$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json) Hash identifier: wnQPVwNiH9jgSdNvE5BxgEswg9XyjLPOvMKl1y2UEVc= Subject key identifier: 24:38:27:4D:4E:36:16:02:04:14:C6:78:47:F1:53:A2:58:05:B6:85 Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Certificate serial: 097C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft Manifest number: 0971 Signing time: Fri 02 Oct 2026 20:20:49 +0000 Manifest this update: Fri 02 Oct 2026 20:20:48 +0000 Manifest next update: Fri 09 Oct 2026 20:20:48 +0000 Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: P9Lv3fQX4veA7vWirFA4jL/1wdaCZFcR1PzpnkJ96t0=) 2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: pJ8W3JL1SvT+9bYhgevlA/zqowg96Jc82pj7ld8nZi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2428 (0x97c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Validity Not Before: Oct 2 20:20:48 2026 GMT Not After : Oct 9 20:20:48 2026 GMT Subject: CN=6ac01221-75a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:37:04:b0:99:8c:09:c0:2c:89:a9:c0:b4:14: 29:83:75:7a:17:b9:b2:0b:ad:4a:83:88:60:f8:09: 2b:4a:c2:70:66:e6:8e:91:80:90:85:5b:77:af:d0: 63:fe:ae:c9:0a:42:c1:93:1c:25:88:4c:4e:5f:60: f9:f8:dd:5a:55:3a:ac:92:23:b7:66:72:ee:c7:58: 45:11:47:1b:8e:a3:b2:71:b7:ea:c3:61:c2:13:ea: 78:03:44:97:5a:db:09:1c:eb:c7:a8:b8:12:81:55: 7d:5b:93:8b:3a:3d:1c:93:b6:08:aa:58:16:a8:40: 4a:26:29:b8:13:5a:89:95:b1:df:8f:46:63:cf:d3: 77:28:1a:63:6b:77:0e:8d:20:08:1b:1f:0a:a9:66: 48:f0:1e:30:98:38:16:54:14:61:9c:a8:82:ef:e0: 71:16:d8:e2:29:f3:20:4d:a2:2a:ea:51:bc:a6:24: 44:82:96:43:ec:90:ce:d8:5a:49:08:05:4e:4b:d4: 3e:15:4c:cf:e4:5b:87:d8:d5:37:60:d5:ac:9f:e0: d3:15:45:19:0a:4a:48:3d:91:b9:19:59:3a:41:3b: 56:07:b7:15:44:3d:d5:5d:b5:c4:5b:30:4f:2e:6e: 96:d2:b2:fc:5e:ca:f3:6f:0e:72:ac:ba:e3:34:a4: 96:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:38:27:4D:4E:36:16:02:04:14:C6:78:47:F1:53:A2:58:05:B6:85 X509v3 Authority Key Identifier: keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:47:a0:99:ff:73:73:6a:31:6f:65:d3:8c:3d:3d:2b:c7:d8: 3e:25:fd:40:3e:50:d2:5d:b8:e4:27:b1:67:0c:4d:58:c0:5e: 53:30:45:0d:a5:83:c5:cc:30:d7:8c:4e:1c:06:a8:90:7d:9a: 87:fe:dc:30:da:9a:8b:92:88:d9:05:af:a5:e4:59:92:e5:2e: c2:7e:24:d8:ef:f4:37:42:95:a1:11:91:f3:b4:d8:bd:50:f6: 1a:31:d8:de:c2:da:58:3d:c4:f1:3e:3f:5a:ce:d7:5e:14:be: 3d:b7:1a:61:3b:e6:b5:52:e6:8e:93:f3:63:be:65:11:fb:dc: ef:b6:3b:0a:15:ca:01:bc:70:87:b7:3d:79:8a:72:f5:f4:e5: fb:59:75:08:b0:87:60:43:c9:56:14:24:b4:50:3b:fa:bd:62: 5c:57:92:f2:9b:f5:19:75:97:16:43:ee:4f:45:76:04:fd:86: f0:c1:8e:df:4f:ef:1b:43:e8:b1:21:e7:f7:fa:24:70:93:2f: dc:25:12:71:f8:99:bf:04:72:f0:5a:02:47:60:56:91:b6:d3: 6b:ad:53:81:8c:2a:49:81:bd:68:43:ca:b7:d8:90:0d:7a:71: 35:89:ad:67:95:53:d6:fd:6e:c9:7a:84:2a:c7:a6:d4:31:b4: 31:3c:b5:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OTExMTAvBgNVBAUTKDRDMjY5OUQyMTNERDVENTk5QjBFQzBFNDYzQjk0ODRG REIyMkY0MjcwHhcNMjYxMDAyMjAyMDQ4WhcNMjYxMDA5MjAyMDQ4WjAYMRYwFAYD VQQDEw02YWMwMTIyMS03NWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jcEsJmMCcAsianAtBQpg3V6F7myC61Kg4hg+AkrSsJwZuaOkYCQhVt3r9Bj /q7JCkLBkxwliExOX2D5+N1aVTqskiO3ZnLux1hFEUcbjqOycbfqw2HCE+p4A0SX WtsJHOvHqLgSgVV9W5OLOj0ck7YIqlgWqEBKJim4E1qJlbHfj0Zjz9N3KBpja3cO jSAIGx8KqWZI8B4wmDgWVBRhnKiC7+BxFtjiKfMgTaIq6lG8piREgpZD7JDO2FpJ CAVOS9Q+FUzP5FuH2NU3YNWsn+DTFUUZCkpIPZG5GVk6QTtWB7cVRD3VXbXEWzBP Lm6W0rL8Xsrzbw5yrLrjNKSWNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQ4J01O NhYCBBTGeEfxU6JYBbaFMB8GA1UdIwQYMBaAFEwmmdIT3V1Zmw7A5GO5SE/bIvQn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5MS83QzdCMUY2NkMz NUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhWbWJEc0RrWTdsSVQ5c2k5 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDYVowaFBkWFZtYkRzRGtZN2xJVDlzaTlDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5MS83QzdCMUY2NkMzNUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhW bWJEc0RrWTdsSVQ5c2k5Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnUegmf9zc2oxb2XTjD09K8fYPiX9QD5Q0l245CexZwxNWMBeUzBFDaWDxcww 14xOHAaokH2ah/7cMNqai5KI2QWvpeRZkuUuwn4k2O/0N0KVoRGR87TYvVD2GjHY 3sLaWD3E8T4/Ws7XXhS+PbcaYTvmtVLmjpPzY75lEfvc77Y7ChXKAbxwh7c9eYpy 9fTl+1l1CLCHYEPJVhQktFA7+r1iXFeS8pv1GXWXFkPuT0V2BP2G8MGO30/vG0Po sSHn9/okcJMv3CUScfiZvwRy8FoCR2BWkbbTa61TgYwqSYG9aEPKt9iQDXpxNYmt Z5VT1v1uyXqEKsem1DG0MTy1vQ== -----END CERTIFICATE-----Generated at Sun Oct 4 17:16:27 2026 by rpki-client