$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft File: tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft (raw, json) Hash identifier: wr2BSqnYNswI8mvSE9gbPho8nXj3kuxwOq+5wve/fpc= Subject key identifier: 58:1C:15:14:FF:F0:BD:C3:D7:89:F3:FA:AA:F2:92:93:3E:1C:F2:D2 Authority key identifier: B6:FB:07:E0:38:DE:F0:6C:82:0B:C6:CD:20:35:14:55:4D:64:3D:68 Certificate issuer: /CN=A91758EC/serialNumber=B6FB07E038DEF06C820BC6CD203514554D643D68 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft Manifest number: DF Signing time: Mon 21 Sep 2026 06:36:08 +0000 Manifest this update: Mon 21 Sep 2026 06:36:08 +0000 Manifest next update: Mon 28 Sep 2026 06:36:08 +0000 Files and hashes: 1: tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl (hash: tv+E5xPd79s0wVI2nMfC0ADGxIgURiHfZWzej4yzYUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758EC, serialNumber=B6FB07E038DEF06C820BC6CD203514554D643D68 Validity Not Before: Sep 21 06:36:08 2026 GMT Not After : Sep 28 06:36:08 2026 GMT Subject: CN=6ab0d058-9f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:4f:da:5c:f5:d0:2a:de:11:42:76:24:79:93: 09:b3:47:d9:9a:33:ed:68:b9:57:e2:44:1b:e5:be: 68:1b:0d:26:01:21:18:d7:a4:f4:01:e8:63:e6:09: 92:29:6b:cc:00:b7:66:dd:48:9d:39:3e:33:b3:88: bd:10:c2:66:af:83:71:2a:71:61:21:ef:60:18:2f: d0:07:1e:b7:65:1d:40:b4:a3:4d:89:64:48:9e:c5: ca:7a:da:33:79:35:4f:9d:e8:f2:35:1b:2c:f4:da: 19:a1:b4:c4:7a:8d:e7:08:89:e2:06:e5:72:c6:f0: 1e:09:22:e8:e9:a4:9f:20:ef:46:36:5a:e8:15:fd: c3:01:f2:33:39:16:c0:99:14:4e:40:a4:33:53:4e: 42:f4:04:29:e8:e9:79:d7:b2:c8:e4:bc:c6:4e:e2: ae:d8:5b:a9:c9:39:bd:14:33:0c:13:77:eb:0b:89: 04:d0:dd:41:8e:70:8e:5f:57:7f:9e:f5:1e:16:89: ce:fd:b6:9f:8c:9f:6e:e0:db:9a:c6:2e:64:e7:0e: 89:eb:09:13:40:85:38:49:1d:0a:92:f6:56:0a:e1: 3d:41:24:c1:ed:2d:6c:dc:3e:25:62:00:9a:6a:83: 24:3c:9b:85:ea:ca:ec:25:c6:7d:9a:c2:bf:ec:66: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1C:15:14:FF:F0:BD:C3:D7:89:F3:FA:AA:F2:92:93:3E:1C:F2:D2 X509v3 Authority Key Identifier: keyid:B6:FB:07:E0:38:DE:F0:6C:82:0B:C6:CD:20:35:14:55:4D:64:3D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:09:66:8f:07:2c:05:da:58:7e:12:6a:92:32:ff:16:af:f6: f9:85:ae:5c:20:2a:c1:d7:e5:e8:d1:bd:c8:ee:5a:70:90:86: db:ae:ed:fe:81:67:60:e3:e3:90:2c:22:bd:86:66:45:e3:79: 71:d4:48:11:87:4d:57:4a:03:05:c7:a9:80:41:79:9f:f9:2f: da:ee:36:32:04:ee:d8:4a:3f:37:e6:e4:e6:e8:3b:41:f6:3b: 6e:23:fa:85:8f:75:94:91:88:c5:b7:9f:b5:18:77:44:5c:ef: 65:49:59:a6:af:8b:4e:32:31:03:11:90:13:13:a9:1c:f9:8c: 1a:44:ac:8a:df:9a:49:31:d6:6f:5a:c1:58:4b:5a:8e:67:52: 1f:9f:1f:b0:b1:f1:5b:0f:19:19:bb:8a:a3:31:4c:15:4f:47: 3a:9e:97:87:d6:94:f1:bd:ce:76:49:85:d1:85:9b:69:91:7a: c1:ab:d4:95:80:f1:41:99:22:95:cd:40:6b:b8:3e:e3:16:13: d0:f4:f9:01:a5:ed:67:37:cf:58:ff:d3:65:47:00:f7:d3:4e: 2b:65:31:d1:a1:67:07:2f:90:f9:f9:5e:2b:01:46:8c:5a:11: e0:43:01:97:45:e7:9e:ad:f3:d7:9f:b8:98:a7:30:68:32:d4: c4:07:bb:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4RUMxMTAvBgNVBAUTKEI2RkIwN0UwMzhERUYwNkM4MjBCQzZDRDIwMzUxNDU1 NEQ2NDNENjgwHhcNMjYwOTIxMDYzNjA4WhcNMjYwOTI4MDYzNjA4WjAYMRYwFAYD VQQDEw02YWIwZDA1OC05ZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/U/aXPXQKt4RQnYkeZMJs0fZmjPtaLlX4kQb5b5oGw0mASEY16T0Aehj5gmS KWvMALdm3UidOT4zs4i9EMJmr4NxKnFhIe9gGC/QBx63ZR1AtKNNiWRInsXKetoz eTVPnejyNRss9NoZobTEeo3nCIniBuVyxvAeCSLo6aSfIO9GNlroFf3DAfIzORbA mRROQKQzU05C9AQp6Ol517LI5LzGTuKu2FupyTm9FDMME3frC4kE0N1BjnCOX1d/ nvUeFonO/bafjJ9u4Nuaxi5k5w6J6wkTQIU4SR0KkvZWCuE9QSTB7S1s3D4lYgCa aoMkPJuF6srsJcZ9msK/7GZnhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgcFRT/ 8L3D14nz+qrykpM+HPLSMB8GA1UdIwQYMBaAFLb7B+A43vBsggvGzSA1FFVNZD1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThFQy83NEQzNTg0MDY2 MzAxMUYwQjlEQzRFNjRDNEY5QUUwMi90dnNINERqZThHeUNDOGJOSURVVVZVMWtQ V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R2c0g0RGplOEd5Q0M4Yk5JRFVVVlUxa1BXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThFQy83NEQzNTg0MDY2MzAxMUYwQjlEQzRFNjRDNEY5QUUwMi90dnNINERqZThH eUNDOGJOSURVVVZVMWtQV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsAlmjwcsBdpYfhJqkjL/Fq/2+YWuXCAqwdfl6NG9yO5acJCG267t/oFnYOPj kCwivYZmReN5cdRIEYdNV0oDBcepgEF5n/kv2u42MgTu2Eo/N+bk5ug7QfY7biP6 hY91lJGIxbeftRh3RFzvZUlZpq+LTjIxAxGQExOpHPmMGkSsit+aSTHWb1rBWEta jmdSH58fsLHxWw8ZGbuKozFMFU9HOp6Xh9aU8b3OdkmF0YWbaZF6wavUlYDxQZki lc1Aa7g+4xYT0PT5AaXtZzfPWP/TZUcA99NOK2Ux0aFnBy+Q+fleKwFGjFoR4EMB l0Xnnq3z15+4mKcwaDLUxAe75g== -----END CERTIFICATE-----Generated at Wed Sep 23 09:23:15 2026 by rpki-client