$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft File: TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json) Hash identifier: tDJ+dyri87Ul/4UVMuUrPIlSQfE9LlExDnYFKGjaQFU= Subject key identifier: C1:4D:33:1A:A0:B9:75:28:CB:4F:67:9E:13:80:C9:AE:06:70:FD:33 Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 Certificate issuer: /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft Manifest number: 0154 Signing time: Fri 25 Sep 2026 05:16:58 +0000 Manifest this update: Fri 25 Sep 2026 05:16:58 +0000 Manifest next update: Fri 02 Oct 2026 05:16:58 +0000 Files and hashes: 1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: tJ1MHb4PtkVgaTSxYOTxHzoEzqTiNrdo7ITkFk5hRe8=) 2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Validity Not Before: Sep 25 05:16:58 2026 GMT Not After : Oct 2 05:16:58 2026 GMT Subject: CN=6ab603ca-706e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:97:0f:fe:86:93:c5:1d:8a:58:95:82:c3: ab:fd:0a:eb:39:47:26:8a:fb:ed:ec:53:4a:b6:90: 82:0c:7f:37:ae:b0:cb:60:a8:48:84:ad:6c:05:f6: 40:87:f4:5b:16:c5:83:45:32:44:0f:9c:70:f6:8d: 17:4b:bb:08:1a:0e:19:cb:66:fd:97:53:81:c6:ad: fa:bf:82:ee:40:35:d5:6b:e9:b2:ab:00:31:5c:86: 66:e3:70:ff:7f:71:10:06:5b:c4:93:19:ef:11:13: d0:f2:7c:3b:34:4b:7d:15:19:dc:5d:10:dc:03:9b: 48:54:3e:c5:b0:2e:06:09:3d:51:f2:95:a9:35:0b: f7:62:3a:ee:00:6b:c0:70:1d:a9:5c:e2:e9:3f:5f: 95:ec:74:65:e1:00:52:e0:26:cc:f3:a7:5c:32:54: 02:f1:40:17:37:83:75:01:ea:f7:07:8e:da:30:8d: 44:7a:d3:3b:52:6c:23:97:28:73:db:54:28:b1:cd: ad:4c:db:40:64:b5:72:53:2f:46:2e:8f:ce:b1:27: 8f:1a:6c:e0:c1:62:8f:57:e3:96:4e:4a:58:e7:aa: 34:d3:ef:25:28:f4:04:73:2a:8c:e1:99:77:73:a9: 55:1a:a1:60:63:86:37:e6:0f:a6:00:fd:73:3c:57: 0d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4D:33:1A:A0:B9:75:28:CB:4F:67:9E:13:80:C9:AE:06:70:FD:33 X509v3 Authority Key Identifier: keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:dc:de:e4:44:3c:13:3e:e3:1f:be:38:0d:e4:e1:aa:fe:3a: 83:50:aa:b4:25:8b:9f:73:1c:17:c8:fc:2c:ee:b4:ac:1e:db: 6c:15:49:51:75:84:1a:4d:22:35:01:7b:2a:51:24:0e:f5:df: 7d:d8:19:0b:11:69:91:49:fd:b7:e5:7e:aa:fc:3f:bd:25:2d: 51:16:b1:9d:0b:f1:fa:65:b7:f0:44:ce:3e:d2:87:c0:f3:8c: 85:be:a1:81:98:51:e2:a3:ce:21:31:68:e4:c6:21:a0:da:cc: 81:06:d3:69:0f:cc:a9:e8:eb:1d:a6:eb:24:a9:4a:d1:c9:b6: 83:24:86:37:4c:40:1c:37:69:c8:26:b5:3c:c9:e8:ac:18:aa: 57:39:b8:2b:2e:53:f3:92:10:3f:b9:4f:d3:7c:64:29:e9:46: 72:25:cb:e2:79:ca:4c:cc:e6:2c:fd:15:1f:bb:6d:12:18:e0: c1:ff:6f:08:a1:c2:20:68:e6:6b:29:16:c5:bf:a7:4a:06:d4: 35:fb:fd:6d:75:22:a8:74:19:f4:42:9a:55:ff:04:4a:ff:fe: 92:26:fe:46:cb:8d:89:f6:be:06:42:78:43:47:96:73:ea:fa: 31:0f:57:56:28:98:77:46:7f:f7:ed:6c:1f:bb:06:c1:3b:05: ee:8b:df:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyMzMxMTAvBgNVBAUTKDRFNzU5QUIyREUyNDU0NjlGODMxMUI5MjczQjU1NTM4 N0U3NTBBOTAwHhcNMjYwOTI1MDUxNjU4WhcNMjYxMDAyMDUxNjU4WjAYMRYwFAYD VQQDEw02YWI2MDNjYS03MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXKXD/6Gk8UdiliVgsOr/QrrOUcmivvt7FNKtpCCDH83rrDLYKhIhK1sBfZA h/RbFsWDRTJED5xw9o0XS7sIGg4Zy2b9l1OBxq36v4LuQDXVa+myqwAxXIZm43D/ f3EQBlvEkxnvERPQ8nw7NEt9FRncXRDcA5tIVD7FsC4GCT1R8pWpNQv3YjruAGvA cB2pXOLpP1+V7HRl4QBS4CbM86dcMlQC8UAXN4N1Aer3B47aMI1EetM7Umwjlyhz 21Qosc2tTNtAZLVyUy9GLo/OsSePGmzgwWKPV+OWTkpY56o00+8lKPQEcyqM4Zl3 c6lVGqFgY4Y35g+mAP1zPFcNBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFNMxqg uXUoy09nnhOAya4GcP0zMB8GA1UdIwQYMBaAFE51mrLeJFRp+DEbknO1VTh+dQqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjIzMy8wOEYwNTI2MEIz NzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZHbjRNUnVTYzdWVk9INTFD cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuV2FzdDRrVkduNE1SdVNjN1ZWT0g1MUNwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjIzMy8wOEYwNTI2MEIzNzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZH bjRNUnVTYzdWVk9INTFDcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUdze5EQ8Ez7jH744DeThqv46g1CqtCWLn3McF8j8LO60rB7bbBVJUXWEGk0i NQF7KlEkDvXffdgZCxFpkUn9t+V+qvw/vSUtURaxnQvx+mW38ETOPtKHwPOMhb6h gZhR4qPOITFo5MYhoNrMgQbTaQ/MqejrHabrJKlK0cm2gySGN0xAHDdpyCa1PMno rBiqVzm4Ky5T85IQP7lP03xkKelGciXL4nnKTMzmLP0VH7ttEhjgwf9vCKHCIGjm aykWxb+nSgbUNfv9bXUiqHQZ9EKaVf8ESv/+kib+RsuNifa+BkJ4Q0eWc+r6MQ9X ViiYd0Z/9+1sH7sGwTsF7ovf/w== -----END CERTIFICATE-----Generated at Sat Sep 26 05:21:18 2026 by rpki-client