$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft File: tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json) Hash identifier: lCbr+cy+119sS9wqxy2DJW6XqPkLjdw8FI+bQ4nyKO8= Subject key identifier: 9E:4C:54:81:5B:ED:16:26:D1:DD:6F:A5:F7:B4:C6:7E:56:5A:AC:29 Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2 Certificate issuer: /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft Manifest number: BF Signing time: Thu 01 Oct 2026 08:12:29 +0000 Manifest this update: Thu 01 Oct 2026 08:12:29 +0000 Manifest next update: Thu 08 Oct 2026 08:12:29 +0000 Files and hashes: 1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: d/2DQZ+GKL9LoKxXphTaj6YqCbQhNaFCzMDLPr/O04Y=) 2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: Wqlgag3JASt9EH/u+Cc5ukalg78nje36S+xtNjVr+A4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 08:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2 Validity Not Before: Oct 1 08:12:29 2026 GMT Not After : Oct 8 08:12:29 2026 GMT Subject: CN=6abe15ed-952d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:41:12:80:69:1b:59:a3:c1:28:d9:55:ae: a3:d7:25:c6:c6:5c:97:1c:2f:e3:38:86:83:bd:8b: 31:43:9b:32:e5:bd:31:1c:6a:94:67:36:4c:cb:d1: 58:f2:5d:d0:ad:9f:dc:1b:3f:2b:2d:8d:5f:38:f8: 93:65:45:11:9f:1e:e4:13:ec:cf:ae:a6:7a:9f:74: eb:9f:43:30:33:0f:e0:40:72:99:f0:1a:e4:d7:d3: 29:37:be:c8:ab:54:95:fb:00:ba:e2:4c:d9:9f:cd: ea:d5:50:3d:59:f1:9e:39:90:db:c9:64:6b:40:6f: 87:a6:7b:99:b6:29:3f:f2:69:da:62:9a:db:7e:40: 31:41:af:af:e1:f9:1a:ea:6e:b6:62:6a:48:0d:c9: 21:ad:00:3d:8d:04:b3:9e:87:07:d9:8d:c7:ca:31: 4e:1b:f4:98:2f:c1:66:8f:d1:dd:24:28:1c:89:2a: 56:1e:e1:0c:0e:0a:bf:ab:b3:90:da:fd:5c:8c:d9: f4:fa:01:ed:80:39:df:76:18:85:6b:16:fd:fc:ed: bc:69:f7:b7:78:af:59:3f:62:89:59:71:74:e8:bf: d0:fe:91:d1:e4:ea:74:7a:a1:00:35:7f:53:09:e1: d1:5a:ae:2b:93:55:c5:c8:2e:9f:74:71:ff:83:e9: e2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4C:54:81:5B:ED:16:26:D1:DD:6F:A5:F7:B4:C6:7E:56:5A:AC:29 X509v3 Authority Key Identifier: keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:d4:8e:be:f4:3b:d1:f0:73:92:dd:6a:df:63:cc:a7:2f:df: ce:c9:79:f7:c1:7b:92:6a:d8:44:e6:28:c8:8c:ea:6e:71:2f: 6e:ab:da:59:6c:7c:eb:02:65:62:b5:a9:4d:f6:fd:6a:0a:c1: 98:83:cc:0f:01:b3:1c:d1:43:c2:6d:7d:fb:09:90:e5:16:8b: 20:43:7d:3c:e1:f7:36:58:21:7c:8e:c3:35:c6:b8:ab:63:5d: 41:46:02:a2:08:79:f7:de:49:b8:45:a8:60:09:f7:c8:d5:af: 6c:f3:b2:7f:91:1b:5f:71:9d:82:30:d7:72:c3:a2:1f:1c:54: 22:53:3a:ce:41:de:a7:e6:44:3f:69:2d:1e:7d:d1:2e:3a:0c: 54:68:19:9c:58:ef:17:71:9c:a5:92:12:d2:71:57:71:31:9a: 29:36:54:94:22:6c:a9:4c:13:1a:63:e0:d2:10:45:23:d6:45: b3:93:d4:de:22:de:32:3c:92:e7:d9:58:ab:22:d2:08:b8:bf: b9:9f:be:91:bf:ba:a7:2e:b1:21:60:dd:5b:5e:aa:97:21:2f: 84:d6:a0:b6:4a:c7:7d:93:58:6b:1a:51:42:29:a6:6f:be:b3: 53:10:a0:d9:63:b1:a4:91:e3:6a:bb:27:dd:eb:66:ed:49:61: 8d:31:9e:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk5MjgxMTAvBgNVBAUTKEI1QjM1RjkyNEVCNUMzMkZCQjQxODY3RDNBMTY2RTRB OTZCQkVDQTIwHhcNMjYxMDAxMDgxMjI5WhcNMjYxMDA4MDgxMjI5WjAYMRYwFAYD VQQDEw02YWJlMTVlZC05NTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiadBEoBpG1mjwSjZVa6j1yXGxlyXHC/jOIaDvYsxQ5sy5b0xHGqUZzZMy9FY 8l3QrZ/cGz8rLY1fOPiTZUURnx7kE+zPrqZ6n3Trn0MwMw/gQHKZ8Brk19MpN77I q1SV+wC64kzZn83q1VA9WfGeOZDbyWRrQG+HpnuZtik/8mnaYprbfkAxQa+v4fka 6m62YmpIDckhrQA9jQSznocH2Y3HyjFOG/SYL8Fmj9HdJCgciSpWHuEMDgq/q7OQ 2v1cjNn0+gHtgDnfdhiFaxb9/O28afe3eK9ZP2KJWXF06L/Q/pHR5Op0eqEANX9T CeHRWq4rk1XFyC6fdHH/g+ni7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5MVIFb 7RYm0d1vpfe0xn5WWqwpMB8GA1UdIwQYMBaAFLWzX5JOtcMvu0GGfToWbkqWu+yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTkyOC81N0RGQkVCQzk4 NEYxMUYwODU0MDI5NzVDNEY5QUUwMi90Yk5ma2s2MXd5LTdRWVo5T2hadVNwYTc3 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiTmZrazYxd3ktN1FZWjlPaFp1U3BhNzdLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTkyOC81N0RGQkVCQzk4NEYxMUYwODU0MDI5NzVDNEY5QUUwMi90Yk5ma2s2MXd5 LTdRWVo5T2hadVNwYTc3S0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtdSOvvQ70fBzkt1q32PMpy/fzsl598F7kmrYROYoyIzqbnEvbqvaWWx86wJl YrWpTfb9agrBmIPMDwGzHNFDwm19+wmQ5RaLIEN9POH3NlghfI7DNca4q2NdQUYC ogh5995JuEWoYAn3yNWvbPOyf5EbX3GdgjDXcsOiHxxUIlM6zkHep+ZEP2ktHn3R LjoMVGgZnFjvF3GcpZIS0nFXcTGaKTZUlCJsqUwTGmPg0hBFI9ZFs5PU3iLeMjyS 59lYqyLSCLi/uZ++kb+6py6xIWDdW16qlyEvhNagtkrHfZNYaxpRQimmb76zUxCg 2WOxpJHjarsn3etm7UlhjTGetA== -----END CERTIFICATE-----Generated at Sat Oct 3 00:07:02 2026 by rpki-client