$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.mft File: tuYGeoPCq5WcqYG6r8-VDFIk-Zw.mft (raw, json) Hash identifier: 6b7Hd3ABfL993uoF3Sd67xQPaazfHt4SJFJlTY+a/T0= Subject key identifier: DF:0C:2F:FD:D5:E6:AD:1E:A0:0C:F7:C9:31:AF:93:69:F6:CE:FC:A4 Authority key identifier: B6:E6:06:7A:83:C2:AB:95:9C:A9:81:BA:AF:CF:95:0C:52:24:F9:9C Certificate issuer: /CN=A91C9B7D/serialNumber=B6E6067A83C2AB959CA981BAAFCF950C5224F99C Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.mft Manifest number: 07 Signing time: Mon 21 Sep 2026 09:13:13 +0000 Manifest this update: Mon 21 Sep 2026 09:13:12 +0000 Manifest next update: Mon 28 Sep 2026 09:13:12 +0000 Files and hashes: 1: tuYGeoPCq5WcqYG6r8-VDFIk-Zw.crl (hash: cO5CFWnQpTD9Hi31BegRCMqZEsWGZq9uPuh6tqIZLN0=) 2: 5FEE1DD6AE1711F18841FC405011F970.roa (hash: V7gLVRO1LnwpLXhQNmobUsNeJge8Hi2UtYb/lFhTJJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.crl rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B7D, serialNumber=B6E6067A83C2AB959CA981BAAFCF950C5224F99C Validity Not Before: Sep 21 09:13:12 2026 GMT Not After : Sep 28 09:13:12 2026 GMT Subject: CN=6ab0f528-90d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:d5:2a:2c:ac:6b:32:d3:3c:d2:49:cb:6b: f0:23:b0:96:20:6f:1c:37:b4:da:94:3d:90:16:0b: e0:d7:4f:27:7b:51:1b:f3:fb:b4:21:b8:bf:d5:d3: 97:5e:f8:f5:6c:61:68:5b:1a:e0:e9:db:0f:eb:dd: a1:e9:d7:b0:ec:7f:1e:c4:f9:3e:02:1e:69:dc:09: 88:33:50:82:fd:4b:93:dc:13:a0:ca:e0:5e:18:82: 34:da:4c:4e:5d:fb:52:e6:4f:7a:99:09:11:37:00: bf:35:0a:19:9b:41:90:db:ac:47:bb:ed:f2:c2:76: 15:41:15:07:d5:9e:4b:13:bf:fd:83:e3:ab:e7:50: 8c:8c:3d:da:2e:2d:ee:05:a4:a3:de:39:a1:c2:cd: 0a:66:b9:85:b2:15:4f:08:5f:fd:6a:58:11:7e:6b: f2:9f:d5:95:4f:95:9c:63:85:5a:37:66:ea:b8:e3: b8:36:48:55:58:eb:40:7c:28:fe:21:23:b9:b1:35: d7:81:c6:c8:e7:a7:4d:88:93:ca:ac:1b:5a:46:d2: 47:bd:57:44:d9:ed:8f:2c:b7:ee:65:6c:44:c2:79: 83:22:9e:21:59:4e:cc:25:47:0b:a1:17:2a:76:8f: 60:58:85:05:ba:78:d9:56:22:af:61:02:c7:7b:3f: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0C:2F:FD:D5:E6:AD:1E:A0:0C:F7:C9:31:AF:93:69:F6:CE:FC:A4 X509v3 Authority Key Identifier: keyid:B6:E6:06:7A:83:C2:AB:95:9C:A9:81:BA:AF:CF:95:0C:52:24:F9:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B7D/24C01558AE1611F18DEACF195011F970/tuYGeoPCq5WcqYG6r8-VDFIk-Zw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3a:f7:bf:d5:3f:54:7f:8c:d3:18:be:3c:b6:84:bf:34:99: ab:45:9d:58:60:a4:73:56:91:af:ff:82:3a:fa:ef:e8:0b:c4: aa:d4:a7:26:93:a5:f2:a1:5a:31:70:4a:39:a8:00:03:0d:d2: 11:1c:4e:5c:17:3f:9a:24:b1:ac:fe:71:be:52:62:ac:11:d9: 39:a7:27:f1:97:45:22:0b:25:9e:a9:12:2e:72:97:5c:db:94: 6c:ff:63:7a:57:c3:87:cc:cd:c6:2c:bf:65:81:e0:96:aa:9a: 6e:a5:70:db:d9:8b:4e:0e:3e:35:9c:e8:2d:46:54:5a:08:b1: 7a:68:12:4c:cb:fc:a1:42:ab:f5:85:50:8a:e4:21:46:a8:82: 44:39:e2:8d:fa:cb:37:15:d6:24:9c:a7:3d:76:6f:66:9b:5c: 73:f1:69:b0:70:27:17:de:da:39:3d:39:22:85:c0:c1:84:bc: e0:8e:f3:eb:a3:cc:d1:6d:62:b4:d7:35:29:45:1d:14:a5:6a: 91:e3:31:6e:72:07:09:fd:8b:2a:e2:60:f4:b3:51:98:59:ad: f4:01:82:22:e8:59:c0:28:55:8e:25:0e:a3:de:ab:6e:23:aa: 74:16:9e:fe:e5:81:6a:e1:59:d6:22:62:af:85:31:47:c9:a7: 7b:44:f4:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUI3RDExMC8GA1UEBRMoQjZFNjA2N0E4M0MyQUI5NTlDQTk4MUJBQUZDRjk1MEM1 MjI0Rjk5QzAeFw0yNjA5MjEwOTEzMTJaFw0yNjA5MjgwOTEzMTJaMBgxFjAUBgNV BAMTDTZhYjBmNTI4LTkwZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt8dUqLKxrMtM80knLa/AjsJYgbxw3tNqUPZAWC+DXTyd7URvz+7QhuL/V05de +PVsYWhbGuDp2w/r3aHp17Dsfx7E+T4CHmncCYgzUIL9S5PcE6DK4F4YgjTaTE5d +1LmT3qZCRE3AL81ChmbQZDbrEe77fLCdhVBFQfVnksTv/2D46vnUIyMPdouLe4F pKPeOaHCzQpmuYWyFU8IX/1qWBF+a/Kf1ZVPlZxjhVo3Zuq447g2SFVY60B8KP4h I7mxNdeBxsjnp02Ik8qsG1pG0ke9V0TZ7Y8st+5lbETCeYMiniFZTswlRwuhFyp2 j2BYhQW6eNlWIq9hAsd7PyRzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3wwv/dXm rR6gDPfJMa+TafbO/KQwHwYDVR0jBBgwFoAUtuYGeoPCq5WcqYG6r8+VDFIk+Zww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjdELzI0QzAxNTU4QUUx NjExRjE4REVBQ0YxOTUwMTFGOTcwL3R1WUdlb1BDcTVXY3FZRzZyOC1WREZJay1a dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdHVZR2VvUENxNVdjcVlHNnI4LVZERklrLVp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjdELzI0QzAxNTU4QUUxNjExRjE4REVBQ0YxOTUwMTFGOTcwL3R1WUdlb1BDcTVX Y3FZRzZyOC1WREZJay1ady5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBcOve/1T9Uf4zTGL48toS/NJmrRZ1YYKRzVpGv/4I6+u/oC8Sq1Kcmk6XyoVox cEo5qAADDdIRHE5cFz+aJLGs/nG+UmKsEdk5pyfxl0UiCyWeqRIucpdc25Rs/2N6 V8OHzM3GLL9lgeCWqppupXDb2YtODj41nOgtRlRaCLF6aBJMy/yhQqv1hVCK5CFG qIJEOeKN+ss3FdYknKc9dm9mm1xz8WmwcCcX3to5PTkihcDBhLzgjvPro8zRbWK0 1zUpRR0UpWqR4zFucgcJ/Ysq4mD0s1GYWa30AYIi6FnAKFWOJQ6j3qtuI6p0Fp7+ 5YFq4VnWImKvhTFHyad7RPRb -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:35 2026 by rpki-client