$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: ChXtevrZXzCxpOZMYngvGq/LF6iRBZMcDBfTX7QtM3w= Subject key identifier: B2:E2:09:30:94:85:3E:EB:E4:26:F4:45:FB:3D:5C:E9:BB:A1:5F:DA Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 0239 Signing time: Wed 23 Sep 2026 02:24:41 +0000 Manifest this update: Wed 23 Sep 2026 02:24:41 +0000 Manifest next update: Wed 30 Sep 2026 02:24:41 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: Tgl94lBTkNp22JjIfVdk2Ixa3s9EJjFKyrAMkKDIDGE=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: dLUeKe6QaZ4GPKIE3nlD7SGlABym7P6qS+9RNwN3OQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Sep 23 02:24:41 2026 GMT Not After : Sep 30 02:24:41 2026 GMT Subject: CN=6ab33869-71d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:e2:c4:4b:53:c8:73:9c:64:a8:ad:bc:13: bd:9e:a6:a1:d3:82:a8:76:7c:b1:91:f5:a5:e0:9e: 35:ff:81:1e:d4:74:66:f0:12:18:b7:b3:90:86:35: c7:7d:88:1e:08:eb:cc:26:39:0c:be:c8:4d:c5:7b: fb:21:8b:9a:78:6c:1c:cc:75:f5:f5:cb:9d:bb:19: 4a:d8:6d:bb:c5:9b:97:04:45:e6:48:6e:38:1d:5b: 55:13:7f:35:e8:41:0b:ad:c0:4c:33:52:41:0c:b8: 07:36:c4:cd:cc:d3:46:af:e1:00:cc:d5:02:4e:04: 07:f5:fe:a3:98:9d:94:a0:a9:ad:cd:c2:cb:ce:00: cc:f3:ab:aa:1f:64:38:17:10:f4:a5:e5:7f:87:4b: 89:96:5b:1e:4e:11:81:d4:71:bd:5d:85:4e:4c:c8: 42:5a:ce:9a:c2:70:ea:f1:17:44:03:ea:a6:a7:52: 6c:94:c8:15:03:29:2a:a3:f9:44:57:c1:fb:24:7d: 04:82:f6:86:0e:67:f0:e7:cd:1a:40:05:c8:fc:9f: a5:c6:c0:27:d3:51:4f:f0:e0:82:4b:33:dc:53:10: e5:1f:58:8f:62:41:0d:c3:27:88:53:7d:70:d1:c1: 43:1b:0f:ab:e2:49:8d:30:01:13:2a:13:ed:00:80: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E2:09:30:94:85:3E:EB:E4:26:F4:45:FB:3D:5C:E9:BB:A1:5F:DA X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7c:93:fc:b3:08:6f:ea:83:99:6c:70:43:46:fe:4f:0b:64: 63:70:42:60:2e:cd:54:94:36:d9:f3:30:e5:fe:e6:da:93:b8: 57:d8:b2:f5:78:aa:09:a5:a8:ca:4b:a0:96:26:0c:8f:3e:e3: 26:e7:2d:ab:3a:fc:75:bb:80:2a:22:e6:1e:7b:9a:fa:96:df: 25:09:3d:aa:a8:66:2e:32:b5:ba:7f:db:52:8f:39:1e:68:74: c5:fe:88:07:67:eb:29:54:53:63:f3:88:4f:fd:b0:b4:b4:4b: 95:c9:69:bb:c5:a7:74:5d:87:34:87:1a:d8:0c:d5:4e:5b:ea: ca:fd:8f:3b:35:c4:bb:9a:5a:04:1d:4e:00:d6:2a:6b:5d:05: aa:a6:fe:a6:2f:c7:c2:06:c1:3a:85:bd:cc:0c:30:e3:a6:36: 64:cb:e7:8e:91:08:a0:57:56:56:78:e4:b7:2f:a8:c9:7d:3e: 4d:9b:eb:cc:38:a2:70:e4:00:14:23:3d:6d:e6:39:bf:6c:67: e3:59:84:c2:3c:99:1c:60:07:1f:d8:cc:e6:b6:e9:c3:96:2c: fc:15:c7:87:b7:ba:12:c0:ee:0b:0b:f6:71:a3:0f:e8:6c:f6: 5b:bb:60:09:3f:b9:53:91:cb:36:71:52:25:52:03:2a:7f:92: 97:3b:a7:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjYwOTIzMDIyNDQxWhcNMjYwOTMwMDIyNDQxWjAYMRYwFAYD VQQDEw02YWIzMzg2OS03MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtP3ixEtTyHOcZKitvBO9nqah04KodnyxkfWl4J41/4Ee1HRm8BIYt7OQhjXH fYgeCOvMJjkMvshNxXv7IYuaeGwczHX19cuduxlK2G27xZuXBEXmSG44HVtVE381 6EELrcBMM1JBDLgHNsTNzNNGr+EAzNUCTgQH9f6jmJ2UoKmtzcLLzgDM86uqH2Q4 FxD0peV/h0uJllseThGB1HG9XYVOTMhCWs6awnDq8RdEA+qmp1JslMgVAykqo/lE V8H7JH0EgvaGDmfw580aQAXI/J+lxsAn01FP8OCCSzPcUxDlH1iPYkENwyeIU31w 0cFDGw+r4kmNMAETKhPtAIAESQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLLiCTCU hT7r5Cb0Rfs9XOm7oV/aMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKnyT/LMIb+qDmWxwQ0b+TwtkY3BCYC7NVJQ22fMw5f7m2pO4V9iy9XiqCaWo ykugliYMjz7jJuctqzr8dbuAKiLmHnua+pbfJQk9qqhmLjK1un/bUo85Hmh0xf6I B2frKVRTY/OIT/2wtLRLlclpu8WndF2HNIca2AzVTlvqyv2POzXEu5paBB1OANYq a10Fqqb+pi/HwgbBOoW9zAww46Y2ZMvnjpEIoFdWVnjkty+oyX0+TZvrzDiicOQA FCM9beY5v2xn41mEwjyZHGAHH9jM5rbpw5Ys/BXHh7e6EsDuCwv2caMP6Gz2W7tg CT+5U5HLNnFSJVIDKn+SlzunrA== -----END CERTIFICATE-----Generated at Wed Sep 23 20:13:44 2026 by rpki-client