$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft File: tY0p97gQfxWFtf_nDFAsbI9dMwI.mft (raw, json) Hash identifier: jLyoXcoS19uXmqK7vlH+hkXAWWk1NSv5mdUHPg457sE= Subject key identifier: 94:19:C2:93:24:00:13:D4:75:3C:04:E6:CB:71:D0:82:1C:EF:2A:AA Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Certificate serial: 0964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft Manifest number: 0944 Signing time: Sun 04 Oct 2026 20:14:09 +0000 Manifest this update: Sun 04 Oct 2026 20:14:08 +0000 Manifest next update: Sun 11 Oct 2026 20:14:08 +0000 Files and hashes: 1: tY0p97gQfxWFtf_nDFAsbI9dMwI.crl (hash: 0NQC24t21FDNzPG575CIwB1fuZ8NeP/z9oy3M7YD++I=) 2: C33EB0EC7C4211EB933D233EC4F9AE02.roa (hash: gl38JCfINuQj5r+ArpGOl2htLCM9Mgwqo9xw/lh130Q=) 3: F6F5BCCE53E711F084348F87C4F9AE02.roa (hash: 30DNpUpUJwy2It5xAnDm6pl6G00ZZjWgrPOcvF+5H9w=) 4: 3C3F21BAD6F011EE9B38B67DC4F9AE02.roa (hash: Vl3ljhabWGTlG6GqBHRNZlqYXeuSFP4BoWLikf0UCmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 20:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2404 (0x964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CA4, serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Validity Not Before: Oct 4 20:14:08 2026 GMT Not After : Oct 11 20:14:08 2026 GMT Subject: CN=6ac2b390-7934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:d0:19:65:cb:cb:49:56:26:e9:78:bf:6c: 5e:9e:19:03:b3:f3:77:8a:f4:e8:87:d5:24:1a:21: af:66:2e:d0:4f:33:15:78:05:43:29:37:ab:89:cc: 4d:e3:85:59:9a:62:10:e6:64:a4:68:65:d3:d2:53: a1:af:29:dc:ca:39:9f:9d:26:89:10:c8:a6:9e:eb: e8:70:f3:7a:62:3e:64:18:ed:3d:35:4b:4f:2a:fc: 64:e7:24:5d:80:d1:d5:53:31:b7:68:81:d7:c3:f0: c6:56:e3:19:02:50:24:3c:4c:3c:f4:0e:2a:c6:a6: 80:c3:31:9e:cb:8a:05:f6:da:59:71:34:7f:74:32: 2c:63:d8:2b:b9:08:e4:e8:97:51:9c:cf:fc:a6:3f: d1:c4:df:a1:db:89:2f:85:3a:ac:d4:de:13:0d:b6: 89:ef:61:6e:54:cd:d6:61:d4:11:66:3d:4e:cb:4d: 14:47:25:89:25:f9:d2:5b:bc:e5:65:e7:68:9b:7e: 66:78:9b:15:dd:61:7a:6a:9e:ee:7b:4b:42:c2:12: 93:17:39:0c:53:4a:80:7e:7f:de:3f:f5:3b:96:ea: 20:8a:51:f9:ab:1e:e2:c9:cc:14:49:72:45:d5:bb: 84:63:ed:e2:ac:cb:e7:cd:dd:71:3a:84:1f:3f:36: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:19:C2:93:24:00:13:D4:75:3C:04:E6:CB:71:D0:82:1C:EF:2A:AA X509v3 Authority Key Identifier: keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:28:94:d2:a7:94:7b:a3:54:50:76:0f:dc:68:19:ff:dd:2a: 93:73:c8:bf:f3:1e:7f:d6:2d:36:37:43:55:a3:12:6c:5d:a7: 1a:79:94:a8:6b:b2:d5:ea:d2:e8:39:aa:97:ca:2d:a1:92:96: 65:d4:fb:14:86:af:58:53:28:d2:7d:84:34:80:20:21:13:9d: 53:bd:fc:0e:12:a0:6e:21:3c:5f:83:e7:ea:57:b6:0a:24:2a: d1:f0:ac:23:7b:2b:67:e7:4a:c3:41:6b:ae:b3:65:7b:c7:2d: 57:fd:e0:06:b6:d8:68:17:0d:37:93:ed:1d:e2:91:6c:29:09: 28:d8:48:6f:52:6d:1e:40:5f:b7:0c:b1:5c:ec:ee:e3:f6:29: 33:a2:ab:d8:0a:e5:ba:1d:a8:b3:b6:b2:d9:2f:61:e6:41:1e: 18:8b:38:57:2d:b1:de:2d:98:a7:7f:1a:f5:c3:d4:aa:d6:ce: cb:47:d2:01:f9:3e:ef:71:98:12:94:7b:b2:32:52:a1:c2:61: d9:92:cd:e7:ac:db:b6:ac:d6:c4:ba:cc:62:cf:ee:a2:9e:27: 78:c4:33:e3:49:c4:56:99:00:72:fc:7f:a9:4f:ab:de:c6:b1: 98:b3:7a:94:ef:dc:ac:48:c0:78:d3:b8:d4:ba:05:66:f3:29: a6:58:3c:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQTQxMTAvBgNVBAUTKEI1OEQyOUY3QjgxMDdGMTU4NUI1RkZFNzBDNTAyQzZD OEY1RDMzMDIwHhcNMjYxMDA0MjAxNDA4WhcNMjYxMDExMjAxNDA4WjAYMRYwFAYD VQQDEw02YWMyYjM5MC03OTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyITQGWXLy0lWJul4v2xenhkDs/N3ivToh9UkGiGvZi7QTzMVeAVDKTericxN 44VZmmIQ5mSkaGXT0lOhryncyjmfnSaJEMimnuvocPN6Yj5kGO09NUtPKvxk5yRd gNHVUzG3aIHXw/DGVuMZAlAkPEw89A4qxqaAwzGey4oF9tpZcTR/dDIsY9gruQjk 6JdRnM/8pj/RxN+h24kvhTqs1N4TDbaJ72FuVM3WYdQRZj1Oy00URyWJJfnSW7zl Zedom35meJsV3WF6ap7ue0tCwhKTFzkMU0qAfn/eP/U7luogilH5qx7iycwUSXJF 1buEY+3irMvnzd1xOoQfPzbvBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQZwpMk ABPUdTwE5stx0IIc7yqqMB8GA1UdIwQYMBaAFLWNKfe4EH8VhbX/5wxQLGyPXTMC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NBNC8xNUY2OEI1Q0NG MTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4V0Z0Zl9uREZBc2JJOWRN d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RZMHA5N2dRZnhXRnRmX25ERkFzYkk5ZE13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NBNC8xNUY2OEI1Q0NGMTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4 V0Z0Zl9uREZBc2JJOWRNd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASCiU0qeUe6NUUHYP3GgZ/90qk3PIv/Mef9YtNjdDVaMSbF2nGnmUqGuy1erS 6Dmql8otoZKWZdT7FIavWFMo0n2ENIAgIROdU738DhKgbiE8X4Pn6le2CiQq0fCs I3srZ+dKw0FrrrNle8ctV/3gBrbYaBcNN5PtHeKRbCkJKNhIb1JtHkBftwyxXOzu 4/YpM6Kr2Arluh2os7ay2S9h5kEeGIs4Vy2x3i2Yp38a9cPUqtbOy0fSAfk+73GY EpR7sjJSocJh2ZLN56zbtqzWxLrMYs/uop4neMQz40nEVpkAcvx/qU+r3saxmLN6 lO/crEjAeNO41LoFZvMpplg8hw== -----END CERTIFICATE-----Generated at Tue Oct 6 14:30:15 2026 by rpki-client