$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: Tt7Rhh3x5BdEdJP3GL2Sm8cUf4dDWzj5rUo+ePyL//U= Subject key identifier: B7:68:87:1D:68:FF:AD:55:E2:B7:6B:20:36:61:0B:1C:50:B7:F9:B1 Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 0A19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 21BD Signing time: Sun 20 Sep 2026 16:31:53 +0000 Manifest this update: Sun 20 Sep 2026 16:31:52 +0000 Manifest next update: Sun 27 Sep 2026 16:31:52 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: UzMOGEibhGRZmsm+4AmDTnTzpMx6ctFDyNQJLUhH4QQ=) 2: 5FBC810E2C6C11F1AFD97E4FB3833773.roa (hash: g2RLVtOivjuUFJpHbhY01dBDwhC9Sd+LiRmcxISqRKU=) 3: EDA7924C4C6A11F18E27EE0BC2833773.roa (hash: 1Bx4zBsmcdQadh2Lc0q70WKfY8U9Q8aKMXPEm63RlMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2585 (0xa19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Sep 20 16:31:52 2026 GMT Not After : Sep 27 16:31:52 2026 GMT Subject: CN=6ab00a79-cfad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:dc:9a:ba:ba:53:ef:53:69:b2:2f:0f:00: 2d:9d:f9:6a:ce:4b:19:e3:7c:f1:5f:69:14:e8:84: bc:32:43:45:52:15:e7:28:98:f0:28:5b:b7:4c:05: 9e:a7:02:8d:a8:27:b8:3c:7b:aa:2c:ee:02:4e:5a: a7:9b:e0:96:d8:c2:e1:b4:1a:2d:1a:32:4c:de:22: 36:7d:9c:85:25:f8:bf:8d:dc:5f:e5:fd:aa:c0:b2: e4:b1:33:70:c3:3e:a8:95:08:26:5d:5d:78:d1:a7: 15:de:5e:ec:13:20:13:70:db:d6:8d:ad:9a:47:a7: 53:1e:d9:bb:80:d7:cc:7b:4a:4e:9c:c2:75:9a:a7: 05:51:da:08:21:70:bf:eb:47:33:c3:39:6b:5d:96: bb:f4:21:ff:a9:ab:69:38:a5:bb:00:56:a3:55:02: 59:69:b1:b7:2d:ad:13:7d:d3:c0:ad:72:fc:1f:37: 3d:b4:ca:7e:09:0b:e2:2f:89:3f:fc:06:e1:bf:fc: ea:4d:53:69:1a:f4:59:cc:de:f6:63:00:b3:e4:89: 57:51:1b:53:f4:5b:2e:d6:ba:73:36:cb:15:c2:11: fa:c3:1f:69:d2:a6:89:11:7d:21:e8:97:49:ae:b5: c3:fe:63:62:d1:30:e9:ca:bd:3f:9d:3b:17:eb:5e: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:68:87:1D:68:FF:AD:55:E2:B7:6B:20:36:61:0B:1C:50:B7:F9:B1 X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:db:d5:0a:32:e6:31:e9:81:67:dc:52:55:c0:ca:ad:3c:b8: 38:68:c3:4a:73:6c:be:85:28:4e:21:b0:ff:36:b0:1d:55:ef: d4:51:0f:0f:41:9c:84:42:38:2f:31:e7:87:a9:32:71:f1:91: db:05:13:28:49:ed:84:06:a4:12:f8:17:83:2c:9b:95:ad:b3: dc:9c:dc:2f:57:95:80:d2:8d:90:12:90:81:e5:8c:31:18:eb: 9b:20:03:a6:e2:d3:33:d8:c6:e5:3b:53:74:eb:00:38:6b:c5: 57:09:81:66:01:87:72:9b:61:63:7e:6b:89:e6:70:c1:f8:a4: d1:e5:8a:b5:70:a6:10:fa:f0:44:59:71:0a:c1:ea:2c:57:ab: 54:dd:7c:ee:10:c3:81:83:c5:84:7b:74:25:58:b2:82:a0:ec: 18:be:1a:46:c1:83:b8:24:0e:30:f3:69:a1:d9:2c:dd:a0:d7: e5:a2:d5:c9:10:d3:bc:bb:f6:d4:fb:eb:c4:40:ea:c0:c8:4c: bf:55:11:9d:2f:2a:6a:3d:8d:ae:ca:a1:cf:db:63:63:16:d6: fd:58:36:69:b4:96:b8:66:8d:8b:06:82:f9:07:d9:50:31:29: 08:19:b4:a3:6f:bc:10:d5:11:22:1b:13:89:dd:75:bd:94:06: af:71:65:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjYwOTIwMTYzMTUyWhcNMjYwOTI3MTYzMTUyWjAYMRYwFAYD VQQDEw02YWIwMGE3OS1jZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLDcmrq6U+9TabIvDwAtnflqzksZ43zxX2kU6IS8MkNFUhXnKJjwKFu3TAWe pwKNqCe4PHuqLO4CTlqnm+CW2MLhtBotGjJM3iI2fZyFJfi/jdxf5f2qwLLksTNw wz6olQgmXV140acV3l7sEyATcNvWja2aR6dTHtm7gNfMe0pOnMJ1mqcFUdoIIXC/ 60czwzlrXZa79CH/qatpOKW7AFajVQJZabG3La0TfdPArXL8Hzc9tMp+CQviL4k/ /Abhv/zqTVNpGvRZzN72YwCz5IlXURtT9Fsu1rpzNssVwhH6wx9p0qaJEX0h6JdJ rrXD/mNi0TDpyr0/nTsX614O5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdohx1o /61V4rdrIDZhCxxQt/mxMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXdvVCjLmMemBZ9xSVcDKrTy4OGjDSnNsvoUoTiGw/zawHVXv1FEPD0GchEI4 LzHnh6kycfGR2wUTKEnthAakEvgXgyybla2z3JzcL1eVgNKNkBKQgeWMMRjrmyAD puLTM9jG5TtTdOsAOGvFVwmBZgGHcpthY35rieZwwfik0eWKtXCmEPrwRFlxCsHq LFerVN187hDDgYPFhHt0JViygqDsGL4aRsGDuCQOMPNpodks3aDX5aLVyRDTvLv2 1PvrxEDqwMhMv1URnS8qaj2Nrsqhz9tjYxbW/Vg2abSWuGaNiwaC+QfZUDEpCBm0 o2+8ENURIhsTid11vZQGr3Fl/A== -----END CERTIFICATE-----Generated at Mon Sep 21 18:09:43 2026 by rpki-client