$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: mWauRdsg3c/HgKfEt5DNrrcfa/n+IslFsGM4chs/niU= Subject key identifier: 16:8A:15:F4:B5:95:7E:82:AE:9F:DC:F2:F6:8F:CE:97:F6:60:F7:B9 Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 0238 Signing time: Mon 21 Sep 2026 02:35:28 +0000 Manifest this update: Mon 21 Sep 2026 02:35:27 +0000 Manifest next update: Mon 28 Sep 2026 02:35:27 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: ZvK1DfQMpf1vkGttlMOuXaiw3y2xUHpbiUqQ0CWRoYs=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: dLUeKe6QaZ4GPKIE3nlD7SGlABym7P6qS+9RNwN3OQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Sep 21 02:35:27 2026 GMT Not After : Sep 28 02:35:27 2026 GMT Subject: CN=6ab097ef-95fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:66:c1:11:ce:66:06:2c:0c:97:45:fd:3b: 82:2e:cb:9a:1c:95:90:9f:59:d9:51:95:46:78:f5: 84:0f:fa:40:f4:1d:3d:55:38:53:a5:87:71:22:2a: f9:70:f6:f4:77:2f:7f:36:ea:16:56:0c:22:70:bb: 6b:0c:0b:5b:3c:33:0b:3f:7e:7a:28:88:a7:5e:6f: 6b:6a:1a:da:d5:87:2c:e8:4b:c6:2a:3a:68:9e:c4: 3e:e7:10:f7:77:b4:54:1f:3d:84:7e:f6:d2:89:e7: 70:c6:00:41:6e:ec:65:6b:75:6c:da:a0:ef:99:2f: 9a:54:e7:48:2d:1b:bd:65:8e:51:aa:a3:dc:16:65: 3e:3b:f7:80:7e:09:a4:de:ab:37:4c:34:50:c3:6e: 1f:50:2f:24:8c:4f:7d:37:fd:d1:89:bf:41:2c:f8: 4d:d5:2c:84:81:9a:df:27:aa:5f:ca:52:fa:38:c6: bf:6c:a8:51:fb:9c:14:15:fb:d7:ac:89:f0:31:2f: 6a:ba:a9:d2:30:2f:f6:ed:94:9c:2c:81:4d:59:f7: 1b:61:c1:bb:8e:63:21:4e:fc:ed:fd:55:49:99:44: cf:e9:0e:b9:9f:84:55:30:8a:41:53:5b:c2:89:65: 26:74:19:f5:9e:14:8d:9b:6f:db:03:b3:79:80:7a: cf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8A:15:F4:B5:95:7E:82:AE:9F:DC:F2:F6:8F:CE:97:F6:60:F7:B9 X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1d:48:74:1b:df:b0:dd:2d:ee:98:44:0e:73:40:35:99:a9: cc:63:59:41:e7:20:20:97:66:ca:ce:e7:3a:8b:5d:14:2e:7a: 9f:20:5e:b0:98:1b:7e:19:c8:de:7e:5f:2e:d1:0b:6d:50:f9: 7c:0b:62:de:9a:12:19:69:f1:6c:6c:ea:56:59:02:5a:69:a1: 3c:4c:63:1c:c8:69:ff:12:e3:e6:09:c2:c1:44:05:1c:6d:63: f1:f2:12:44:00:ce:ae:91:ac:92:95:f9:23:92:c0:b8:ac:dd: 74:36:8a:28:ea:19:c6:42:fa:c8:57:b7:7e:a0:1a:3c:30:04: 2e:70:18:8d:f4:02:8b:97:a0:bd:84:0c:13:f6:33:14:85:cf: 7a:43:c0:59:99:2b:c3:02:ff:8a:53:82:5d:ce:92:b6:53:cc: ad:f6:0e:16:4f:88:93:42:61:03:7c:7e:82:58:3e:38:64:63: a0:54:59:c0:bc:d8:10:f4:82:26:58:0a:dd:37:35:2e:8f:75: 3a:f1:db:1d:df:5b:4f:e4:e1:1d:50:44:f1:79:4a:28:02:a5: 76:20:d7:9b:1c:fe:08:a9:9c:c1:ec:0e:71:df:16:81:fd:f6: 55:f5:5d:47:06:71:37:25:3e:80:f3:a5:c0:4c:e3:e2:97:7c: 4f:d8:1f:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjYwOTIxMDIzNTI3WhcNMjYwOTI4MDIzNTI3WjAYMRYwFAYD VQQDEw02YWIwOTdlZi05NWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7xmwRHOZgYsDJdF/TuCLsuaHJWQn1nZUZVGePWED/pA9B09VThTpYdxIir5 cPb0dy9/NuoWVgwicLtrDAtbPDMLP356KIinXm9rahra1Ycs6EvGKjponsQ+5xD3 d7RUHz2EfvbSiedwxgBBbuxla3Vs2qDvmS+aVOdILRu9ZY5RqqPcFmU+O/eAfgmk 3qs3TDRQw24fUC8kjE99N/3Rib9BLPhN1SyEgZrfJ6pfylL6OMa/bKhR+5wUFfvX rInwMS9quqnSMC/27ZScLIFNWfcbYcG7jmMhTvzt/VVJmUTP6Q65n4RVMIpBU1vC iWUmdBn1nhSNm2/bA7N5gHrP3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBaKFfS1 lX6Crp/c8vaPzpf2YPe5MB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKh1IdBvfsN0t7phEDnNANZmpzGNZQecgIJdmys7nOotdFC56nyBesJgbfhnI 3n5fLtELbVD5fAti3poSGWnxbGzqVlkCWmmhPExjHMhp/xLj5gnCwUQFHG1j8fIS RADOrpGskpX5I5LAuKzddDaKKOoZxkL6yFe3fqAaPDAELnAYjfQCi5egvYQME/Yz FIXPekPAWZkrwwL/ilOCXc6StlPMrfYOFk+Ik0JhA3x+glg+OGRjoFRZwLzYEPSC JlgK3Tc1Lo91OvHbHd9bT+ThHVBE8XlKKAKldiDXmxz+CKmcwewOcd8Wgf32VfVd RwZxNyU+gPOlwEzj4pd8T9gfUQ== -----END CERTIFICATE-----Generated at Mon Sep 21 23:22:19 2026 by rpki-client