$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.mft File: tWRGBtORWu0wJkF2VCwu2O8CeJA.mft (raw, json) Hash identifier: apTPWC14tea7ytldaf0OYsvKX+O+1T5Mh8cIPoAKKrg= Subject key identifier: 68:48:AF:B7:DD:9C:40:0B:75:3D:8D:18:51:84:14:E8:F7:D0:D7:13 Authority key identifier: B5:64:46:06:D3:91:5A:ED:30:26:41:76:54:2C:2E:D8:EF:02:78:90 Certificate issuer: /CN=A91A159D/serialNumber=B5644606D3915AED30264176542C2ED8EF027890 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWRGBtORWu0wJkF2VCwu2O8CeJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.mft Manifest number: 18 Signing time: Mon 21 Sep 2026 08:57:56 +0000 Manifest this update: Mon 21 Sep 2026 08:57:56 +0000 Manifest next update: Mon 28 Sep 2026 08:57:56 +0000 Files and hashes: 1: tWRGBtORWu0wJkF2VCwu2O8CeJA.crl (hash: n2BUBjSG/SHVFt76n8cPZJeqQcVfhfJe6MszuTS5dos=) 2: B8B891B2948611F1A1FE4C366411F970.roa (hash: zmgpjZCA2cIXOSiaApPzxiyWMPIEecTYVbHhOasawDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.crl rsync://rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWRGBtORWu0wJkF2VCwu2O8CeJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A159D, serialNumber=B5644606D3915AED30264176542C2ED8EF027890 Validity Not Before: Sep 21 08:57:56 2026 GMT Not After : Sep 28 08:57:56 2026 GMT Subject: CN=6ab0f194-8383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:44:06:ae:5b:75:50:91:79:b3:54:fd:62: 59:39:46:23:90:59:83:36:b0:4d:90:8f:df:3c:e5: 65:db:ea:29:e1:6b:c2:64:89:f1:2b:3b:f4:59:6a: 91:d7:c0:69:aa:79:f8:b8:a5:fa:ab:3a:5b:67:5d: bf:3c:a2:fe:69:38:29:d4:48:e2:e6:d3:4b:23:42: b5:9c:13:6b:d8:92:72:c9:31:1a:3c:6c:ad:5a:a1: 36:4c:1d:94:0b:50:4b:f9:b2:a7:a1:75:d1:30:c5: f2:3f:2b:3c:19:d5:f9:c7:ba:c1:7a:82:e8:8d:76: d8:01:6c:e1:98:99:ba:5d:ab:6b:02:86:96:d1:22: dc:a3:38:a8:06:4a:2e:0c:63:75:86:0c:37:8e:1f: b3:4d:13:be:af:36:f3:73:26:7f:13:73:4e:94:4e: 09:7c:a1:d4:8f:ba:b0:82:2c:a2:31:73:24:80:1b: 78:a9:a1:12:3f:18:86:9b:e4:9c:d5:44:8a:c3:87: 00:4f:e6:3b:3d:79:be:31:80:0d:5b:23:1e:6a:4e: f9:50:12:6d:57:57:db:cb:26:f8:fa:34:db:55:45: ba:a4:da:ef:0a:c8:fe:41:89:20:12:78:a8:e6:4c: 04:1e:be:27:31:42:73:c3:33:1e:e1:dd:f7:fb:c2: bc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:48:AF:B7:DD:9C:40:0B:75:3D:8D:18:51:84:14:E8:F7:D0:D7:13 X509v3 Authority Key Identifier: keyid:B5:64:46:06:D3:91:5A:ED:30:26:41:76:54:2C:2E:D8:EF:02:78:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWRGBtORWu0wJkF2VCwu2O8CeJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:a5:f8:47:72:ce:23:3d:b1:2f:ed:a4:8a:b9:77:58:50:1b: 04:f0:01:ae:f5:93:27:25:04:85:e4:3e:f9:88:96:14:32:d9: 3b:aa:2e:b6:0f:0b:6a:1e:1a:54:8a:6b:34:6b:4a:18:8d:e7: 15:06:65:ee:5d:83:a8:71:d0:d0:5e:0e:db:68:29:ab:dd:89: 15:eb:8e:3b:fe:fc:7b:fa:7b:ee:35:91:19:75:d2:52:72:8e: d1:35:a3:24:8c:51:7e:c6:80:0b:e7:e6:5d:a2:b6:70:48:fd: 71:64:fc:da:03:9c:86:8c:44:8b:67:a9:b0:c6:8f:16:bf:c5: fd:94:4e:cf:06:f8:cb:aa:59:05:22:bf:c8:d0:94:13:37:f2: b1:36:43:9f:fc:de:8a:3e:13:12:ed:87:1e:41:52:6d:ed:7f: bc:f6:17:25:7d:7d:69:b1:f9:4b:4b:4d:c2:6c:b7:a3:12:1b: c9:83:e5:e4:c3:94:1a:e5:0d:45:29:6f:ab:12:af:2d:9d:3e: 67:d3:46:b7:0e:ba:bd:8d:36:cd:74:2b:fa:9f:9a:e7:f5:e6: 66:24:f5:71:e1:10:38:76:73:eb:26:22:32:30:4f:8b:6d:67: 80:f0:5b:5d:cd:04:7b:49:ac:9c:b0:6b:38:68:fe:f0:8e:c9: 74:95:1b:2e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTU5RDExMC8GA1UEBRMoQjU2NDQ2MDZEMzkxNUFFRDMwMjY0MTc2NTQyQzJFRDhF RjAyNzg5MDAeFw0yNjA5MjEwODU3NTZaFw0yNjA5MjgwODU3NTZaMBgxFjAUBgNV BAMTDTZhYjBmMTk0LTgzODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvJkQGrlt1UJF5s1T9Ylk5RiOQWYM2sE2Qj9885WXb6inha8JkifErO/RZapHX wGmqefi4pfqrOltnXb88ov5pOCnUSOLm00sjQrWcE2vYknLJMRo8bK1aoTZMHZQL UEv5sqehddEwxfI/KzwZ1fnHusF6guiNdtgBbOGYmbpdq2sChpbRItyjOKgGSi4M Y3WGDDeOH7NNE76vNvNzJn8Tc06UTgl8odSPurCCLKIxcySAG3ipoRI/GIab5JzV RIrDhwBP5js9eb4xgA1bIx5qTvlQEm1XV9vLJvj6NNtVRbqk2u8KyP5BiSASeKjm TAQevicxQnPDMx7h3ff7wrxNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaEivt92c QAt1PY0YUYQU6PfQ1xMwHwYDVR0jBBgwFoAUtWRGBtORWu0wJkF2VCwu2O8CeJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExNTlELzVGNkJCMzQ2OTQ4 NjExRjFCM0Y2QkEyOTY0MTFGOTcwL3RXUkdCdE9SV3Uwd0prRjJWQ3d1Mk84Q2VK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFdSR0J0T1JXdTB3SmtGMlZDd3UyTzhDZUpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx NTlELzVGNkJCMzQ2OTQ4NjExRjFCM0Y2QkEyOTY0MTFGOTcwL3RXUkdCdE9SV3Uw d0prRjJWQ3d1Mk84Q2VKQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAJpfhHcs4jPbEv7aSKuXdYUBsE8AGu9ZMnJQSF5D75iJYUMtk7qi62DwtqHhpU ims0a0oYjecVBmXuXYOocdDQXg7baCmr3YkV6447/vx7+nvuNZEZddJSco7RNaMk jFF+xoAL5+ZdorZwSP1xZPzaA5yGjESLZ6mwxo8Wv8X9lE7PBvjLqlkFIr/I0JQT N/KxNkOf/N6KPhMS7YceQVJt7X+89hclfX1psflLS03CbLejEhvJg+Xkw5Qa5Q1F KW+rEq8tnT5n00a3Drq9jTbNdCv6n5rn9eZmJPVx4RA4dnPrJiIyME+LbWeA8Ftd zQR7SaycsGs4aP7wjsl0lRsu -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:28 2026 by rpki-client