$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: MIGLGIGHLrfjbxMHSb8T5jSPOwkBWlcIHHqSeVWPDww= Subject key identifier: 29:95:BD:3E:D6:15:6B:A3:10:95:37:DA:FA:CD:72:D4:A1:2D:6F:CD Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 0A1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 21BF Signing time: Tue 22 Sep 2026 16:30:08 +0000 Manifest this update: Tue 22 Sep 2026 16:30:08 +0000 Manifest next update: Tue 29 Sep 2026 16:30:08 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: uKc+DJQJ4uPxgoJ9QqA/9ieITd8hjDM4nmIaPYFTfFM=) 2: EDA7924C4C6A11F18E27EE0BC2833773.roa (hash: 1Bx4zBsmcdQadh2Lc0q70WKfY8U9Q8aKMXPEm63RlMk=) 3: 5FBC810E2C6C11F1AFD97E4FB3833773.roa (hash: g2RLVtOivjuUFJpHbhY01dBDwhC9Sd+LiRmcxISqRKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2586 (0xa1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Sep 22 16:30:08 2026 GMT Not After : Sep 29 16:30:08 2026 GMT Subject: CN=6ab2ad10-78d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:d1:d9:ac:60:28:83:be:7e:cf:b7:4b:76: 07:23:1c:e7:0b:39:e9:02:2b:2f:3d:36:51:fe:b0: 39:54:8d:58:6b:f8:e4:2e:5b:4e:9d:b0:c1:d5:e0: e9:de:f8:64:cb:ae:a2:6b:aa:06:9f:23:ec:db:06: 50:17:98:fd:6a:33:63:5c:c4:6a:46:d6:8d:f1:5d: 18:7f:c3:b2:14:67:db:4d:5e:bb:ae:6a:89:7e:82: 0e:28:a8:75:fd:e2:ce:d0:b7:87:c1:df:dd:0b:33: 18:35:76:f2:cd:7b:87:6c:6a:eb:7d:61:50:d6:83: 63:be:44:b0:09:33:c3:5d:51:8c:0f:86:8a:0e:d1: 22:da:9c:c3:19:a0:c3:c6:bb:fa:c3:c9:43:ef:05: c7:fa:b9:37:e4:fd:fb:b2:f6:40:0e:18:f6:3d:6d: df:42:cf:8b:69:88:4c:25:5b:17:fb:73:bf:67:21: 34:a6:97:49:81:61:c7:83:ad:98:52:b0:e8:2a:96: ad:ed:0f:ea:f6:24:60:2e:8a:79:40:1d:35:e6:85: 57:08:8b:55:c6:b3:fb:e2:d9:f6:7a:56:30:9a:37: 3f:9e:ed:f1:ab:49:ed:3d:a7:65:d5:c9:ac:d6:12: 38:49:b1:55:eb:43:de:52:ad:46:ca:d3:4a:96:39: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:95:BD:3E:D6:15:6B:A3:10:95:37:DA:FA:CD:72:D4:A1:2D:6F:CD X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ac:da:20:c9:02:5f:80:91:80:22:5a:18:c9:f6:e0:de:62: 58:cb:74:02:fb:3e:ea:5b:6d:f9:c7:38:0c:e6:35:e3:0e:4f: 8c:57:ee:d4:14:4c:08:a3:03:25:92:11:bd:9e:72:a0:7e:89: 96:e8:e0:b1:39:50:a1:86:af:4d:5f:0e:80:58:2c:30:4a:48: c9:2d:98:53:94:4f:81:f2:e0:92:4f:e5:af:b4:dc:a5:15:81: 86:55:2e:b2:a4:95:4c:b2:4f:60:ba:1b:7e:1d:3a:9c:5c:7c: ab:9b:9b:f6:8a:39:26:59:7a:50:d5:23:60:cb:17:63:b4:75: 8e:03:1e:1e:d2:6b:f7:b8:00:88:19:0e:1d:09:fd:b3:04:08: 28:6d:0a:c6:48:75:a1:ff:0a:f4:96:f7:d9:f9:61:45:d1:12: 98:34:8a:4b:e3:e3:a3:a0:12:f6:b6:0e:a8:42:85:8d:60:92: f3:20:09:36:a9:88:02:2e:8c:0f:74:52:81:61:43:7d:51:ee: 00:74:f9:dc:14:c2:04:f4:08:3b:b5:43:dd:cd:95:4c:b2:cb: 86:e2:68:85:1d:02:1a:9f:37:6d:8c:26:20:7f:ea:04:39:d9: de:ac:ef:b0:c3:25:28:82:30:17:1b:38:d6:8b:02:9a:a7:71: 36:fb:99:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjYwOTIyMTYzMDA4WhcNMjYwOTI5MTYzMDA4WjAYMRYwFAYD VQQDEw02YWIyYWQxMC03OGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8rR2axgKIO+fs+3S3YHIxznCznpAisvPTZR/rA5VI1Ya/jkLltOnbDB1eDp 3vhky66ia6oGnyPs2wZQF5j9ajNjXMRqRtaN8V0Yf8OyFGfbTV67rmqJfoIOKKh1 /eLO0LeHwd/dCzMYNXbyzXuHbGrrfWFQ1oNjvkSwCTPDXVGMD4aKDtEi2pzDGaDD xrv6w8lD7wXH+rk35P37svZADhj2PW3fQs+LaYhMJVsX+3O/ZyE0ppdJgWHHg62Y UrDoKpat7Q/q9iRgLop5QB015oVXCItVxrP74tn2elYwmjc/nu3xq0ntPadl1cms 1hI4SbFV60PeUq1GytNKljnpLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmVvT7W FWujEJU32vrNctShLW/NMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB6zaIMkCX4CRgCJaGMn24N5iWMt0Avs+6ltt+cc4DOY14w5PjFfu1BRMCKMD JZIRvZ5yoH6JlujgsTlQoYavTV8OgFgsMEpIyS2YU5RPgfLgkk/lr7TcpRWBhlUu sqSVTLJPYLobfh06nFx8q5ub9oo5Jll6UNUjYMsXY7R1jgMeHtJr97gAiBkOHQn9 swQIKG0Kxkh1of8K9Jb32flhRdESmDSKS+Pjo6AS9rYOqEKFjWCS8yAJNqmIAi6M D3RSgWFDfVHuAHT53BTCBPQIO7VD3c2VTLLLhuJohR0CGp83bYwmIH/qBDnZ3qzv sMMlKIIwFxs41osCmqdxNvuZ5Q== -----END CERTIFICATE-----Generated at Thu Sep 24 04:48:46 2026 by rpki-client