$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: w0jsXtkM8BDjT1fH5WZzLRjbjCVanoRNJybFZqr9uJ8= Subject key identifier: 1B:34:E5:DD:A7:8A:DC:CC:D6:C0:82:30:7A:47:32:12:F5:E3:EC:72 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 0171 Signing time: Mon 21 Sep 2026 02:59:57 +0000 Manifest this update: Mon 21 Sep 2026 02:59:56 +0000 Manifest next update: Mon 28 Sep 2026 02:59:56 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: 0Sial+Lxdb0qZuaKf/iEfkWExga87UVoNA3r3lz3WYc=) 2: 1C6D5ED2C51F11F08993E41BC4F9AE02.roa (hash: h9DoWAti9FtevIgArDst4H6dPePV+rhbEHLYlKOnyqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Sep 21 02:59:56 2026 GMT Not After : Sep 28 02:59:56 2026 GMT Subject: CN=6ab09dad-9304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4f:54:30:0b:18:6c:15:69:8f:8d:bb:54:db: af:52:5d:30:69:b4:80:63:ce:65:dc:ba:5c:92:c3: dc:bd:fa:41:a0:88:30:8b:83:8f:03:6a:8a:c9:ea: 8d:8e:29:90:b3:80:77:5d:f1:2d:61:04:df:12:36: 00:8e:74:34:30:e9:8c:4e:a2:70:02:b8:1b:a5:7d: 51:5b:d4:ae:c0:0e:91:7d:91:22:b2:cd:22:3e:79: f4:2c:42:4e:33:e0:90:8f:48:e7:ca:a9:04:4d:37: 96:ba:60:61:81:43:8a:3f:13:f0:21:4c:17:06:20: 5a:7b:77:d3:98:a2:e2:21:42:bd:22:21:35:6c:fa: c6:70:b2:78:00:38:3e:73:92:83:2a:1f:46:d1:ea: 09:27:37:bd:26:e3:76:ed:69:19:8e:e3:4d:2b:98: b6:06:2a:87:54:76:ad:98:95:5a:92:24:15:92:bb: fb:02:93:45:4c:c2:94:48:6a:e5:af:f3:0c:7b:68: f1:14:e2:49:c0:cb:e2:f8:07:3f:94:38:cf:07:54: 55:f5:f3:fa:f6:ea:9c:e2:8f:b8:a2:40:a6:0c:5a: 1c:b9:85:21:10:df:4b:55:be:30:49:43:9b:76:35: 0a:c1:54:7d:1f:59:53:56:f6:25:be:3a:38:35:55: 36:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:34:E5:DD:A7:8A:DC:CC:D6:C0:82:30:7A:47:32:12:F5:E3:EC:72 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d2:2a:09:47:32:2d:cc:93:6a:c6:01:8f:c4:a4:24:e0:64: 2d:b8:d9:6c:6e:44:7f:1f:7b:24:db:2f:ef:2f:e6:f2:fa:c2: ca:7f:a7:e3:fb:a8:f3:18:70:ad:e2:13:35:69:0c:bc:f9:ed: bf:29:02:19:13:cc:51:de:c8:b3:47:7c:26:34:43:b4:e7:17: a1:ed:37:f5:a7:fc:3c:c3:5b:50:8a:60:d1:f0:82:68:67:c1: 49:a3:08:09:4e:a6:af:06:f7:1a:87:c4:ab:27:94:8c:0c:8e: c1:02:13:08:7c:3e:c9:40:ec:06:db:42:5a:8e:5b:84:e9:9a: 02:09:68:da:8b:de:43:4f:bc:7a:f6:a3:bf:2f:f6:ca:d9:00: 3d:44:86:f9:2c:f8:78:96:5e:74:33:c1:e3:1b:40:2b:9e:16: 1e:29:81:8f:14:2c:9e:00:9a:0c:89:1e:a2:91:dd:79:c7:56: 3a:6c:cf:3e:04:2b:b5:cf:79:d3:bb:16:1f:d3:b3:33:0b:75: 83:74:fa:fa:91:de:76:1b:f3:cc:6f:96:eb:33:e6:37:1c:66: 34:27:40:62:00:47:00:cd:da:2b:87:25:16:3b:5b:e5:ec:b8: 3b:c6:95:b9:2a:29:50:4c:2d:f4:54:3c:fb:d2:2f:05:3e:9d: 02:0e:e2:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjYwOTIxMDI1OTU2WhcNMjYwOTI4MDI1OTU2WjAYMRYwFAYD VQQDEw02YWIwOWRhZC05MzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6k9UMAsYbBVpj427VNuvUl0wabSAY85l3LpcksPcvfpBoIgwi4OPA2qKyeqN jimQs4B3XfEtYQTfEjYAjnQ0MOmMTqJwArgbpX1RW9SuwA6RfZEiss0iPnn0LEJO M+CQj0jnyqkETTeWumBhgUOKPxPwIUwXBiBae3fTmKLiIUK9IiE1bPrGcLJ4ADg+ c5KDKh9G0eoJJze9JuN27WkZjuNNK5i2BiqHVHatmJVakiQVkrv7ApNFTMKUSGrl r/MMe2jxFOJJwMvi+Ac/lDjPB1RV9fP69uqc4o+4okCmDFocuYUhEN9LVb4wSUOb djUKwVR9H1lTVvYlvjo4NVU2yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBs05d2n itzM1sCCMHpHMhL14+xyMB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADdIqCUcyLcyTasYBj8SkJOBkLbjZbG5Efx97JNsv7y/m8vrCyn+n4/uo8xhw reITNWkMvPntvykCGRPMUd7Is0d8JjRDtOcXoe039af8PMNbUIpg0fCCaGfBSaMI CU6mrwb3GofEqyeUjAyOwQITCHw+yUDsBttCWo5bhOmaAglo2oveQ0+8evajvy/2 ytkAPUSG+Sz4eJZedDPB4xtAK54WHimBjxQsngCaDIkeopHdecdWOmzPPgQrtc95 07sWH9OzMwt1g3T6+pHedhvzzG+W6zPmNxxmNCdAYgBHAM3aK4clFjtb5ey4O8aV uSopUEwt9FQ8+9IvBT6dAg7i3Q== -----END CERTIFICATE-----Generated at Tue Sep 22 22:37:35 2026 by rpki-client