$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: SpKF7mfqpi97vJGCzurdWnZWL1/7AqLVyQI92ar6lso= Subject key identifier: 64:5E:86:E0:02:FB:3D:61:84:5C:51:20:5A:4A:9A:A1:68:79:0C:FE Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: 0217 Signing time: Wed 23 Sep 2026 02:57:33 +0000 Manifest this update: Wed 23 Sep 2026 02:57:32 +0000 Manifest next update: Wed 30 Sep 2026 02:57:32 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: hVeuJ/wJIDFE+bE2taBg1MEoqXdGyOfdg7AwJbYC1wU=) 2: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: aRfQZJBeIUXkRnVBff5AI2UFIz3GN5zYE0o7KWSnJVE=) 3: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: /qNeMoHq2aNx85z5DTHQgQr12JfNKIytF+LLvQVIEvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: Sep 23 02:57:32 2026 GMT Not After : Sep 30 02:57:32 2026 GMT Subject: CN=6ab3401d-3f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:fb:13:e9:f2:a1:5c:bc:49:ad:7e:20:63: 28:aa:96:f0:2b:b4:6a:78:da:e2:41:5e:aa:fe:7c: 30:6c:01:b2:6e:a5:08:49:4e:f7:b1:be:8c:52:45: ce:38:5c:97:50:2e:a6:cc:65:23:dc:59:ed:d6:06: 05:a6:a9:e6:1f:a4:03:4c:15:5c:c3:dd:d3:27:37: df:1f:af:9e:e2:4e:53:9f:00:ee:cb:c4:a2:e7:ca: 04:e2:76:fe:ed:f7:90:88:a4:29:80:8b:b2:a4:da: 20:e0:d1:55:ed:32:df:d5:36:21:eb:3e:e4:b4:ee: 16:e7:ec:bf:fe:f4:7c:29:38:ae:9e:59:37:24:8c: 3a:d1:95:9f:d9:0f:2f:49:fb:9b:b5:85:19:e0:6b: f3:fc:11:c0:65:4c:27:ca:22:3a:23:4e:83:68:8d: 37:2a:18:e2:f1:6d:b7:a7:3e:5f:a2:bb:39:f0:67: cc:6f:27:40:8a:1a:c5:54:f7:7e:f3:b2:5d:81:70: e5:dc:4b:97:75:83:cd:af:19:b2:d4:4e:99:8c:b4: 85:eb:47:85:3a:1b:88:40:5f:6d:24:8d:d2:4f:3b: 1d:e6:69:ea:ec:7c:08:ac:91:7e:a1:98:d8:93:01: fe:ac:6f:9e:b2:60:30:7e:2e:53:1b:02:a7:00:51: 62:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5E:86:E0:02:FB:3D:61:84:5C:51:20:5A:4A:9A:A1:68:79:0C:FE X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:d7:b2:e6:65:c6:46:27:e1:be:67:a3:6c:c1:11:f3:6f:04: 57:bc:46:9c:d6:1f:ce:ad:a1:72:14:f3:02:99:65:9a:9d:30: ce:45:79:61:94:5e:3d:f6:d4:be:29:ac:2e:31:24:70:7a:a7: 77:b5:60:0a:38:fe:c2:e5:95:76:94:eb:d9:aa:4e:8a:85:10: 35:18:af:45:be:16:e0:de:0e:4a:57:dc:cb:10:52:8f:84:4a: 45:c9:25:25:58:78:04:a3:32:05:01:a4:5c:a9:3e:47:f1:61: f8:28:b2:35:d3:92:b4:0c:4c:07:a3:51:4f:4f:f7:05:6b:55: 74:53:cc:5d:83:62:90:01:64:45:42:46:f9:f8:19:d7:0c:9c: 46:00:43:dd:71:f9:7c:41:44:bc:ea:d5:7e:dd:0c:0d:42:25: a0:32:1e:ba:3f:f5:7e:e5:01:9f:b5:b7:9f:36:70:ad:ef:ad: 9a:3a:37:5b:25:bc:c3:92:d2:31:32:b9:34:23:10:bd:9d:d6: b2:28:e4:15:1a:2b:52:48:c8:7c:4a:1c:aa:57:60:3b:11:fe: e1:1a:21:0f:aa:09:b5:74:33:00:1c:dd:71:71:cd:70:34:7c: 18:c4:16:05:a5:d9:be:2a:3d:e8:92:7b:0f:ee:68:58:2a:54: a8:f8:02:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1 NTIwNUM4RjYwHhcNMjYwOTIzMDI1NzMyWhcNMjYwOTMwMDI1NzMyWjAYMRYwFAYD VQQDEw02YWIzNDAxZC0zZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdL7E+nyoVy8Sa1+IGMoqpbwK7RqeNriQV6q/nwwbAGybqUISU73sb6MUkXO OFyXUC6mzGUj3Fnt1gYFpqnmH6QDTBVcw93TJzffH6+e4k5TnwDuy8Si58oE4nb+ 7feQiKQpgIuypNog4NFV7TLf1TYh6z7ktO4W5+y//vR8KTiunlk3JIw60ZWf2Q8v SfubtYUZ4Gvz/BHAZUwnyiI6I06DaI03Khji8W23pz5fors58GfMbydAihrFVPd+ 87JdgXDl3EuXdYPNrxmy1E6ZjLSF60eFOhuIQF9tJI3STzsd5mnq7HwIrJF+oZjY kwH+rG+esmAwfi5TGwKnAFFifQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRehuAC +z1hhFxRIFpKmqFoeQz+MB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3 bXhicGwxQUc0U0pWSUZ5UFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxdey5mXGRifhvmejbMER828EV7xGnNYfzq2hchTzApllmp0wzkV5YZRePfbU vimsLjEkcHqnd7VgCjj+wuWVdpTr2apOioUQNRivRb4W4N4OSlfcyxBSj4RKRckl JVh4BKMyBQGkXKk+R/Fh+CiyNdOStAxMB6NRT0/3BWtVdFPMXYNikAFkRUJG+fgZ 1wycRgBD3XH5fEFEvOrVft0MDUIloDIeuj/1fuUBn7W3nzZwre+tmjo3WyW8w5LS MTK5NCMQvZ3WsijkFRorUkjIfEocqldgOxH+4RohD6oJtXQzABzdcXHNcDR8GMQW BaXZvio96JJ7D+5oWCpUqPgC6A== -----END CERTIFICATE-----Generated at Fri Sep 25 00:08:00 2026 by rpki-client