$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: KWG7k6ynHDzWMnWg5AobBDIr/r1HEq/+uWxuQ/2/X7c= Subject key identifier: 22:59:81:03:64:79:1D:36:98:54:65:93:22:1A:87:40:31:07:CB:30 Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0DAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0D81 Signing time: Fri 02 Oct 2026 18:18:48 +0000 Manifest this update: Fri 02 Oct 2026 18:18:47 +0000 Manifest next update: Fri 09 Oct 2026 18:18:47 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: hCFbbdRhwzM+y4K37SDu2Bl+ILgPiXnSQ3pQL6/apnY=) 2: F824C588FF7A11F0B218EB915B6F56BC.roa (hash: HYftwyur4yF/367rCi/mAUGJX4KwI7u7839C5kVZ7Sc=) 3: 4F383CB6FF6B11F0AD4BC885576F56BC.roa (hash: WGJtveG7MyCaKyrbykvOBWfbJGid2bolS7+yA+NkoTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3503 (0xdaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Oct 2 18:18:47 2026 GMT Not After : Oct 9 18:18:47 2026 GMT Subject: CN=6abff587-b9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1a:81:03:07:15:5a:01:05:26:4c:dc:c0:fc: 4c:ae:c3:94:e9:68:8c:95:e4:2a:9f:4e:8b:ab:ab: 79:76:ae:0e:da:bf:17:98:a5:48:7a:c4:e5:6e:c1: 3c:19:cf:0a:ea:64:80:04:b9:75:0c:5e:ec:6d:44: 1b:87:43:be:76:aa:6a:9a:03:dc:8d:5d:fd:aa:20: de:bc:d9:d1:26:15:31:81:88:2c:6f:0c:af:cf:a6: f3:f6:17:86:be:c4:e2:45:64:a2:87:b7:4e:3f:6d: 09:72:f3:fb:e6:93:fe:d3:c2:38:c0:a1:d8:0e:81: 4b:64:38:76:ad:90:12:b3:f8:99:d3:cc:b9:14:6c: 22:49:88:09:c7:79:47:6d:d8:4e:ea:b5:66:55:e4: 0b:fc:e2:1e:06:8b:f6:9d:a3:33:97:9c:1c:ae:39: 8c:ef:57:67:5f:68:25:55:d4:6c:d0:fc:1f:3b:19: a6:c0:33:e3:6a:47:f0:57:f9:9b:14:11:c9:bf:e7: 34:ed:14:a4:ed:9d:67:61:a4:8e:83:e6:d4:42:6f: 85:23:f9:60:fd:82:a5:d7:da:9c:41:52:42:8c:df: 98:bf:0b:2b:04:6d:e2:d6:87:c3:0f:f5:dc:d6:e3: 5d:64:cd:5e:dc:a7:3e:b2:43:96:b8:74:0d:a9:26: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:59:81:03:64:79:1D:36:98:54:65:93:22:1A:87:40:31:07:CB:30 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:18:89:f2:7f:a0:5f:4e:57:cb:98:33:8b:b3:8e:dc:f3:c1: 85:c8:8b:b9:c3:56:99:7a:84:3e:5f:da:38:02:22:b2:c8:d6: 1f:19:31:ac:7c:1e:ec:5a:98:7b:51:22:5f:0d:69:fb:46:c4: 3e:af:12:3c:b0:24:b4:ca:ed:67:54:9d:15:37:fc:f6:ff:89: 90:61:2e:76:d3:97:63:7d:f2:6e:f2:ff:ea:36:af:8c:ab:b6: 1b:61:cf:3a:c1:90:5b:89:5e:76:6c:68:0b:a9:a6:40:57:ed: 7a:64:e0:02:38:d5:b7:db:3b:05:8d:00:c0:45:63:c1:04:f4: e7:ed:3c:17:88:85:5f:04:97:25:9b:a0:54:6f:f7:50:3a:79: 13:19:43:dc:dc:18:cd:37:21:5a:ab:a6:be:f4:2c:ad:cb:05: 6e:63:cf:40:78:22:31:50:7c:c7:15:d6:a8:68:d9:cf:00:b5: d8:ce:65:0e:ee:5d:e7:74:c7:ab:3a:73:57:a0:83:3d:d0:65: 1f:d8:35:84:41:a7:9e:85:ff:90:8c:d0:a5:72:94:64:f1:12: c7:68:6a:1d:f5:21:6e:5c:c7:84:4c:d8:89:8d:56:dc:cd:a9: 80:26:b1:9a:2b:75:e8:b2:a8:b6:35:51:c8:fc:49:b0:14:73: 17:0b:45:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjYxMDAyMTgxODQ3WhcNMjYxMDA5MTgxODQ3WjAYMRYwFAYD VQQDEw02YWJmZjU4Ny1iOWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhqBAwcVWgEFJkzcwPxMrsOU6WiMleQqn06Lq6t5dq4O2r8XmKVIesTlbsE8 Gc8K6mSABLl1DF7sbUQbh0O+dqpqmgPcjV39qiDevNnRJhUxgYgsbwyvz6bz9heG vsTiRWSih7dOP20JcvP75pP+08I4wKHYDoFLZDh2rZASs/iZ08y5FGwiSYgJx3lH bdhO6rVmVeQL/OIeBov2naMzl5wcrjmM71dnX2glVdRs0PwfOxmmwDPjakfwV/mb FBHJv+c07RSk7Z1nYaSOg+bUQm+FI/lg/YKl19qcQVJCjN+YvwsrBG3i1ofDD/Xc 1uNdZM1e3Kc+skOWuHQNqSY8pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJZgQNk eR02mFRlkyIah0AxB8swMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhxiJ8n+gX05Xy5gzi7OO3PPBhciLucNWmXqEPl/aOAIissjWHxkxrHwe7FqY e1EiXw1p+0bEPq8SPLAktMrtZ1SdFTf89v+JkGEudtOXY33ybvL/6javjKu2G2HP OsGQW4ledmxoC6mmQFftemTgAjjVt9s7BY0AwEVjwQT05+08F4iFXwSXJZugVG/3 UDp5ExlD3NwYzTchWqumvvQsrcsFbmPPQHgiMVB8xxXWqGjZzwC12M5lDu5d53TH qzpzV6CDPdBlH9g1hEGnnoX/kIzQpXKUZPESx2hqHfUhblzHhEzYiY1W3M2pgCax mit16LKotjVRyPxJsBRzFwtFAw== -----END CERTIFICATE-----Generated at Sun Oct 4 02:44:21 2026 by rpki-client