$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: xdy8nK1voR7zS9QRQvtI6/HytX39tobYHnGenHMONbE= Subject key identifier: B8:E4:89:DC:1C:10:2C:A3:F5:6F:ED:A8:DD:43:6A:EE:EE:1C:C4:43 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 042F Signing time: Fri 25 Sep 2026 00:05:57 +0000 Manifest this update: Fri 25 Sep 2026 00:05:56 +0000 Manifest next update: Fri 02 Oct 2026 00:05:56 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: wg+7UFlwtOd6EKAK940GwfhUX+a9o5zrWiitU5PZo8k=) 2: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=) 3: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=) 4: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Sep 25 00:05:56 2026 GMT Not After : Oct 2 00:05:56 2026 GMT Subject: CN=6ab5bae4-aa4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:a1:18:06:23:5f:41:49:33:4b:21:8f:42: 57:3d:1f:02:c1:16:ea:ae:45:05:80:ea:cc:85:4c: 13:ee:65:a9:3e:76:57:8b:15:f4:2a:27:cb:d4:12: 62:6a:e9:0a:34:58:19:c6:91:56:34:9f:d0:84:dd: 03:10:d5:8a:b2:a9:19:4c:46:8e:25:55:0a:6b:d6: 0b:97:fa:df:c9:23:ab:22:99:c2:da:3b:03:45:09: ff:51:3a:19:e5:6e:96:50:c8:48:35:a3:aa:bd:95: 00:99:f1:23:c6:c1:5f:1b:78:b1:b0:e2:be:09:03: 1d:cd:10:97:be:a1:45:f2:f5:43:6a:10:c4:e7:fe: 26:8a:17:95:6d:1c:bc:8c:5b:fe:92:20:58:e8:75: 72:1c:d9:59:41:a6:8c:7d:5e:74:ec:6c:0d:68:f1: df:18:5e:20:e5:b9:7d:b9:a5:f9:33:dc:07:14:95: c8:fb:29:bd:ad:04:83:7e:53:69:0a:2c:06:98:e7: 3e:61:f1:fc:c7:c3:ba:c2:0a:6c:8f:9f:f1:61:28: 82:a8:f8:91:fa:a9:52:2a:ba:62:a2:79:e5:67:cd: 6a:6f:50:f5:22:36:89:ea:3c:aa:e5:14:62:61:ae: 65:e7:af:09:7f:89:dd:34:54:9d:bc:94:ca:ec:d5: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E4:89:DC:1C:10:2C:A3:F5:6F:ED:A8:DD:43:6A:EE:EE:1C:C4:43 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:23:0a:32:5a:8e:82:f1:e5:d2:f5:c6:dc:dc:dd:69:00:a5: e7:e7:c8:fb:90:3f:3c:41:5a:39:ad:99:52:95:87:68:2c:7c: 3e:ee:a8:bc:e2:ad:68:4d:9b:4c:c4:49:c7:07:ae:33:f9:ab: 59:1d:88:06:05:27:43:6e:db:c7:50:0b:69:df:12:da:f2:93: 71:02:f7:a8:b7:75:12:c1:d8:68:36:af:e8:73:d7:fe:ea:de: e5:91:3e:b6:46:c5:0e:46:e0:6a:b9:95:c0:6e:98:92:d0:1a: 15:b5:55:e3:20:2d:60:62:27:b6:f1:f9:dd:09:88:37:62:cf: 88:69:f9:23:5e:d3:46:0b:c2:2f:e3:f3:dd:3c:7b:8a:0d:48: 72:7d:9d:c6:d5:7a:d9:47:bc:28:a2:ae:49:e7:27:6d:8d:79: 2d:2a:67:5e:30:f3:88:ca:07:07:1f:6b:e2:14:a5:5d:42:fe: 9b:44:7a:4d:24:cc:71:d9:06:93:13:d5:c8:0c:3e:f1:f6:33: 6c:a8:c1:48:6c:09:ac:61:cf:f3:e8:5b:ef:f2:6b:36:f0:f9: c3:20:c3:35:3d:d2:22:67:d5:c3:02:15:72:11:d7:8e:da:0e: f6:5f:1f:38:a9:14:dc:50:b2:98:ff:04:e6:34:17:1b:ec:7d: 63:22:8c:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYwOTI1MDAwNTU2WhcNMjYxMDAyMDAwNTU2WjAYMRYwFAYD VQQDEw02YWI1YmFlNC1hYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hChGAYjX0FJM0shj0JXPR8CwRbqrkUFgOrMhUwT7mWpPnZXixX0KifL1BJi aukKNFgZxpFWNJ/QhN0DENWKsqkZTEaOJVUKa9YLl/rfySOrIpnC2jsDRQn/UToZ 5W6WUMhINaOqvZUAmfEjxsFfG3ixsOK+CQMdzRCXvqFF8vVDahDE5/4miheVbRy8 jFv+kiBY6HVyHNlZQaaMfV507GwNaPHfGF4g5bl9uaX5M9wHFJXI+ym9rQSDflNp CiwGmOc+YfH8x8O6wgpsj5/xYSiCqPiR+qlSKrpionnlZ81qb1D1IjaJ6jyq5RRi Ya5l568Jf4ndNFSdvJTK7NW+xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjkidwc ECyj9W/tqN1Dau7uHMRDMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANSMKMlqOgvHl0vXG3NzdaQCl5+fI+5A/PEFaOa2ZUpWHaCx8Pu6ovOKtaE2b TMRJxweuM/mrWR2IBgUnQ27bx1ALad8S2vKTcQL3qLd1EsHYaDav6HPX/ure5ZE+ tkbFDkbgarmVwG6YktAaFbVV4yAtYGIntvH53QmIN2LPiGn5I17TRgvCL+Pz3Tx7 ig1Icn2dxtV62Ue8KKKuSecnbY15LSpnXjDziMoHBx9r4hSlXUL+m0R6TSTMcdkG kxPVyAw+8fYzbKjBSGwJrGHP8+hb7/JrNvD5wyDDNT3SImfVwwIVchHXjtoO9l8f OKkU3FCymP8E5jQXG+x9YyKMEA== -----END CERTIFICATE-----Generated at Sat Sep 26 10:18:26 2026 by rpki-client