$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json) Hash identifier: zaXIjpLhTcvdOOCDvausRvOpwPO3oAnWt5zRfYrLpn4= Subject key identifier: EF:15:5D:36:CB:98:B6:35:22:08:E1:EF:37:66:BB:92:11:98:23:30 Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft Manifest number: 01B9 Signing time: Fri 25 Sep 2026 04:01:28 +0000 Manifest this update: Fri 25 Sep 2026 04:01:27 +0000 Manifest next update: Fri 02 Oct 2026 04:01:27 +0000 Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: DTGEXa03ZjjFryt8JTpwW/ZTQdXhDvbrp2lltDwcXuU=) 2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: bs1Xgw6z8UHVdG8cs/XzlMBqu7GicIxeKJC8ZxwnNXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Sep 25 04:01:27 2026 GMT Not After : Oct 2 04:01:27 2026 GMT Subject: CN=6ab5f217-fb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:de:d4:88:df:d1:2a:da:3b:27:1e:26:cd: 82:a4:71:aa:ab:66:b4:8d:41:c3:b0:61:ed:e6:53: fc:71:71:e7:2b:00:9a:41:3e:9c:52:39:2a:bc:4d: f4:bb:a2:9c:12:87:99:30:d1:a5:f5:c0:dd:56:8c: dd:7b:5b:7a:7c:77:cf:9c:b5:11:35:c2:50:8f:32: da:94:cd:e5:41:6f:81:6a:83:68:ee:b7:58:87:26: 8c:bd:d5:24:4f:00:e9:cc:30:c7:4a:a6:94:08:b1: f0:dc:1f:8b:91:e9:25:be:5d:c7:61:41:43:f6:fd: 22:01:8e:d0:c2:dd:91:a2:44:ec:94:3c:74:60:55: b9:cb:47:cf:b4:7b:e3:e0:16:57:cf:20:3a:b2:4d: fc:11:df:28:d3:30:d2:a4:12:5b:3e:c0:86:5c:8a: 4a:96:bf:60:30:b1:89:ca:bb:1a:b0:98:04:5e:e5: f6:aa:55:03:16:c4:8a:dc:65:27:54:42:4e:99:39: 50:ba:2c:87:ca:e8:db:15:17:02:a8:82:a4:d9:50: f2:9f:dc:58:41:a7:5c:43:5d:6a:71:52:75:06:86: 4c:43:87:87:32:bd:9e:6f:48:84:50:ce:ab:02:ea: 9b:16:a1:17:f0:76:8e:65:24:ba:c2:0e:cf:05:39: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:15:5D:36:CB:98:B6:35:22:08:E1:EF:37:66:BB:92:11:98:23:30 X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:29:9a:6a:c9:2c:2e:c3:f9:7c:0c:20:ad:09:06:b7:e2:ab: 94:7e:ce:31:6b:89:77:a1:48:27:66:84:f7:49:54:4d:69:53: da:8e:8b:ea:69:2f:8c:8d:33:30:a2:8b:07:2f:26:35:52:38: 3d:34:56:59:ec:8b:a8:c9:19:57:1d:69:b3:78:12:e9:08:f8: ae:36:de:9c:ea:b6:74:21:6f:06:04:07:0c:e0:ec:45:99:30: 35:09:78:f3:40:d3:a8:45:08:09:b6:27:5b:51:df:e1:ab:b9: 67:52:a0:d1:92:35:e2:9e:da:04:ea:59:f5:46:db:9e:c8:9c: 18:56:43:e2:f2:a4:a9:09:d9:d7:96:9e:83:a8:e9:fb:5d:76: 95:b3:9d:05:34:2a:fd:70:84:0f:41:b9:f5:16:66:22:6f:34: 09:f4:c4:22:d5:ec:ed:cc:94:79:22:47:3d:9e:3f:9a:68:b5: c6:6a:12:d7:9b:dc:cd:6f:0d:ca:ea:f1:39:a4:38:e8:03:9f: 69:9c:31:f0:3f:60:08:13:6a:51:1e:23:d6:b7:3b:79:01:22: 14:b6:da:96:0a:8d:56:20:a2:c8:47:67:c2:9b:30:96:63:ad: ff:66:4b:f0:aa:00:ca:ce:77:d8:cc:a2:85:d2:bc:6b:86:56: 60:b4:f5:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjYwOTI1MDQwMTI3WhcNMjYxMDAyMDQwMTI3WjAYMRYwFAYD VQQDEw02YWI1ZjIxNy1mYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn93e1Ijf0SraOyceJs2CpHGqq2a0jUHDsGHt5lP8cXHnKwCaQT6cUjkqvE30 u6KcEoeZMNGl9cDdVozde1t6fHfPnLURNcJQjzLalM3lQW+BaoNo7rdYhyaMvdUk TwDpzDDHSqaUCLHw3B+Lkeklvl3HYUFD9v0iAY7Qwt2RokTslDx0YFW5y0fPtHvj 4BZXzyA6sk38Ed8o0zDSpBJbPsCGXIpKlr9gMLGJyrsasJgEXuX2qlUDFsSK3GUn VEJOmTlQuiyHyujbFRcCqIKk2VDyn9xYQadcQ11qcVJ1BoZMQ4eHMr2eb0iEUM6r AuqbFqEX8HaOZSS6wg7PBTmg7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8VXTbL mLY1Igjh7zdmu5IRmCMwMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm UVozelBmc0dpRndjTklpeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfCmaasksLsP5fAwgrQkGt+KrlH7OMWuJd6FIJ2aE90lUTWlT2o6L6mkvjI0z MKKLBy8mNVI4PTRWWeyLqMkZVx1ps3gS6Qj4rjbenOq2dCFvBgQHDODsRZkwNQl4 80DTqEUICbYnW1Hf4au5Z1Kg0ZI14p7aBOpZ9UbbnsicGFZD4vKkqQnZ15aeg6jp +112lbOdBTQq/XCED0G59RZmIm80CfTEItXs7cyUeSJHPZ4/mmi1xmoS15vczW8N yurxOaQ46AOfaZwx8D9gCBNqUR4j1rc7eQEiFLbalgqNViCiyEdnwpswlmOt/2ZL 8KoAys532MyihdK8a4ZWYLT19g== -----END CERTIFICATE-----Generated at Fri Sep 25 16:48:10 2026 by rpki-client