$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft File: TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json) Hash identifier: JmvYxSo2zbp9I43/I0bqVzeDTkeq/IFWKkq17juBfAw= Subject key identifier: F5:41:67:CB:5B:D2:CF:E2:77:16:DF:97:9F:5A:4D:8F:F0:BB:4E:0F Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 Certificate issuer: /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft Manifest number: 0CCE Signing time: Tue 22 Sep 2026 18:21:53 +0000 Manifest this update: Tue 22 Sep 2026 18:21:53 +0000 Manifest next update: Tue 29 Sep 2026 18:21:53 +0000 Files and hashes: 1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: W2TAvAt6KgI+Qey/4mFB6fkUJPEajT4MBTW1LMirF5g=) 2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: fCQoX/IOk+ffJFhlDwImCtw5kH5m+tUwlmOkb8YNpXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5533, serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Validity Not Before: Sep 22 18:21:53 2026 GMT Not After : Sep 29 18:21:53 2026 GMT Subject: CN=6ab2c741-41cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:5d:47:99:96:2c:25:cf:57:c8:37:3e:40: 9d:ba:f4:3e:10:1a:e1:e1:69:81:55:e6:0d:ef:f3: db:68:b9:ad:21:8f:07:ec:46:b4:ec:90:4b:80:14: db:76:e2:22:8b:63:ee:d6:2c:11:47:16:87:2e:e0: 5c:e7:ac:13:6e:13:62:46:23:07:44:ea:15:ca:17: 94:f6:97:90:0b:5f:24:2f:e4:74:38:93:eb:87:95: 8b:a9:3c:2e:15:ec:44:91:fa:af:82:6e:57:0a:d8: 72:7a:9b:67:8d:bd:a1:20:b5:c0:3e:49:da:0f:41: 2f:08:31:1d:34:60:1b:ca:87:6f:e2:17:4e:8a:8c: 0b:e5:ca:b4:ef:56:57:f6:23:d0:3a:60:28:16:8c: c4:42:c6:08:8c:12:e7:c2:92:57:f9:8c:0e:e8:29: 70:a8:8d:9a:a1:e8:fd:0f:05:51:cc:c2:00:e8:d5: 6a:37:5a:4b:51:55:6b:b4:14:31:f4:28:9b:af:39: 7b:20:e6:e0:34:2c:a8:61:0a:47:94:8c:4f:da:ad: b2:b8:93:76:68:f8:25:05:c6:4d:89:6c:3e:74:86: a0:16:84:dd:c0:65:8d:78:09:89:6d:15:d3:dc:91: a1:69:d9:7c:3e:d5:43:a0:6e:8d:a0:fe:d1:f1:4f: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:41:67:CB:5B:D2:CF:E2:77:16:DF:97:9F:5A:4D:8F:F0:BB:4E:0F X509v3 Authority Key Identifier: keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a5:5d:c8:7d:c8:ed:25:0f:37:11:a8:ac:ac:d3:ad:9f:32: 7c:c4:eb:fc:8d:f1:c5:f2:7e:0c:f1:84:ca:fd:9e:f7:6a:13: 7a:de:b6:45:a5:0a:2a:fd:80:f8:f8:c1:87:3a:bc:05:8e:8e: fe:eb:19:25:8d:c2:ad:b2:0b:64:aa:c3:9a:26:61:59:5c:6e: d6:9d:fc:20:3d:c8:2b:f6:40:99:35:ff:37:be:f2:5a:b7:bb: 5d:84:f8:f2:f2:0c:9f:dd:ed:ba:ea:8d:ad:0f:ef:0e:d1:8f: 59:c7:e3:d6:1a:25:9f:fc:10:0a:37:88:f3:6c:a3:de:8b:4a: 89:75:53:3b:3b:90:0f:09:22:19:c3:36:ab:5d:ff:a0:11:bf: 9b:aa:1d:7e:39:8e:37:97:12:25:35:f5:98:a9:dd:b0:cb:05: 49:08:35:18:0c:d4:be:5f:34:f9:79:80:0a:41:b3:f0:fc:c9: 30:d2:61:0c:e1:18:4d:48:b2:e3:29:c8:25:59:f0:7c:5c:2c: 76:0d:1b:35:a8:1e:50:a4:28:f9:93:9a:f0:38:63:d9:c9:7c: 87:f3:3d:38:6d:ff:a7:1e:85:2b:47:e0:40:0f:c9:24:ff:39: 8a:38:dd:7d:ec:7c:86:71:20:2e:f0:f9:d0:0d:54:95:c1:26: 96:af:9f:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1MzMxMTAvBgNVBAUTKDRDODFGMDE5M0ExQzU3MjQ0NTdGNTJFMDRFMTFGMjUy NzNFNkZFRTAwHhcNMjYwOTIyMTgyMTUzWhcNMjYwOTI5MTgyMTUzWjAYMRYwFAYD VQQDEw02YWIyYzc0MS00MWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyddR5mWLCXPV8g3PkCduvQ+EBrh4WmBVeYN7/PbaLmtIY8H7Ea07JBLgBTb duIii2Pu1iwRRxaHLuBc56wTbhNiRiMHROoVyheU9peQC18kL+R0OJPrh5WLqTwu FexEkfqvgm5XCthyeptnjb2hILXAPknaD0EvCDEdNGAbyodv4hdOiowL5cq071ZX 9iPQOmAoFozEQsYIjBLnwpJX+YwO6ClwqI2aoej9DwVRzMIA6NVqN1pLUVVrtBQx 9Cibrzl7IObgNCyoYQpHlIxP2q2yuJN2aPglBcZNiWw+dIagFoTdwGWNeAmJbRXT 3JGhadl8PtVDoG6NoP7R8U+zbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVBZ8tb 0s/idxbfl59aTY/wu04PMB8GA1UdIwQYMBaAFEyB8Bk6HFckRX9S4E4R8lJz5v7g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTUzMy8wNjExNTFGMjFB NEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5UkZmMUxnVGhIeVVuUG1f dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RJSHdHVG9jVnlSRmYxTGdUaEh5VW5QbV91QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTUzMy8wNjExNTFGMjFBNEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5 UkZmMUxnVGhIeVVuUG1fdUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOaVdyH3I7SUPNxGorKzTrZ8yfMTr/I3xxfJ+DPGEyv2e92oTet62RaUKKv2A +PjBhzq8BY6O/usZJY3CrbILZKrDmiZhWVxu1p38ID3IK/ZAmTX/N77yWre7XYT4 8vIMn93tuuqNrQ/vDtGPWcfj1holn/wQCjeI82yj3otKiXVTOzuQDwkiGcM2q13/ oBG/m6odfjmON5cSJTX1mKndsMsFSQg1GAzUvl80+XmACkGz8PzJMNJhDOEYTUiy 4ynIJVnwfFwsdg0bNageUKQo+ZOa8Dhj2cl8h/M9OG3/px6FK0fgQA/JJP85ijjd fex8hnEgLvD50A1UlcEmlq+fAw== -----END CERTIFICATE-----Generated at Wed Sep 23 05:24:26 2026 by rpki-client