$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft File: tU-K0c7KwTb8r0eS6_0A5o6h02g.mft (raw, json) Hash identifier: E95Y4IOfvA7bHQ1DftT7FYwSV+TDAzAOXsnsnZHRT+o= Subject key identifier: 13:A1:E7:45:69:42:4A:9E:5D:D4:F0:C8:07:4D:98:9D:44:03:95:F3 Authority key identifier: B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68 Certificate issuer: /CN=A91B7DCB/serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft Manifest number: 010D Signing time: Wed 07 Oct 2026 06:32:47 +0000 Manifest this update: Wed 07 Oct 2026 06:32:46 +0000 Manifest next update: Wed 14 Oct 2026 06:32:46 +0000 Files and hashes: 1: tU-K0c7KwTb8r0eS6_0A5o6h02g.crl (hash: 4SO6ikdUGObGl3WmFHQusphGK9WFeo50eNNry5ueKls=) 2: D470A60E294511F0B1412377C4F9AE02.roa (hash: GSkbxwT7s713aepzAHb1asdunZV2hHHIcFkvDpvvdJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368 Validity Not Before: Oct 7 06:32:46 2026 GMT Not After : Oct 14 06:32:46 2026 GMT Subject: CN=6ac5e78f-2caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:fa:2f:96:8e:98:22:97:15:55:89:95:31: ad:11:31:7b:d4:78:aa:52:89:24:df:a8:4e:d0:b9: 5e:33:50:6b:23:58:6c:45:0f:e9:e2:f1:8c:a0:9f: 18:df:d0:d0:2a:19:c6:52:54:e7:9e:2f:9b:36:b8: 71:a8:4b:81:80:2c:52:55:be:e8:24:87:5e:0f:91: f9:df:41:2f:ed:93:7f:d5:db:e7:cd:87:dd:7a:68: b7:0a:3d:c6:ae:a6:ab:8a:17:1d:6f:a3:e6:93:44: 49:11:9b:bf:2f:ea:10:c7:69:a4:cf:20:67:85:02: 82:eb:98:3f:b9:4c:6e:57:98:b6:61:21:17:df:d4: 90:b4:38:9d:79:59:e3:c7:20:ab:36:90:60:04:d2: 7b:7b:41:b5:fc:ce:77:87:02:33:12:29:25:41:f8: 1e:0e:aa:2f:12:a0:c5:68:db:4b:2e:eb:da:be:fa: b3:f4:46:db:84:49:ce:20:dd:8b:41:2f:0a:3d:0e: 8d:9d:cf:6e:60:9b:91:c3:27:a6:fb:2f:6d:54:2c: c4:0a:90:da:8d:3e:1d:fa:49:0c:a5:c0:d9:e7:a7: 7c:b5:45:20:87:21:26:aa:c6:34:f0:26:97:ad:15: 15:32:33:8f:d4:14:d3:aa:02:59:90:75:d9:16:c3: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A1:E7:45:69:42:4A:9E:5D:D4:F0:C8:07:4D:98:9D:44:03:95:F3 X509v3 Authority Key Identifier: keyid:B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:7f:cb:4a:e3:fc:4c:09:93:3c:d3:c6:58:df:40:65:56:aa: 7b:69:4c:ce:8d:2a:e1:1a:a9:b9:67:20:24:3b:f7:3b:6b:7e: 2f:0a:0a:08:ae:98:5e:01:aa:b3:b8:e5:27:b7:5c:19:64:3e: 40:35:ee:5d:4c:02:d0:dd:c5:36:e9:6d:c8:ac:07:ce:5e:1c: 1a:e5:aa:ee:f7:8b:52:3c:83:e0:0f:ff:1a:57:2a:e8:df:dd: 30:84:d8:a8:f2:20:80:c1:ad:7c:ab:70:c7:cc:fb:b2:13:83: bb:4e:4f:6e:48:e5:2c:af:91:07:d5:8c:ac:4d:e8:d4:1f:af: dc:d6:3e:1e:77:73:ec:aa:ad:ef:19:88:58:fe:33:11:a4:12: 64:8d:a2:2b:38:c5:84:2b:a6:78:4f:b0:52:86:32:07:19:35: e5:84:44:99:c5:d0:e4:e0:56:46:11:54:d7:a8:da:73:69:08: 1d:e2:e3:9a:c3:f5:ce:d5:2a:a9:4b:a0:ae:01:e6:83:3e:fc: 53:6a:4e:4f:ff:ee:ed:a4:59:25:7e:dd:82:47:f2:51:b0:ce: d0:99:0d:e1:07:f2:41:18:6e:4d:93:1f:9f:77:dc:4f:75:09: 90:e8:46:e0:54:f7:1d:2a:ce:ef:ba:e5:da:1a:9b:a3:ee:77: c7:f5:ff:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEQ0IxMTAvBgNVBAUTKEI1NEY4QUQxQ0VDQUMxMzZGQ0FGNDc5MkVCRkQwMEU2 OEVBMUQzNjgwHhcNMjYxMDA3MDYzMjQ2WhcNMjYxMDE0MDYzMjQ2WjAYMRYwFAYD VQQDEw02YWM1ZTc4Zi0yY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+r6L5aOmCKXFVWJlTGtETF71HiqUokk36hO0LleM1BrI1hsRQ/p4vGMoJ8Y 39DQKhnGUlTnni+bNrhxqEuBgCxSVb7oJIdeD5H530Ev7ZN/1dvnzYfdemi3Cj3G rqarihcdb6Pmk0RJEZu/L+oQx2mkzyBnhQKC65g/uUxuV5i2YSEX39SQtDideVnj xyCrNpBgBNJ7e0G1/M53hwIzEiklQfgeDqovEqDFaNtLLuvavvqz9EbbhEnOIN2L QS8KPQ6Nnc9uYJuRwyem+y9tVCzECpDajT4d+kkMpcDZ56d8tUUghyEmqsY08CaX rRUVMjOP1BTTqgJZkHXZFsNZwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOh50Vp QkqeXdTwyAdNmJ1EA5XzMB8GA1UdIwQYMBaAFLVPitHOysE2/K9Hkuv9AOaOodNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0RDQi9GODNBQzQ5NDI5 NDQxMUYwQUUxQUJDNzRDNEY5QUUwMi90VS1LMGM3S3dUYjhyMGVTNl8wQTVvNmgw MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RVLUswYzdLd1RiOHIwZVM2XzBBNW82aDAyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0RDQi9GODNBQzQ5NDI5NDQxMUYwQUUxQUJDNzRDNEY5QUUwMi90VS1LMGM3S3dU YjhyMGVTNl8wQTVvNmgwMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWX/LSuP8TAmTPNPGWN9AZVaqe2lMzo0q4RqpuWcgJDv3O2t+LwoKCK6YXgGq s7jlJ7dcGWQ+QDXuXUwC0N3FNultyKwHzl4cGuWq7veLUjyD4A//Glcq6N/dMITY qPIggMGtfKtwx8z7shODu05PbkjlLK+RB9WMrE3o1B+v3NY+Hndz7Kqt7xmIWP4z EaQSZI2iKzjFhCumeE+wUoYyBxk15YREmcXQ5OBWRhFU16jac2kIHeLjmsP1ztUq qUugrgHmgz78U2pOT//u7aRZJX7dgkfyUbDO0JkN4QfyQRhuTZMfn3fcT3UJkOhG 4FT3HSrO77rl2hqbo+53x/X/iQ== -----END CERTIFICATE-----Generated at Wed Oct 7 11:25:53 2026 by rpki-client