$ rpki-client -vvvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json) Hash identifier: lzeINmoz3fhHOSV9FZf7Lf5lv135eB2FHs3w/lc2FvI= Subject key identifier: 19:0D:79:63:71:A1:68:E3:9B:F5:23:13:8C:4F:9F:E4:7F:D1:DD:D2 Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Certificate serial: 0F21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft Manifest number: 0F0D Signing time: Tue 06 Oct 2026 17:42:12 +0000 Manifest this update: Tue 06 Oct 2026 17:42:12 +0000 Manifest next update: Tue 13 Oct 2026 17:42:12 +0000 Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: Cru/RlF1bi/OPRp4iNAnf/kRoMq9Mqju30Hz+EoJWs4=) 2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: al3fqRaFbz5Gytb2uWt5SUlVpJ/tTLDhToYHkT3GYkw=) 3: z7xZp6bAbB1jFkmDLpSFxsfCZ5Y.asa (hash: 86kpuEsPKdwvWESC1iQhBWUL9NuOHbb1fR3yGidmVPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3873 (0xf21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Validity Not Before: Oct 6 17:42:12 2026 GMT Not After : Oct 13 17:42:12 2026 GMT Subject: CN=6ac532f4-ea0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:78:d2:dc:59:a9:26:7a:aa:05:b5:81:41: 2c:ed:9d:a7:2f:00:34:40:0e:33:48:8d:59:c7:9b: d1:5e:d1:7c:b9:cf:2c:ab:08:ac:98:e2:b5:d7:0e: 8c:49:69:00:5a:f8:df:5c:14:b2:d1:68:7c:1c:30: ee:90:e3:f5:12:9e:b9:ee:38:50:e8:eb:08:b8:f0: ff:43:0f:be:32:f4:ab:b4:fc:37:da:6b:c5:56:64: c2:f2:e4:0f:37:22:e2:91:f2:79:d7:a4:f6:ac:7a: f4:21:01:ad:76:fe:df:c3:e7:66:0a:d0:c0:90:00: a3:80:53:88:0f:a6:51:51:be:2b:c9:ba:11:04:5f: 67:3f:73:0e:d9:0e:77:71:ce:f9:eb:79:d9:76:12: ed:bb:cb:b8:a6:d4:33:df:12:c0:76:00:db:e6:d3: d4:55:e7:82:7b:f3:7e:e6:0a:3f:09:4d:86:c9:6a: ee:37:19:f8:e4:6d:fb:76:4f:37:6c:e7:3b:cb:c8: b0:62:21:62:a1:c4:ac:aa:ec:7d:f9:33:c8:ae:ac: 66:2e:67:8c:ee:b7:87:b8:52:ff:01:96:f6:e7:c7: 81:6a:99:be:85:53:c5:3b:0f:f5:41:9e:cb:91:a7: 4f:c8:f6:91:c3:1c:e8:ab:96:ea:9c:0c:d5:4f:ce: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0D:79:63:71:A1:68:E3:9B:F5:23:13:8C:4F:9F:E4:7F:D1:DD:D2 X509v3 Authority Key Identifier: keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:bf:e8:a4:9c:a5:22:71:c6:7a:a6:ff:c2:3a:f6:93:c5:e7: ef:78:da:82:9c:1c:76:71:bd:ad:a1:d6:f7:0d:8f:32:3b:ca: a1:35:17:16:69:a4:af:2e:c7:4b:c8:64:b2:7a:9e:3c:07:88: 73:2a:38:3f:07:02:ef:f4:39:3d:8c:bc:9e:50:87:56:5b:16: a6:cb:d4:c5:67:3f:86:74:14:48:f6:a6:53:db:8d:60:2c:d4: f7:d3:7f:10:51:80:38:ed:32:e4:6f:e5:2e:35:c0:32:64:ff: bf:93:db:fe:2b:8d:62:9c:0f:b5:63:da:f2:00:f0:f1:6c:ac: 90:e2:ef:d1:85:1e:ab:ad:e2:c0:2f:81:fd:c5:df:90:44:46: b0:6d:63:04:c3:f5:eb:97:c6:dc:52:78:cf:db:2a:34:f8:20: 61:c5:84:e8:9a:61:09:3a:2c:2b:32:e9:8d:52:8f:39:b7:19: e2:20:46:5a:66:a0:b2:cc:09:8e:61:e9:0e:8e:d7:85:00:46: 8a:23:5d:61:19:8d:32:4e:3f:da:b2:ef:27:35:1d:48:46:04: b4:00:64:00:3c:19:3c:7f:36:1d:27:81:9d:b5:5f:ae:43:9c: b6:38:8f:c7:0a:78:a4:a7:77:97:58:86:eb:45:68:10:fd:2c: 02:ab:a5:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3QzkxMTAvBgNVBAUTKDRGMzE1RUVGNUFDQjJFREE3QTM3MjlFNzlFMTM1OTkw QzAxRTcwNzQwHhcNMjYxMDA2MTc0MjEyWhcNMjYxMDEzMTc0MjEyWjAYMRYwFAYD VQQDEw02YWM1MzJmNC1lYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAktZ40txZqSZ6qgW1gUEs7Z2nLwA0QA4zSI1Zx5vRXtF8uc8sqwismOK11w6M SWkAWvjfXBSy0Wh8HDDukOP1Ep657jhQ6OsIuPD/Qw++MvSrtPw32mvFVmTC8uQP NyLikfJ516T2rHr0IQGtdv7fw+dmCtDAkACjgFOID6ZRUb4ryboRBF9nP3MO2Q53 cc7563nZdhLtu8u4ptQz3xLAdgDb5tPUVeeCe/N+5go/CU2GyWruNxn45G37dk83 bOc7y8iwYiFiocSsqux9+TPIrqxmLmeM7reHuFL/AZb258eBapm+hVPFOw/1QZ7L kadPyPaRwxzoq5bqnAzVT85WAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkNeWNx oWjjm/UjE4xPn+R/0d3SMB8GA1UdIwQYMBaAFE8xXu9ayy7aejcp554TWZDAHnB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdDOS9DMzU5RTc1RUFD MTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0cDZOeW5ubmhOWmtNQWVj SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6RmU3MXJMTHRwNk55bm5uaE5aa01BZWNIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTdDOS9DMzU5RTc1RUFDMTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0 cDZOeW5ubmhOWmtNQWVjSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsL/opJylInHGeqb/wjr2k8Xn73jagpwcdnG9raHW9w2PMjvKoTUXFmmkry7H S8hksnqePAeIcyo4PwcC7/Q5PYy8nlCHVlsWpsvUxWc/hnQUSPamU9uNYCzU99N/ EFGAOO0y5G/lLjXAMmT/v5Pb/iuNYpwPtWPa8gDw8WyskOLv0YUeq63iwC+B/cXf kERGsG1jBMP165fG3FJ4z9sqNPggYcWE6JphCTosKzLpjVKPObcZ4iBGWmagsswJ jmHpDo7XhQBGiiNdYRmNMk4/2rLvJzUdSEYEtABkADwZPH82HSeBnbVfrkOctjiP xwp4pKd3l1iG60VoEP0sAqulPA== -----END CERTIFICATE-----Generated at Wed Oct 7 07:59:23 2026 by rpki-client