$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json) Hash identifier: T+89zQ5FOynG/TC1kND5in/rHhfqoBe4QP3GyG5TTw4= Subject key identifier: B5:FB:0B:C8:39:C3:0F:D5:24:37:DE:61:9C:4D:6A:29:94:ED:D6:0D Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft Manifest number: 0413 Signing time: Wed 23 Sep 2026 00:00:05 +0000 Manifest this update: Wed 23 Sep 2026 00:00:04 +0000 Manifest next update: Wed 30 Sep 2026 00:00:04 +0000 Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: 1FKqqu8dfbqOwlNBAlgKbdjzBmpr4kwUY9zhgvdkcn4=) 2: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: wscp8K5+FLmOsla2p3dPHQY1qOUX0mlW/Dyz2CZI9ho=) 3: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: oFwuVF4N1WD0xpMNgPbemI2ygkBICMTaN5OCfEUJDw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Validity Not Before: Sep 23 00:00:04 2026 GMT Not After : Sep 30 00:00:04 2026 GMT Subject: CN=6ab31685-d509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:bf:90:21:f3:54:b9:62:5f:f1:52:ec:e8: 18:f5:32:77:a9:65:f4:58:2d:45:2f:70:16:df:b6: f1:56:f0:67:a4:b3:d1:4c:02:e4:cf:35:5b:e1:7f: d5:27:2b:c5:3a:90:36:0f:29:11:0a:0c:4f:ce:89: 7d:2d:45:a1:85:ad:06:48:a7:20:61:02:20:cf:0b: 28:86:00:72:12:a4:a2:08:7a:13:c8:86:75:f1:8e: e7:21:63:23:26:7c:57:87:c4:ca:e7:62:d1:a6:1e: ee:7b:8d:e7:f1:1d:aa:8e:5b:2a:fa:d6:5a:3b:be: c7:38:06:f3:bf:ac:dd:6c:ac:73:28:8e:44:98:40: d0:e5:dd:d0:64:5d:69:bf:d2:72:98:59:c5:bc:6e: 47:79:4e:ee:69:76:73:f5:b7:90:4b:6d:0b:e0:d7: 74:c2:db:b5:bc:91:a5:f1:52:77:ea:40:5e:59:12: 94:97:76:3f:17:b2:ed:65:84:c0:66:67:28:58:f9: 4a:4b:fc:10:1d:ad:11:5b:d4:09:e6:1d:8e:12:e2: bc:34:eb:8f:31:57:24:91:da:97:b9:c4:c4:ef:6c: f7:6b:5c:a7:3f:d2:c5:9d:7f:4d:4a:ea:fb:86:d1: 3b:b8:13:72:80:2d:aa:f6:9b:43:59:10:25:78:d6: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FB:0B:C8:39:C3:0F:D5:24:37:DE:61:9C:4D:6A:29:94:ED:D6:0D X509v3 Authority Key Identifier: keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:d1:3f:96:3f:70:73:69:8d:2d:d3:ad:cf:71:9a:62:05:32: 77:1a:65:d6:f0:0d:bd:8a:d3:10:0f:12:de:27:6f:cf:50:87: e8:96:2b:49:8c:f4:1c:01:ff:53:0d:3e:9a:af:80:bf:61:3e: e3:05:ea:f2:6d:41:6a:c3:d9:73:df:5c:46:25:10:15:cf:86: 21:69:0b:fc:14:54:fb:b3:1c:06:1a:ad:48:81:5e:e3:65:1a: a7:e6:fd:2a:e5:82:f3:d9:bb:bd:b3:cc:3b:d9:07:57:f3:e9: 17:31:7c:7c:ff:0b:39:bb:4b:0a:18:e5:58:88:ce:63:ef:2d: 82:66:88:14:97:a0:09:5e:57:9a:28:71:94:18:21:28:39:3c: 8a:87:b9:cb:86:2e:36:fe:e0:da:3a:50:12:a8:81:25:41:46: 74:4b:8f:6a:57:df:13:f0:c1:5a:e7:c6:8a:af:61:3c:f4:06: 6d:b0:cb:cf:f5:ee:d9:f6:e0:6c:98:20:00:9d:ae:c3:1e:a4: 0c:4e:f4:5b:d0:b3:be:b3:9c:db:01:66:52:82:41:df:cd:09: 9e:b3:c1:5b:2e:fa:b0:95:cd:6f:5b:8d:9a:84:02:32:dd:0c: 76:58:33:f5:29:e8:50:3d:28:83:ef:f6:f1:d2:6d:0a:d8:d1: e3:50:52:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBREQxMTAvBgNVBAUTKEI0RjI2MkY5OTg1N0UxMjBDQzlDQkM0QkZDMTdFRDU0 QUJBQkUyQkIwHhcNMjYwOTIzMDAwMDA0WhcNMjYwOTMwMDAwMDA0WjAYMRYwFAYD VQQDEw02YWIzMTY4NS1kNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtr6/kCHzVLliX/FS7OgY9TJ3qWX0WC1FL3AW37bxVvBnpLPRTALkzzVb4X/V JyvFOpA2DykRCgxPzol9LUWhha0GSKcgYQIgzwsohgByEqSiCHoTyIZ18Y7nIWMj JnxXh8TK52LRph7ue43n8R2qjlsq+tZaO77HOAbzv6zdbKxzKI5EmEDQ5d3QZF1p v9JymFnFvG5HeU7uaXZz9beQS20L4Nd0wtu1vJGl8VJ36kBeWRKUl3Y/F7LtZYTA ZmcoWPlKS/wQHa0RW9QJ5h2OEuK8NOuPMVckkdqXucTE72z3a1ynP9LFnX9NSur7 htE7uBNygC2q9ptDWRAleNYyhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLX7C8g5 ww/VJDfeYZxNaimU7dYNMB8GA1UdIwQYMBaAFLTyYvmYV+EgzJy8S/wX7VSrq+K7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFERC9FREM2NzYxNEQw RDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRTRE1uTHhMX0JmdFZLdXI0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQSmktWmhYNFNETW5MeExfQmZ0Vkt1cjRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFERC9FREM2NzYxNEQwRDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRT RE1uTHhMX0JmdFZLdXI0cnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAytE/lj9wc2mNLdOtz3GaYgUydxpl1vANvYrTEA8S3idvz1CH6JYrSYz0HAH/ Uw0+mq+Av2E+4wXq8m1BasPZc99cRiUQFc+GIWkL/BRU+7McBhqtSIFe42Uap+b9 KuWC89m7vbPMO9kHV/PpFzF8fP8LObtLChjlWIjOY+8tgmaIFJegCV5XmihxlBgh KDk8ioe5y4YuNv7g2jpQEqiBJUFGdEuPalffE/DBWufGiq9hPPQGbbDLz/Xu2fbg bJggAJ2uwx6kDE70W9CzvrOc2wFmUoJB380JnrPBWy76sJXNb1uNmoQCMt0Mdlgz 9SnoUD0og+/28dJtCtjR41BSlg== -----END CERTIFICATE-----Generated at Wed Sep 23 19:34:55 2026 by rpki-client