$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: qSmMBzwCPKfvI5PF2MZ/wTZ2rk+uc7821DwoqQWNMyQ= Subject key identifier: 3D:28:F2:27:46:D5:C7:59:0D:65:48:7E:2A:8E:A6:C5:83:6B:73:42 Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 21C1 Signing time: Thu 24 Sep 2026 16:32:20 +0000 Manifest this update: Thu 24 Sep 2026 16:32:19 +0000 Manifest next update: Thu 01 Oct 2026 16:32:19 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: xg3F7tDrTEyupIkdFLm+wIOuf4v+OmV8v+bIQVR+oU4=) 2: 5FBC810E2C6C11F1AFD97E4FB3833773.roa (hash: g2RLVtOivjuUFJpHbhY01dBDwhC9Sd+LiRmcxISqRKU=) 3: EDA7924C4C6A11F18E27EE0BC2833773.roa (hash: 1Bx4zBsmcdQadh2Lc0q70WKfY8U9Q8aKMXPEm63RlMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Sep 24 16:32:19 2026 GMT Not After : Oct 1 16:32:19 2026 GMT Subject: CN=6ab55094-6ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:41:14:65:db:af:e0:55:f9:00:47:c5:e1: 90:91:77:be:6e:9f:e0:00:dd:fb:11:1e:d6:cb:e6: 96:42:76:74:e3:82:04:6f:10:21:f0:e5:f2:86:34: de:fd:a6:1b:03:db:b5:f2:23:54:f9:92:be:05:a0: bf:b4:ce:e1:2c:6e:8f:7e:f4:b7:06:c2:77:c1:85: de:bf:c7:42:77:45:fd:4b:10:f2:d1:6b:cb:7a:ce: ad:2b:60:75:ed:4d:a0:70:80:f3:0e:c7:4e:5c:c0: c8:6d:5a:f4:bf:b1:e4:86:5c:eb:4f:22:64:9f:67: cc:a9:1b:ee:90:c5:7b:8e:aa:92:58:79:93:de:29: 4d:95:ec:8e:de:74:b3:c1:7d:82:99:89:92:82:0a: dd:5f:04:53:ab:0f:ad:ab:78:64:f9:96:9f:34:17: d8:23:79:f8:d1:8f:b3:3c:01:7d:c0:0f:4e:88:43: fa:39:55:c2:dc:cf:bb:2f:43:1d:14:4a:2b:aa:39: c2:f0:5e:ec:e3:a7:06:2b:05:cd:bb:36:e4:48:11: 61:ed:bb:36:a2:5d:e1:57:93:58:e4:82:af:f1:7d: 0e:a4:9d:c4:9d:ba:45:66:c9:6a:28:f5:a8:45:c7: 76:9e:2a:c3:66:65:32:a2:f6:ac:72:44:54:ea:b3: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:28:F2:27:46:D5:C7:59:0D:65:48:7E:2A:8E:A6:C5:83:6B:73:42 X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7c:5b:90:4e:cc:e7:b0:cc:dd:53:6c:1b:bb:2e:d6:2c:a3: 84:3c:df:82:46:0f:f5:7a:15:53:9d:c1:ad:59:0a:1b:61:21: 09:08:68:8a:96:dc:02:7d:7f:10:e7:31:23:d5:fc:d2:41:47: 1a:60:89:48:77:2c:01:86:ab:2b:5b:9a:b9:0f:87:72:61:c4: be:20:03:77:88:ab:c1:b4:d4:cb:3c:9e:ae:73:a0:68:4d:c5: 24:99:66:6d:3c:d7:2c:6a:aa:1c:f3:37:1c:fa:36:6a:2d:f6: 45:8d:82:2d:e8:f0:03:fd:93:54:7e:9e:2b:b6:7d:35:dd:fd: 7d:f8:6d:5a:39:68:b5:43:6e:ff:f0:ff:ac:ac:9d:6f:f6:8d: 6c:74:fd:69:46:f2:8a:9a:86:3c:99:1a:30:71:67:a7:45:b8: 8f:4e:5e:2b:8d:47:ec:a6:3a:f1:a6:0e:e4:6d:5b:80:01:aa: 03:59:dc:20:1d:b3:1b:11:92:cd:3e:43:ee:f3:0f:7f:5c:f3: a9:ba:19:12:8c:29:5a:fa:ba:92:85:5c:42:9b:81:a0:09:4a: f3:14:df:24:4f:c5:04:6c:df:d1:fd:a4:e0:6b:53:31:79:91: 6f:64:fe:55:82:2d:dd:56:56:e2:3d:1b:d8:ef:9b:3c:b3:11: 09:c7:27:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjYwOTI0MTYzMjE5WhcNMjYxMDAxMTYzMjE5WjAYMRYwFAYD VQQDEw02YWI1NTA5NC02YWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXNBFGXbr+BV+QBHxeGQkXe+bp/gAN37ER7Wy+aWQnZ044IEbxAh8OXyhjTe /aYbA9u18iNU+ZK+BaC/tM7hLG6PfvS3BsJ3wYXev8dCd0X9SxDy0WvLes6tK2B1 7U2gcIDzDsdOXMDIbVr0v7HkhlzrTyJkn2fMqRvukMV7jqqSWHmT3ilNleyO3nSz wX2CmYmSggrdXwRTqw+tq3hk+ZafNBfYI3n40Y+zPAF9wA9OiEP6OVXC3M+7L0Md FEorqjnC8F7s46cGKwXNuzbkSBFh7bs2ol3hV5NY5IKv8X0OpJ3EnbpFZslqKPWo Rcd2nirDZmUyovasckRU6rPGjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0o8idG 1cdZDWVIfiqOpsWDa3NCMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQXxbkE7M57DM3VNsG7su1iyjhDzfgkYP9XoVU53BrVkKG2EhCQhoipbcAn1/ EOcxI9X80kFHGmCJSHcsAYarK1uauQ+HcmHEviADd4irwbTUyzyernOgaE3FJJlm bTzXLGqqHPM3HPo2ai32RY2CLejwA/2TVH6eK7Z9Nd39ffhtWjlotUNu//D/rKyd b/aNbHT9aUbyipqGPJkaMHFnp0W4j05eK41H7KY68aYO5G1bgAGqA1ncIB2zGxGS zT5D7vMPf1zzqboZEowpWvq6koVcQpuBoAlK8xTfJE/FBGzf0f2k4GtTMXmRb2T+ VYIt3VZW4j0b2O+bPLMRCccnQQ== -----END CERTIFICATE-----Generated at Sat Sep 26 09:55:56 2026 by rpki-client