$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: gyZBEIwgorGZnJS4MuwcT6oiy0v8DLtxPa5pxISq2Xo= Subject key identifier: 9F:F3:7D:76:4B:6E:90:E2:C0:B1:4B:2A:4B:1A:A5:F0:92:26:12:36 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 016C Signing time: Fri 11 Sep 2026 03:05:24 +0000 Manifest this update: Fri 11 Sep 2026 03:05:23 +0000 Manifest next update: Fri 18 Sep 2026 03:05:23 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: 71aJU4pSeL+HYrlU/FLYPHOW41xOcNi8hrgvQdKBMgg=) 2: 1C6D5ED2C51F11F08993E41BC4F9AE02.roa (hash: h9DoWAti9FtevIgArDst4H6dPePV+rhbEHLYlKOnyqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Sep 11 03:05:23 2026 GMT Not After : Sep 18 03:05:23 2026 GMT Subject: CN=6aa36ff4-6ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:29:07:56:0c:cf:13:0b:44:28:3a:b2:17: 93:d0:43:f8:39:5a:f2:c2:a9:4f:d1:c4:49:cc:3d: 53:fc:ae:00:5d:08:49:77:75:b0:0c:5e:1f:57:40: 98:d4:39:2b:59:7d:15:85:07:74:e3:b6:d9:b2:72: 8d:8f:ca:59:d8:45:44:ca:d1:24:ce:5b:e4:49:1e: b1:05:cc:4a:fe:13:01:57:12:ae:67:cf:8a:cd:64: ac:60:f3:a2:16:c0:08:16:f4:be:4d:0b:fc:85:39: 02:4e:de:a4:0c:48:ec:d5:2e:0b:b7:db:8d:7b:c2: 71:35:47:e3:10:f6:95:e6:66:80:8d:5c:8e:3a:b8: 3b:1a:91:0e:df:a2:59:ec:14:f9:2b:9a:a8:69:90: 6f:41:97:ff:ad:f2:a8:7e:1c:2c:b0:04:74:5b:be: 19:24:0f:8a:22:cc:09:7b:03:b6:02:2e:1a:c0:9f: c9:ff:26:38:70:a1:c9:a7:a7:8b:11:af:ce:4a:3d: f9:52:cb:75:17:79:44:44:2b:6a:65:54:fb:33:7a: bc:6f:d0:f0:95:0f:1e:0c:f5:63:a5:5d:25:87:a7: e0:57:7d:19:5c:db:27:7a:c8:03:d1:7d:ca:b5:43: 64:c4:6e:c3:59:2f:64:2c:29:60:a7:5a:8b:46:5a: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F3:7D:76:4B:6E:90:E2:C0:B1:4B:2A:4B:1A:A5:F0:92:26:12:36 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:8f:c6:c6:3b:6a:bc:0b:27:d1:8e:0e:bd:d4:e1:27:2d:63: 4a:85:5f:0b:e6:be:d6:3b:4a:f5:b6:e8:a4:23:32:60:3b:93: 6e:63:e1:dd:53:22:df:29:09:94:c7:ed:4a:02:67:1a:2a:79: 50:1a:c6:6f:65:7d:09:bf:e8:58:3b:f6:22:41:7d:48:11:70: f4:c1:93:3c:72:c4:1c:bc:f0:ee:dd:00:ee:0d:22:f4:31:87: 58:93:de:28:9a:60:3f:49:30:34:43:00:e7:dc:46:e2:c2:d5: 13:b4:eb:d9:66:7d:bb:3b:cd:df:3a:19:83:dd:c1:0c:a6:20: 28:bc:62:32:fb:ae:34:fb:8c:56:f4:2b:91:51:18:00:f8:f5: 46:60:2f:f6:08:2d:fa:c7:f5:db:3d:6e:3f:3a:be:f5:01:29: 29:07:8a:42:d1:dd:aa:4c:de:6b:6b:1c:c9:e7:f1:eb:51:d9: 5d:1e:e5:05:df:9e:3f:48:d9:4c:f4:12:83:ae:2b:fc:d2:5c: 67:7b:1f:31:14:8e:7a:74:8c:4c:31:ab:c2:0b:89:37:0a:bb: 4b:49:44:c4:20:44:4a:3a:0a:d6:5c:68:c8:64:78:81:ee:bc: b0:46:ec:87:c7:1e:dd:68:49:a1:ca:25:d8:14:61:46:7f:b9: 1e:6b:fd:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjYwOTExMDMwNTIzWhcNMjYwOTE4MDMwNTIzWjAYMRYwFAYD VQQDEw02YWEzNmZmNC02YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyq0pB1YMzxMLRCg6sheT0EP4OVrywqlP0cRJzD1T/K4AXQhJd3WwDF4fV0CY 1DkrWX0VhQd047bZsnKNj8pZ2EVEytEkzlvkSR6xBcxK/hMBVxKuZ8+KzWSsYPOi FsAIFvS+TQv8hTkCTt6kDEjs1S4Lt9uNe8JxNUfjEPaV5maAjVyOOrg7GpEO36JZ 7BT5K5qoaZBvQZf/rfKofhwssAR0W74ZJA+KIswJewO2Ai4awJ/J/yY4cKHJp6eL Ea/OSj35Ust1F3lERCtqZVT7M3q8b9DwlQ8eDPVjpV0lh6fgV30ZXNsnesgD0X3K tUNkxG7DWS9kLClgp1qLRlpoyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/zfXZL bpDiwLFLKksapfCSJhI2MB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIY/GxjtqvAsn0Y4OvdThJy1jSoVfC+a+1jtK9bbopCMyYDuTbmPh3VMi3ykJ lMftSgJnGip5UBrGb2V9Cb/oWDv2IkF9SBFw9MGTPHLEHLzw7t0A7g0i9DGHWJPe KJpgP0kwNEMA59xG4sLVE7Tr2WZ9uzvN3zoZg93BDKYgKLxiMvuuNPuMVvQrkVEY APj1RmAv9ggt+sf12z1uPzq+9QEpKQeKQtHdqkzea2scyefx61HZXR7lBd+eP0jZ TPQSg64r/NJcZ3sfMRSOenSMTDGrwguJNwq7S0lExCBESjoK1lxoyGR4ge68sEbs h8ce3WhJocol2BRhRn+5Hmv92Q== -----END CERTIFICATE-----Generated at Fri Sep 11 16:09:54 2026 by rpki-client