$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft File: _thOn-AVmpk3ohk6C326I7bCZbg.mft (raw, json) Hash identifier: YzZvEnP67MVQdEmUCWGHNj5CpINcp/4qaLe9yh7YLQ0= Subject key identifier: 0E:0C:8F:6E:B4:A1:D3:D2:13:09:76:6D:35:6E:92:07:23:D0:9C:93 Authority key identifier: FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8 Certificate issuer: /CN=A91EDBB0/serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft Manifest number: 011F Signing time: Wed 23 Sep 2026 05:42:01 +0000 Manifest this update: Wed 23 Sep 2026 05:42:01 +0000 Manifest next update: Wed 30 Sep 2026 05:42:01 +0000 Files and hashes: 1: _thOn-AVmpk3ohk6C326I7bCZbg.crl (hash: lpcOwVoNeUJF/CXjG+yjl5X63mCaaeULLAv7t+QfmgM=) 2: 18317928083911F0A2909A72C4F9AE02.roa (hash: aWC9Z9bpEAKz9IJhY7xU/+8CcFBubkzB7CX939nqCu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDBB0, serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8 Validity Not Before: Sep 23 05:42:01 2026 GMT Not After : Sep 30 05:42:01 2026 GMT Subject: CN=6ab366a9-cd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:92:65:57:71:b9:0e:d2:53:07:c4:fb:de:1a: d1:51:6f:aa:80:58:09:c0:e8:6a:5c:3e:08:00:44: 94:e2:08:f6:fb:0b:9a:42:a9:0e:c2:8b:e9:97:b3: 67:ef:63:ef:ab:50:32:50:02:71:9b:48:ff:f3:50: d5:75:19:a5:71:96:b3:62:31:af:7f:17:81:18:f5: e8:d5:38:ac:dd:86:73:6f:c6:6a:cb:82:73:82:4d: a2:ef:13:42:de:aa:9f:f4:3f:4f:bb:38:a3:a3:e8: e2:a9:7c:d0:3e:29:c3:03:35:e7:62:2b:f0:98:9b: 76:3c:dc:c8:87:59:63:0b:88:23:2d:16:35:1f:2e: 21:07:7a:fb:24:96:f0:ad:a5:28:59:0d:05:41:49: 1d:b2:f5:54:02:14:b2:0c:8e:b7:aa:45:04:53:ff: 0a:e4:1e:d3:60:c3:48:74:8f:06:eb:01:2c:d8:83: 70:8f:5c:43:c9:7e:f7:bd:da:93:57:93:c4:ff:d7: 27:90:4a:b7:b8:59:4f:35:74:7c:71:05:0f:54:41: f0:5b:fb:b3:f3:98:d6:ea:ef:b6:c6:be:8a:49:8f: 8b:52:8c:6e:ab:20:d2:ba:58:13:9e:80:76:f6:4a: b9:0a:a7:c2:22:c8:07:b5:87:03:29:1b:83:56:12: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0C:8F:6E:B4:A1:D3:D2:13:09:76:6D:35:6E:92:07:23:D0:9C:93 X509v3 Authority Key Identifier: keyid:FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:15:41:7a:5c:fa:83:e7:ae:38:94:ec:20:f7:1e:94:53:1d: 18:74:50:77:07:37:83:07:91:36:28:03:e7:9b:cf:f3:ec:5f: 29:60:14:86:10:9e:e9:67:41:d5:4d:7e:d8:08:d0:2d:f1:ef: fd:5b:4a:25:6c:88:d2:cc:72:a3:c7:07:b3:e0:a2:d1:77:12: 1e:be:5a:cd:b1:49:70:1a:71:28:06:d0:20:ea:f2:54:cd:93: 6e:c6:83:e5:f8:27:f5:dd:3b:df:f1:f6:3d:9f:99:bf:67:3a: ff:4c:1c:64:69:37:41:de:2b:2a:59:9f:5c:df:e1:dd:65:ad: ec:4b:3a:3e:0d:45:2c:1e:d3:56:03:af:7f:a3:1c:5d:bf:a6: 8a:74:65:04:d8:8e:50:21:9f:5d:c6:56:fd:23:52:ef:18:a4: 97:c1:b2:cb:01:c4:df:0d:f4:1a:6a:b2:3c:59:61:67:0c:09: ea:7b:82:00:79:ba:8c:18:f1:bc:2d:2d:c9:f6:87:b2:27:11: 00:3e:90:29:11:f0:f9:f0:47:5e:bb:57:93:17:d3:3a:43:46: 29:36:15:30:b0:e5:cf:f2:59:fe:54:95:68:ea:8a:19:53:02: d9:82:30:44:66:2f:cf:12:31:71:ba:2f:1c:5f:c7:46:95:77: a0:31:94:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCQjAxMTAvBgNVBAUTKEZFRDg0RTlGRTAxNTlBOTkzN0EyMTkzQTBCN0RCQTIz QjZDMjY1QjgwHhcNMjYwOTIzMDU0MjAxWhcNMjYwOTMwMDU0MjAxWjAYMRYwFAYD VQQDEw02YWIzNjZhOS1jZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pJlV3G5DtJTB8T73hrRUW+qgFgJwOhqXD4IAESU4gj2+wuaQqkOwovpl7Nn 72Pvq1AyUAJxm0j/81DVdRmlcZazYjGvfxeBGPXo1Tis3YZzb8Zqy4Jzgk2i7xNC 3qqf9D9Puzijo+jiqXzQPinDAzXnYivwmJt2PNzIh1ljC4gjLRY1Hy4hB3r7JJbw raUoWQ0FQUkdsvVUAhSyDI63qkUEU/8K5B7TYMNIdI8G6wEs2INwj1xDyX73vdqT V5PE/9cnkEq3uFlPNXR8cQUPVEHwW/uz85jW6u+2xr6KSY+LUoxuqyDSulgTnoB2 9kq5CqfCIsgHtYcDKRuDVhKauQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4Mj260 odPSEwl2bTVukgcj0JyTMB8GA1UdIwQYMBaAFP7YTp/gFZqZN6IZOgt9uiO2wmW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREJCMC9FNjUzRTUxMjA3 RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1wazNvaGs2QzMyNkk3YkNa YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL190aE9uLUFWbXBrM29oazZDMzI2STdiQ1piZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REJCMC9FNjUzRTUxMjA3RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1w azNvaGs2QzMyNkk3YkNaYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXRVBelz6g+euOJTsIPcelFMdGHRQdwc3gweRNigD55vP8+xfKWAUhhCe6WdB 1U1+2AjQLfHv/VtKJWyI0sxyo8cHs+Ci0XcSHr5azbFJcBpxKAbQIOryVM2TbsaD 5fgn9d073/H2PZ+Zv2c6/0wcZGk3Qd4rKlmfXN/h3WWt7Es6Pg1FLB7TVgOvf6Mc Xb+minRlBNiOUCGfXcZW/SNS7xikl8GyywHE3w30GmqyPFlhZwwJ6nuCAHm6jBjx vC0tyfaHsicRAD6QKRHw+fBHXrtXkxfTOkNGKTYVMLDlz/JZ/lSVaOqKGVMC2YIw RGYvzxIxcbovHF/HRpV3oDGUHw== -----END CERTIFICATE-----Generated at Thu Sep 24 08:33:44 2026 by rpki-client