$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: pDVoGb5wYGSyxV1QNVVipaId8p5+KWGK5UHJuuQsuh4= Subject key identifier: CD:E6:BA:0B:45:8C:2F:9A:F8:9B:6A:7A:BE:7E:24:0C:64:BF:62:65 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0DEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0DE6 Signing time: Thu 24 Sep 2026 17:49:21 +0000 Manifest this update: Thu 24 Sep 2026 17:49:20 +0000 Manifest next update: Thu 01 Oct 2026 17:49:20 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: rRLtGoHgpKzw26YZ4jJPMRaE947NDqutdNo7Hkp5XRY=) 2: 97EA257424D611F1948C90B8AB833773.roa (hash: iMnTaKTLE0PnkxDRT3oZSMIY1tIVMUe3VwWc8pxo+ZY=) 3: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: ke0toGO035Z69Inr4Sq8z7Q3Xv7wkzEpWL2lK40GimM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Sep 24 17:49:20 2026 GMT Not After : Oct 1 17:49:20 2026 GMT Subject: CN=6ab562a1-604e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d7:e6:3a:cb:59:34:10:48:af:49:c5:6f:4c: 80:98:67:bd:72:58:ca:44:4e:1e:14:4a:9f:a8:aa: 63:e7:31:87:e2:6c:a5:40:8b:fa:45:52:92:51:6c: da:22:dd:4b:b1:40:b6:df:e9:be:bd:0d:dd:44:3e: 0e:93:36:c4:28:25:43:7f:4d:ad:57:9e:1b:ac:8f: 72:3d:31:05:46:3f:25:86:bb:bc:8c:23:c6:f0:ba: 7a:c4:20:4f:4f:26:30:78:85:dc:ff:f6:0e:39:ae: e0:c8:c6:e6:5b:d7:95:62:e4:f8:01:43:08:a0:70: 8d:b1:cd:a8:47:db:f8:1f:08:78:49:05:4d:b0:98: 2d:3f:99:ba:c4:8d:d9:ef:6d:8b:49:0f:da:30:39: d8:d2:d5:aa:1f:1a:ab:7b:fc:48:82:11:ca:3e:f5: 43:7c:8b:5d:74:89:b1:55:75:40:4c:ff:2f:d9:b7: 42:e6:c0:cc:80:f0:36:e6:f1:db:6a:f9:58:b0:42: 85:b8:06:c5:4c:9b:05:8b:7b:db:05:60:af:5e:a6: 05:3b:da:93:e9:3c:d8:d4:1d:0b:7b:20:c2:70:ed: 8e:b4:3c:4f:a7:52:01:75:1b:61:46:6c:d0:f0:2d: 73:31:47:80:d0:92:48:8b:b5:f4:ad:a7:5a:4c:55: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E6:BA:0B:45:8C:2F:9A:F8:9B:6A:7A:BE:7E:24:0C:64:BF:62:65 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:da:a0:5a:f7:d9:17:b0:11:0c:fe:72:4b:e3:cf:3c:bc:f0: b3:46:da:17:cc:b3:42:be:44:09:f0:0e:fa:ef:ec:9e:75:ab: 70:29:35:68:55:b7:3e:1e:83:83:c1:74:94:37:06:5e:0e:4d: 07:54:7a:10:d8:cc:08:20:03:5e:c3:94:2d:0b:a9:79:61:e1: c5:37:f4:f3:51:3c:b5:b2:ba:7d:8b:02:19:72:59:ee:d1:c8: dc:ad:9a:cf:38:0e:07:e5:f4:9e:c8:e4:ea:28:6b:9a:77:97: 80:b0:3d:95:97:4d:88:7e:c5:fa:4c:b4:08:5a:dd:51:5c:f7: 54:3b:57:61:98:f2:a7:b5:e1:19:fa:91:4c:fb:3b:8e:69:f3: 42:b7:b6:ab:73:e9:0b:e6:49:54:a9:7f:3f:ac:77:0e:e8:22: 7a:1c:62:db:c7:7a:94:c1:0d:a6:a3:7c:96:29:f3:65:33:92: 8a:c3:bc:d4:be:f4:af:1c:28:a1:21:26:f5:bc:a4:b0:8d:e5: 44:10:e0:f4:25:68:65:cb:6a:a9:1f:0d:eb:35:d9:7d:b8:bf: 6f:bc:e5:3e:db:e7:44:46:dc:dc:1d:42:02:aa:a5:07:84:65: 98:f9:13:2f:2f:ee:e7:9f:3c:2e:ac:f6:eb:7e:9e:8b:34:49: 96:02:58:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjYwOTI0MTc0OTIwWhcNMjYxMDAxMTc0OTIwWjAYMRYwFAYD VQQDEw02YWI1NjJhMS02MDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndfmOstZNBBIr0nFb0yAmGe9cljKRE4eFEqfqKpj5zGH4mylQIv6RVKSUWza It1LsUC23+m+vQ3dRD4OkzbEKCVDf02tV54brI9yPTEFRj8lhru8jCPG8Lp6xCBP TyYweIXc//YOOa7gyMbmW9eVYuT4AUMIoHCNsc2oR9v4Hwh4SQVNsJgtP5m6xI3Z 722LSQ/aMDnY0tWqHxqre/xIghHKPvVDfItddImxVXVATP8v2bdC5sDMgPA25vHb avlYsEKFuAbFTJsFi3vbBWCvXqYFO9qT6TzY1B0LeyDCcO2OtDxPp1IBdRthRmzQ 8C1zMUeA0JJIi7X0radaTFV3JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3mugtF jC+a+Jtqer5+JAxkv2JlMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF9qgWvfZF7ARDP5yS+PPPLzws0baF8yzQr5ECfAO+u/snnWrcCk1aFW3Ph6D g8F0lDcGXg5NB1R6ENjMCCADXsOULQupeWHhxTf081E8tbK6fYsCGXJZ7tHI3K2a zzgOB+X0nsjk6ihrmneXgLA9lZdNiH7F+ky0CFrdUVz3VDtXYZjyp7XhGfqRTPs7 jmnzQre2q3PpC+ZJVKl/P6x3Dugiehxi28d6lMENpqN8linzZTOSisO81L70rxwo oSEm9byksI3lRBDg9CVoZctqqR8N6zXZfbi/b7zlPtvnREbc3B1CAqqlB4RlmPkT Ly/u5588Lqz2636eizRJlgJYmw== -----END CERTIFICATE-----Generated at Thu Sep 24 21:09:08 2026 by rpki-client