$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: FV3RLn1p3fBsureS35fiWnrdrz1piGiivBRPQkLjEjY= Subject key identifier: 48:6D:08:D3:B8:EA:D0:E8:59:CD:F6:0B:BE:86:7F:96:98:06:C2:A5 Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 02CA Signing time: Thu 24 Sep 2026 16:16:31 +0000 Manifest this update: Thu 24 Sep 2026 16:16:31 +0000 Manifest next update: Thu 01 Oct 2026 16:16:31 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: 887Y41AlrzUt67Zxjtn7qtwqzPsOPQSaKPcD6YAr26w=) 2: E4C7F5CC861C11F1A1A4787881A30FBC.roa (hash: eS4gifaEB1Ko6koZdynUYduB0XDv64fPCwP13PzmRbY=) 3: D999BCE486E911F189970DEF85A30FBC.roa (hash: PM+CjH8NGl/svPw8N5o7ZKEH0zYFpc1M+Q6DjNKK8fc=) 4: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: ueHqaGP9BcHIMZqPcQWizwyy9v5xkPDp7cUx2N9DhCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Sep 24 16:16:31 2026 GMT Not After : Oct 1 16:16:31 2026 GMT Subject: CN=6ab54cdf-4265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:ec:f4:69:c5:92:8a:73:a0:95:ad:f2:63: 8d:e1:3e:20:e5:17:c3:43:3e:0e:11:ef:6d:0e:b8: a8:ce:0b:78:18:a6:77:56:b3:4c:74:ca:16:fb:89: 4a:77:9e:6a:c3:dd:dc:16:d4:aa:18:3a:fb:82:71: 32:36:3c:0b:a6:6f:bc:81:9c:12:3c:63:f4:c8:08: 67:2b:1d:d2:21:9a:a1:8a:88:74:cb:e8:c9:eb:cd: 25:a7:ec:8e:a3:ae:b6:f3:19:e1:93:47:a9:cc:3d: 55:eb:6e:87:a8:7c:aa:2d:20:30:15:26:97:0c:67: bb:4b:df:4c:39:7f:d2:90:e0:3c:64:c6:68:67:2e: 30:d6:74:9b:ab:18:4f:87:2c:4d:a6:50:a9:68:e4: 99:29:8a:b8:c7:2c:4d:c7:71:11:00:fc:f6:94:ad: 83:a8:39:6c:b6:fe:35:33:ca:42:2b:80:80:a1:a0: 9e:4e:1e:e7:29:b7:94:6d:c2:01:5d:87:e0:d8:6b: 00:de:43:54:cb:3f:22:18:66:f1:db:4f:6c:e4:64: 36:19:50:a2:2a:de:c4:cf:be:fb:4e:df:47:b8:9e: 85:3f:ca:9b:92:4e:dd:27:37:1d:15:39:0e:9a:ed: 61:fe:4e:97:6b:ca:5a:92:10:6a:0f:e7:f1:4c:40: 22:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6D:08:D3:B8:EA:D0:E8:59:CD:F6:0B:BE:86:7F:96:98:06:C2:A5 X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:32:c8:7d:ae:3a:13:92:41:b3:9e:c3:da:9d:22:19:04:06: b1:b2:38:19:a1:c0:5b:78:01:fb:77:63:13:1f:37:18:9a:f6: 33:69:dc:f7:be:12:d2:85:c5:66:ee:f9:b7:8d:2a:17:2e:1d: 02:66:2f:ed:bf:21:e5:7e:b0:ef:2a:c8:91:4c:43:d6:b4:34: 0b:86:f2:53:5d:22:84:c0:3d:c1:46:1c:13:6c:c9:0f:f7:7c: 0d:de:4e:94:13:bb:f0:53:db:7d:83:b8:02:00:f0:a3:ae:42: 4d:66:e4:43:54:5d:f9:f8:62:f4:d6:81:af:96:f7:47:bd:6b: 39:be:9c:36:c1:b4:3e:35:8e:7a:d7:8d:b2:38:70:25:87:70: aa:36:1c:1f:a2:aa:d8:f4:3e:2e:58:7a:6b:66:da:f4:34:b9: b9:62:18:75:a2:05:56:ef:87:1b:d9:b1:df:a0:d8:5f:57:00: 86:db:e7:bd:02:c5:28:bc:b6:52:0d:cf:3f:66:2c:bb:36:20: f4:6c:07:30:4d:22:d5:e5:16:0c:5f:51:d9:ca:75:30:ba:b3: 3c:26:e5:46:51:3e:51:5b:2a:07:fb:d0:f5:aa:45:a9:17:b9: f0:11:da:c8:ea:b9:58:a4:2d:ad:26:6e:80:df:62:dc:b8:ec: c3:58:63:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjYwOTI0MTYxNjMxWhcNMjYxMDAxMTYxNjMxWjAYMRYwFAYD VQQDEw02YWI1NGNkZi00MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl3s9GnFkopzoJWt8mON4T4g5RfDQz4OEe9tDriozgt4GKZ3VrNMdMoW+4lK d55qw93cFtSqGDr7gnEyNjwLpm+8gZwSPGP0yAhnKx3SIZqhioh0y+jJ680lp+yO o6628xnhk0epzD1V626HqHyqLSAwFSaXDGe7S99MOX/SkOA8ZMZoZy4w1nSbqxhP hyxNplCpaOSZKYq4xyxNx3ERAPz2lK2DqDlstv41M8pCK4CAoaCeTh7nKbeUbcIB XYfg2GsA3kNUyz8iGGbx209s5GQ2GVCiKt7Ez777Tt9HuJ6FP8qbkk7dJzcdFTkO mu1h/k6Xa8pakhBqD+fxTEAiqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhtCNO4 6tDoWc32C76Gf5aYBsKlMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALTLIfa46E5JBs57D2p0iGQQGsbI4GaHAW3gB+3djEx83GJr2M2nc974S0oXF Zu75t40qFy4dAmYv7b8h5X6w7yrIkUxD1rQ0C4byU10ihMA9wUYcE2zJD/d8Dd5O lBO78FPbfYO4AgDwo65CTWbkQ1Rd+fhi9NaBr5b3R71rOb6cNsG0PjWOeteNsjhw JYdwqjYcH6Kq2PQ+Llh6a2ba9DS5uWIYdaIFVu+HG9mx36DYX1cAhtvnvQLFKLy2 Ug3PP2YsuzYg9GwHME0i1eUWDF9R2cp1MLqzPCblRlE+UVsqB/vQ9apFqRe58BHa yOq5WKQtrSZugN9i3Ljsw1hjxA== -----END CERTIFICATE-----Generated at Sat Sep 26 07:41:00 2026 by rpki-client