$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: kx1lOfav79Fvziqxp1+R0seqamdpTuMkNjS1wEb3VTA= Subject key identifier: BA:B3:71:B1:48:D7:9E:69:80:E8:A5:94:74:3C:40:70:E9:3D:89:9D Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 042D Signing time: Mon 21 Sep 2026 00:05:05 +0000 Manifest this update: Mon 21 Sep 2026 00:05:05 +0000 Manifest next update: Mon 28 Sep 2026 00:05:05 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: icwgSZBmr7H89dYO04sivqFCSH+0oFA1UooZS9BnrO0=) 2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=) 3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=) 4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Sep 21 00:05:05 2026 GMT Not After : Sep 28 00:05:05 2026 GMT Subject: CN=6ab074b1-d955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cd:ef:42:d2:53:2a:4d:26:c6:dd:ea:3b:a9: 92:a9:ee:f1:82:3d:21:65:f6:df:f1:97:67:83:20: 89:27:e4:a4:65:01:39:a5:b8:e0:4e:fb:af:c4:f7: f4:9e:3b:71:85:49:ac:d2:da:bf:13:1a:4b:4f:0d: 3e:e9:93:34:e0:e1:00:b2:e7:08:9d:32:e0:29:ed: 4c:df:05:8e:37:3a:1d:40:a9:5a:3a:97:42:86:cf: eb:16:23:25:32:ed:4e:b6:1d:8e:85:34:b4:5e:b1: 66:f3:df:b0:d7:eb:b1:85:72:ac:68:1b:66:43:c2: be:21:b3:36:8e:05:45:6e:9e:ce:c2:b2:0d:f1:ad: 08:22:5d:45:29:e3:f6:ec:5f:c9:51:04:72:49:17: 83:e0:44:33:a4:34:78:49:b4:74:a3:7c:7b:54:ed: c7:a8:6f:33:bb:06:12:82:40:2b:41:a4:5a:05:44: 58:27:80:bb:8d:fe:57:75:43:42:cf:53:31:76:90: cc:22:ca:15:4e:23:25:00:20:05:10:1f:77:85:be: a6:fb:a1:1a:e9:80:4f:11:b6:0e:ef:c6:f7:48:b0: 59:3f:5b:bf:bf:30:d7:3d:fa:38:0d:43:71:e1:68: 9d:20:a3:ed:c1:31:31:5a:ef:dd:2f:cd:94:43:19: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B3:71:B1:48:D7:9E:69:80:E8:A5:94:74:3C:40:70:E9:3D:89:9D X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:84:56:6b:04:20:7b:00:41:51:7d:6e:dc:14:48:33:46:b9: f9:d9:b1:9f:9c:03:cf:5e:b9:91:c1:42:06:24:46:7a:40:34: c1:be:15:5d:ff:99:d2:bc:2d:a2:07:d6:a9:ce:a6:b1:11:d8: aa:85:13:d2:4c:e4:0f:c6:11:61:e1:e9:d5:43:09:84:3f:0b: 88:25:f3:23:3b:ce:f8:d3:d5:32:d1:ce:8b:10:4b:a3:d4:dc: 21:ca:fa:00:16:f3:84:1a:bc:85:74:c3:c4:a0:41:2c:c7:5a: 4c:3e:af:96:c8:19:68:95:3c:26:10:e6:15:21:66:66:a3:ba: 67:bc:4e:46:f0:20:1f:c2:f9:57:3d:5b:43:ba:9c:4c:34:73: ab:85:e0:9c:1e:8b:81:64:4d:47:4d:1d:86:30:05:65:7a:fa: 90:50:2c:01:99:3f:9a:cd:f1:49:a6:41:d5:4a:aa:12:a1:ba: e6:86:a3:c3:ad:50:48:07:3a:d5:12:95:4f:9d:38:b3:28:37: 19:4e:1f:1e:b3:bb:79:2c:6e:25:3b:6a:dc:fa:51:57:d8:9b: 6e:24:8d:bd:8f:d1:3c:52:7a:ab:ce:a2:ab:5c:83:f8:09:cd: 64:8f:3f:23:67:2c:10:bc:54:e4:60:8c:27:a5:d7:80:b0:c3: e3:ae:64:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYwOTIxMDAwNTA1WhcNMjYwOTI4MDAwNTA1WjAYMRYwFAYD VQQDEw02YWIwNzRiMS1kOTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA883vQtJTKk0mxt3qO6mSqe7xgj0hZfbf8ZdngyCJJ+SkZQE5pbjgTvuvxPf0 njtxhUms0tq/ExpLTw0+6ZM04OEAsucInTLgKe1M3wWONzodQKlaOpdChs/rFiMl Mu1Oth2OhTS0XrFm89+w1+uxhXKsaBtmQ8K+IbM2jgVFbp7OwrIN8a0IIl1FKeP2 7F/JUQRySReD4EQzpDR4SbR0o3x7VO3HqG8zuwYSgkArQaRaBURYJ4C7jf5XdUNC z1MxdpDMIsoVTiMlACAFEB93hb6m+6Ea6YBPEbYO78b3SLBZP1u/vzDXPfo4DUNx 4WidIKPtwTExWu/dL82UQxmuIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqzcbFI 155pgOillHQ8QHDpPYmdMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARIRWawQgewBBUX1u3BRIM0a5+dmxn5wDz165kcFCBiRGekA0wb4VXf+Z0rwt ogfWqc6msRHYqoUT0kzkD8YRYeHp1UMJhD8LiCXzIzvO+NPVMtHOixBLo9TcIcr6 ABbzhBq8hXTDxKBBLMdaTD6vlsgZaJU8JhDmFSFmZqO6Z7xORvAgH8L5Vz1bQ7qc TDRzq4XgnB6LgWRNR00dhjAFZXr6kFAsAZk/ms3xSaZB1UqqEqG65oajw61QSAc6 1RKVT504syg3GU4fHrO7eSxuJTtq3PpRV9ibbiSNvY/RPFJ6q86iq1yD+AnNZI8/ I2csELxU5GCMJ6XXgLDD465k5g== -----END CERTIFICATE-----Generated at Mon Sep 21 09:16:34 2026 by rpki-client