$ rpki-client -vvvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft File: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft (raw, json) Hash identifier: 3qKWPgAsS3NV9z+Jxb3DlCOP+hh2jGvsaRpV6936x4g= Subject key identifier: 2B:91:7B:69:FA:14:86:15:74:73:3F:63:F2:E4:B0:E2:90:82:EB:CF Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB Certificate issuer: /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft Manifest number: 9E Signing time: Thu 24 Sep 2026 20:28:02 +0000 Manifest this update: Thu 24 Sep 2026 20:28:01 +0000 Manifest next update: Thu 01 Oct 2026 20:28:01 +0000 Files and hashes: 1: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl (hash: POy4iBkzMMqCmCtcSP/aHazfcQ2ZEuyPrS9648kjYjQ=) 2: 527245ACD42311F0A8A37057C4F9AE02.roa (hash: 90KcSYGKJ6Yif8EcJa/nVE5hc/e19RIZHwPBzlm+xR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Validity Not Before: Sep 24 20:28:01 2026 GMT Not After : Oct 1 20:28:01 2026 GMT Subject: CN=6ab587d1-def4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:c5:35:f6:8a:53:06:61:87:4c:02:d0:3d: 8a:46:13:10:83:b1:9f:54:cf:4b:24:5b:91:c2:44: fa:b4:bd:c4:56:74:66:65:ce:b0:2d:ab:0c:a1:52: 19:98:cd:67:49:1f:29:ff:be:84:b5:23:65:88:07: 49:58:b4:1e:72:f8:ca:5a:2c:d1:e1:34:f9:fd:f2: 8f:0c:00:9a:ae:d3:24:ad:de:0d:ed:91:62:69:97: 6d:6d:25:12:0c:cb:8e:0e:a1:35:44:a3:64:8b:5a: 9b:48:49:f0:c8:3d:80:5e:4c:35:bc:ad:a6:0a:1b: 2f:7c:f9:23:39:b1:9b:b2:85:7e:a1:2b:48:2d:ec: 65:86:a4:dc:c3:23:9a:53:4a:0e:c9:66:71:58:96: 41:e6:a3:b7:c8:dc:6e:45:bc:5d:38:06:d4:09:8c: ae:21:41:51:09:e1:e1:cf:ee:b3:92:03:f6:5e:e7: de:56:b4:34:88:d0:14:74:5a:a4:be:29:74:1b:d7: f8:24:a0:19:f6:b2:b2:38:79:09:f6:da:0a:ad:ab: 4e:08:40:03:a4:d7:7f:d3:b8:15:46:79:46:2a:71: 2d:02:cd:10:8e:d0:7a:5a:f1:8d:a4:eb:dc:5a:8a: 38:ab:1d:0e:c6:7f:57:ce:64:be:73:67:3f:36:64: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:91:7B:69:FA:14:86:15:74:73:3F:63:F2:E4:B0:E2:90:82:EB:CF X509v3 Authority Key Identifier: keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e8:58:c3:d9:d5:86:d3:14:8e:af:f9:88:e8:92:06:9e:12: 8f:f1:88:72:fe:7c:d9:73:63:14:84:43:91:08:1b:58:ed:ea: e4:de:7b:23:72:b9:53:4c:17:d5:7f:89:fa:b2:4f:ae:67:72: 49:c2:fb:28:0b:35:0b:c8:39:5a:79:21:e3:77:32:5c:92:37: 85:60:b9:4b:ab:6b:6a:cb:1e:09:9e:18:9b:06:d3:f8:f1:ec: d3:1e:a3:50:46:59:7b:6a:db:35:2f:e7:89:54:15:1a:56:d3: 70:8b:3a:c2:64:8e:d1:d8:c7:7b:de:51:ae:ef:29:2f:dd:f5: 05:45:e7:c6:30:84:8d:08:6e:13:5f:f3:f7:be:98:9d:9d:e8: 16:49:8a:c1:72:e2:37:33:39:94:69:be:9c:79:35:39:89:24: 92:5b:3c:9c:6a:1a:de:34:31:11:39:50:9e:ba:37:f3:1b:a6: 36:f3:51:3e:d8:d9:44:f6:45:80:b6:d0:1e:0f:7b:25:38:ba: fa:01:38:1a:c1:ee:50:34:74:c0:27:f1:1e:53:a1:ba:23:c3: 5b:a2:58:4a:56:67:91:2f:b4:64:17:5c:90:94:7a:28:01:b8: 66:09:2e:de:cd:03:d3:a9:63:34:d8:23:c4:fe:e6:ec:9b:f3: 92:32:e6:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk0RDExMTAvBgNVBAUTKEI2OTRBOEM1MjhGMEI5QTRENDUzQkM0NDIwRTUwQjUx OURDRkQwQUIwHhcNMjYwOTI0MjAyODAxWhcNMjYxMDAxMjAyODAxWjAYMRYwFAYD VQQDEw02YWI1ODdkMS1kZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjDFNfaKUwZhh0wC0D2KRhMQg7GfVM9LJFuRwkT6tL3EVnRmZc6wLasMoVIZ mM1nSR8p/76EtSNliAdJWLQecvjKWizR4TT5/fKPDACartMkrd4N7ZFiaZdtbSUS DMuODqE1RKNki1qbSEnwyD2AXkw1vK2mChsvfPkjObGbsoV+oStILexlhqTcwyOa U0oOyWZxWJZB5qO3yNxuRbxdOAbUCYyuIUFRCeHhz+6zkgP2XufeVrQ0iNAUdFqk vil0G9f4JKAZ9rKyOHkJ9toKratOCEADpNd/07gVRnlGKnEtAs0QjtB6WvGNpOvc Woo4qx0Oxn9XzmS+c2c/NmR1UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuRe2n6 FIYVdHM/Y/LksOKQguvPMB8GA1UdIwQYMBaAFLaUqMUo8Lmk1FO8RCDlC1Gdz9Cr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTREMS85NTBENzcwMkNF NkUxMUYwQjAwMUVENEZDNEY5QUUwMi90cFNveFNqd3VhVFVVN3hFSU9VTFVaM1Aw S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RwU294U2p3dWFUVVU3eEVJT1VMVVozUDBLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTREMS85NTBENzcwMkNFNkUxMUYwQjAwMUVENEZDNEY5QUUwMi90cFNveFNqd3Vh VFVVN3hFSU9VTFVaM1AwS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkehYw9nVhtMUjq/5iOiSBp4Sj/GIcv582XNjFIRDkQgbWO3q5N57I3K5U0wX 1X+J+rJPrmdyScL7KAs1C8g5Wnkh43cyXJI3hWC5S6trasseCZ4YmwbT+PHs0x6j UEZZe2rbNS/niVQVGlbTcIs6wmSO0djHe95Rru8pL931BUXnxjCEjQhuE1/z976Y nZ3oFkmKwXLiNzM5lGm+nHk1OYkkkls8nGoa3jQxETlQnro38xumNvNRPtjZRPZF gLbQHg97JTi6+gE4GsHuUDR0wCfxHlOhuiPDW6JYSlZnkS+0ZBdckJR6KAG4Zgku 3s0D06ljNNgjxP7m7JvzkjLmiQ== -----END CERTIFICATE-----Generated at Fri Sep 25 05:14:01 2026 by rpki-client