$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: RLsnbbHOxqObBLhaZZ7VKNzeh0l/Z3WTalZTZZSjOAo= Subject key identifier: 12:A6:50:D4:13:71:13:0E:E4:43:F5:3A:C5:C7:D0:03:B9:42:55:42 Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0E3C Signing time: Mon 28 Sep 2026 20:20:17 +0000 Manifest this update: Mon 28 Sep 2026 20:20:16 +0000 Manifest next update: Mon 05 Oct 2026 20:20:16 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: IcoBxxnwG5ri4Umy9t5lT4ODIS8ceBd4PLNiy1nJS2I=) 2: A1B8D10EF5C511EF83B21246C4F9AE02.roa (hash: mXAMy97Aa670ZhM2hALSQp3avmcppB/5FPkm9qaohYc=) 3: 8E4BBF50F5C511EF89110646C4F9AE02.roa (hash: SV52PCZ2QLtu2V0EGB8QTkXhOJlyBxhJjpVrFVWrla4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 20:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Sep 28 20:20:16 2026 GMT Not After : Oct 5 20:20:16 2026 GMT Subject: CN=6abacc01-5472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:3b:e0:c1:7c:65:08:28:76:bc:05:9e:5e: ca:01:94:92:d5:df:c4:27:4e:53:08:76:09:84:23: 1f:4f:b4:7b:f3:50:c0:0a:2d:a5:bf:3f:1e:92:f9: 3c:57:94:71:26:00:e8:25:8c:5c:05:29:1a:f5:b6: 37:d6:57:4f:bc:86:a3:9a:18:60:93:c9:0d:fa:90: 21:9a:7f:4b:24:e5:76:b0:48:1f:4c:2a:25:6d:63: 1d:81:5f:31:9a:4f:cc:2b:d8:9e:68:4c:26:2d:81: d6:9e:12:1c:05:0c:4b:be:f1:d1:70:42:10:c0:21: 1a:a2:7c:e3:47:47:65:ae:b0:f2:48:aa:cf:2b:ae: 81:51:8a:51:5a:35:27:08:90:b9:4c:6c:b4:84:2f: dc:cf:ed:8c:b9:49:96:48:98:ff:37:96:f8:43:60: e6:af:43:8b:2b:59:81:86:48:7f:72:1f:41:a7:fb: cf:43:eb:65:13:4c:59:f2:3c:bf:a3:e5:5e:17:1e: 14:e8:7c:92:e0:24:28:e5:9f:5d:fd:b9:e4:04:c9: b9:cc:4a:b6:cb:19:2b:e8:9c:55:71:4c:84:0f:d4: 83:ba:19:4c:ee:e2:b0:08:82:c0:5e:ba:c3:46:13: 8c:fd:52:07:b8:15:e8:fc:39:c4:44:01:02:83:61: 52:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A6:50:D4:13:71:13:0E:E4:43:F5:3A:C5:C7:D0:03:B9:42:55:42 X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5f:f0:f1:96:cc:36:0c:e8:a9:ac:fe:b7:55:58:eb:37:2c: fd:b0:2b:4f:ba:8d:6e:bf:e0:1f:b2:71:b8:73:6b:24:02:21: ae:60:18:2d:6b:fd:57:85:a3:7e:98:a9:87:3c:31:ef:38:d1: a7:df:74:d3:88:97:ba:dc:50:ff:8c:a1:ed:0e:1b:07:e0:58: 79:18:fc:e7:9d:f4:4b:3e:e8:87:23:7a:7f:81:d4:1a:53:58: 64:7d:99:82:30:fe:51:51:ae:96:0b:f5:f1:16:96:45:a5:bc: 4f:e9:8f:74:5f:35:3b:60:04:b9:cc:cd:89:6c:69:19:39:8b: d6:03:a7:f6:d0:40:70:22:f8:ab:3e:19:42:1d:ba:6f:2d:32: 21:fb:71:e3:7c:3f:3e:b7:d3:a3:64:3a:ab:05:be:ff:32:a4: 46:46:ac:9b:4d:13:f2:9c:8b:be:3b:52:df:9f:07:ad:7e:cc: f8:b9:0a:42:46:56:5a:99:d4:da:ba:fd:58:84:71:c1:fe:99: 45:c4:90:56:a2:a0:b3:bc:05:70:45:8a:3a:b5:af:06:b3:2d: 03:ec:1e:36:56:c7:40:69:62:57:c6:f5:b5:dc:53:9e:e5:47: 15:1d:e6:49:9f:90:50:1d:e7:b2:84:64:37:48:95:f1:0f:d8: 44:21:98:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjYwOTI4MjAyMDE2WhcNMjYxMDA1MjAyMDE2WjAYMRYwFAYD VQQDEw02YWJhY2MwMS01NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1s74MF8ZQgodrwFnl7KAZSS1d/EJ05TCHYJhCMfT7R781DACi2lvz8ekvk8 V5RxJgDoJYxcBSka9bY31ldPvIajmhhgk8kN+pAhmn9LJOV2sEgfTColbWMdgV8x mk/MK9ieaEwmLYHWnhIcBQxLvvHRcEIQwCEaonzjR0dlrrDySKrPK66BUYpRWjUn CJC5TGy0hC/cz+2MuUmWSJj/N5b4Q2Dmr0OLK1mBhkh/ch9Bp/vPQ+tlE0xZ8jy/ o+VeFx4U6HyS4CQo5Z9d/bnkBMm5zEq2yxkr6JxVcUyED9SDuhlM7uKwCILAXrrD RhOM/VIHuBXo/DnERAECg2FSvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKmUNQT cRMO5EP1OsXH0AO5QlVCMB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALl/w8ZbMNgzoqaz+t1VY6zcs/bArT7qNbr/gH7JxuHNrJAIhrmAYLWv9V4Wj fpiphzwx7zjRp99004iXutxQ/4yh7Q4bB+BYeRj85530Sz7ohyN6f4HUGlNYZH2Z gjD+UVGulgv18RaWRaW8T+mPdF81O2AEuczNiWxpGTmL1gOn9tBAcCL4qz4ZQh26 by0yIftx43w/PrfTo2Q6qwW+/zKkRkasm00T8pyLvjtS358HrX7M+LkKQkZWWpnU 2rr9WIRxwf6ZRcSQVqKgs7wFcEWKOrWvBrMtA+weNlbHQGliV8b1tdxTnuVHFR3m SZ+QUB3nsoRkN0iV8Q/YRCGY4A== -----END CERTIFICATE-----Generated at Tue Sep 29 10:56:40 2026 by rpki-client