$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: kfqlzJ4Bv+Mxa3G7aITCdu8kuCwDt5/hufQxv7gVHdI= Subject key identifier: AF:A4:79:5D:F9:DE:01:AD:BD:4F:2F:95:5C:F4:18:D8:41:D4:F9:A6 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 0430 Signing time: Sun 27 Sep 2026 00:18:52 +0000 Manifest this update: Sun 27 Sep 2026 00:18:51 +0000 Manifest next update: Sun 04 Oct 2026 00:18:51 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: ogMxjvRPVm6SX9Gbh3+koQqb1LNZ8vfwe3YlQTVKlcI=) 2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=) 3: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=) 4: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Sep 27 00:18:51 2026 GMT Not After : Oct 4 00:18:51 2026 GMT Subject: CN=6ab860ec-bbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:d6:8c:48:a5:54:b4:72:29:f3:bf:78:e3: 79:b6:6b:46:c6:70:93:60:3d:40:d4:f6:0b:35:02: 4d:da:fc:e2:c9:db:40:41:5c:79:fc:a8:62:6b:53: 19:ba:28:a2:47:08:2b:e8:79:cc:47:d4:b5:9b:68: 4b:b2:5b:4f:14:f4:5b:0c:e8:d5:18:3b:40:43:7b: 22:3c:22:2a:8b:c6:fd:18:08:43:f2:9e:fa:2c:34: 9b:2d:35:2b:96:36:e0:d9:33:37:60:ad:31:77:a3: 72:c1:53:fb:47:2f:c5:66:e1:32:5f:ec:2b:b7:5a: 19:19:dc:0e:cc:68:ca:80:c8:c6:d9:4c:fa:4c:1c: f8:03:4e:43:73:c1:84:e6:24:a7:3d:0c:a0:2d:24: 32:9d:a8:de:3d:61:63:8a:34:55:f1:a6:54:24:ab: 72:95:d8:df:af:c8:a6:6f:43:5a:89:03:68:aa:be: c2:0a:3d:de:1e:28:ea:bb:9f:dc:e1:0e:3b:69:e6: b9:27:5e:a7:d2:0c:39:d7:d0:da:bf:ae:12:66:78: 35:e0:44:64:0c:a1:d8:c6:31:1a:1a:68:b4:65:bb: da:55:c9:06:83:9b:39:55:a5:8b:61:4b:0d:c6:ed: d2:47:c3:55:e3:dd:8d:a6:91:62:f0:61:2b:01:46: 65:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A4:79:5D:F9:DE:01:AD:BD:4F:2F:95:5C:F4:18:D8:41:D4:F9:A6 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0a:66:b2:ca:a0:0f:6d:c0:32:a9:de:1a:db:14:62:5c:31: bc:3a:5c:d9:23:58:fe:ff:ee:81:66:54:00:62:e2:eb:1b:9a: 49:6c:66:21:12:2f:e8:ee:34:26:ed:e9:37:81:3d:1d:dd:88: 35:d3:59:b6:db:2e:ce:b0:a5:29:91:c3:b9:7d:e1:fa:ed:38: 51:54:80:53:f7:2c:54:da:20:ca:da:62:15:9a:82:c5:9f:5c: 70:df:15:24:69:51:df:e2:c8:51:37:c3:20:b4:b8:42:8b:9c: 47:29:d8:c5:e7:eb:06:63:a9:ce:83:6c:5e:7e:2d:a4:b6:0d: 60:b7:e4:fa:5e:70:5c:af:2e:05:71:a7:8b:d2:53:0b:15:e6: 19:af:7c:ab:82:31:67:d1:72:c5:a5:51:23:cd:e5:18:b3:d1: d7:24:d8:56:38:60:57:e1:d3:4c:c4:c0:0f:b3:e6:93:72:ef: 55:0b:1a:02:68:54:ae:68:03:84:e2:b1:4a:82:3c:2b:0c:3e: 55:4b:e5:4d:60:a6:8a:56:48:7d:fd:eb:42:e7:30:da:fd:21: 19:75:b8:0a:d1:c9:84:16:aa:8d:65:d1:49:60:5b:f5:b9:0e: 4f:c4:d5:ae:9d:8b:b1:cb:b7:bc:bd:d7:71:bd:08:36:a5:64: 71:10:81:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYwOTI3MDAxODUxWhcNMjYxMDA0MDAxODUxWjAYMRYwFAYD VQQDEw02YWI4NjBlYy1iYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9DWjEilVLRyKfO/eON5tmtGxnCTYD1A1PYLNQJN2vziydtAQVx5/Khia1MZ uiiiRwgr6HnMR9S1m2hLsltPFPRbDOjVGDtAQ3siPCIqi8b9GAhD8p76LDSbLTUr ljbg2TM3YK0xd6NywVP7Ry/FZuEyX+wrt1oZGdwOzGjKgMjG2Uz6TBz4A05Dc8GE 5iSnPQygLSQynajePWFjijRV8aZUJKtyldjfr8imb0NaiQNoqr7CCj3eHijqu5/c 4Q47aea5J16n0gw519Dav64SZng14ERkDKHYxjEaGmi0ZbvaVckGg5s5VaWLYUsN xu3SR8NV492NppFi8GErAUZlBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+keV35 3gGtvU8vlVz0GNhB1PmmMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmwpmssqgD23AMqneGtsUYlwxvDpc2SNY/v/ugWZUAGLi6xuaSWxmIRIv6O40 Ju3pN4E9Hd2INdNZttsuzrClKZHDuX3h+u04UVSAU/csVNogytpiFZqCxZ9ccN8V JGlR3+LIUTfDILS4QoucRynYxefrBmOpzoNsXn4tpLYNYLfk+l5wXK8uBXGni9JT CxXmGa98q4IxZ9FyxaVRI83lGLPR1yTYVjhgV+HTTMTAD7Pmk3LvVQsaAmhUrmgD hOKxSoI8Kww+VUvlTWCmilZIff3rQucw2v0hGXW4CtHJhBaqjWXRSWBb9bkOT8TV rp2Lscu3vL3Xcb0INqVkcRCBtw== -----END CERTIFICATE-----Generated at Sun Sep 27 10:14:26 2026 by rpki-client