$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft File: tDpaYNRoBqaf_vfGdiGexLqLo20.mft (raw, json) Hash identifier: hehHKqS9jPKm23u7yspZbYJrmMZx6ZgdVcHkly4715k= Subject key identifier: B1:CD:67:A5:7C:C1:4E:4D:83:DE:3E:33:2E:25:7F:AE:DD:14:9C:0B Authority key identifier: B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D Certificate issuer: /CN=A91E2AE5/serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Certificate serial: 2C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft Manifest number: 2C70 Signing time: Thu 08 Oct 2026 15:33:08 +0000 Manifest this update: Thu 08 Oct 2026 15:33:08 +0000 Manifest next update: Thu 15 Oct 2026 15:33:08 +0000 Files and hashes: 1: tDpaYNRoBqaf_vfGdiGexLqLo20.crl (hash: 6tVC1Q8DxPQrrPG2YDetttAbF/mUoFBA2hCGV9zCeSQ=) 2: 43487B18BF1811E9A2C00E63C4F9AE02.roa (hash: HkRF10o7aoI0Wv8xHPaGQ1XjAXcX/MS0Fs88d0uQVd0=) 3: 2815E7D4BF4211E9A93A3957C4F9AE02.roa (hash: uc6e0++QGsUcaAl/ez080qgy7o7+IjlFDBybPJucEhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 15:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11418 (0x2c9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Validity Not Before: Oct 8 15:33:08 2026 GMT Not After : Oct 15 15:33:08 2026 GMT Subject: CN=6ac7b7b4-a270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ec:24:73:7d:3e:2d:e0:4a:3a:71:8c:70:46: 26:23:d5:af:44:c9:d1:0f:14:df:ff:36:ff:dc:9c: 47:59:85:7c:14:2a:d1:00:a3:eb:39:33:f0:9d:69: e9:02:cd:c7:12:68:77:40:a5:bf:95:8f:2b:e6:ec: d9:2a:71:97:eb:06:2e:32:23:a0:a9:88:37:6f:04: 91:1c:c2:0d:b1:e8:60:a3:7a:1c:47:e5:ec:d5:bc: 5d:5b:25:79:23:0a:e1:42:8b:43:0c:77:51:04:8c: 83:ff:9b:1a:5e:55:e6:be:f8:d1:24:12:d2:a4:7d: f8:98:43:4e:42:07:45:5b:0c:e4:e5:92:f5:08:69: 64:1a:20:c1:9c:48:f4:7b:17:c0:1e:2c:76:fe:16: ce:14:ba:07:42:8e:5d:ca:d6:2d:1d:cd:df:21:ef: 7f:c9:81:d5:91:08:c8:a5:71:9c:03:e7:34:37:dd: 73:e8:86:67:b2:3b:55:16:b4:36:5f:14:20:3d:ef: db:59:91:2c:d6:3b:15:6c:7c:20:5c:3b:b3:09:30: 77:86:60:02:9c:50:e0:34:3a:50:1e:40:92:44:cf: 4c:2d:cc:e3:9e:80:a5:7d:61:e4:3e:24:94:c9:f4: af:fd:e7:0f:07:d4:0d:dd:46:c7:df:37:4c:22:08: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CD:67:A5:7C:C1:4E:4D:83:DE:3E:33:2E:25:7F:AE:DD:14:9C:0B X509v3 Authority Key Identifier: keyid:B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cb:60:c4:d7:9e:18:fe:95:97:68:14:f1:f0:12:6b:df:30: 04:14:5b:4e:75:79:ab:83:4a:9b:3d:74:d8:11:7b:40:98:fc: 48:16:c6:6d:aa:a4:d9:fc:c7:d3:7e:67:37:1e:3d:4a:52:96: 0d:f6:21:98:81:cd:34:53:df:c7:c6:c4:3d:25:cd:f1:8f:cf: 3a:41:62:1f:00:4e:b3:cf:d0:df:5d:d2:00:31:18:c7:5d:c4: 5f:b6:13:1b:55:20:6f:6a:12:d9:fe:13:07:b9:a0:46:e0:b2: 8b:88:b8:a0:24:84:12:66:b5:4e:54:9a:a4:39:22:59:e2:a4: a7:e7:e8:fc:25:83:05:21:c4:57:d8:1d:16:5b:77:7a:81:d7: 78:e0:5b:cc:d4:c2:d0:0f:06:6a:6b:4a:61:b7:91:ee:2a:23: ba:89:e4:92:29:6f:52:31:f5:fd:08:e7:76:85:a1:dc:9c:4b: 4b:f0:23:32:c5:bd:78:e0:d3:63:a8:3c:b2:8d:5f:bc:fc:f7: bc:6f:c7:c7:37:fe:38:57:a9:f9:d7:56:d3:30:2d:a3:df:7c: 50:3a:1f:a1:d6:35:c0:ea:df:ca:11:60:1c:3d:2c:f0:7f:92: 05:b9:1d:d1:d4:0d:7f:f1:7f:31:9d:10:df:5e:7e:ca:1c:b7: ce:e5:65:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKEI0M0E1QTYwRDQ2ODA2QTY5RkZFRjdDNjc2MjE5RUM0 QkE4QkEzNkQwHhcNMjYxMDA4MTUzMzA4WhcNMjYxMDE1MTUzMzA4WjAYMRYwFAYD VQQDEw02YWM3YjdiNC1hMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiewkc30+LeBKOnGMcEYmI9WvRMnRDxTf/zb/3JxHWYV8FCrRAKPrOTPwnWnp As3HEmh3QKW/lY8r5uzZKnGX6wYuMiOgqYg3bwSRHMINsehgo3ocR+Xs1bxdWyV5 IwrhQotDDHdRBIyD/5saXlXmvvjRJBLSpH34mENOQgdFWwzk5ZL1CGlkGiDBnEj0 exfAHix2/hbOFLoHQo5dytYtHc3fIe9/yYHVkQjIpXGcA+c0N91z6IZnsjtVFrQ2 XxQgPe/bWZEs1jsVbHwgXDuzCTB3hmACnFDgNDpQHkCSRM9MLczjnoClfWHkPiSU yfSv/ecPB9QN3UbH3zdMIgjrowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHNZ6V8 wU5Ng94+My4lf67dFJwLMB8GA1UdIwQYMBaAFLQ6WmDUaAamn/73xnYhnsS6i6Nt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS84RDNFNTRFQUVE NTkxMUUzQjA5MDExOTI1OTExRUEzMi90RHBhWU5Sb0JxYWZfdmZHZGlHZXhMcUxv MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3REcGFZTlJvQnFhZl92ZkdkaUdleExxTG8yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS84RDNFNTRFQUVENTkxMUUzQjA5MDExOTI1OTExRUEzMi90RHBhWU5Sb0Jx YWZfdmZHZGlHZXhMcUxvMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATMtgxNeeGP6Vl2gU8fASa98wBBRbTnV5q4NKmz102BF7QJj8SBbGbaqk2fzH 035nNx49SlKWDfYhmIHNNFPfx8bEPSXN8Y/POkFiHwBOs8/Q313SADEYx13EX7YT G1Ugb2oS2f4TB7mgRuCyi4i4oCSEEma1TlSapDkiWeKkp+fo/CWDBSHEV9gdFlt3 eoHXeOBbzNTC0A8GamtKYbeR7iojuonkkilvUjH1/QjndoWh3JxLS/AjMsW9eODT Y6g8so1fvPz3vG/Hxzf+OFep+ddW0zAto998UDofodY1wOrfyhFgHD0s8H+SBbkd 0dQNf/F/MZ0Q315+yhy3zuVl1w== -----END CERTIFICATE-----Generated at Fri Oct 9 02:18:51 2026 by rpki-client