$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: L9EMBNL2R01GAC4FlBddjsgWwSqX3oJUspdIgJSdsZs= Subject key identifier: 17:96:E8:60:25:13:D7:0C:74:49:BC:33:22:09:05:E4:8E:72:6A:75 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 0193 Signing time: Tue 13 Oct 2026 05:23:08 +0000 Manifest this update: Tue 13 Oct 2026 05:23:08 +0000 Manifest next update: Tue 20 Oct 2026 05:23:08 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: LJHV9ZiidtTxqxUiAv5GI7uK+qGwFw+u5QLv5gCaqw0=) 2: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: ++NAzFdgrCWq7Psti37kYod0Z/Cf5rqqSx5tqVELD30=) 3: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: 9sVvG8nqt07RYgdjskUj+nbNgt9KI1DJ9r2FPQyKhdI=) 4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: vA/3pT/OlejQOLwDGu/X6cJGU1FiZeKJpR5h4oJH+vM=) 5: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: /Sm2zYzPsltCSnxXkde65QLcv4nLE4DZsGNDto3u1pU=) 6: 1E17772C282A11F18C2E09ECC4833773.roa (hash: wvq+eeKQICfr0xthABW2pw2lePGMaoO+cQ143TEevew=) 7: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: DLntlBgYeaZkB0B6+0ueNT8CTGCNO5fqwm8mNbtakHc=) 8: 2D6E98583F0511F1B91814A8C9833773.roa (hash: 0KtIlc2mv8e+ApfZaCaLHRgjKyyK1q+r9dEfZMgUpik=) 9: 0153CD24917111F1B35E84E13111F970.roa (hash: QNI1/+FwX+x7J+2lhUxyR3o7NDToHEAEYia85ddZBYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 05:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Oct 13 05:23:08 2026 GMT Not After : Oct 20 05:23:08 2026 GMT Subject: CN=6acdc03c-842e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:eb:f0:98:37:2f:15:52:66:2b:06:f3:b2: 56:ab:a0:b4:bc:1e:61:26:cb:6c:7c:21:9a:9a:2a: 9a:38:cc:42:c9:ba:f2:2f:fb:13:92:b4:23:a9:ac: a9:2f:9a:8c:dc:c5:66:42:fd:63:fc:da:4d:0b:53: bb:de:cd:54:f1:35:53:8f:96:3c:42:01:26:e0:fb: 89:72:70:30:cc:9e:6a:c6:2c:e0:25:94:46:c9:a7: de:96:cb:86:3d:58:38:00:00:a3:b4:74:dc:d8:15: aa:6e:ca:08:1b:c4:4e:fd:2c:ae:b1:61:e1:05:87: 19:6c:dd:cf:6a:c4:02:a9:a5:99:ec:51:4f:8b:dc: 37:08:86:24:91:2e:fc:81:19:3a:b3:1e:b1:f5:3c: 82:61:83:a2:a5:01:30:a0:45:d9:14:6a:ba:01:e0: 3c:2f:03:8f:56:32:da:b1:c8:0f:23:63:35:76:93: ff:6b:19:60:46:e4:b7:e7:d6:f5:bb:0f:af:7f:02: 0a:ab:24:5b:de:27:43:e1:44:3c:ea:ce:e1:a6:2a: 32:27:7d:78:22:67:b4:2c:ff:ae:98:2d:82:83:ad: ef:2c:a7:37:bb:30:24:e2:d7:33:d4:3a:29:51:ec: 54:b7:cb:d0:4d:46:9e:4c:fe:ab:1a:69:98:f8:ea: 0d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:96:E8:60:25:13:D7:0C:74:49:BC:33:22:09:05:E4:8E:72:6A:75 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:70:c8:f7:4d:c2:bc:2f:59:50:ab:d4:f8:e5:5b:7f:1a:57: 6e:c0:57:a6:ab:c2:08:50:93:f0:0f:c4:36:90:31:9b:ea:a9: fb:00:47:37:8e:94:4e:ad:6b:f8:25:67:89:06:8f:f6:c6:4c: f3:91:fc:0c:46:71:fb:d1:24:a9:dd:9e:8a:3b:8e:00:b5:8e: 35:a4:8b:9f:e0:81:cb:fb:8a:67:37:17:99:68:af:91:98:d0: ab:2c:80:9f:a2:03:09:c0:23:26:d2:f8:3c:55:d9:40:e2:38: fb:96:72:7c:34:fb:06:dd:ca:ba:9f:25:8d:ae:d2:47:25:04: b6:da:a9:a2:0e:ba:bb:37:ff:fe:79:b7:f1:2a:5e:21:ad:ab: f7:c8:b7:29:4f:86:18:a9:9f:a3:4b:72:b2:5f:3c:17:5c:26: 26:bd:cf:b5:10:78:ab:44:db:4e:1f:b1:c1:12:c7:55:ae:46: f8:97:b3:97:af:80:af:b9:69:16:ac:0c:db:7a:1d:0d:9f:66: 6a:a6:d3:c2:a2:00:b9:0b:e5:b1:8f:0d:dd:67:1c:9b:73:df: 6f:9a:10:8f:7c:1f:d9:a9:43:a4:d6:54:62:24:c4:60:8c:5d: 54:ec:c4:c4:9c:0a:8b:c7:76:b6:db:37:7c:a0:bd:c0:11:df: 74:ba:2b:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjYxMDEzMDUyMzA4WhcNMjYxMDIwMDUyMzA4WjAYMRYwFAYD VQQDEw02YWNkYzAzYy04NDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5Pr8Jg3LxVSZisG87JWq6C0vB5hJstsfCGamiqaOMxCybryL/sTkrQjqayp L5qM3MVmQv1j/NpNC1O73s1U8TVTj5Y8QgEm4PuJcnAwzJ5qxizgJZRGyafelsuG PVg4AACjtHTc2BWqbsoIG8RO/SyusWHhBYcZbN3PasQCqaWZ7FFPi9w3CIYkkS78 gRk6sx6x9TyCYYOipQEwoEXZFGq6AeA8LwOPVjLascgPI2M1dpP/axlgRuS359b1 uw+vfwIKqyRb3idD4UQ86s7hpioyJ314Ime0LP+umC2Cg63vLKc3uzAk4tcz1Dop UexUt8vQTUaeTP6rGmmY+OoNPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeW6GAl E9cMdEm8MyIJBeSOcmp1MB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdXDI903CvC9ZUKvU+OVbfxpXbsBXpqvCCFCT8A/ENpAxm+qp+wBHN46UTq1r +CVniQaP9sZM85H8DEZx+9Ekqd2eijuOALWONaSLn+CBy/uKZzcXmWivkZjQqyyA n6IDCcAjJtL4PFXZQOI4+5ZyfDT7Bt3Kup8lja7SRyUEttqpog66uzf//nm38Spe Ia2r98i3KU+GGKmfo0tysl88F1wmJr3PtRB4q0TbTh+xwRLHVa5G+Jezl6+Ar7lp FqwM23odDZ9maqbTwqIAuQvlsY8N3Wccm3Pfb5oQj3wf2alDpNZUYiTEYIxdVOzE xJwKi8d2tts3fKC9wBHfdLor+A== -----END CERTIFICATE-----Generated at Tue Oct 13 12:20:34 2026 by rpki-client