$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft File: _thOn-AVmpk3ohk6C326I7bCZbg.mft (raw, json) Hash identifier: gJ3sD0wCQ0mc90oe/TrN0pBHgapszwwwi4ZFPfM+frA= Subject key identifier: F3:2E:77:E0:37:66:70:34:20:05:AC:BD:D2:88:B3:4E:C2:E5:5F:09 Authority key identifier: FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8 Certificate issuer: /CN=A91EDBB0/serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft Manifest number: 011E Signing time: Mon 21 Sep 2026 05:54:20 +0000 Manifest this update: Mon 21 Sep 2026 05:54:19 +0000 Manifest next update: Mon 28 Sep 2026 05:54:19 +0000 Files and hashes: 1: _thOn-AVmpk3ohk6C326I7bCZbg.crl (hash: GZaQLuGNp1ZCbiRILFrmo5mIVl++Y8xbCrlroUU3ZS4=) 2: 18317928083911F0A2909A72C4F9AE02.roa (hash: aWC9Z9bpEAKz9IJhY7xU/+8CcFBubkzB7CX939nqCu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDBB0, serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8 Validity Not Before: Sep 21 05:54:19 2026 GMT Not After : Sep 28 05:54:19 2026 GMT Subject: CN=6ab0c68c-0184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:52:ba:53:a0:b7:78:dd:73:a2:f1:4f:3c: d2:ca:f7:04:c0:54:02:ec:fc:33:5e:dc:54:65:8e: 3c:7a:d7:c8:fd:db:e5:97:09:0f:fc:15:89:58:ca: ed:0e:92:88:c7:b6:6c:be:37:d6:31:93:86:27:f5: 8f:9e:f3:5e:b1:f6:31:98:25:e5:6e:17:26:34:43: 2b:76:d4:d1:ac:06:8f:fa:4d:16:27:a8:d2:0f:1e: a7:34:d7:5f:d7:4e:d7:09:d3:5c:97:5f:9f:f3:00: cb:2a:5f:d9:02:1c:f2:90:3e:67:f1:f4:66:85:1a: 2e:d8:d7:8d:7e:57:c5:0b:23:f8:ea:f7:38:8d:75: 95:4d:1a:a9:cd:1f:a0:73:53:62:54:d1:c3:db:84: 63:79:bb:4c:f8:cb:ed:2a:0b:cf:dd:49:ae:71:38: 99:72:09:f1:d1:e9:5f:cf:30:a0:b5:f7:16:ed:64: a8:f1:6f:a9:0b:98:c8:ba:aa:e1:6b:18:d3:d0:03: 12:66:f2:12:5e:2f:c8:35:fd:21:6e:0a:ca:47:ae: 30:e5:da:00:e9:02:6d:d7:95:06:4a:88:87:1a:7c: 5a:ab:0b:c7:7a:36:6d:b7:9e:cc:3f:b1:cf:fc:ef: c2:73:d0:e2:dc:fe:c3:48:1c:ee:98:9f:75:d2:b3: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2E:77:E0:37:66:70:34:20:05:AC:BD:D2:88:B3:4E:C2:E5:5F:09 X509v3 Authority Key Identifier: keyid:FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ea:8a:f7:97:10:fb:2f:34:0a:63:24:d2:de:3f:cb:76:37: 58:6b:7b:fa:f3:35:ac:72:b0:b0:e1:1a:0d:2c:ec:ad:53:f2: aa:c7:05:cd:90:ad:e3:ac:de:a5:c2:f8:4a:a0:20:18:e2:0c: 3f:e6:36:84:be:28:74:02:2a:27:d0:15:d3:79:d6:9e:a2:c8: e0:d9:a5:24:40:55:65:72:1e:c6:15:08:88:20:42:3e:a7:a6: 71:d2:76:04:56:46:cb:a4:0a:c0:ac:44:14:a7:7b:6a:02:42: 52:e1:20:1c:f5:03:22:fc:5b:7d:32:7c:3d:be:da:ec:c7:3e: ae:7a:d1:1e:e4:30:34:e6:df:3c:d1:93:a4:40:2b:ce:1a:cb: c6:cc:07:c9:5c:39:0d:7a:e8:c6:10:f2:01:44:4c:fe:30:85: 16:67:ab:b0:9d:17:12:93:89:3e:99:c4:93:ee:56:b6:2d:60: 5c:a1:d5:e1:2c:a6:07:08:b3:d5:77:2f:08:95:22:81:3f:e2: 6e:c1:c4:c7:6c:03:d9:21:f6:80:7d:f8:90:5f:6c:9a:3f:c4: 0c:96:c9:b3:47:1a:b6:67:14:e2:fb:ce:71:1b:42:64:7e:1d: 95:01:e2:79:a3:6d:5c:74:6b:e9:05:03:2d:8f:98:73:fe:4c: 9b:fa:a3:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCQjAxMTAvBgNVBAUTKEZFRDg0RTlGRTAxNTlBOTkzN0EyMTkzQTBCN0RCQTIz QjZDMjY1QjgwHhcNMjYwOTIxMDU1NDE5WhcNMjYwOTI4MDU1NDE5WjAYMRYwFAYD VQQDEw02YWIwYzY4Yy0wMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwhSulOgt3jdc6LxTzzSyvcEwFQC7PwzXtxUZY48etfI/dvllwkP/BWJWMrt DpKIx7ZsvjfWMZOGJ/WPnvNesfYxmCXlbhcmNEMrdtTRrAaP+k0WJ6jSDx6nNNdf 107XCdNcl1+f8wDLKl/ZAhzykD5n8fRmhRou2NeNflfFCyP46vc4jXWVTRqpzR+g c1NiVNHD24RjebtM+MvtKgvP3UmucTiZcgnx0elfzzCgtfcW7WSo8W+pC5jIuqrh axjT0AMSZvISXi/INf0hbgrKR64w5doA6QJt15UGSoiHGnxaqwvHejZtt57MP7HP /O/Cc9Di3P7DSBzumJ910rM7XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMud+A3 ZnA0IAWsvdKIs07C5V8JMB8GA1UdIwQYMBaAFP7YTp/gFZqZN6IZOgt9uiO2wmW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREJCMC9FNjUzRTUxMjA3 RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1wazNvaGs2QzMyNkk3YkNa YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL190aE9uLUFWbXBrM29oazZDMzI2STdiQ1piZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REJCMC9FNjUzRTUxMjA3RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1w azNvaGs2QzMyNkk3YkNaYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAguqK95cQ+y80CmMk0t4/y3Y3WGt7+vM1rHKwsOEaDSzsrVPyqscFzZCt46ze pcL4SqAgGOIMP+Y2hL4odAIqJ9AV03nWnqLI4NmlJEBVZXIexhUIiCBCPqemcdJ2 BFZGy6QKwKxEFKd7agJCUuEgHPUDIvxbfTJ8Pb7a7Mc+rnrRHuQwNObfPNGTpEAr zhrLxswHyVw5DXroxhDyAURM/jCFFmersJ0XEpOJPpnEk+5Wti1gXKHV4SymBwiz 1XcvCJUigT/ibsHEx2wD2SH2gH34kF9smj/EDJbJs0catmcU4vvOcRtCZH4dlQHi eaNtXHRr6QUDLY+Yc/5Mm/qjTw== -----END CERTIFICATE-----Generated at Mon Sep 21 19:46:22 2026 by rpki-client