$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.mft File: TUhBSCTT6xYIJkSGXtNmcgDvokk.mft (raw, json) Hash identifier: nrQS/oxmxJWn+x+RwfYGVpw8paEX7UMGTY4vYLvF4eI= Subject key identifier: 2D:E9:CE:1F:4C:14:82:0E:BC:95:4E:F7:37:DF:20:D3:1F:6B:66:75 Authority key identifier: 4D:48:41:48:24:D3:EB:16:08:26:44:86:5E:D3:66:72:00:EF:A2:49 Certificate issuer: /CN=A91B54AA/serialNumber=4D48414824D3EB16082644865ED3667200EFA249 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUhBSCTT6xYIJkSGXtNmcgDvokk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.mft Manifest number: 12 Signing time: Mon 05 Oct 2026 09:37:31 +0000 Manifest this update: Mon 05 Oct 2026 09:37:30 +0000 Manifest next update: Mon 12 Oct 2026 09:37:30 +0000 Files and hashes: 1: TUhBSCTT6xYIJkSGXtNmcgDvokk.crl (hash: S3TaMK8qXJNddHFQ9zV/EB3fhUSu7xKW9ovIT0h/vS4=) 2: 6B8CDE00AD8311F1BD3BEF4C6311F970.roa (hash: Xk34jMLA9RbZ2gRnU7+OBryJYCQuz2GD+FIkP6ye+HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.crl rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUhBSCTT6xYIJkSGXtNmcgDvokk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54AA, serialNumber=4D48414824D3EB16082644865ED3667200EFA249 Validity Not Before: Oct 5 09:37:30 2026 GMT Not After : Oct 12 09:37:30 2026 GMT Subject: CN=6ac36fdb-75f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:61:cf:42:38:3a:8d:e0:6a:b5:3c:9b:5e: ef:77:69:9d:1a:ba:37:d3:93:31:24:c0:d9:15:41: 97:40:27:17:1c:ac:b6:e6:92:a4:09:92:36:61:a3: 73:04:a8:64:19:b0:00:9b:d2:81:9c:e8:c9:19:b2: 2e:5d:0a:b2:20:d9:ce:a5:ad:42:ca:7d:54:3c:5f: db:a5:84:e6:40:ca:93:f8:8a:a0:51:a7:51:3b:4d: 8d:42:e8:50:bd:71:83:74:c3:4b:e7:92:09:d7:77: 3d:76:6e:df:00:c9:54:bb:52:3b:55:79:4b:b9:a4: 08:b3:f9:7b:8e:66:e7:ef:1a:d2:14:c6:34:de:7e: 1f:82:35:8f:5e:3e:c8:81:db:f0:ed:cf:43:36:80: ae:37:fd:0c:2f:4e:06:50:e0:5f:47:63:5a:0e:ef: 0c:d9:26:50:b8:bb:6b:5a:01:3d:59:54:96:c0:3e: 44:71:30:d5:03:24:9b:4b:2a:08:d1:24:91:52:34: d5:df:95:78:6c:db:c0:42:87:21:20:57:ba:ae:4c: 11:d0:22:55:1a:30:4f:22:f1:94:5b:ab:a9:45:58: 12:b8:d9:50:71:90:86:27:f7:17:dd:7e:58:6c:e7: 89:e8:09:cb:5f:b2:b8:b2:f4:6a:f3:95:2a:a3:e6: d0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E9:CE:1F:4C:14:82:0E:BC:95:4E:F7:37:DF:20:D3:1F:6B:66:75 X509v3 Authority Key Identifier: keyid:4D:48:41:48:24:D3:EB:16:08:26:44:86:5E:D3:66:72:00:EF:A2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUhBSCTT6xYIJkSGXtNmcgDvokk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4e:49:14:0f:b7:62:fb:e9:0d:47:04:36:ee:82:e9:8d:d7: e5:73:5f:d3:a8:86:85:c7:fc:ac:b0:21:fe:dc:25:7b:cf:0b: fd:31:18:2f:f0:6b:6d:a5:43:e5:a2:9f:05:7d:bc:7d:bb:1f: d8:fe:d9:f7:0c:57:4a:d8:f2:d0:fc:ca:19:fe:d8:98:da:f6: 97:b8:3d:cf:48:ae:41:ff:1a:4f:76:47:5d:3b:07:44:52:40: 42:4a:87:90:37:8d:d7:17:28:16:d7:ac:9b:99:98:b5:e4:9d: 6e:90:48:78:69:2f:df:11:89:4f:f6:f4:ce:b9:d7:e3:25:16: 66:06:73:f1:b1:e7:6f:fd:6e:69:f1:fd:e8:08:b8:40:95:3f: 50:88:01:66:94:cc:46:c6:31:03:ca:08:8b:23:a6:a9:35:33: 13:c9:21:19:5f:20:8a:da:0b:e6:74:01:87:98:7f:d3:9b:60: 41:4d:75:39:74:2e:43:64:25:76:b0:ff:f8:19:3d:af:23:d9: cc:30:01:a7:2e:2a:86:fb:da:6c:78:43:59:fc:63:c2:0c:9e: 39:0e:60:cd:7a:f3:6c:42:c9:a5:e9:b0:d6:7f:9c:ea:39:53: d5:dd:40:c9:bc:80:fb:7f:b4:21:7e:47:0b:fb:d6:db:eb:2a: 11:3e:00:89 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTRBQTExMC8GA1UEBRMoNEQ0ODQxNDgyNEQzRUIxNjA4MjY0NDg2NUVEMzY2NzIw MEVGQTI0OTAeFw0yNjEwMDUwOTM3MzBaFw0yNjEwMTIwOTM3MzBaMBgxFjAUBgNV BAMTDTZhYzM2ZmRiLTc1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtkmHPQjg6jeBqtTybXu93aZ0aujfTkzEkwNkVQZdAJxccrLbmkqQJkjZho3ME qGQZsACb0oGc6MkZsi5dCrIg2c6lrULKfVQ8X9ulhOZAypP4iqBRp1E7TY1C6FC9 cYN0w0vnkgnXdz12bt8AyVS7UjtVeUu5pAiz+XuOZufvGtIUxjTefh+CNY9ePsiB 2/Dtz0M2gK43/QwvTgZQ4F9HY1oO7wzZJlC4u2taAT1ZVJbAPkRxMNUDJJtLKgjR JJFSNNXflXhs28BChyEgV7quTBHQIlUaME8i8ZRbq6lFWBK42VBxkIYn9xfdflhs 54noCctfsriy9GrzlSqj5tCFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULenOH0wU gg68lU73N98g0x9rZnUwHwYDVR0jBBgwFoAUTUhBSCTT6xYIJkSGXtNmcgDvokkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1NEFBLzBCOTk3RkQ0QUNG RDExRjFCQTVBNTZFMTM2MTFGOTcwL1RVaEJTQ1RUNnhZSUprU0dYdE5tY2dEdm9r ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFVoQlNDVFQ2eFlJSmtTR1h0Tm1jZ0R2b2trLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 NEFBLzBCOTk3RkQ0QUNGRDExRjFCQTVBNTZFMTM2MTFGOTcwL1RVaEJTQ1RUNnhZ SUprU0dYdE5tY2dEdm9ray5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALTkkUD7di++kNRwQ27oLpjdflc1/TqIaFx/yssCH+3CV7zwv9MRgv8GttpUPl op8Ffbx9ux/Y/tn3DFdK2PLQ/MoZ/tiY2vaXuD3PSK5B/xpPdkddOwdEUkBCSoeQ N43XFygW16ybmZi15J1ukEh4aS/fEYlP9vTOudfjJRZmBnPxsedv/W5p8f3oCLhA lT9QiAFmlMxGxjEDygiLI6apNTMTySEZXyCK2gvmdAGHmH/Tm2BBTXU5dC5DZCV2 sP/4GT2vI9nMMAGnLiqG+9pseENZ/GPCDJ45DmDNevNsQsml6bDWf5zqOVPV3UDJ vID7f7QhfkcL+9bb6yoRPgCJ -----END CERTIFICATE-----Generated at Mon Oct 5 23:26:35 2026 by rpki-client