$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft File: tkP-swMnQhSPOvnDU5M41VSTcig.mft (raw, json) Hash identifier: HcesfwtxNZ9P+EpQNLO/pE9SPl9wfYMcYFSu9x9/WqE= Subject key identifier: D1:31:B0:3D:F2:0A:37:4B:60:59:0B:50:3F:96:27:35:66:94:7C:28 Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 Certificate issuer: /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft Manifest number: C2 Signing time: Sun 25 Oct 2026 07:13:48 +0000 Manifest this update: Sun 25 Oct 2026 07:13:47 +0000 Manifest next update: Sun 01 Nov 2026 07:13:47 +0000 Files and hashes: 1: tkP-swMnQhSPOvnDU5M41VSTcig.crl (hash: CAVa2rkPzPzj53MXI7Xl+1iL+/VM6FSBU8JWf9X6eBM=) 2: 341BBBECA99411F093BBAA15C4F9AE02.roa (hash: pkkx4zZGCNXTpRTSxpbchOTdZve5NBSRW5RTVv6mqwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 07:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Validity Not Before: Oct 25 07:13:47 2026 GMT Not After : Nov 1 07:13:47 2026 GMT Subject: CN=6addac2c-ea4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:03:93:e5:65:d8:f0:d5:f6:74:cf:3a:83: 9e:38:00:82:91:29:29:1c:43:8b:98:a4:8a:a8:7c: e0:df:14:6c:bb:1f:31:5f:97:f5:7a:46:0a:4b:b2: f1:2a:6e:0d:d6:73:e3:ae:46:bf:11:b5:ef:d5:21: 3a:e1:63:aa:49:c5:ec:46:c0:e7:27:b3:e3:15:94: f1:9b:48:e5:aa:df:24:31:8e:1b:b0:c1:fa:27:91: 09:f1:76:f2:b0:ad:fe:a0:15:eb:3e:80:3b:1c:43: 2f:25:21:0c:c9:2e:b9:34:ab:2a:33:03:d5:3b:6d: e3:5f:4d:e6:a4:09:ba:1b:1e:30:51:72:56:a5:e1: 08:10:2f:2c:67:d1:81:80:22:96:93:d2:02:92:8a: 73:17:c2:cf:5b:f1:c9:ed:01:12:d1:a7:c0:d8:1e: 2b:8b:6f:02:72:42:1f:40:5a:5f:e7:9b:2a:b3:26: 6c:89:02:a9:9d:67:36:37:6e:19:0d:9a:43:d3:9e: 5e:7d:25:b4:f0:29:11:54:f2:15:50:a0:15:4e:43: bf:e5:cc:f4:52:ac:3e:cd:9e:82:47:b2:39:78:43: d6:fb:76:78:e8:2a:f9:2a:25:e6:a9:d0:a2:0f:60: f1:4e:05:58:09:53:0c:c2:47:1a:bd:f2:c6:46:33: da:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:31:B0:3D:F2:0A:37:4B:60:59:0B:50:3F:96:27:35:66:94:7C:28 X509v3 Authority Key Identifier: keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:57:36:a4:0d:f5:cc:17:7a:e0:b8:e7:4f:56:8b:a8:f4:2e: 1f:3d:89:81:38:b4:c4:f4:9d:14:81:c5:2f:bc:78:79:55:96: 7e:55:56:66:b1:2b:52:a6:fa:32:57:7f:84:21:43:1b:de:4e: 8f:f1:5f:12:fc:9c:ec:11:4b:aa:73:b9:99:0d:12:c0:57:d3: 1f:ba:cc:5f:be:5c:e4:7a:65:3f:c4:40:74:e2:3d:46:a0:53: 0e:55:bd:dc:17:d1:3d:c2:d8:d2:99:81:67:4d:0e:d3:66:52: 9c:47:a4:a9:13:6c:c6:a9:92:34:e1:13:4f:40:a4:d5:0d:28: 35:46:a3:00:7c:ef:7c:48:78:5e:67:12:cd:2b:93:0d:8d:88: b2:c1:61:03:25:65:8a:ee:5d:38:0f:06:33:bf:a7:31:15:bc: 45:15:ac:b3:87:3c:c9:e2:b9:19:6a:03:53:f1:e3:f5:f0:22: 88:f5:c8:5d:46:26:3b:34:d1:54:14:54:7f:9c:00:4f:78:87: 6d:73:1d:78:b0:4c:77:5d:c8:13:96:39:95:8b:b9:8d:fd:d0: 36:77:9f:92:c0:e6:62:dd:5f:83:75:01:14:23:5d:81:cc:d2: d5:60:f0:41:5a:29:66:d4:ab:87:97:7f:a1:b9:d8:9a:b4:ed: 78:35:72:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwREUxMTAvBgNVBAUTKEI2NDNGRUIzMDMyNzQyMTQ4RjNBRjlDMzUzOTMzOEQ1 NTQ5MzcyMjgwHhcNMjYxMDI1MDcxMzQ3WhcNMjYxMTAxMDcxMzQ3WjAYMRYwFAYD VQQDEw02YWRkYWMyYy1lYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRIDk+Vl2PDV9nTPOoOeOACCkSkpHEOLmKSKqHzg3xRsux8xX5f1ekYKS7Lx Km4N1nPjrka/EbXv1SE64WOqScXsRsDnJ7PjFZTxm0jlqt8kMY4bsMH6J5EJ8Xby sK3+oBXrPoA7HEMvJSEMyS65NKsqMwPVO23jX03mpAm6Gx4wUXJWpeEIEC8sZ9GB gCKWk9ICkopzF8LPW/HJ7QES0afA2B4ri28CckIfQFpf55sqsyZsiQKpnWc2N24Z DZpD055efSW08CkRVPIVUKAVTkO/5cz0Uqw+zZ6CR7I5eEPW+3Z46Cr5KiXmqdCi D2DxTgVYCVMMwkcavfLGRjPadQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNExsD3y CjdLYFkLUD+WJzVmlHwoMB8GA1UdIwQYMBaAFLZD/rMDJ0IUjzr5w1OTONVUk3Io MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDBERS80Rjc2OUQ1OEE5 OEYxMUYwQjFGQTUwNjZDNEY5QUUwMi90a1Atc3dNblFoU1BPdm5EVTVNNDFWU1Rj aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RrUC1zd01uUWhTUE92bkRVNU00MVZTVGNpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDBERS80Rjc2OUQ1OEE5OEYxMUYwQjFGQTUwNjZDNEY5QUUwMi90a1Atc3dNblFo U1BPdm5EVTVNNDFWU1RjaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPVc2pA31zBd64LjnT1aLqPQuHz2JgTi0xPSdFIHFL7x4eVWWflVWZrErUqb6 Mld/hCFDG95Oj/FfEvyc7BFLqnO5mQ0SwFfTH7rMX75c5HplP8RAdOI9RqBTDlW9 3BfRPcLY0pmBZ00O02ZSnEekqRNsxqmSNOETT0Ck1Q0oNUajAHzvfEh4XmcSzSuT DY2IssFhAyVliu5dOA8GM7+nMRW8RRWss4c8yeK5GWoDU/Hj9fAiiPXIXUYmOzTR VBRUf5wAT3iHbXMdeLBMd13IE5Y5lYu5jf3QNnefksDmYt1fg3UBFCNdgczS1WDw QVopZtSrh5d/obnYmrTteDVyVQ== -----END CERTIFICATE-----Generated at Mon Oct 26 01:44:48 2026 by rpki-client