$ rpki-client -vvvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json) Hash identifier: NQ/6fKUN45ItVpGuFvboGIAHypz35nanPyDWAOkrcL8= Subject key identifier: 91:FA:90:DD:BC:A2:99:7F:4D:22:C9:52:F2:D7:40:03:25:6A:E5:9D Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Certificate serial: 0F1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft Manifest number: 0F06 Signing time: Tue 22 Sep 2026 17:31:41 +0000 Manifest this update: Tue 22 Sep 2026 17:31:41 +0000 Manifest next update: Tue 29 Sep 2026 17:31:41 +0000 Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: ZesJimudUoNZWEjUSLiDhCykedBa1Gz8lkchMNiVElU=) 2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: al3fqRaFbz5Gytb2uWt5SUlVpJ/tTLDhToYHkT3GYkw=) 3: z7xZp6bAbB1jFkmDLpSFxsfCZ5Y.asa (hash: 86kpuEsPKdwvWESC1iQhBWUL9NuOHbb1fR3yGidmVPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3866 (0xf1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Validity Not Before: Sep 22 17:31:41 2026 GMT Not After : Sep 29 17:31:41 2026 GMT Subject: CN=6ab2bb7d-a521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:96:96:16:bf:9b:65:76:0b:4e:c1:25:34:3d: 4e:a1:a2:19:e4:a0:ab:5f:50:ff:9b:de:71:84:2a: a3:95:47:00:61:79:f8:b1:da:c3:c4:ef:9e:f8:ab: 94:23:2e:da:20:7d:e1:8c:bc:3c:cd:6c:74:47:d7: 18:95:f2:f5:cb:50:a4:ab:ae:cb:f9:1d:eb:ed:d9: 99:1d:c5:37:44:4e:9e:fd:6c:98:14:18:c9:f0:1f: c8:b2:70:4b:ac:76:22:b6:4b:b3:35:0a:7c:15:b6: 3e:cb:e1:c5:ff:84:69:fd:5d:b9:21:ed:10:e3:2a: 64:d8:4f:02:74:db:c1:88:eb:30:3c:da:e8:86:ca: 53:2e:d1:83:c1:91:ad:77:de:ea:38:46:ed:e5:19: 12:80:4c:e9:e4:58:b1:38:1c:da:50:7d:cc:a8:57: 96:70:b0:c2:42:03:b6:8e:82:62:1a:34:6e:70:52: c9:33:c3:1a:1c:f2:5e:6f:2c:48:c7:a4:a7:a7:af: 1f:49:77:3c:d5:a1:b4:d4:d8:56:e4:c2:e8:4b:76: 19:64:2e:61:41:16:c1:44:b0:33:5b:b9:59:36:84: 6a:0b:27:3b:dc:73:34:76:08:41:53:28:82:25:d0: 40:cd:42:c4:4e:b7:ab:8b:2e:5d:8d:4d:28:5f:b5: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FA:90:DD:BC:A2:99:7F:4D:22:C9:52:F2:D7:40:03:25:6A:E5:9D X509v3 Authority Key Identifier: keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:45:e7:6c:7d:e0:9f:ba:0b:12:49:45:8b:5a:8a:a6:2d:ff: 3e:97:c4:62:c3:b0:fa:5d:ad:80:9f:10:54:d7:5a:4c:b1:f4: 39:57:73:f4:3b:08:28:1d:a7:ba:ce:2d:0e:22:5d:aa:18:17: 98:17:c4:15:f9:7f:46:2e:66:c5:83:7e:87:15:ff:70:08:54: 09:e0:fd:8b:97:45:51:0f:85:6d:5d:48:76:88:12:d9:80:dd: ab:06:a8:62:13:11:61:02:a1:c1:6c:35:51:0d:82:ba:b4:eb: dc:8f:17:de:da:8a:4f:e5:82:fc:5c:c5:ec:f9:97:40:9c:34: 67:7b:1b:d7:7c:65:ff:7c:c2:82:8a:46:47:21:c7:9d:07:b4: 3a:be:29:9d:27:f7:87:15:d0:f7:fd:9f:70:99:bd:58:a7:13: ae:c7:eb:54:36:f7:d1:83:18:c4:cd:98:51:32:51:da:6b:fb: f9:cf:35:60:a3:a0:86:2f:49:60:8e:74:d3:ce:e3:7a:b4:ab: c5:18:cf:6a:9f:2e:a5:5b:29:fe:ff:c5:df:19:68:d6:ff:6c: 69:50:00:ea:0e:90:e0:72:46:b3:b2:92:fb:07:f7:4e:32:6d: 90:3d:11:9b:ae:4f:16:32:e5:6d:f7:0c:9a:10:80:e1:99:86: e8:b2:1a:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3QzkxMTAvBgNVBAUTKDRGMzE1RUVGNUFDQjJFREE3QTM3MjlFNzlFMTM1OTkw QzAxRTcwNzQwHhcNMjYwOTIyMTczMTQxWhcNMjYwOTI5MTczMTQxWjAYMRYwFAYD VQQDEw02YWIyYmI3ZC1hNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65aWFr+bZXYLTsElND1OoaIZ5KCrX1D/m95xhCqjlUcAYXn4sdrDxO+e+KuU Iy7aIH3hjLw8zWx0R9cYlfL1y1Ckq67L+R3r7dmZHcU3RE6e/WyYFBjJ8B/IsnBL rHYitkuzNQp8FbY+y+HF/4Rp/V25Ie0Q4ypk2E8CdNvBiOswPNrohspTLtGDwZGt d97qOEbt5RkSgEzp5FixOBzaUH3MqFeWcLDCQgO2joJiGjRucFLJM8MaHPJebyxI x6Snp68fSXc81aG01NhW5MLoS3YZZC5hQRbBRLAzW7lZNoRqCyc73HM0dghBUyiC JdBAzULETreriy5djU0oX7US8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJH6kN28 opl/TSLJUvLXQAMlauWdMB8GA1UdIwQYMBaAFE8xXu9ayy7aejcp554TWZDAHnB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdDOS9DMzU5RTc1RUFD MTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0cDZOeW5ubmhOWmtNQWVj SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6RmU3MXJMTHRwNk55bm5uaE5aa01BZWNIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTdDOS9DMzU5RTc1RUFDMTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0 cDZOeW5ubmhOWmtNQWVjSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPEXnbH3gn7oLEklFi1qKpi3/PpfEYsOw+l2tgJ8QVNdaTLH0OVdz9DsIKB2n us4tDiJdqhgXmBfEFfl/Ri5mxYN+hxX/cAhUCeD9i5dFUQ+FbV1IdogS2YDdqwao YhMRYQKhwWw1UQ2CurTr3I8X3tqKT+WC/FzF7PmXQJw0Z3sb13xl/3zCgopGRyHH nQe0Or4pnSf3hxXQ9/2fcJm9WKcTrsfrVDb30YMYxM2YUTJR2mv7+c81YKOghi9J YI50087jerSrxRjPap8upVsp/v/F3xlo1v9saVAA6g6Q4HJGs7KS+wf3TjJtkD0R m65PFjLlbfcMmhCA4ZmG6LIarg== -----END CERTIFICATE-----Generated at Thu Sep 24 20:13:27 2026 by rpki-client