$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json) Hash identifier: i1RckTueRBMz3lmWU5s4C1Uy6K6bKJ0WaGsOF1yTE7I= Subject key identifier: 4A:4A:DD:06:FD:DF:6B:12:0B:E5:A9:D9:30:52:A3:59:2A:24:2F:99 Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft Manifest number: 01CA Signing time: Fri 25 Sep 2026 03:53:00 +0000 Manifest this update: Fri 25 Sep 2026 03:53:00 +0000 Manifest next update: Fri 02 Oct 2026 03:53:00 +0000 Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: QLYimheYFRoOlc9dnAf1XIncYns/jD68VY67Q+IMiIg=) 2: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: vRQ6HdkSj/Wf7+vduG5A9cFn7YJoyEBj6p0aYIaPJ/w=) 3: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: SsVxQtDk/Oa1shqSFxMi2LpzccLXqJhR2Mhs5lXheR4=) 4: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: 5D/Ry/8ZP2E54WupdxSy/KsQmqjx8wwM6c9M/jH7pYs=) 5: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: +2GaHe5cWbVmXD0EaHkbTYfFj1TTwinsmIfZx+qjcRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: Sep 25 03:53:00 2026 GMT Not After : Oct 2 03:53:00 2026 GMT Subject: CN=6ab5f01c-bbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:13:e4:1d:f7:9c:8b:67:5c:88:77:cb:62: a9:55:0c:eb:76:46:c0:a8:c3:b9:a8:8e:b9:2c:d3: ec:6c:41:70:a7:34:cc:7a:48:ed:78:bc:96:c1:00: 7e:b4:ea:5c:ca:d4:ff:7b:d9:aa:3a:94:be:b1:2c: de:6f:0f:a0:92:85:d5:48:d3:5d:cb:7c:35:f5:87: e1:f0:33:84:a0:4c:0f:6b:25:c0:f3:1b:dd:d0:74: f3:ff:09:83:01:31:ba:8e:23:a3:15:64:3e:fb:e4: e5:6b:85:05:02:46:96:d7:eb:3f:da:b4:10:3f:c9: f8:eb:d9:9f:10:7d:bf:57:95:4f:5e:ac:9a:09:dd: cf:95:ac:6d:8d:c8:fe:7b:81:6e:77:3a:a4:cf:5f: 7f:1b:c0:94:78:c9:bc:2e:10:f4:fe:b9:01:c3:6f: 7a:25:7e:bd:50:57:39:56:ad:dc:a2:73:db:ae:27: 81:0c:eb:45:07:8b:77:09:2b:61:6f:7f:aa:af:1d: 38:b7:69:53:d4:aa:15:c1:48:6e:48:6d:dc:e0:24: 6e:ac:e1:ca:03:28:8a:01:e7:7b:79:c4:e5:78:b2: 02:51:52:c2:f4:35:f4:b2:6b:5c:4d:57:dc:99:aa: c7:ab:41:2c:18:57:d7:cd:23:2b:e9:b7:2e:40:39: b4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4A:DD:06:FD:DF:6B:12:0B:E5:A9:D9:30:52:A3:59:2A:24:2F:99 X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:fa:d3:4f:9f:db:39:84:79:bf:5e:e4:5e:35:85:44:86:ee: 5c:b0:d3:d5:35:8b:a7:a5:8f:58:00:35:5d:83:0b:45:69:66: b2:83:44:1a:83:5b:9b:b1:76:21:30:8e:25:60:9e:e4:c1:c9: a3:4d:24:4f:90:0c:9f:01:f4:d0:7c:69:63:09:1c:45:a4:ed: bf:99:4a:da:1f:c4:34:d1:ac:f2:b2:a5:3f:c2:e5:bc:ca:b1: bf:09:57:a8:bc:59:7c:85:a0:3d:e6:bc:78:fa:b7:6a:1c:91: 35:9d:5c:0f:39:0e:2d:ce:c9:41:59:8c:8c:2c:98:5d:3b:ad: ed:f1:24:f5:06:9f:d8:10:af:ef:fd:ea:5d:6d:78:4e:5a:10: fc:23:fd:9b:45:30:f3:d0:8a:87:ea:70:52:e6:ff:90:22:7c: 40:c1:2b:84:a2:6a:87:7d:22:8e:8d:ce:bf:dd:9f:40:ef:92: 4b:92:41:bf:04:9d:0e:ef:35:02:8e:52:ec:1d:ab:2b:7a:e2: 2e:0a:7c:8c:b8:b5:3c:db:0d:cc:cc:91:ff:84:be:19:da:1c: 69:ad:31:30:ac:65:0c:75:46:43:77:78:59:98:1c:1a:0d:3e: d6:30:28:a8:29:26:57:9d:cd:2a:2f:52:79:28:f3:e3:c1:99: 66:70:e4:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjYwOTI1MDM1MzAwWhcNMjYxMDAyMDM1MzAwWjAYMRYwFAYD VQQDEw02YWI1ZjAxYy1iYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnm4T5B33nItnXIh3y2KpVQzrdkbAqMO5qI65LNPsbEFwpzTMekjteLyWwQB+ tOpcytT/e9mqOpS+sSzebw+gkoXVSNNdy3w19Yfh8DOEoEwPayXA8xvd0HTz/wmD ATG6jiOjFWQ+++Tla4UFAkaW1+s/2rQQP8n469mfEH2/V5VPXqyaCd3Plaxtjcj+ e4Fudzqkz19/G8CUeMm8LhD0/rkBw296JX69UFc5Vq3conPbrieBDOtFB4t3CSth b3+qrx04t2lT1KoVwUhuSG3c4CRurOHKAyiKAed7ecTleLICUVLC9DX0smtcTVfc marHq0EsGFfXzSMr6bcuQDm0BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpK3Qb9 32sSC+Wp2TBSo1kqJC+ZMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda aWh6SlVLeHZvUXZHQUZpUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYfrTT5/bOYR5v17kXjWFRIbuXLDT1TWLp6WPWAA1XYMLRWlmsoNEGoNbm7F2 ITCOJWCe5MHJo00kT5AMnwH00HxpYwkcRaTtv5lK2h/ENNGs8rKlP8LlvMqxvwlX qLxZfIWgPea8ePq3ahyRNZ1cDzkOLc7JQVmMjCyYXTut7fEk9Qaf2BCv7/3qXW14 TloQ/CP9m0Uw89CKh+pwUub/kCJ8QMErhKJqh30ijo3Ov92fQO+SS5JBvwSdDu81 Ao5S7B2rK3riLgp8jLi1PNsNzMyR/4S+Gdocaa0xMKxlDHVGQ3d4WZgcGg0+1jAo qCkmV53NKi9SeSjz48GZZnDkrg== -----END CERTIFICATE-----Generated at Sat Sep 26 19:47:20 2026 by rpki-client