$ rpki-client -vvvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: uwqzzztIr2L1seuu/+8vvrVoax7+ZQS6n7vonOD1nBk= Subject key identifier: E3:75:5F:C9:D7:F8:AE:84:47:1E:D7:3F:82:01:D4:F7:CF:D7:78:EE Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: F1 Signing time: Mon 05 Oct 2026 06:59:33 +0000 Manifest this update: Mon 05 Oct 2026 06:59:32 +0000 Manifest next update: Mon 12 Oct 2026 06:59:32 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: nvG/7DByAj9BsSsaxh7BlN91umPwJhNSl6sOqMsf/PA=) 2: 7B8A52D4B5BB11F18D5162F53E11F970.roa (hash: T6c4+2+fIJ46LdhEoUSSX1Kw6hw1AA5PzFi6KFbGnms=) 3: DC8456B8B5B911F1B8B6BEBE3E11F970.roa (hash: BCImpyKSjQUJbhaMwVoqKVNp3GpPs3DeNfjpc6WNC14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 06:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Oct 5 06:59:32 2026 GMT Not After : Oct 12 06:59:32 2026 GMT Subject: CN=6ac34ad5-f4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ac:8f:3b:e2:59:53:b4:30:ef:df:f1:8c:fb: ee:d3:33:2f:92:6e:d8:c4:ff:76:7c:a9:a1:41:3f: ac:1d:91:0b:11:b4:0c:8d:86:24:cc:a3:1a:30:15: aa:83:51:ab:39:12:4e:77:9e:f9:73:d0:01:b5:8b: 80:98:53:cd:90:ab:af:c4:8f:f7:57:12:d8:27:f9: 57:cb:ab:bb:06:f5:39:ac:0a:73:b3:5c:e9:2a:90: d5:26:56:f0:9d:ee:fe:d6:bd:fd:bf:d2:2f:ef:30: af:64:13:f6:fe:0f:13:92:7a:29:9b:14:74:66:e3: 83:02:00:f9:48:31:0d:a3:90:2a:e2:7c:95:00:61: 48:97:c0:ef:27:e0:5f:d3:8e:81:15:b0:c0:20:b1: 52:7f:dd:f1:58:b0:0b:2e:d3:b9:e1:f9:9a:fd:c3: 87:00:01:0d:cf:14:08:a5:a9:61:58:f7:77:a8:39: b1:fe:1d:58:57:84:c4:b8:df:77:8b:20:12:2b:2d: e7:01:c6:34:78:1f:89:6f:31:46:33:00:f2:d4:35: ec:a5:aa:a9:40:2b:00:50:c8:da:c1:3a:2c:44:ba: 25:12:3d:f7:9b:83:51:0e:eb:04:8a:0e:9b:de:91: 9a:7c:ab:86:d4:ea:95:25:57:dd:62:b9:06:77:3c: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:75:5F:C9:D7:F8:AE:84:47:1E:D7:3F:82:01:D4:F7:CF:D7:78:EE X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3a:35:3d:b3:88:4d:67:0d:c8:a3:57:e3:b2:f0:b6:9f:36: 66:b3:40:cf:5d:9a:08:16:c9:dc:e5:71:42:4e:d8:59:1d:6c: d0:7f:ff:a8:f0:7c:c8:ed:8b:0b:88:06:a9:e6:f7:db:f4:27: 20:23:52:2f:10:df:e0:4e:35:79:99:ca:46:39:1c:fb:53:98: 8a:32:91:33:eb:52:2b:91:41:75:a7:a4:79:79:88:97:91:c2: c5:44:af:d0:5f:75:c1:95:5e:f4:72:f1:81:c7:a0:ac:f3:50: 41:68:c6:f4:87:47:39:7d:6e:66:d6:4c:51:82:c7:38:bf:fc: cc:fe:2b:e8:82:c7:75:9b:a3:f2:97:8e:a1:57:60:75:f4:d9: 5d:3b:d0:6d:cf:1d:bb:fa:05:2f:c8:e5:3a:01:ae:c1:03:74: 7b:98:15:70:28:2d:3a:2d:1e:e6:2b:7b:f0:47:1b:de:a8:9d: 78:a1:85:57:39:65:55:9b:40:e8:22:2c:d8:91:c3:a2:7c:6d: 44:8a:8b:c5:e5:db:69:94:93:a1:35:ba:92:dd:90:94:ac:5f: 94:af:c3:9c:c8:e9:1f:47:27:fd:0f:77:67:43:50:53:45:75: 1e:27:6e:28:4d:0b:bc:31:c8:63:7f:46:75:32:98:85:04:4c: d1:63:43:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5QjUxMTAvBgNVBAUTKEI1MkFFMTgzNkM2MTE5M0RFQThCQTVCRTlENzFCOENC QjM0MzAzOTgwHhcNMjYxMDA1MDY1OTMyWhcNMjYxMDEyMDY1OTMyWjAYMRYwFAYD VQQDEw02YWMzNGFkNS1mNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ayPO+JZU7Qw79/xjPvu0zMvkm7YxP92fKmhQT+sHZELEbQMjYYkzKMaMBWq g1GrORJOd575c9ABtYuAmFPNkKuvxI/3VxLYJ/lXy6u7BvU5rApzs1zpKpDVJlbw ne7+1r39v9Iv7zCvZBP2/g8TknopmxR0ZuODAgD5SDENo5Aq4nyVAGFIl8DvJ+Bf 046BFbDAILFSf93xWLALLtO54fma/cOHAAENzxQIpalhWPd3qDmx/h1YV4TEuN93 iyASKy3nAcY0eB+JbzFGMwDy1DXspaqpQCsAUMjawTosRLolEj33m4NRDusEig6b 3pGafKuG1OqVJVfdYrkGdzwrGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFON1X8nX +K6ERx7XP4IB1PfP13juMB8GA1UdIwQYMBaAFLUq4YNsYRk96oulvp1xuMuzQwOY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTlCNS9CMjI2NkZEMjZE RTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdUM3FpNlctblhHNHk3TkRB NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTlCNS9CMjI2NkZEMjZERTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdU M3FpNlctblhHNHk3TkRBNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALTo1PbOITWcNyKNX47Lwtp82ZrNAz12aCBbJ3OVxQk7YWR1s0H//qPB8yO2L C4gGqeb32/QnICNSLxDf4E41eZnKRjkc+1OYijKRM+tSK5FBdaekeXmIl5HCxUSv 0F91wZVe9HLxgcegrPNQQWjG9IdHOX1uZtZMUYLHOL/8zP4r6ILHdZuj8peOoVdg dfTZXTvQbc8du/oFL8jlOgGuwQN0e5gVcCgtOi0e5it78Ecb3qideKGFVzllVZtA 6CIs2JHDonxtRIqLxeXbaZSToTW6kt2QlKxflK/DnMjpH0cn/Q93Z0NQU0V1Hidu KE0LvDHIY39GdTKYhQRM0WND3Q== -----END CERTIFICATE-----Generated at Mon Oct 5 16:20:03 2026 by rpki-client