$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: zO/4jL506zdTBmHK7u8MbyLVAkySehM8KQct+NwI0f8= Subject key identifier: 6B:66:BF:3A:34:03:4D:98:19:6F:78:45:33:CD:62:62:E1:E6:FE:6F Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0DB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0D84 Signing time: Thu 08 Oct 2026 18:11:39 +0000 Manifest this update: Thu 08 Oct 2026 18:11:39 +0000 Manifest next update: Thu 15 Oct 2026 18:11:39 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: LBD5kb6YFsPbfK5SfYLDiACdSifIqDkCOzfxjW+cytc=) 2: 4F383CB6FF6B11F0AD4BC885576F56BC.roa (hash: WGJtveG7MyCaKyrbykvOBWfbJGid2bolS7+yA+NkoTg=) 3: F824C588FF7A11F0B218EB915B6F56BC.roa (hash: HYftwyur4yF/367rCi/mAUGJX4KwI7u7839C5kVZ7Sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3506 (0xdb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Oct 8 18:11:39 2026 GMT Not After : Oct 15 18:11:39 2026 GMT Subject: CN=6ac7dcdb-7df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:f7:5d:36:13:98:7f:ea:68:95:57:26:ca: e1:ae:25:d9:b9:ea:c0:c3:b2:65:7d:15:31:35:0f: e4:f1:64:2d:2c:9b:e6:29:ee:4d:83:40:15:3d:22: 01:38:2e:54:18:30:c5:2f:a3:ac:38:0a:cf:3d:fb: 4b:d4:00:e5:82:08:57:db:ee:a1:71:f8:ba:81:74: c2:ce:65:52:c4:75:85:6d:01:bb:9c:ee:d2:a4:24: 0c:da:b4:f6:57:fd:c9:49:6f:82:62:ff:8e:00:68: d6:bd:90:db:16:b6:bf:cf:28:6c:ac:fa:59:0f:b0: 0d:a4:ad:47:0a:3e:88:6e:4e:cf:db:4a:95:91:26: 90:ac:64:88:d9:b0:61:97:0b:bb:bc:45:40:8c:12: b9:a2:c5:ee:6a:a0:a9:98:95:bf:cd:08:e3:9b:d2: 94:2a:6f:7b:e1:c5:53:c8:7b:f8:59:95:1d:08:fd: b4:85:c3:2d:f4:68:2d:e8:34:f5:5e:9c:c7:10:26: cd:09:3c:01:da:b3:27:4b:14:e9:08:f9:7d:d3:c8: a1:ae:75:97:57:71:1f:3f:40:00:01:61:ee:e9:2f: 67:a3:9d:f9:63:80:80:8d:3a:f2:80:d5:39:2c:81: 40:ea:0f:76:58:2b:1d:9c:41:8e:85:f5:6e:30:fe: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:66:BF:3A:34:03:4D:98:19:6F:78:45:33:CD:62:62:E1:E6:FE:6F X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:21:7b:e6:4a:50:1a:47:36:49:61:0b:d2:62:cb:4e:78:ae: ab:18:ed:d5:f2:a6:ab:79:76:d7:c4:35:e4:ee:8a:0e:f4:38: ac:e8:63:30:70:9b:d3:55:28:76:66:99:e1:a9:b1:f3:3f:97: 1a:e1:51:1f:53:fa:43:c6:79:81:01:ec:c6:21:4b:ae:b1:48: 6b:76:aa:25:0f:4d:d3:02:7e:74:ca:83:fc:b7:f3:f0:a4:a1: a6:01:a0:a3:28:00:9e:1c:e8:9e:e8:2d:aa:ab:13:11:7c:a4: 40:6c:a6:a4:e4:ed:fe:e1:0b:48:ab:b9:8d:b8:f8:ca:65:66: f9:4f:f6:b7:be:6d:29:2c:b6:ba:25:55:34:fe:16:8b:54:2d: da:42:21:88:18:dd:44:57:96:92:bb:cb:ca:13:48:db:62:72: e8:dc:fa:c2:16:9f:5f:c0:1e:a5:72:fc:aa:16:34:6d:85:09: 13:69:27:17:36:75:ac:5b:33:1e:51:d7:07:09:20:01:c7:2a: ed:f7:60:37:b8:45:8f:33:1b:96:48:dc:76:81:6a:f2:cb:cf: 8d:fe:dc:6b:3c:3a:36:57:1a:a4:80:c2:a1:f8:85:96:ad:1a: f5:db:fa:5d:99:28:00:87:49:d4:9d:d8:4d:0e:4d:73:c0:dd: 22:30:e2:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjYxMDA4MTgxMTM5WhcNMjYxMDE1MTgxMTM5WjAYMRYwFAYD VQQDEw02YWM3ZGNkYi03ZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UX3XTYTmH/qaJVXJsrhriXZuerAw7JlfRUxNQ/k8WQtLJvmKe5Ng0AVPSIB OC5UGDDFL6OsOArPPftL1ADlgghX2+6hcfi6gXTCzmVSxHWFbQG7nO7SpCQM2rT2 V/3JSW+CYv+OAGjWvZDbFra/zyhsrPpZD7ANpK1HCj6Ibk7P20qVkSaQrGSI2bBh lwu7vEVAjBK5osXuaqCpmJW/zQjjm9KUKm974cVTyHv4WZUdCP20hcMt9Ggt6DT1 XpzHECbNCTwB2rMnSxTpCPl908ihrnWXV3EfP0AAAWHu6S9no535Y4CAjTrygNU5 LIFA6g92WCsdnEGOhfVuMP5J9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtmvzo0 A02YGW94RTPNYmLh5v5vMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPiF75kpQGkc2SWEL0mLLTniuqxjt1fKmq3l218Q15O6KDvQ4rOhjMHCb01Uo dmaZ4amx8z+XGuFRH1P6Q8Z5gQHsxiFLrrFIa3aqJQ9N0wJ+dMqD/Lfz8KShpgGg oygAnhzonugtqqsTEXykQGympOTt/uELSKu5jbj4ymVm+U/2t75tKSy2uiVVNP4W i1Qt2kIhiBjdRFeWkrvLyhNI22Jy6Nz6whafX8AepXL8qhY0bYUJE2knFzZ1rFsz HlHXBwkgAccq7fdgN7hFjzMblkjcdoFq8svPjf7cazw6NlcapIDCofiFlq0a9dv6 XZkoAIdJ1J3YTQ5Nc8DdIjDifA== -----END CERTIFICATE-----Generated at Thu Oct 8 20:00:19 2026 by rpki-client