$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft File: TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json) Hash identifier: XqL/Q+srYm4CYDxcX9NBoRtZYvKIkv6HLnZc2H21de4= Subject key identifier: 3C:DC:D1:F6:9E:02:FE:6B:66:6A:E9:3C:7D:E3:EE:8D:62:4D:1C:97 Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft Manifest number: CC Signing time: Thu 03 Sep 2026 06:58:38 +0000 Manifest this update: Thu 03 Sep 2026 06:58:37 +0000 Manifest next update: Thu 10 Sep 2026 06:58:37 +0000 Files and hashes: 1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: KQaH4AZ2cCjqL9IXeu0aYxju07VrdXw5itXIgmgYxko=) 2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Validity Not Before: Sep 3 06:58:37 2026 GMT Not After : Sep 10 06:58:37 2026 GMT Subject: CN=6a991a9d-4eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:eb:72:4d:b6:6a:66:b7:88:01:56:27:c7: 37:15:80:52:b5:74:05:fc:05:ad:1f:6f:9c:ae:42: b8:56:2d:b1:5b:4f:e3:9a:54:e5:20:11:0d:78:88: cb:0f:04:6d:b2:e2:24:7b:1b:3c:48:6d:92:99:72: 14:2f:4b:08:1e:86:c9:83:5c:9c:0a:6d:e0:39:1b: f5:d2:35:2d:17:e3:3d:48:32:d6:64:18:c6:9e:d7: b9:5c:08:ed:b3:30:88:a4:0e:03:f2:59:93:33:55: 74:3f:61:16:50:87:88:07:21:b3:07:7e:70:fe:cd: 1a:18:33:bd:7c:55:2f:09:48:28:2a:e7:fb:8d:27: bc:a8:05:5e:12:d8:18:1b:92:86:97:5e:0c:f5:dc: c4:8b:0f:56:b1:76:f5:c2:d1:06:ce:8f:cb:5c:e6: 37:31:f9:5a:2e:3b:ba:db:cc:31:3b:0a:b3:85:fe: 06:77:32:16:6f:82:3c:8f:d6:2f:f5:8a:f3:aa:b8: 2c:bb:06:03:53:b2:a4:83:03:46:bb:d5:dd:c4:19: a1:4c:82:02:c1:9b:b0:0d:a8:46:e8:0d:f4:35:9c: 86:ec:a9:da:42:6c:d7:71:b1:1e:d0:8d:3b:81:bd: af:7d:cc:8e:50:4b:9e:e2:a2:47:11:30:a6:5e:52: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DC:D1:F6:9E:02:FE:6B:66:6A:E9:3C:7D:E3:EE:8D:62:4D:1C:97 X509v3 Authority Key Identifier: keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f8:de:f9:d0:97:79:5d:05:3d:b9:f6:15:de:c2:da:66:45: 9e:e5:dc:da:dc:c9:1d:53:54:49:cc:a7:89:d6:14:0b:ee:33: 91:7e:68:53:58:5e:3a:db:00:eb:47:a6:a9:dc:42:d1:e5:eb: 6e:6a:b4:ca:f9:bc:72:e9:f7:b9:df:ea:71:f1:ee:cb:16:ab: 35:85:e2:07:1d:c7:a4:16:9d:dc:80:cd:67:33:f8:9c:27:b3: 5b:f8:57:d6:dd:7d:f7:26:fa:6c:dd:da:34:28:ea:31:fb:bf: ac:ab:52:6e:e0:cc:48:7d:f1:92:0c:78:ab:e6:ec:79:6a:a7: 98:49:5e:60:92:2b:f3:e5:31:61:c3:53:9d:69:c2:30:f9:1f: 00:21:f4:45:ba:59:99:90:75:75:a7:af:2e:0c:88:96:75:e7: bb:1b:0e:29:ff:dd:26:f7:da:71:5c:db:99:7e:67:a3:ef:15: 16:71:da:4b:57:f5:99:89:c6:f9:86:61:74:c6:0f:94:c9:d1: d1:f7:f8:e1:b9:a2:c7:86:68:37:ec:63:7a:c9:e7:3c:f5:17: d2:22:85:1e:46:fd:d3:b2:01:29:df:45:55:62:1c:86:3e:38: 1b:06:51:9c:53:fe:77:73:a6:a2:4c:e2:ab:dc:98:26:ee:51: 84:d5:13:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCNkQxMTAvBgNVBAUTKDRENEYzQUFDQzczOTVBMTNENjQyMDA3Rjk5MTBERjg4 MDQwRTRCQUIwHhcNMjYwOTAzMDY1ODM3WhcNMjYwOTEwMDY1ODM3WjAYMRYwFAYD VQQDEw02YTk5MWE5ZC00ZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHnrck22ama3iAFWJ8c3FYBStXQF/AWtH2+crkK4Vi2xW0/jmlTlIBENeIjL DwRtsuIkexs8SG2SmXIUL0sIHobJg1ycCm3gORv10jUtF+M9SDLWZBjGnte5XAjt szCIpA4D8lmTM1V0P2EWUIeIByGzB35w/s0aGDO9fFUvCUgoKuf7jSe8qAVeEtgY G5KGl14M9dzEiw9WsXb1wtEGzo/LXOY3MflaLju628wxOwqzhf4GdzIWb4I8j9Yv 9YrzqrgsuwYDU7KkgwNGu9XdxBmhTIICwZuwDahG6A30NZyG7KnaQmzXcbEe0I07 gb2vfcyOUEue4qJHETCmXlKi4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzc0fae Av5rZmrpPH3j7o1iTRyXMB8GA1UdIwQYMBaAFE1POqzHOVoT1kIAf5kQ34gEDkur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI2RC84NkRGNkM3RTcx MDUxMUYwODU0RjVBMTRDNEY5QUUwMi9UVTg2ck1jNVdoUFdRZ0JfbVJEZmlBUU9T NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVODZyTWM1V2hQV1FnQl9tUkRmaUFRT1M2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI2RC84NkRGNkM3RTcxMDUxMUYwODU0RjVBMTRDNEY5QUUwMi9UVTg2ck1jNVdo UFdRZ0JfbVJEZmlBUU9TNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC/je+dCXeV0FPbn2Fd7C2mZFnuXc2tzJHVNUScynidYUC+4zkX5oU1heOtsA 60emqdxC0eXrbmq0yvm8cun3ud/qcfHuyxarNYXiBx3HpBad3IDNZzP4nCezW/hX 1t199yb6bN3aNCjqMfu/rKtSbuDMSH3xkgx4q+bseWqnmEleYJIr8+UxYcNTnWnC MPkfACH0RbpZmZB1daevLgyIlnXnuxsOKf/dJvfacVzbmX5no+8VFnHaS1f1mYnG +YZhdMYPlMnR0ff44bmix4ZoN+xjesnnPPUX0iKFHkb907IBKd9FVWIchj44GwZR nFP+d3Omokziq9yYJu5RhNUTYQ== -----END CERTIFICATE-----Generated at Sat Sep 5 06:31:28 2026 by rpki-client