$ rpki-client -vvvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: MofuoxBUIvvowwyneZpGRQAqG2Ilb/h60alVA4DsR3E= Subject key identifier: E9:FB:31:58:8F:3E:BF:CE:BE:65:05:AF:5C:8E:E3:35:D6:E1:A8:65 Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 28B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 27ED Signing time: Tue 22 Sep 2026 15:36:26 +0000 Manifest this update: Tue 22 Sep 2026 15:36:26 +0000 Manifest next update: Tue 29 Sep 2026 15:36:26 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: g+IByt5ouuRBI6MI2GuAIEAcQawMCRJ+/279zk0i0vI=) 2: 95F76942870611F18212677BADEE528E.roa (hash: SOLLv4/IIVbij9uBLzZ1io1DQY7xHAS/qiToU32P5kU=) 3: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: H6EDGgrRbesY/HC/4QOk7KDGC4ogtYE/w/DKgTKt0yw=) 4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: Z4xoQcPBvcW/VbL6OWwtgSaSohFPMeVXuxF8gcgjMds=) 5: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: FVQ+j69/Aeib4yBQpBYMh3Ioo2GLCobZFDyx7BhU9SY=) 6: 75CF2F9A873011F1B6B4C8A97AEE528E.roa (hash: mEYn2nIRyTCP8ZVcA/82XOrMyUlLvHd+g8HTmkjqqZU=) 7: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: SiLYgZw1OeMIYBqXEe6pyhNgEn9BwkIumVDHZgIIEaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10423 (0x28b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Sep 22 15:36:26 2026 GMT Not After : Sep 29 15:36:26 2026 GMT Subject: CN=6ab2a07a-317c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:80:c9:46:bd:8a:ae:00:bf:75:31:fc:91: 2a:92:e3:60:09:06:72:27:02:76:aa:72:08:85:83: 34:23:15:f8:25:67:26:64:2e:f8:cf:ca:2b:88:9d: e4:3d:32:74:b0:c0:14:97:c4:e1:be:ac:dc:c8:e5: 0d:da:90:52:1c:8c:80:cb:d2:a7:99:28:bc:4d:4d: 47:77:47:69:c2:26:4b:b7:91:a7:c1:ae:8a:67:47: 43:50:42:c8:d0:33:43:c5:25:3c:15:b9:3c:79:d8: 6c:fd:11:b2:6e:b5:03:41:10:91:21:1a:ab:72:66: 7c:35:f5:96:b4:44:1b:63:b3:82:1a:19:44:03:fa: e1:21:a2:2b:62:1e:14:b4:a7:55:c8:8f:dd:29:0e: 10:ab:65:51:88:73:5c:4e:d6:bd:52:ea:e2:7e:f9: 88:bf:cc:fb:1a:3c:54:5b:c8:aa:dd:28:6d:31:af: d5:db:78:92:4d:0f:14:8d:eb:15:ce:8c:f6:c9:85: 93:0d:4c:4f:72:94:c3:68:ae:ba:ff:2a:15:1b:61: 43:48:a5:24:03:1c:32:a2:8f:07:6e:13:0b:3b:88: 2e:f0:2c:4a:69:86:cc:2d:d6:4a:0c:fa:f3:e6:77: ad:69:6d:5f:f9:96:54:81:98:d5:d7:86:b2:fc:6d: d9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FB:31:58:8F:3E:BF:CE:BE:65:05:AF:5C:8E:E3:35:D6:E1:A8:65 X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a4:a3:f9:e5:b5:17:53:9e:c4:ca:6e:28:28:32:df:1e:77: ee:fd:db:85:06:2d:7b:af:ff:b9:99:95:f4:ab:d1:99:7d:79: 72:1b:18:8d:bd:bf:6f:ac:ce:43:65:97:a2:fb:96:28:18:20: c6:14:bd:de:09:b2:02:d7:19:79:a0:cf:7a:78:6a:69:c5:68: 84:78:13:c8:76:e6:79:49:5a:3e:77:f3:99:5f:c6:be:76:65: 7f:5c:e7:39:56:77:1c:12:c9:93:49:f6:1d:28:5e:2d:4e:25: 58:f8:70:ac:1b:a5:12:ae:0e:69:a7:94:8f:fd:36:ef:c3:df: 6a:a0:48:92:04:44:12:b3:de:79:7e:5d:c0:0f:08:65:cc:c1: 85:0e:ad:17:cc:80:2d:22:37:b9:7b:84:af:e2:27:0f:4a:47: 94:c1:eb:3c:86:1d:8b:2b:0a:6f:d9:eb:14:b6:17:ce:30:43: df:b3:40:71:63:64:d7:ad:ac:b9:f3:9d:da:71:81:ad:1a:97: 6c:89:09:7b:e3:60:d4:0a:2d:ad:45:12:3c:5b:51:ad:cb:5a: 2b:aa:88:63:a9:1f:8e:a4:d1:a9:d4:31:02:75:59:bd:09:62: a5:99:7a:7f:b1:db:7f:ec:3d:4e:0b:2c:ba:1e:e5:d4:a0:b5: 72:11:6d:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjYwOTIyMTUzNjI2WhcNMjYwOTI5MTUzNjI2WjAYMRYwFAYD VQQDEw02YWIyYTA3YS0zMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VmAyUa9iq4Av3Ux/JEqkuNgCQZyJwJ2qnIIhYM0IxX4JWcmZC74z8oriJ3k PTJ0sMAUl8ThvqzcyOUN2pBSHIyAy9KnmSi8TU1Hd0dpwiZLt5Gnwa6KZ0dDUELI 0DNDxSU8Fbk8edhs/RGybrUDQRCRIRqrcmZ8NfWWtEQbY7OCGhlEA/rhIaIrYh4U tKdVyI/dKQ4Qq2VRiHNcTta9UurifvmIv8z7GjxUW8iq3ShtMa/V23iSTQ8UjesV zoz2yYWTDUxPcpTDaK66/yoVG2FDSKUkAxwyoo8HbhMLO4gu8CxKaYbMLdZKDPrz 5netaW1f+ZZUgZjV14ay/G3Z2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOn7MViP Pr/OvmUFr1yO4zXW4ahlMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnKSj+eW1F1OexMpuKCgy3x537v3bhQYte6//uZmV9KvRmX15chsYjb2/b6zO Q2WXovuWKBggxhS93gmyAtcZeaDPenhqacVohHgTyHbmeUlaPnfzmV/GvnZlf1zn OVZ3HBLJk0n2HSheLU4lWPhwrBulEq4OaaeUj/0278PfaqBIkgREErPeeX5dwA8I ZczBhQ6tF8yALSI3uXuEr+InD0pHlMHrPIYdiysKb9nrFLYXzjBD37NAcWNk162s ufOd2nGBrRqXbIkJe+Ng1AotrUUSPFtRrctaK6qIY6kfjqTRqdQxAnVZvQlipZl6 f7Hbf+w9Tgssuh7l1KC1chFtPQ== -----END CERTIFICATE-----Generated at Thu Sep 24 00:51:38 2026 by rpki-client