$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft File: T0h-_rfHeWiBVy2X1iVPot21qHw.mft (raw, json) Hash identifier: 8D/nZcQLXekVV6EHbHVpUXkaIfiLk/heyRjnBIh0mBU= Subject key identifier: 59:01:84:9B:74:5A:12:BB:AE:D8:01:D4:A5:F2:BF:17:5D:21:43:BA Authority key identifier: 4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C Certificate issuer: /CN=A91C32D9/serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft Manifest number: 7B Signing time: Fri 25 Sep 2026 07:53:00 +0000 Manifest this update: Fri 25 Sep 2026 07:52:59 +0000 Manifest next update: Fri 02 Oct 2026 07:52:59 +0000 Files and hashes: 1: T0h-_rfHeWiBVy2X1iVPot21qHw.crl (hash: WSAI9lqRuqqgJBsRRo/X0ymAjLFY6BLqFwoyvYzv3Eo=) 2: 9DD3FFC6001111F18C67D2A9406F56BC.roa (hash: l4S9gMbXi+gUDu4apCdlLMULJuB61B4wV3lZ30Od2K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C32D9, serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C Validity Not Before: Sep 25 07:52:59 2026 GMT Not After : Oct 2 07:52:59 2026 GMT Subject: CN=6ab6285b-6faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:15:07:69:1e:5a:5f:b7:98:a1:26:a2:59:95: 12:39:d2:2c:dc:9d:e0:e6:bc:b2:7b:01:dc:90:65: 78:10:41:32:7b:53:28:97:b3:83:2e:3d:e4:0a:49: ba:75:a9:1c:07:67:47:f8:59:af:eb:eb:e5:b4:f7: 92:6a:a9:ab:c5:eb:63:7b:a9:cb:86:aa:69:aa:fa: 39:db:1f:70:29:15:d3:e3:32:9c:d2:c5:8f:12:aa: 7b:c2:64:5e:80:ff:7d:bf:a8:76:a9:f3:5d:27:35: 96:ab:81:eb:4a:41:c2:54:18:80:72:17:d6:01:3d: a2:84:10:2a:a1:94:c8:1d:d0:65:09:a2:00:cc:2f: 08:71:ab:95:7f:52:5a:33:66:86:93:90:18:b9:75: 57:a8:9f:d9:3f:a5:ff:2c:7d:17:a9:1d:a2:af:33: 8e:2d:b8:38:f4:af:39:81:88:7d:0c:c7:90:82:d0: 7d:80:35:67:de:49:a1:38:9e:24:fa:46:30:9f:e0: 67:39:42:b4:6a:5f:68:b7:61:4f:72:0d:bd:87:5a: e3:c0:2e:e5:fd:f1:df:b4:86:3d:07:4c:58:77:c0: 15:e0:e1:9d:da:5c:d1:fa:cc:2f:5f:2a:af:c8:74: 6d:f0:31:f8:d2:fd:56:a8:3d:4f:47:96:c9:78:a3: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:01:84:9B:74:5A:12:BB:AE:D8:01:D4:A5:F2:BF:17:5D:21:43:BA X509v3 Authority Key Identifier: keyid:4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fb:c8:04:07:e1:77:7c:e5:da:a8:be:1b:97:b0:a3:0b:31: 38:a6:f9:dd:c7:df:ef:d5:7f:a8:23:5b:a4:b3:d7:64:d6:e3: bf:9b:c4:7f:6a:a0:71:84:d4:b0:76:b0:ac:fe:74:ec:99:a0: 9c:e7:a1:08:05:86:47:f8:eb:ae:7d:e9:07:05:27:3a:4a:d2: a7:7e:01:14:a9:52:37:c3:41:4d:4c:0e:89:9b:d0:58:7b:c7: 76:5c:54:2a:6a:5c:2d:e3:62:9e:ae:c8:1c:1a:88:82:40:57: 25:ce:87:82:b7:6b:d7:34:47:39:08:ac:fe:0e:eb:9a:bb:2b: 12:86:4e:d6:12:b4:bd:6c:51:a1:eb:5a:c8:90:cd:a6:95:a4: 3a:36:dd:96:a9:a8:a6:42:11:e5:fc:6f:f8:6a:63:a3:2e:81: 53:44:ba:ac:07:46:c8:f2:21:41:89:c5:9c:fa:bb:5f:34:65: 05:79:4a:b6:1b:3a:40:1a:54:d3:1a:2c:61:e7:f6:cf:f7:71: c3:80:9a:1a:ea:df:b5:db:d7:9d:64:82:a9:d0:54:45:01:5e: 37:c1:13:c6:c9:b4:2c:87:61:17:47:01:98:95:6d:d7:bf:9a: a2:65:7d:f4:85:6d:b7:68:c8:46:b0:3a:d2:3a:86:dd:d3:84: 71:bc:52:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzJEOTExMC8GA1UEBRMoNEY0ODdFRkVCN0M3Nzk2ODgxNTcyRDk3RDYyNTRGQTJE REI1QTg3QzAeFw0yNjA5MjUwNzUyNTlaFw0yNjEwMDIwNzUyNTlaMBgxFjAUBgNV BAMTDTZhYjYyODViLTZmYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrFQdpHlpft5ihJqJZlRI50izcneDmvLJ7AdyQZXgQQTJ7UyiXs4MuPeQKSbp1 qRwHZ0f4Wa/r6+W095JqqavF62N7qcuGqmmq+jnbH3ApFdPjMpzSxY8SqnvCZF6A /32/qHap810nNZargetKQcJUGIByF9YBPaKEECqhlMgd0GUJogDMLwhxq5V/Uloz ZoaTkBi5dVeon9k/pf8sfRepHaKvM44tuDj0rzmBiH0Mx5CC0H2ANWfeSaE4niT6 RjCf4Gc5QrRqX2i3YU9yDb2HWuPALuX98d+0hj0HTFh3wBXg4Z3aXNH6zC9fKq/I dG3wMfjS/VaoPU9Hlsl4ozdnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWQGEm3Ra Eruu2AHUpfK/F10hQ7owHwYDVR0jBBgwFoAUT0h+/rfHeWiBVy2X1iVPot21qHww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzMkQ5LzY0REYxMzJDMDAx MTExRjFBQjI3RUQ4MDQwNkY1NkJDL1QwaC1fcmZIZVdpQlZ5MlgxaVZQb3QyMXFI dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVDBoLV9yZkhlV2lCVnkyWDFpVlBvdDIxcUh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz MkQ5LzY0REYxMzJDMDAxMTExRjFBQjI3RUQ4MDQwNkY1NkJDL1QwaC1fcmZIZVdp QlZ5MlgxaVZQb3QyMXFIdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAg+8gEB+F3fOXaqL4bl7CjCzE4pvndx9/v1X+oI1uks9dk1uO/m8R/aqBxhNSw drCs/nTsmaCc56EIBYZH+OuufekHBSc6StKnfgEUqVI3w0FNTA6Jm9BYe8d2XFQq alwt42KersgcGoiCQFclzoeCt2vXNEc5CKz+DuuauysShk7WErS9bFGh61rIkM2m laQ6Nt2WqaimQhHl/G/4amOjLoFTRLqsB0bI8iFBicWc+rtfNGUFeUq2GzpAGlTT Gixh5/bP93HDgJoa6t+129edZIKp0FRFAV43wRPGybQsh2EXRwGYlW3Xv5qiZX30 hW23aMhGsDrSOobd04RxvFJy -----END CERTIFICATE-----Generated at Fri Sep 25 13:10:30 2026 by rpki-client