$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft File: tGhODWIsua_RLLX6PkiF382FAE0.mft (raw, json) Hash identifier: GSRlgEjwN6vixFOdxECMgwotwWFjvU/0f7uKJ26EKEU= Subject key identifier: 0A:1D:E0:01:C4:EA:4D:28:79:51:42:62:66:CE:ED:5F:EC:EA:1C:1F Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D Certificate issuer: /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft Manifest number: 04A3 Signing time: Tue 22 Sep 2026 23:35:13 +0000 Manifest this update: Tue 22 Sep 2026 23:35:12 +0000 Manifest next update: Tue 29 Sep 2026 23:35:12 +0000 Files and hashes: 1: tGhODWIsua_RLLX6PkiF382FAE0.crl (hash: jWRphtiwhh6T6hqyQnbhyBUxI7j5zm5ntT9bW62X/qE=) 2: C458350E979C11EC8E769C43C4F9AE02.roa (hash: qwlX5vNKgphi0cDeLb8b9XuSIhNZMIjTsz9ccOAsGxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4636, serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Validity Not Before: Sep 22 23:35:12 2026 GMT Not After : Sep 29 23:35:12 2026 GMT Subject: CN=6ab310b0-a6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f8:f0:83:28:ff:39:e3:19:bd:64:69:e2:3c: 38:08:0a:6c:3a:ef:9f:39:14:3d:46:70:97:ed:e8: 81:1e:b5:c4:5d:35:0c:8e:a5:a4:67:37:c8:5b:8a: 1c:6c:a9:ce:38:65:ed:fb:81:af:6e:ac:84:b9:a5: 1e:74:bf:95:72:e3:85:1f:2d:e9:02:4d:b3:ff:a0: f4:4d:70:bd:82:b2:cc:55:63:69:92:df:13:04:cc: 50:b7:d7:e0:37:26:16:7f:7f:55:cd:20:00:15:29: 91:70:6e:34:ba:44:fe:65:48:5b:1c:fa:46:ee:c2: f5:98:ed:83:70:6f:dc:1e:25:63:a8:c3:62:f2:2b: 56:e3:1d:3c:d0:d2:c2:c8:ba:7f:c8:68:ad:47:1a: 24:bc:07:e2:30:76:e7:e9:95:7f:05:13:97:ef:85: b1:ff:4d:9a:57:2a:05:77:a6:3b:05:60:83:cd:fd: 0c:01:bd:ce:8b:59:61:6a:53:99:c7:ca:8b:77:79: c9:eb:08:5a:53:ec:09:fb:24:c9:df:fe:bf:5c:26: a9:91:c0:3f:71:89:2c:22:fb:c6:51:ee:59:16:cc: 0f:2c:08:73:90:df:db:4e:e9:6f:3f:48:04:72:29: e0:0e:c4:07:dc:e7:ab:0f:8a:b7:d1:4e:89:a7:47: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1D:E0:01:C4:EA:4D:28:79:51:42:62:66:CE:ED:5F:EC:EA:1C:1F X509v3 Authority Key Identifier: keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ba:7c:56:66:a9:eb:5b:4a:3c:66:bf:4d:ba:0b:37:84:95: ac:1e:22:3b:81:9e:db:9b:c0:6f:94:27:a1:0b:f1:c5:f5:df: 54:f4:3f:b3:7d:5b:71:a7:aa:3f:72:69:f3:89:80:63:ae:d1: df:c1:ed:59:ef:3a:8a:11:3a:d4:dd:14:d1:d6:da:85:c9:94: 5f:49:dd:5d:6c:25:4c:e4:d2:12:2d:c6:ce:0a:10:df:9c:34: 04:bc:b6:8b:d0:49:45:47:07:4d:61:58:e0:58:ce:86:1f:11: 09:51:c4:4d:45:88:d1:d8:4a:42:d7:5b:ba:51:8a:0b:7e:d3: 99:58:c5:38:6c:0e:37:05:c4:c4:77:a6:37:de:73:10:76:e7: 64:d4:be:15:c5:1c:f4:9f:71:f2:d2:09:c0:32:5b:51:99:42: d1:f4:51:07:28:b8:cd:c8:7d:9b:56:91:c9:8a:d1:95:b1:a6: ea:a1:55:a1:37:39:2e:0e:58:a0:13:40:e0:e6:c9:b9:30:22: 72:21:3f:7d:57:97:67:56:02:3f:ef:7b:78:b5:aa:f2:c3:9f: c8:0e:a0:dd:e6:02:cd:73:fc:47:a3:7f:2c:23:af:0f:3f:79: 53:41:cf:1e:03:4e:9e:fa:9b:04:ab:fd:a3:e7:1d:29:bc:ce: 4b:13:26:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MzYxMTAvBgNVBAUTKEI0Njg0RTBENjIyQ0I5QUZEMTJDQjVGQTNFNDg4NURG Q0Q4NTAwNEQwHhcNMjYwOTIyMjMzNTEyWhcNMjYwOTI5MjMzNTEyWjAYMRYwFAYD VQQDEw02YWIzMTBiMC1hNmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Pjwgyj/OeMZvWRp4jw4CApsOu+fORQ9RnCX7eiBHrXEXTUMjqWkZzfIW4oc bKnOOGXt+4GvbqyEuaUedL+VcuOFHy3pAk2z/6D0TXC9grLMVWNpkt8TBMxQt9fg NyYWf39VzSAAFSmRcG40ukT+ZUhbHPpG7sL1mO2DcG/cHiVjqMNi8itW4x080NLC yLp/yGitRxokvAfiMHbn6ZV/BROX74Wx/02aVyoFd6Y7BWCDzf0MAb3Oi1lhalOZ x8qLd3nJ6whaU+wJ+yTJ3/6/XCapkcA/cYksIvvGUe5ZFswPLAhzkN/bTulvP0gE cingDsQH3OerD4q30U6Jp0f3AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAod4AHE 6k0oeVFCYmbO7V/s6hwfMB8GA1UdIwQYMBaAFLRoTg1iLLmv0Sy1+j5Ihd/NhQBN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYzNi8yQzlCQzMzQzk3 OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3VhX1JMTFg2UGtpRjM4MkZB RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHaE9EV0lzdWFfUkxMWDZQa2lGMzgyRkFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYzNi8yQzlCQzMzQzk3OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3Vh X1JMTFg2UGtpRjM4MkZBRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAerp8Vmap61tKPGa/TboLN4SVrB4iO4Ge25vAb5QnoQvxxfXfVPQ/s31bcaeq P3Jp84mAY67R38HtWe86ihE61N0U0dbahcmUX0ndXWwlTOTSEi3GzgoQ35w0BLy2 i9BJRUcHTWFY4FjOhh8RCVHETUWI0dhKQtdbulGKC37TmVjFOGwONwXExHemN95z EHbnZNS+FcUc9J9x8tIJwDJbUZlC0fRRByi4zch9m1aRyYrRlbGm6qFVoTc5Lg5Y oBNA4ObJuTAiciE/fVeXZ1YCP+97eLWq8sOfyA6g3eYCzXP8R6N/LCOvDz95U0HP HgNOnvqbBKv9o+cdKbzOSxMm8Q== -----END CERTIFICATE-----Generated at Thu Sep 24 17:36:10 2026 by rpki-client