$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft File: tY0p97gQfxWFtf_nDFAsbI9dMwI.mft (raw, json) Hash identifier: IFwU9wr4g6cC6FjtsbitSoNPuJ6RVfjdS8onXMH5frI= Subject key identifier: 0C:DE:AA:FC:A8:32:89:18:D7:B8:95:59:55:0D:77:DF:7C:CC:05:38 Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Certificate serial: 095E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft Manifest number: 093E Signing time: Tue 22 Sep 2026 20:00:02 +0000 Manifest this update: Tue 22 Sep 2026 20:00:02 +0000 Manifest next update: Tue 29 Sep 2026 20:00:02 +0000 Files and hashes: 1: tY0p97gQfxWFtf_nDFAsbI9dMwI.crl (hash: yeOHheVgrBb7vb3f2dy8aKMQ6c17gSoMvmlBImMJ+Zc=) 2: F6F5BCCE53E711F084348F87C4F9AE02.roa (hash: 30DNpUpUJwy2It5xAnDm6pl6G00ZZjWgrPOcvF+5H9w=) 3: 3C3F21BAD6F011EE9B38B67DC4F9AE02.roa (hash: Vl3ljhabWGTlG6GqBHRNZlqYXeuSFP4BoWLikf0UCmo=) 4: C33EB0EC7C4211EB933D233EC4F9AE02.roa (hash: gl38JCfINuQj5r+ArpGOl2htLCM9Mgwqo9xw/lh130Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2398 (0x95e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CA4, serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Validity Not Before: Sep 22 20:00:02 2026 GMT Not After : Sep 29 20:00:02 2026 GMT Subject: CN=6ab2de42-b9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:cc:3c:b3:6f:e7:df:0b:21:dc:a2:1a:e6: 2d:95:82:32:8b:4b:c9:af:55:62:1f:7c:a5:b2:1e: 38:7b:ae:3a:f5:5b:19:18:f1:9c:2c:4c:ff:06:23: dd:8a:8c:ab:51:e1:63:cf:a3:05:56:ba:90:9e:1f: 5e:1a:a4:6b:d0:c4:a1:66:71:ef:7c:44:ef:c9:69: d2:29:d5:d9:5c:d1:8f:3e:a0:b6:83:cd:b0:4a:57: 2e:f8:eb:da:62:8b:33:59:0f:fa:5e:51:65:1d:a0: 40:c8:c8:70:46:89:01:e3:e0:28:af:dc:83:48:a0: d5:34:6f:c8:b3:16:00:6c:11:b1:f4:e1:43:1d:fe: c7:99:84:fe:6c:a3:0d:ea:95:95:9a:5d:9c:4c:f4: a8:a1:0c:02:40:01:04:b1:d1:18:e2:ed:1d:4f:78: c5:31:a7:c2:a2:5b:28:f5:be:d2:32:47:fa:af:14: f6:77:04:e1:f6:31:be:59:47:14:38:ca:6f:e9:32: 6d:bd:19:c1:be:53:96:46:e8:33:4f:55:88:f0:af: 4e:61:2b:26:3f:4a:a8:8f:0e:13:e8:27:10:53:5d: f0:98:2b:3e:59:f8:d9:a2:60:16:31:91:8b:6d:52: de:4a:76:19:fc:ea:77:85:25:a6:74:2b:f5:01:48: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DE:AA:FC:A8:32:89:18:D7:B8:95:59:55:0D:77:DF:7C:CC:05:38 X509v3 Authority Key Identifier: keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:45:e5:ae:fa:95:f2:eb:e2:fa:f3:1e:e4:ca:e2:66:8c:f1: ae:80:52:87:73:2b:cd:d4:f7:2f:02:c7:08:52:17:61:74:67: a1:91:73:a9:17:b1:43:57:71:cf:40:51:67:4e:95:85:c4:77: fc:e8:8d:30:9b:24:9e:9b:21:0f:31:ae:e2:06:db:78:da:cf: 28:c4:40:f1:52:1f:6c:ee:ff:64:4a:58:cf:3b:04:a3:dc:df: 21:5a:54:dc:13:36:f7:a6:6d:20:b3:45:13:fe:34:9c:92:5b: e8:9e:1d:6d:e0:c0:62:4f:96:aa:74:f6:dd:85:27:37:6f:73: c1:b5:5e:2a:86:62:13:5b:e9:1d:a0:b0:07:bd:e1:69:7b:82: 52:2e:01:33:be:10:c8:0c:e8:3f:77:a3:ce:45:50:e9:4b:8d: cc:61:15:8f:85:b6:0c:6a:0f:f9:16:1d:49:ff:a5:36:40:94: 2b:4e:66:18:47:77:9e:76:3c:af:87:99:4f:a6:91:ad:89:0f: 21:1a:0a:bb:4e:a4:a3:d1:e8:46:af:2e:de:12:cf:20:c9:73: 1b:37:98:4d:9c:cd:c2:3e:b8:88:4c:0f:12:25:26:2c:86:6c: 15:64:c6:f5:52:ae:12:bf:5c:dd:0d:76:9b:fb:21:81:67:ff: 4b:15:36:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQTQxMTAvBgNVBAUTKEI1OEQyOUY3QjgxMDdGMTU4NUI1RkZFNzBDNTAyQzZD OEY1RDMzMDIwHhcNMjYwOTIyMjAwMDAyWhcNMjYwOTI5MjAwMDAyWjAYMRYwFAYD VQQDEw02YWIyZGU0Mi1iOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiPMPLNv598LIdyiGuYtlYIyi0vJr1ViH3ylsh44e6469VsZGPGcLEz/BiPd ioyrUeFjz6MFVrqQnh9eGqRr0MShZnHvfETvyWnSKdXZXNGPPqC2g82wSlcu+Ova YoszWQ/6XlFlHaBAyMhwRokB4+Aor9yDSKDVNG/IsxYAbBGx9OFDHf7HmYT+bKMN 6pWVml2cTPSooQwCQAEEsdEY4u0dT3jFMafColso9b7SMkf6rxT2dwTh9jG+WUcU OMpv6TJtvRnBvlOWRugzT1WI8K9OYSsmP0qojw4T6CcQU13wmCs+WfjZomAWMZGL bVLeSnYZ/Op3hSWmdCv1AUhVSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzeqvyo MokY17iVWVUNd998zAU4MB8GA1UdIwQYMBaAFLWNKfe4EH8VhbX/5wxQLGyPXTMC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NBNC8xNUY2OEI1Q0NG MTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4V0Z0Zl9uREZBc2JJOWRN d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RZMHA5N2dRZnhXRnRmX25ERkFzYkk5ZE13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NBNC8xNUY2OEI1Q0NGMTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4 V0Z0Zl9uREZBc2JJOWRNd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABkXlrvqV8uvi+vMe5MriZozxroBSh3MrzdT3LwLHCFIXYXRnoZFzqRexQ1dx z0BRZ06VhcR3/OiNMJsknpshDzGu4gbbeNrPKMRA8VIfbO7/ZEpYzzsEo9zfIVpU 3BM296ZtILNFE/40nJJb6J4dbeDAYk+WqnT23YUnN29zwbVeKoZiE1vpHaCwB73h aXuCUi4BM74QyAzoP3ejzkVQ6UuNzGEVj4W2DGoP+RYdSf+lNkCUK05mGEd3nnY8 r4eZT6aRrYkPIRoKu06ko9HoRq8u3hLPIMlzGzeYTZzNwj64iEwPEiUmLIZsFWTG 9VKuEr9c3Q12m/shgWf/SxU2Bg== -----END CERTIFICATE-----Generated at Wed Sep 23 17:36:39 2026 by rpki-client