$ rpki-client -vvvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: xTbSiBZFSyvs/QorKyFssBVEh9Zs5lHi+pKPY/YanAY= Subject key identifier: 68:BE:E8:35:33:7F:B3:48:1E:BB:BD:BE:3C:EC:1B:3F:94:BB:54:A0 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 0637 Signing time: Tue 22 Sep 2026 22:31:17 +0000 Manifest this update: Tue 22 Sep 2026 22:31:16 +0000 Manifest next update: Tue 29 Sep 2026 22:31:16 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: vpzCF0Ckqp5vVEO2MYs8wRCyAJkzyqcY8SX8Z+aziK0=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 1+FeGN7/5ZQ3EY/0zpEcBQ4MJe9C6NybEMH9vk4Omh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Sep 22 22:31:16 2026 GMT Not After : Sep 29 22:31:16 2026 GMT Subject: CN=6ab301b4-e2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:1e:f3:7e:70:26:c3:9a:9e:1e:d4:a7:a2: 42:9a:d6:24:7f:d8:75:be:cc:ba:7e:6b:df:11:98: 60:dd:43:7d:2c:3e:91:5e:7e:dc:39:52:3b:73:49: 7d:a4:6f:7a:5d:00:d2:8f:d8:8c:47:ba:93:cb:41: 21:1c:8a:57:a2:5f:19:2b:94:62:f1:4c:4b:0d:29: 3e:bd:d8:ba:98:f8:76:83:c5:65:3f:8e:e6:08:07: 15:ab:4a:e3:ba:14:30:67:1f:a1:93:69:df:e2:3d: fa:90:79:61:0e:b4:c1:71:49:50:25:8a:99:06:67: e4:56:ca:20:f9:bd:75:73:db:3f:4e:25:63:2e:87: 16:88:05:85:49:c2:67:38:b0:2b:58:bb:f3:e2:ed: 0c:cf:64:0d:b1:a5:6f:d6:69:b7:28:9b:3a:78:62: c9:44:46:9c:81:eb:65:46:80:ee:d6:c6:82:eb:9b: 4e:7d:5a:fd:4d:42:62:8a:1e:45:69:73:0f:87:73: 4b:d6:03:b3:19:0c:a9:48:d2:a7:5d:0f:79:8c:05: 41:90:2f:a8:fe:ea:9c:ba:8c:27:23:5f:47:86:e4: 63:3e:85:70:17:0d:a3:e6:3a:10:b4:30:5b:55:e8: 19:20:7a:5a:86:3d:a3:86:18:a0:79:3d:d1:28:17: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BE:E8:35:33:7F:B3:48:1E:BB:BD:BE:3C:EC:1B:3F:94:BB:54:A0 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a5:e4:99:24:2d:c2:5e:d0:ad:d9:ad:d9:39:ea:be:c5:f7: f2:68:8f:c9:fa:02:7f:93:a9:0e:2d:8a:67:0a:e2:33:d7:1e: 77:38:63:08:b9:75:a7:62:19:88:9d:5b:60:3b:14:6c:75:43: 68:4b:ab:ce:01:ef:88:dc:c6:dc:dc:63:a2:af:ca:b5:ed:a6: 18:4a:49:9a:a1:36:2d:25:b1:55:8a:2b:e8:a2:15:36:3e:6e: c7:3a:24:9a:4d:bb:b1:0e:fd:c7:01:c1:5a:ed:d1:14:d2:82: ba:07:08:91:3c:c9:dc:9a:60:18:36:5b:df:c3:32:0b:81:ab: 1e:a9:c8:4e:7f:3a:b1:cb:21:0c:9c:26:02:8b:60:3a:e5:ca: 06:24:92:0f:fb:f8:20:11:58:7b:7c:2b:9e:f7:86:86:67:1b: e6:08:07:6b:a8:eb:12:09:42:80:57:00:ea:6f:86:0d:8b:c3: 17:55:27:b7:b0:a6:0c:16:83:26:b6:06:59:36:4f:7e:f9:2c: 37:09:80:cd:08:cd:8d:3f:47:ab:43:b0:80:d4:5b:7f:02:3e: e1:8f:e4:e7:a8:24:f0:37:4f:48:78:1b:9d:c4:e8:d6:50:91: bc:bf:fb:9d:16:5d:03:15:0d:ed:7a:6d:4b:42:a6:7d:44:c4: 3a:02:2f:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjYwOTIyMjIzMTE2WhcNMjYwOTI5MjIzMTE2WjAYMRYwFAYD VQQDEw02YWIzMDFiNC1lMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqEe835wJsOanh7Up6JCmtYkf9h1vsy6fmvfEZhg3UN9LD6RXn7cOVI7c0l9 pG96XQDSj9iMR7qTy0EhHIpXol8ZK5Ri8UxLDSk+vdi6mPh2g8VlP47mCAcVq0rj uhQwZx+hk2nf4j36kHlhDrTBcUlQJYqZBmfkVsog+b11c9s/TiVjLocWiAWFScJn OLArWLvz4u0Mz2QNsaVv1mm3KJs6eGLJREacgetlRoDu1saC65tOfVr9TUJiih5F aXMPh3NL1gOzGQypSNKnXQ95jAVBkC+o/uqcuownI19HhuRjPoVwFw2j5joQtDBb VegZIHpahj2jhhigeT3RKBf2ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGi+6DUz f7NIHru9vjzsGz+Uu1SgMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASaXkmSQtwl7Qrdmt2TnqvsX38miPyfoCf5OpDi2KZwriM9cedzhjCLl1p2IZ iJ1bYDsUbHVDaEurzgHviNzG3Nxjoq/Kte2mGEpJmqE2LSWxVYor6KIVNj5uxzok mk27sQ79xwHBWu3RFNKCugcIkTzJ3JpgGDZb38MyC4GrHqnITn86scshDJwmAotg OuXKBiSSD/v4IBFYe3wrnveGhmcb5ggHa6jrEglCgFcA6m+GDYvDF1Unt7CmDBaD JrYGWTZPfvksNwmAzQjNjT9Hq0OwgNRbfwI+4Y/k56gk8DdPSHgbncTo1lCRvL/7 nRZdAxUN7XptS0KmfUTEOgIvOg== -----END CERTIFICATE-----Generated at Wed Sep 23 21:13:25 2026 by rpki-client