308 (0x51c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Sep 20 20:07:35 2026 GMT Not After : Sep 27 20:07:35 2026 GMT Subject: CN=6ab03d07-cfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:78:a3:b5:10:2c:e7:67:ca:fb:52:b5:fa:06: 04:8c:93:72:d3:73:cf:be:9a:57:2d:38:f3:5f:ce: a2:e4:60:c5:33:87:7d:84:5c:5e:03:40:86:e0:42: 67:8b:e2:78:eb:e8:8f:7e:c8:8e:89:72:d8:0d:85: 7e:7d:2d:e3:f5:3f:8d:4d:45:f5:75:e2:ba:fd:0f: 5a:e9:f8:a2:b1:96:dc:d4:05:ca:c8:3f:be:0d:99: 18:12:63:c0:48:4e:7f:41:64:2a:5a:02:de:a6:da: f0:48:fc:04:5a:fc:ad:e1:eb:30:a2:3b:82:6e:dd: d0:31:3c:3f:7f:0f:69:0f:2d:56:de:7a:03:76:fb: e7:e9:79:a7:cf:20:e7:96:e2:f6:92:e0:b4:e4:27: 48:b5:d9:bf:ce:af:f3:40:9d:7c:39:9c:e0:a5:57: 25:63:c7:ac:99:30:66:81:0e:73:1a:cc:8a:4c:79: 18:49:89:8e:8b:8d:30:00:3e:2e:6c:28:0d:cf:f9: f9:7d:d6:f2:02:7a:3f:f6:3c:83:7d:29:9e:d4:87: 6d:c1:5f:e5:e0:1a:b6:20:93:6f:03:f3:b9:30:6d: 81:cd:48:da:e5:37:41:75:1f:31:55:dd:8f:f7:23: ab:81:2c:6d:89:65:e1:42:17:64:4b:fd:3c:6d:48: e7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:06:AD:F1:EE:20:69:3A:59:66:4A:55:1C:37:5D:1E:77:93:D6:D3 X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9c:5e:3e:53:e9:90:c4:55:e7:54:19:0b:c8:9a:1d:55:80: a9:97:a1:e9:61:c0:12:5e:67:ad:2f:76:81:d2:95:99:cd:b3: e1:19:8e:66:1c:93:49:34:8a:9d:96:65:4d:e0:7d:83:87:5f: 8a:94:5d:26:76:cc:51:7b:e2:ae:bd:69:95:54:f9:a6:e3:59: 2b:cb:86:9a:ad:df:a7:db:d6:9c:99:75:fd:7a:b9:e6:09:0d: 92:ca:e1:7e:4b:12:e2:b6:2b:ad:99:1d:af:e6:fd:dc:52:1e: 50:26:17:90:12:39:08:79:c1:e1:4e:09:f0:fe:ca:45:5d:df: 3f:68:91:99:94:1a:93:72:7d:2a:86:6e:72:9a:6b:fc:3b:30: 79:aa:3c:74:c3:f0:36:b8:2c:d4:8b:81:0f:38:84:d6:f9:a1: 0c:43:52:f0:0f:de:d0:34:44:b3:6d:5c:fa:3e:e2:a1:6c:c0: 6e:9d:09:95:ae:4e:74:31:15:6e:e7:e3:df:0c:ed:c4:80:f4: 61:17:7c:f7:ae:04:58:d7:32:63:0a:b1:95:75:78:92:27:dc: 8d:62:83:4b:66:f3:6c:fd:88:c4:06:ae:b2:da:e3:a6:12:69: cd:bb:11:72:a8:45:93:f7:df:41:25:3f:66:79:f8:a6:33:02: ab:30:f9:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjYwOTIwMjAwNzM1WhcNMjYwOTI3MjAwNzM1WjAYMRYwFAYD VQQDEw02YWIwM2QwNy1jZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nijtRAs52fK+1K1+gYEjJNy03PPvppXLTjzX86i5GDFM4d9hFxeA0CG4EJn i+J46+iPfsiOiXLYDYV+fS3j9T+NTUX1deK6/Q9a6fiisZbc1AXKyD++DZkYEmPA SE5/QWQqWgLeptrwSPwEWvyt4eswojuCbt3QMTw/fw9pDy1W3noDdvvn6XmnzyDn luL2kuC05CdItdm/zq/zQJ18OZzgpVclY8esmTBmgQ5zGsyKTHkYSYmOi40wAD4u bCgNz/n5fdbyAno/9jyDfSme1IdtwV/l4Bq2IJNvA/O5MG2BzUja5TdBdR8xVd2P 9yOrgSxtiWXhQhdkS/08bUjn+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkGrfHu IGk6WWZKVRw3XR53k9bTMB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZxePlPpkMRV51QZC8iaHVWAqZeh6WHAEl5nrS92gdKVmc2z4RmOZhyTSTSK nZZlTeB9g4dfipRdJnbMUXvirr1plVT5puNZK8uGmq3fp9vWnJl1/Xq55gkNksrh fksS4rYrrZkdr+b93FIeUCYXkBI5CHnB4U4J8P7KRV3fP2iRmZQak3J9KoZucppr /Dsweao8dMPwNrgs1IuBDziE1vmhDENS8A/e0DREs21c+j7ioWzAbp0Jla5OdDEV bufj3wztxID0YRd8964EWNcyYwqxlXV4kifcjWKDS2bzbP2IxAaustrjphJpzbsR cqhFk/ffQSU/Znn4pjMCqzD5bA== -----END CERTIFICATE-----Generated at Tue Sep 22 10:50:01 2026 by rpki-client