$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft File: TS0NULyRom4hHzg_UCqz1w0C3HA.mft (raw, json) Hash identifier: bKb3Sd30XLglauVdoh60Sfkl9P5HjOaU6T0vol2udqs= Subject key identifier: 52:48:10:7B:64:F2:47:AA:19:07:70:FC:66:4F:06:25:72:F0:34:34 Authority key identifier: 4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 Certificate issuer: /CN=A91406FF/serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft Manifest number: 73 Signing time: Mon 05 Oct 2026 08:18:12 +0000 Manifest this update: Mon 05 Oct 2026 08:18:11 +0000 Manifest next update: Mon 12 Oct 2026 08:18:11 +0000 Files and hashes: 1: TS0NULyRom4hHzg_UCqz1w0C3HA.crl (hash: tngaFDcXR/shcjc3oVXTBvcMQJJ23yYSqbp5f//QRJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 08:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Validity Not Before: Oct 5 08:18:11 2026 GMT Not After : Oct 12 08:18:11 2026 GMT Subject: CN=6ac35d44-3976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:55:30:41:7d:98:46:d8:00:63:d0:13:fe: b0:e1:18:eb:bd:3d:96:42:31:50:ae:af:9b:fb:09: 73:bf:79:76:ea:4c:b3:dd:db:7c:a3:ab:f2:56:dd: 97:9a:25:54:e0:13:b2:12:04:a0:15:87:86:ab:af: bd:62:8d:61:3d:4d:ef:41:82:8f:2b:07:c8:89:67: 9d:6b:72:fb:2e:6d:38:70:d7:10:3b:79:0c:da:cf: 26:c7:fe:fa:fd:f5:23:ee:67:78:d8:2c:8d:61:2f: fb:dc:d0:af:2d:ae:de:9e:65:42:0f:7a:c3:85:7c: 07:6c:20:c5:9e:4e:71:1c:88:91:52:8f:94:45:b3: 18:77:17:97:44:7d:d9:c0:f5:63:6d:40:b7:3b:cd: 43:f2:7a:3d:d5:0b:ed:7f:11:42:da:45:8c:db:6d: 37:2f:e7:30:81:fa:dd:75:00:a9:b4:3a:a5:41:65: 01:58:a9:b7:27:d9:18:9e:9d:bb:0c:a0:aa:6a:21: dd:05:46:43:9e:c2:c0:d5:08:a2:60:30:c0:0a:6b: 1d:01:2f:e4:33:f9:de:ab:7d:30:7e:0b:09:fc:8f: 4d:1c:ee:4b:92:39:17:9c:c7:cf:3e:e2:81:8f:f7: bc:24:88:dd:75:8a:ca:e0:86:c2:7f:e0:f3:ee:39: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:48:10:7B:64:F2:47:AA:19:07:70:FC:66:4F:06:25:72:F0:34:34 X509v3 Authority Key Identifier: keyid:4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:41:db:ba:49:2c:95:65:da:f0:3e:eb:8e:9d:f1:cd:00:d0: 27:2d:23:e9:1a:1f:be:10:d8:36:35:15:9b:df:7d:28:3d:b1: 7e:41:00:af:5d:4d:41:32:d4:24:49:1e:ae:fd:6f:11:65:2b: d4:fb:bb:0f:4e:b5:8c:e0:0e:35:a1:18:26:75:7e:fa:3a:b2: 2c:5b:b7:fc:5c:91:73:70:6e:a5:25:0e:88:35:19:96:6b:b9: 1f:fd:d7:38:61:b2:40:08:dc:40:65:3f:f4:cf:17:6f:e2:e0: 89:3c:7c:f4:1f:28:14:77:bb:3e:00:ba:21:8e:b9:ca:ee:2c: b7:1d:42:55:72:4f:c8:32:9c:97:6c:8a:88:63:6d:43:bf:35: e8:60:c3:24:8e:cc:16:3c:ca:2e:90:10:6f:6f:96:c0:8a:fc: 9a:9c:ce:a9:8d:88:1c:35:a2:04:ad:23:ff:4d:81:90:98:33: 1d:db:9a:65:6e:65:be:5d:28:a3:bc:c6:d4:0a:f3:e1:6f:70: 32:1f:3b:c7:dc:34:c9:a6:6b:99:4a:4f:ba:d6:07:f0:67:b5: 60:4b:ae:77:fe:6c:a7:c2:0e:e3:c9:0e:d3:66:17:6c:20:7b: 40:19:7b:91:93:d4:ab:f8:25:2f:fa:da:7e:3d:58:ed:9e:48: 70:d3:ef:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoNEQyRDBENTBCQzkxQTI2RTIxMUYzODNGNTAyQUIzRDcw RDAyREM3MDAeFw0yNjEwMDUwODE4MTFaFw0yNjEwMTIwODE4MTFaMBgxFjAUBgNV BAMTDTZhYzM1ZDQ0LTM5NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg41UwQX2YRtgAY9AT/rDhGOu9PZZCMVCur5v7CXO/eXbqTLPd23yjq/JW3Zea JVTgE7ISBKAVh4arr71ijWE9Te9Bgo8rB8iJZ51rcvsubThw1xA7eQzazybH/vr9 9SPuZ3jYLI1hL/vc0K8trt6eZUIPesOFfAdsIMWeTnEciJFSj5RFsxh3F5dEfdnA 9WNtQLc7zUPyej3VC+1/EULaRYzbbTcv5zCB+t11AKm0OqVBZQFYqbcn2RienbsM oKpqId0FRkOewsDVCKJgMMAKax0BL+Qz+d6rfTB+Cwn8j00c7kuSORecx88+4oGP 97wkiN11isrghsJ/4PPuOT+tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUkgQe2Ty R6oZB3D8Zk8GJXLwNDQwHwYDVR0jBBgwFoAUTS0NULyRom4hHzg/UCqz1w0C3HAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzFENzEwNjBBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200aEh6Z19VQ3F6MXcwQzNI QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFMwTlVMeVJvbTRoSHpnX1VDcXoxdzBDM0hBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzFENzEwNjBBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200 aEh6Z19VQ3F6MXcwQzNIQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBsQdu6SSyVZdrwPuuOnfHNANAnLSPpGh++ENg2NRWb330oPbF+QQCvXU1BMtQk SR6u/W8RZSvU+7sPTrWM4A41oRgmdX76OrIsW7f8XJFzcG6lJQ6INRmWa7kf/dc4 YbJACNxAZT/0zxdv4uCJPHz0HygUd7s+ALohjrnK7iy3HUJVck/IMpyXbIqIY21D vzXoYMMkjswWPMoukBBvb5bAivyanM6pjYgcNaIErSP/TYGQmDMd25plbmW+XSij vMbUCvPhb3AyHzvH3DTJpmuZSk+61gfwZ7VgS653/mynwg7jyQ7TZhdsIHtAGXuR k9Sr+CUv+tp+PVjtnkhw0+/q -----END CERTIFICATE-----Generated at Mon Oct 5 22:47:13 2026 by rpki-client