$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json) Hash identifier: k95N189PrWuZtFlHNVtPaRjnrXDv444FpgIy+vX/Llw= Subject key identifier: 7D:DF:5B:D8:95:62:12:E9:7D:B4:34:DE:EC:2D:04:CA:01:49:3D:6D Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 02C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft Manifest number: 02A5 Signing time: Tue 29 Sep 2026 02:11:31 +0000 Manifest this update: Tue 29 Sep 2026 02:11:30 +0000 Manifest next update: Tue 06 Oct 2026 02:11:30 +0000 Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: a8lYrXzhdFOZcEACStI7kTisnFf6JQlbhg6NoggQQTk=) 2: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: +FOKSn3UMqNBdCkwTnN5e6gZKaXTHMKWX9i32crYuLc=) 3: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: BDN3eWU1QOvpwhp4B8qHZfh25EaapwZh0B/UqPtIRS4=) 4: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: WJy0DDE3R4DJLfi+G/eV3lsb3PxP1zjDf/s8mlf+RmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 02:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Sep 29 02:11:30 2026 GMT Not After : Oct 6 02:11:30 2026 GMT Subject: CN=6abb1e53-5a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:dd:0f:79:8f:c6:2b:0f:bd:62:07:87:2b:f4: 0c:67:63:10:a3:25:1b:cf:d7:3f:54:4b:b2:b7:60: 52:3f:9f:63:34:69:4b:5b:8a:8a:3f:22:af:eb:62: 8e:06:b0:0d:c1:f3:e3:f8:d9:e9:ac:70:70:d5:51: 3e:95:9c:fc:81:d1:c6:aa:2e:09:c0:9a:54:d9:10: 61:74:6a:99:10:34:52:09:31:d3:c5:11:a9:67:c9: 64:cc:4e:d5:7a:0b:8e:60:d4:cc:68:b8:27:51:7a: f2:b9:48:05:31:f5:e7:dd:38:f1:a3:0e:c9:73:06: e6:6c:2c:24:b7:8d:b1:56:7d:10:1b:57:5d:9f:6b: 44:74:06:f3:d7:95:b6:ca:bb:98:e4:53:59:70:bf: c8:16:60:75:7c:92:14:9e:dd:23:5b:fb:18:55:5b: 4f:5b:3f:52:19:51:7f:10:c3:9e:b2:72:7d:9c:97: 7e:78:4d:69:95:5e:f8:85:8c:17:06:92:91:6a:3a: 17:de:d3:a1:9a:47:47:23:d8:57:ad:46:5f:9c:e7: d4:33:6f:c6:ab:ee:ec:60:ad:c3:67:4e:93:65:76: b0:3f:17:b8:07:0c:e0:f7:10:b4:8b:3b:2b:fe:3e: 60:91:01:1f:83:36:55:ac:a4:63:f1:a9:96:a3:c9: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DF:5B:D8:95:62:12:E9:7D:B4:34:DE:EC:2D:04:CA:01:49:3D:6D X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:6d:7a:4f:ef:be:40:e4:45:c5:da:92:9d:36:b9:a3:a1:f0: 5b:87:e2:9e:02:15:0a:34:8b:70:af:cf:b3:b2:fe:aa:0e:5a: e2:f2:bf:24:a7:42:69:9e:96:ce:0f:54:bb:d4:05:f3:f2:de: 1c:1e:3e:f2:dd:1b:1f:43:3e:9e:3e:9e:25:29:38:af:08:35: b9:04:53:5a:23:59:e7:8d:34:47:d1:ad:ec:d7:1d:e0:a6:2a: 2f:3b:c9:29:34:ef:a8:c7:c6:48:77:26:22:6b:37:65:07:ae: c2:85:d2:0f:6b:3e:69:0d:1b:18:28:f4:24:be:78:d8:e8:f2: 5e:2c:1b:25:c4:55:ba:d5:99:69:ad:ab:06:7a:22:29:ca:a1: 3e:78:16:3e:17:2e:57:96:d3:b6:1e:fa:a7:42:eb:e3:7e:0e: 91:02:b0:63:f4:d5:10:6f:36:da:cd:b4:66:c2:d8:bf:cd:7f: 69:a5:ef:03:d9:37:d7:a4:13:a9:cf:b4:be:4e:e6:68:15:3a: 09:5c:5a:fd:56:9c:f8:7a:48:b4:8e:30:82:0a:11:8b:c6:54: 80:f6:b7:3b:c9:56:1f:05:59:56:99:f4:3c:d1:b2:bd:99:0a: cc:d5:67:c0:e0:e4:b3:4c:94:71:c6:80:63:6b:7f:c0:42:76: 6b:49:14:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjYwOTI5MDIxMTMwWhcNMjYxMDA2MDIxMTMwWjAYMRYwFAYD VQQDEw02YWJiMWU1My01YTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8d0PeY/GKw+9YgeHK/QMZ2MQoyUbz9c/VEuyt2BSP59jNGlLW4qKPyKv62KO BrANwfPj+NnprHBw1VE+lZz8gdHGqi4JwJpU2RBhdGqZEDRSCTHTxRGpZ8lkzE7V eguOYNTMaLgnUXryuUgFMfXn3Tjxow7JcwbmbCwkt42xVn0QG1ddn2tEdAbz15W2 yruY5FNZcL/IFmB1fJIUnt0jW/sYVVtPWz9SGVF/EMOesnJ9nJd+eE1plV74hYwX BpKRajoX3tOhmkdHI9hXrUZfnOfUM2/Gq+7sYK3DZ06TZXawPxe4Bwzg9xC0izsr /j5gkQEfgzZVrKRj8amWo8ny9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3fW9iV YhLpfbQ03uwtBMoBST1tMB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdV Q0xVY3VmMk85S1pRcklacG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABG16T+++QORFxdqSnTa5o6HwW4fingIVCjSLcK/Ps7L+qg5a4vK/JKdCaZ6W zg9Uu9QF8/LeHB4+8t0bH0M+nj6eJSk4rwg1uQRTWiNZ5400R9Gt7Ncd4KYqLzvJ KTTvqMfGSHcmIms3ZQeuwoXSD2s+aQ0bGCj0JL542OjyXiwbJcRVutWZaa2rBnoi KcqhPngWPhcuV5bTth76p0Lr434OkQKwY/TVEG822s20ZsLYv81/aaXvA9k316QT qc+0vk7maBU6CVxa/Vac+HpItI4wggoRi8ZUgPa3O8lWHwVZVpn0PNGyvZkKzNVn wODks0yUccaAY2t/wEJ2a0kUSg== -----END CERTIFICATE-----Generated at Tue Sep 29 15:44:04 2026 by rpki-client