$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft File: TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json) Hash identifier: ukstLX8Rkf/caEXAPVp5r00n6HoyrHYoD2r05fLORoA= Subject key identifier: 92:B6:63:A7:AB:D0:86:F8:36:04:29:B8:2B:6E:1B:60:6C:65:35:F4 Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft Manifest number: 0268 Signing time: Wed 23 Sep 2026 02:04:41 +0000 Manifest this update: Wed 23 Sep 2026 02:04:40 +0000 Manifest next update: Wed 30 Sep 2026 02:04:40 +0000 Files and hashes: 1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: bsJT4E9m7Ui1VsrKfkqRiq5Zzwmtc3Qgm62FVSCh4iI=) 2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: T4FmHotpF1HHb51u8RCZ4c2+jncHifjTPC5b1o41MQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Validity Not Before: Sep 23 02:04:40 2026 GMT Not After : Sep 30 02:04:40 2026 GMT Subject: CN=6ab333b9-2a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:1c:0b:58:8e:56:3c:a0:61:14:be:d1:91: 55:12:ab:05:f7:db:ac:51:0e:ef:11:41:80:a6:2d: 5f:67:80:df:c8:e7:31:73:b2:8d:59:19:ac:48:e3: 18:c5:04:66:30:2e:37:8b:ac:83:e1:8b:d6:9e:a8: 1f:bf:e4:31:71:4f:ee:40:e7:bc:6a:4b:ea:c1:49: 32:7e:76:11:ef:bc:61:97:25:f1:ca:97:d6:e2:b4: fe:71:7a:77:70:df:d5:5f:81:eb:78:32:72:65:3d: 34:1e:71:03:8c:57:5c:80:02:1d:73:25:b0:5b:a3: f5:6b:ba:81:dd:95:0f:39:30:07:58:25:9b:ea:53: c5:74:85:33:cd:4e:82:8d:df:f8:9a:50:40:21:6b: fe:90:3b:78:05:a3:e2:77:36:a7:36:35:77:d8:02: 79:49:85:91:85:73:49:e3:d7:45:4f:05:39:ca:31: 3f:42:19:98:c5:5c:e0:c3:79:27:07:a3:6d:82:2b: a7:e8:c0:04:34:fb:26:e5:f6:99:c1:23:ea:b6:ef: 2d:88:d3:8c:a6:37:9d:71:fd:36:d8:27:ce:c8:d9: 74:31:f8:ef:d4:b9:f9:5d:da:90:ba:cb:a3:12:0f: 0f:28:73:c7:5e:37:05:9d:4c:45:1b:69:c0:4c:8c: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:63:A7:AB:D0:86:F8:36:04:29:B8:2B:6E:1B:60:6C:65:35:F4 X509v3 Authority Key Identifier: keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f9:d1:e8:85:53:36:b6:cb:0d:a9:76:a0:94:21:13:a8:41: 8f:17:34:72:f0:b7:bb:cb:b5:a9:93:b3:fc:e1:0e:e7:f8:0f: 4b:bf:e3:36:1b:63:5d:6b:e6:80:b5:e7:84:72:a2:00:e6:85: 61:4f:3a:b4:67:ec:7c:06:e5:9f:80:6f:cb:57:37:3f:78:3c: fa:fa:e1:2a:7b:16:f3:f1:d3:81:60:51:b2:6b:12:88:ea:93: 2a:25:9e:78:48:77:9f:ec:26:a3:3c:9a:99:b2:9d:65:26:83: 2f:28:ed:8f:ca:88:f1:f4:58:82:fa:47:7e:9f:64:65:59:36: a2:b5:67:97:39:ea:b5:04:07:f3:13:5a:b4:db:43:08:4d:e7: 2d:23:46:19:ef:68:c2:67:a3:c2:ca:12:6f:12:d8:b1:fe:dd: 7a:3a:6e:26:e8:9b:02:ab:1b:2c:7e:ac:56:b5:f7:d2:e4:eb: 6e:a7:5f:ba:b8:38:73:c3:d6:cd:04:a7:83:04:30:cd:39:a5: 92:d2:ca:b3:a1:09:1d:dd:2f:8c:4a:26:45:cd:de:3d:8f:02: 73:ec:fa:eb:0d:66:80:ff:d1:1b:72:b4:c9:bb:88:53:ff:ef: 1d:c8:d4:7e:db:b9:ba:0c:6f:ac:7f:f5:e0:e1:df:06:83:fd: 39:22:d8:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDUxMTAvBgNVBAUTKDRDN0RBQzIxMjAzREFFNDE2QzFGQ0VFQUZDNTU2NTcy MDIyMjA4QTEwHhcNMjYwOTIzMDIwNDQwWhcNMjYwOTMwMDIwNDQwWjAYMRYwFAYD VQQDEw02YWIzMzNiOS0yYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaccC1iOVjygYRS+0ZFVEqsF99usUQ7vEUGApi1fZ4DfyOcxc7KNWRmsSOMY xQRmMC43i6yD4YvWnqgfv+QxcU/uQOe8akvqwUkyfnYR77xhlyXxypfW4rT+cXp3 cN/VX4HreDJyZT00HnEDjFdcgAIdcyWwW6P1a7qB3ZUPOTAHWCWb6lPFdIUzzU6C jd/4mlBAIWv+kDt4BaPidzanNjV32AJ5SYWRhXNJ49dFTwU5yjE/QhmYxVzgw3kn B6Ntgiun6MAENPsm5faZwSPqtu8tiNOMpjedcf022CfOyNl0Mfjv1Ln5XdqQusuj Eg8PKHPHXjcFnUxFG2nATIzKHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJK2Y6er 0Ib4NgQpuCtuG2BsZTX0MB8GA1UdIwQYMBaAFEx9rCEgPa5BbB/O6vxVZXICIgih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENENS9DRDJCNEI0NDFE MEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJrRnNIODdxX0ZWbGNnSWlD S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIMnNJU0E5cmtGc0g4N3FfRlZsY2dJaUNLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENENS9DRDJCNEI0NDFEMEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJr RnNIODdxX0ZWbGNnSWlDS0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALPnR6IVTNrbLDal2oJQhE6hBjxc0cvC3u8u1qZOz/OEO5/gPS7/jNhtjXWvm gLXnhHKiAOaFYU86tGfsfAbln4Bvy1c3P3g8+vrhKnsW8/HTgWBRsmsSiOqTKiWe eEh3n+wmozyambKdZSaDLyjtj8qI8fRYgvpHfp9kZVk2orVnlznqtQQH8xNatNtD CE3nLSNGGe9owmejwsoSbxLYsf7dejpuJuibAqsbLH6sVrX30uTrbqdfurg4c8PW zQSngwQwzTmlktLKs6EJHd0vjEomRc3ePY8Cc+z66w1mgP/RG3K0ybuIU//vHcjU ftu5ugxvrH/14OHfBoP9OSLYfA== -----END CERTIFICATE-----Generated at Fri Sep 25 02:37:37 2026 by rpki-client