$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft File: tkuBBCq0EWB9hgdv78nllia7iBY.mft (raw, json) Hash identifier: lDNFJkfg8OPWeEZ/ypVOvYerVeQvzj/rJqir/xgDjwk= Subject key identifier: 6F:C7:94:9C:0C:F0:F3:59:EC:DF:E5:1D:EA:B0:92:29:48:CB:49:83 Authority key identifier: B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 Certificate issuer: /CN=A91D3037/serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft Manifest number: D2 Signing time: Fri 09 Oct 2026 07:25:50 +0000 Manifest this update: Fri 09 Oct 2026 07:25:49 +0000 Manifest next update: Fri 16 Oct 2026 07:25:49 +0000 Files and hashes: 1: tkuBBCq0EWB9hgdv78nllia7iBY.crl (hash: 6wXkb+VCIJ6jBm//98B0/LgNkWlLHeX0HIkMUYGnx48=) 2: 0A16B10E8EE011F09A1AE72BC4F9AE02.roa (hash: 61ipbLIz+I5JBb+kwozvMx9Usvv22ZYLA1pmuD/JkSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 07:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3037, serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Validity Not Before: Oct 9 07:25:49 2026 GMT Not After : Oct 16 07:25:49 2026 GMT Subject: CN=6ac896fd-e0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:f7:fd:72:4a:48:17:2d:47:14:42:bd:ac: 30:5a:ea:f9:aa:7f:16:b2:5b:4f:1d:74:c3:5e:91: 83:16:a6:f0:4c:78:9d:e1:c9:30:a5:82:3c:81:ef: 8e:7e:7c:d7:67:7c:d3:fb:69:63:c6:6e:a9:9d:f6: ad:6c:cf:cf:5c:8f:5f:06:fe:b3:e2:ce:67:1f:ff: 61:0a:1c:a4:3b:26:df:4c:8a:a6:b1:45:44:a0:e3: 99:d1:e9:06:1e:ec:ba:52:65:01:28:d3:ab:7f:25: c8:8a:c5:72:ed:91:11:1c:b1:02:4f:a0:19:a8:86: b8:bb:74:c7:7a:64:e6:91:f8:c6:09:40:17:a3:32: ed:cc:6b:b9:69:7b:95:ae:c7:cb:8b:cd:d3:dc:8a: d4:e0:e9:52:45:de:26:a2:5c:75:06:d7:1a:9b:b5: ef:c5:b1:da:29:5b:c9:92:30:64:6a:52:df:dc:2b: ef:5b:61:60:cb:e0:cb:5e:d8:fd:5e:c3:d1:7f:c1: 28:f6:da:95:a2:ad:5f:45:39:69:c3:7b:7a:2a:a9: 2e:fb:ec:3e:65:04:a5:d2:97:67:3a:c6:f0:0b:26: 49:f2:af:3c:42:74:45:84:5f:28:a9:0a:3a:33:c3: 9a:f9:87:9f:0a:89:a3:e9:bc:a4:01:e9:4a:dd:19: 81:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C7:94:9C:0C:F0:F3:59:EC:DF:E5:1D:EA:B0:92:29:48:CB:49:83 X509v3 Authority Key Identifier: keyid:B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a4:14:eb:b7:d2:fa:49:7f:5e:b0:58:56:ae:c5:81:cb:de: 40:c3:41:30:ff:f1:4a:58:8f:28:12:f1:e6:be:2e:49:35:76: 6d:d6:3f:22:4c:cf:a8:4b:cc:16:66:42:d9:6b:08:34:a4:0a: 43:dc:3c:ec:7d:5b:45:72:41:47:16:1e:53:b6:94:ff:ea:45: bb:70:26:b4:2c:bb:eb:34:83:6a:5e:1d:42:e6:b0:7d:8b:76: aa:4c:c1:cc:7a:60:2d:16:b4:80:60:f8:3f:b8:38:e8:84:48: ef:b2:d5:fe:06:1e:31:db:9e:ae:a0:1e:cc:af:d4:7b:2a:96: 7f:5b:a6:a0:5f:72:48:b3:b8:94:db:97:aa:d4:87:00:ce:51: 3e:20:64:ca:f4:f8:01:41:e1:78:71:70:b4:cf:83:3a:77:eb: b8:39:e5:74:18:e1:ec:3e:29:f2:86:61:a3:5a:2c:14:05:02: 8e:97:43:37:02:6d:3c:9d:ad:d9:1b:00:38:0f:d2:b4:7d:aa: a9:4e:91:fd:23:79:21:ce:ee:3c:e7:53:e2:41:2c:e0:42:c7: 85:49:02:6f:a9:0c:d8:4d:60:5f:0e:62:06:72:05:a6:fc:ff: 35:cc:34:c2:54:98:c6:c2:b0:9f:96:13:8d:27:c4:2a:bc:15: 87:2a:af:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwMzcxMTAvBgNVBAUTKEI2NEI4MTA0MkFCNDExNjA3RDg2MDc2RkVGQzlFNTk2 MjZCQjg4MTYwHhcNMjYxMDA5MDcyNTQ5WhcNMjYxMDE2MDcyNTQ5WjAYMRYwFAYD VQQDEw02YWM4OTZmZC1lMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzD3/XJKSBctRxRCvawwWur5qn8WsltPHXTDXpGDFqbwTHid4ckwpYI8ge+O fnzXZ3zT+2ljxm6pnfatbM/PXI9fBv6z4s5nH/9hChykOybfTIqmsUVEoOOZ0ekG Huy6UmUBKNOrfyXIisVy7ZERHLECT6AZqIa4u3THemTmkfjGCUAXozLtzGu5aXuV rsfLi83T3IrU4OlSRd4molx1Btcam7XvxbHaKVvJkjBkalLf3CvvW2Fgy+DLXtj9 XsPRf8Eo9tqVoq1fRTlpw3t6Kqku++w+ZQSl0pdnOsbwCyZJ8q88QnRFhF8oqQo6 M8Oa+YefComj6bykAelK3RmBYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/HlJwM 8PNZ7N/lHeqwkilIy0mDMB8GA1UdIwQYMBaAFLZLgQQqtBFgfYYHb+/J5ZYmu4gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzAzNy84QjhERTI3RThF REMxMUYwOTg4MEM0NzhDNEY5QUUwMi90a3VCQkNxMEVXQjloZ2R2NzhubGxpYTdp QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrdUJCQ3EwRVdCOWhnZHY3OG5sbGlhN2lCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzAzNy84QjhERTI3RThFREMxMUYwOTg4MEM0NzhDNEY5QUUwMi90a3VCQkNxMEVX QjloZ2R2NzhubGxpYTdpQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEaQU67fS+kl/XrBYVq7FgcveQMNBMP/xSliPKBLx5r4uSTV2bdY/IkzPqEvM FmZC2WsINKQKQ9w87H1bRXJBRxYeU7aU/+pFu3AmtCy76zSDal4dQuawfYt2qkzB zHpgLRa0gGD4P7g46IRI77LV/gYeMduerqAezK/UeyqWf1umoF9ySLO4lNuXqtSH AM5RPiBkyvT4AUHheHFwtM+DOnfruDnldBjh7D4p8oZho1osFAUCjpdDNwJtPJ2t 2RsAOA/StH2qqU6R/SN5Ic7uPOdT4kEs4ELHhUkCb6kM2E1gXw5iBnIFpvz/Ncw0 wlSYxsKwn5YTjSfEKrwVhyqv8g== -----END CERTIFICATE-----Generated at Sat Oct 10 13:34:19 2026 by rpki-client