$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json) Hash identifier: Kzt9zuifKGNCRaXX0XN/nhAfAgI+HYuxy+KBC8dqCqQ= Subject key identifier: 0E:62:52:B1:C3:51:D8:B7:72:B4:1B:F3:BE:AC:6D:53:12:CA:CA:0C Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft Manifest number: 02A4 Signing time: Sun 27 Sep 2026 02:06:58 +0000 Manifest this update: Sun 27 Sep 2026 02:06:57 +0000 Manifest next update: Sun 04 Oct 2026 02:06:57 +0000 Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: 80MatTzmn0C/PKzoO9VO7WQMip5kfA7JMrJx7/k0o4s=) 2: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: WJy0DDE3R4DJLfi+G/eV3lsb3PxP1zjDf/s8mlf+RmM=) 3: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: BDN3eWU1QOvpwhp4B8qHZfh25EaapwZh0B/UqPtIRS4=) 4: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: +FOKSn3UMqNBdCkwTnN5e6gZKaXTHMKWX9i32crYuLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Sep 27 02:06:57 2026 GMT Not After : Oct 4 02:06:57 2026 GMT Subject: CN=6ab87a42-bf37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a8:0a:9d:13:19:d8:d4:c1:f0:d4:88:94:de: 17:7d:f7:01:e5:79:96:d0:26:f6:e1:3c:d2:ab:b9: 55:6b:45:8c:15:03:01:00:41:ba:2e:85:e8:bf:fd: 33:9b:c2:96:9b:45:af:63:1e:29:a2:a0:97:69:4c: 40:b1:a6:8c:4d:1f:0a:e7:68:a2:42:e6:3a:19:9f: 62:30:0e:b0:05:a5:de:86:36:68:d9:01:25:4d:bc: e6:20:a9:63:15:6b:4e:06:da:bc:63:86:63:f4:c4: 59:65:3f:ef:23:ed:b6:dc:19:ef:5a:43:16:a0:93: cb:cb:ad:27:c2:3d:6c:40:a8:fb:7a:30:f6:35:10: 82:5e:6e:f0:ff:4b:7b:fa:2f:3f:77:2b:f5:5c:d8: 82:10:db:34:9e:55:14:0a:63:f8:76:d2:57:9a:69: 1b:68:20:6b:d9:1e:6e:74:ff:3e:30:ea:29:b8:cf: 0d:89:e4:75:46:20:8b:01:65:be:10:34:f4:11:e6: b1:34:fc:11:a4:d1:d0:5c:5f:cb:62:e4:a6:a1:8b: c9:85:ee:e9:36:f1:d0:a4:b5:68:cc:26:46:2b:d3: d9:86:23:29:53:31:48:46:0b:47:13:e1:12:70:f4: 45:d6:74:01:1f:fa:77:f0:5b:95:7c:dd:b0:ca:99: b4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:62:52:B1:C3:51:D8:B7:72:B4:1B:F3:BE:AC:6D:53:12:CA:CA:0C X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:56:a2:e3:43:ec:44:39:cd:dc:28:a0:89:15:4b:3f:4c:41: 68:03:38:90:0d:06:64:58:98:5e:bd:db:64:2a:f6:c1:00:85: 20:10:42:c8:0d:b8:bd:74:b6:d5:ec:2e:a8:59:4c:34:9e:19: 47:7a:47:08:9e:3c:0b:33:18:5a:7a:a4:8d:ba:fc:9c:bf:59: dc:9a:8b:3d:7b:7b:1e:d9:75:34:df:67:5b:ca:2c:21:e8:6e: 82:f1:a4:3a:40:20:ff:49:7e:2e:1a:7f:38:65:cc:bb:2e:f0: 68:b4:d1:57:ee:9f:48:bb:1a:b3:b1:de:18:43:b9:60:0d:8f: 86:5d:cb:0b:b1:f8:97:6a:7b:34:8b:86:7a:b1:a2:9d:af:71: 30:71:19:f8:95:8b:75:35:09:32:d5:20:3b:ce:21:5b:7b:b0: 51:12:71:3a:0e:e4:ef:4e:2c:7b:75:48:2e:65:04:f7:a1:a9: 6f:e1:14:b3:2f:cb:a1:29:ce:b4:e9:b3:35:37:2f:95:fa:31: 84:73:49:06:4a:c7:22:a2:d2:ca:4e:7f:d3:7d:96:ec:83:57: e0:11:36:82:19:73:70:50:9b:05:f2:68:63:62:4b:1f:59:2c: c0:17:33:f7:3b:b1:9d:21:04:47:f9:ce:ff:71:62:ff:4e:10: e8:3b:20:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjYwOTI3MDIwNjU3WhcNMjYxMDA0MDIwNjU3WjAYMRYwFAYD VQQDEw02YWI4N2E0Mi1iZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KgKnRMZ2NTB8NSIlN4XffcB5XmW0Cb24TzSq7lVa0WMFQMBAEG6LoXov/0z m8KWm0WvYx4poqCXaUxAsaaMTR8K52iiQuY6GZ9iMA6wBaXehjZo2QElTbzmIKlj FWtOBtq8Y4Zj9MRZZT/vI+223BnvWkMWoJPLy60nwj1sQKj7ejD2NRCCXm7w/0t7 +i8/dyv1XNiCENs0nlUUCmP4dtJXmmkbaCBr2R5udP8+MOopuM8NieR1RiCLAWW+ EDT0EeaxNPwRpNHQXF/LYuSmoYvJhe7pNvHQpLVozCZGK9PZhiMpUzFIRgtHE+ES cPRF1nQBH/p38FuVfN2wypm0/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5iUrHD Udi3crQb876sbVMSysoMMB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdV Q0xVY3VmMk85S1pRcklacG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsFai40PsRDnN3CigiRVLP0xBaAM4kA0GZFiYXr3bZCr2wQCFIBBCyA24vXS2 1ewuqFlMNJ4ZR3pHCJ48CzMYWnqkjbr8nL9Z3JqLPXt7Htl1NN9nW8osIehugvGk OkAg/0l+Lhp/OGXMuy7waLTRV+6fSLsas7HeGEO5YA2Phl3LC7H4l2p7NIuGerGi na9xMHEZ+JWLdTUJMtUgO84hW3uwURJxOg7k704se3VILmUE96Gpb+EUsy/LoSnO tOmzNTcvlfoxhHNJBkrHIqLSyk5/032W7INX4BE2ghlzcFCbBfJoY2JLH1kswBcz 9zuxnSEER/nO/3Fi/04Q6Dsgyg== -----END CERTIFICATE-----Generated at Mon Sep 28 21:18:50 2026 by rpki-client