$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: 6Yq5Tyi5OpAx9Yov1yT9KaYu2TfH9pORV87RtspZQmQ= Subject key identifier: 43:AC:14:E3:08:78:0C:72:D0:5A:FF:DD:E4:FC:42:1D:39:4B:2A:8B Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 02D3 Signing time: Thu 08 Oct 2026 16:29:59 +0000 Manifest this update: Thu 08 Oct 2026 16:29:59 +0000 Manifest next update: Thu 15 Oct 2026 16:29:59 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: egXfKjaKZDVNsXHhaU+SduE43er6lFQcdMSrHRHIKXs=) 2: D999BCE486E911F189970DEF85A30FBC.roa (hash: 1CNcRa3hQt3B08IkUn/cz/oCR6UPYROjRTLuHhCzdMs=) 3: E4C7F5CC861C11F1A1A4787881A30FBC.roa (hash: /WmCxmDfqAjbLjhFMgkxnhquJ6Sz516O3n2Ciyjr6d4=) 4: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: Qr2ySKjGmRYAdpzwktH+MBDjQbf6TMSp972hu+BA2yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Oct 8 16:29:59 2026 GMT Not After : Oct 15 16:29:59 2026 GMT Subject: CN=6ac7c507-7f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:71:6b:ce:c0:f6:5c:f2:da:da:e0:d3:5c: 8b:2f:6d:7e:13:1d:e0:5a:b4:6f:81:69:cf:c1:76: fc:3a:ea:2a:ba:f7:a5:a9:89:b4:a6:0a:41:1b:63: 14:21:f8:fc:0a:49:ae:11:13:b8:e4:e9:d1:76:93: 87:07:f7:db:a8:64:08:fd:d1:47:e6:49:0f:77:36: cb:17:99:79:7a:2f:b0:01:bc:1e:66:29:08:4e:0a: f3:c7:d0:3b:6d:5d:a8:e4:83:71:44:fe:a1:6f:5b: e8:20:6b:52:db:98:3d:c5:a0:36:7f:8f:ba:ca:05: bd:4f:e5:d9:74:db:ea:b0:d6:26:c8:d9:e9:e2:c7: 52:0e:58:bc:87:85:78:8c:e7:dc:d4:40:8b:25:a3: b9:cc:b9:28:78:f3:53:09:11:d9:e7:31:bf:a6:6a: 3e:88:3e:4a:7e:db:25:5c:ed:2c:83:1c:7f:b6:2e: f6:94:4d:5e:98:54:e7:a0:57:ed:4b:b8:4b:46:98: 2a:1a:4f:55:47:71:e3:36:b6:b9:b0:fd:23:cd:1c: 7d:5f:d4:5f:a1:a7:0d:4f:54:a8:2c:1b:7f:fb:07: d0:39:8c:c6:68:09:d0:7e:c0:59:ad:ed:fe:b8:88: 28:e3:0d:5b:30:7e:51:07:fc:a8:88:a6:9e:68:75: 79:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AC:14:E3:08:78:0C:72:D0:5A:FF:DD:E4:FC:42:1D:39:4B:2A:8B X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c7:92:01:8a:d3:82:03:33:4f:f5:45:a3:21:01:36:c5:49: 17:74:27:53:03:f9:9d:e8:e1:ac:a0:fd:ab:f4:89:1d:4b:a2: 53:c0:4f:67:7c:c6:44:85:b7:22:2d:af:4e:2a:97:28:4d:0e: 7a:3a:ec:ae:7e:33:79:af:9c:73:b8:2f:73:82:31:b8:08:22: 7a:39:a1:70:dc:ff:7b:7b:74:85:0d:34:4d:3d:f8:5e:43:8a: 81:19:a2:54:6d:d3:19:14:b5:44:32:9c:01:03:2f:4a:7e:65: 3d:92:ef:a6:17:09:6f:bb:75:37:b4:66:6d:9d:e3:1a:fd:7e: 5a:07:ee:0c:99:6e:75:e4:f4:09:03:c4:a5:1f:4a:6b:f3:8f: 1e:c3:c9:17:68:03:ab:49:56:83:7f:ab:a0:43:b6:c4:ef:8f: 89:de:68:e5:e1:99:30:43:b6:65:dd:44:4f:81:7c:08:91:12: 3b:7a:92:66:f4:f4:2f:d4:42:51:af:0a:6e:5d:27:e3:6b:ad: 7c:b1:1e:c0:b9:a8:3e:7d:a3:68:fa:26:49:50:fa:f1:f3:ee: 2e:c6:ee:ee:51:52:4f:0c:ca:6e:46:5f:e8:47:3f:29:3d:f3: 7b:13:b5:de:f1:10:fe:c9:0f:bc:29:55:a8:4d:0a:31:59:37: c8:50:f2:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjYxMDA4MTYyOTU5WhcNMjYxMDE1MTYyOTU5WjAYMRYwFAYD VQQDEw02YWM3YzUwNy03ZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ9xa87A9lzy2trg01yLL21+Ex3gWrRvgWnPwXb8OuoquvelqYm0pgpBG2MU Ifj8CkmuERO45OnRdpOHB/fbqGQI/dFH5kkPdzbLF5l5ei+wAbweZikITgrzx9A7 bV2o5INxRP6hb1voIGtS25g9xaA2f4+6ygW9T+XZdNvqsNYmyNnp4sdSDli8h4V4 jOfc1ECLJaO5zLkoePNTCRHZ5zG/pmo+iD5KftslXO0sgxx/ti72lE1emFTnoFft S7hLRpgqGk9VR3HjNra5sP0jzRx9X9RfoacNT1SoLBt/+wfQOYzGaAnQfsBZre3+ uIgo4w1bMH5RB/yoiKaeaHV5fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOsFOMI eAxy0Fr/3eT8Qh05SyqLMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC8eSAYrTggMzT/VFoyEBNsVJF3QnUwP5nejhrKD9q/SJHUuiU8BPZ3zGRIW3 Ii2vTiqXKE0Oejrsrn4zea+cc7gvc4IxuAgiejmhcNz/e3t0hQ00TT34XkOKgRmi VG3TGRS1RDKcAQMvSn5lPZLvphcJb7t1N7RmbZ3jGv1+WgfuDJludeT0CQPEpR9K a/OPHsPJF2gDq0lWg3+roEO2xO+Pid5o5eGZMEO2Zd1ET4F8CJESO3qSZvT0L9RC Ua8Kbl0n42utfLEewLmoPn2jaPomSVD68fPuLsbu7lFSTwzKbkZf6Ec/KT3zexO1 3vEQ/skPvClVqE0KMVk3yFDyRA== -----END CERTIFICATE-----Generated at Sat Oct 10 16:47:15 2026 by rpki-client