$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft File: TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json) Hash identifier: haMWbT8QtuxyqvuW6s6J6pV67/1eThsQNunISQBkPOA= Subject key identifier: 7E:38:4B:41:7A:EA:5A:BB:B0:67:26:B6:55:48:84:51:A8:78:60:72 Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 Certificate issuer: /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft Manifest number: 0152 Signing time: Mon 21 Sep 2026 05:15:44 +0000 Manifest this update: Mon 21 Sep 2026 05:15:43 +0000 Manifest next update: Mon 28 Sep 2026 05:15:43 +0000 Files and hashes: 1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: dWtXalnnCOpiXq9zYZk+0ExjjOMm4fgSysQXSquQrcM=) 2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Validity Not Before: Sep 21 05:15:43 2026 GMT Not After : Sep 28 05:15:43 2026 GMT Subject: CN=6ab0bd80-226c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:2d:1b:18:5a:b9:75:94:20:7e:c7:0c:fd: c9:ee:da:f8:2b:4b:b7:b7:b9:70:1d:0d:f5:a6:6d: 17:39:14:77:ac:0d:8b:14:e4:30:7d:c0:f6:cc:9a: 7d:38:2a:2d:08:7f:5d:c0:2c:73:91:7e:9a:cc:d2: 15:61:a1:80:fd:d9:48:46:52:0c:3b:1b:90:08:18: 84:a8:8a:0c:ff:22:bc:c0:2d:00:8e:a4:ea:a6:8c: 21:dc:ec:e8:23:d5:d9:fb:5d:b7:9d:65:9c:8b:6d: 1a:d3:0a:a7:69:7b:6a:13:7e:7d:a9:a8:f1:f8:89: dd:2f:67:6e:a6:82:ee:58:79:9b:0f:e0:a3:e7:15: e2:3e:e3:d3:d9:20:c4:9c:c0:3e:0e:3c:bd:97:15: e9:99:02:5b:50:0f:72:e2:ae:2c:e2:c1:25:e5:43: 0c:75:2d:06:fb:bf:f6:94:5e:d7:41:4c:92:43:8c: f4:d2:89:8e:d7:07:7f:a8:f4:32:86:4d:48:d1:ac: e2:6a:2b:5e:39:60:4c:de:15:33:3f:a7:d2:a5:b4: b9:cf:4a:a0:86:fa:f9:d3:4d:dc:c0:74:ee:30:23: 87:49:65:ab:0c:65:1f:d7:2e:88:8f:c8:a0:12:96: 6b:5d:86:61:be:54:02:ad:56:50:66:27:81:4e:ef: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:38:4B:41:7A:EA:5A:BB:B0:67:26:B6:55:48:84:51:A8:78:60:72 X509v3 Authority Key Identifier: keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e1:4e:eb:42:5b:80:78:a4:42:a9:a9:ad:f5:ce:73:9f:d9: 8f:a9:a5:72:32:2c:cf:76:83:02:aa:c2:49:30:be:de:38:b2: 6d:5f:7f:c0:99:56:e2:91:98:9e:c2:b9:0e:e5:69:ef:32:76: 16:a7:4b:89:ba:d0:15:24:19:ec:90:0a:5d:0c:25:b6:10:ee: 94:86:76:80:56:72:66:48:71:e9:84:b4:3b:99:1b:c9:d2:2b: 77:e9:5d:e3:ce:7a:a0:39:e7:f6:fb:70:cd:95:44:58:05:c2: 0d:b8:ac:12:b8:02:3f:45:43:10:2f:20:f3:48:bb:e0:46:96: 08:76:d5:15:df:47:48:9a:28:ea:c3:0f:e4:75:43:01:f7:7b: 5a:ba:c3:46:e2:68:20:c3:21:bd:a1:4e:ff:99:21:64:4d:73: 64:76:98:db:1d:2e:50:fe:26:30:fe:68:3a:44:4b:19:fc:8b: 76:00:72:c6:b8:1f:20:df:19:7c:47:e3:ca:e5:4b:84:de:21: c6:ef:c8:0c:31:46:5f:64:fb:90:35:df:3d:d4:4e:83:b2:50: 2e:37:6e:dd:0a:38:c8:55:9e:aa:b1:30:eb:66:e6:54:f0:30: 93:9d:eb:61:83:71:c6:b3:5f:fd:b9:73:8a:94:d5:b9:a5:8e: 7f:ea:d4:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyMzMxMTAvBgNVBAUTKDRFNzU5QUIyREUyNDU0NjlGODMxMUI5MjczQjU1NTM4 N0U3NTBBOTAwHhcNMjYwOTIxMDUxNTQzWhcNMjYwOTI4MDUxNTQzWjAYMRYwFAYD VQQDEw02YWIwYmQ4MC0yMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRAtGxhauXWUIH7HDP3J7tr4K0u3t7lwHQ31pm0XORR3rA2LFOQwfcD2zJp9 OCotCH9dwCxzkX6azNIVYaGA/dlIRlIMOxuQCBiEqIoM/yK8wC0AjqTqpowh3Ozo I9XZ+123nWWci20a0wqnaXtqE359qajx+IndL2dupoLuWHmbD+Cj5xXiPuPT2SDE nMA+Djy9lxXpmQJbUA9y4q4s4sEl5UMMdS0G+7/2lF7XQUySQ4z00omO1wd/qPQy hk1I0aziaiteOWBM3hUzP6fSpbS5z0qghvr5003cwHTuMCOHSWWrDGUf1y6Ij8ig EpZrXYZhvlQCrVZQZieBTu+1pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH44S0F6 6lq7sGcmtlVIhFGoeGByMB8GA1UdIwQYMBaAFE51mrLeJFRp+DEbknO1VTh+dQqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjIzMy8wOEYwNTI2MEIz NzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZHbjRNUnVTYzdWVk9INTFD cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuV2FzdDRrVkduNE1SdVNjN1ZWT0g1MUNwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjIzMy8wOEYwNTI2MEIzNzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZH bjRNUnVTYzdWVk9INTFDcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABOFO60JbgHikQqmprfXOc5/Zj6mlcjIsz3aDAqrCSTC+3jiybV9/wJlW4pGY nsK5DuVp7zJ2FqdLibrQFSQZ7JAKXQwlthDulIZ2gFZyZkhx6YS0O5kbydIrd+ld 4856oDnn9vtwzZVEWAXCDbisErgCP0VDEC8g80i74EaWCHbVFd9HSJoo6sMP5HVD Afd7WrrDRuJoIMMhvaFO/5khZE1zZHaY2x0uUP4mMP5oOkRLGfyLdgByxrgfIN8Z fEfjyuVLhN4hxu/IDDFGX2T7kDXfPdROg7JQLjdu3Qo4yFWeqrEw62bmVPAwk53r YYNxxrNf/blzipTVuaWOf+rUAQ== -----END CERTIFICATE-----Generated at Tue Sep 22 17:52:52 2026 by rpki-client