$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft File: tkuBBCq0EWB9hgdv78nllia7iBY.mft (raw, json) Hash identifier: dtJ4qRg77rJOH5C+8WPo5gIv9p5WqlxZ+2I5yuLdP98= Subject key identifier: 7A:C1:18:AD:2B:36:CE:80:B4:B7:CE:AA:FD:65:07:82:47:75:B5:2F Authority key identifier: B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 Certificate issuer: /CN=A91D3037/serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft Manifest number: D0 Signing time: Mon 05 Oct 2026 07:11:13 +0000 Manifest this update: Mon 05 Oct 2026 07:11:13 +0000 Manifest next update: Mon 12 Oct 2026 07:11:13 +0000 Files and hashes: 1: tkuBBCq0EWB9hgdv78nllia7iBY.crl (hash: tFUFTh3H+pWmQbM52R8DfzoorcYodUFauEZNmkWYsbc=) 2: 0A16B10E8EE011F09A1AE72BC4F9AE02.roa (hash: 61ipbLIz+I5JBb+kwozvMx9Usvv22ZYLA1pmuD/JkSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3037, serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816 Validity Not Before: Oct 5 07:11:13 2026 GMT Not After : Oct 12 07:11:13 2026 GMT Subject: CN=6ac34d91-1106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:96:bc:93:14:d3:1c:14:9c:30:ef:fe:be:00: 7e:1d:49:0b:7a:15:85:4a:54:7e:74:57:ec:a1:e3: fd:11:37:b1:44:57:63:43:1c:15:ea:fa:56:77:54: 9f:4c:04:33:e4:df:5b:73:c6:46:b6:28:f7:7e:22: 0f:fe:df:08:4c:6c:64:dd:ff:68:4b:aa:3a:9d:87: f0:b3:91:ef:ea:ed:e7:c5:43:1e:4b:29:a7:c0:83: 34:0e:77:7f:51:7d:91:47:b8:70:ba:9f:19:d2:7d: 34:9b:c9:51:13:15:be:92:6c:90:db:e0:ad:8c:75: 24:d6:29:a0:1e:7f:28:e3:cc:c5:08:78:55:47:b9: 95:6c:7c:15:e2:94:70:ca:9e:48:5c:0b:44:13:ac: bd:85:66:95:e5:05:0f:85:39:3a:7e:94:2a:4f:54: f0:ac:75:4c:02:db:07:65:e6:e9:39:4d:fc:c1:80: 19:b0:6c:1d:f1:90:34:97:c9:88:05:08:7d:00:3a: 96:3c:dc:de:67:a0:6a:d5:55:a3:6c:78:20:be:70: c5:5c:4f:8d:84:17:33:49:da:4d:31:a2:85:41:f3: 71:41:51:13:e1:96:ec:d9:ff:8b:e3:e8:e2:1b:df: bf:fd:13:8b:73:33:e0:c7:20:51:d5:0a:c0:0e:04: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C1:18:AD:2B:36:CE:80:B4:B7:CE:AA:FD:65:07:82:47:75:B5:2F X509v3 Authority Key Identifier: keyid:B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:47:18:f6:47:c0:8e:ea:a4:ee:6c:e6:fe:ea:c5:a4:7f:6d: 42:d1:e9:af:74:51:72:8b:90:83:bc:05:ff:bb:e9:8a:83:0e: 5d:2e:36:29:81:68:1a:80:ff:81:2a:ca:ff:6a:22:f4:82:61: 97:5e:6d:37:97:8b:5e:67:00:df:7d:16:fd:4a:04:64:82:a1: 6f:67:d7:54:28:43:0f:bb:7b:13:04:a1:72:aa:e2:19:c0:f1: 03:86:aa:fa:d0:c8:04:f6:0f:21:86:65:f5:2e:9a:17:2e:ac: 9d:7a:a8:ca:95:89:73:aa:ee:97:08:ce:f5:4f:59:3d:98:e6: 0a:f2:c8:1e:0c:39:ca:39:35:e6:cd:0e:ec:9a:b6:d4:65:5e: 65:8e:4f:cb:4e:be:c7:f4:66:bc:2d:c0:12:f0:f6:7f:94:d6: 96:da:15:9a:10:1b:ca:9d:80:1b:b7:ff:20:c1:e2:61:23:8a: 99:1d:11:0b:49:a8:62:4d:ed:c9:fa:2c:93:33:23:62:24:92: eb:90:ba:13:d2:eb:20:16:07:c1:19:61:0b:9c:f0:fa:7f:7c: 90:f5:6d:ce:3c:96:fb:13:5e:ec:73:f0:bf:87:ba:00:95:4a: 6a:70:88:88:b1:d5:fc:ad:27:e8:c1:e4:ee:13:a1:80:f8:0e: d8:9a:86:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwMzcxMTAvBgNVBAUTKEI2NEI4MTA0MkFCNDExNjA3RDg2MDc2RkVGQzlFNTk2 MjZCQjg4MTYwHhcNMjYxMDA1MDcxMTEzWhcNMjYxMDEyMDcxMTEzWjAYMRYwFAYD VQQDEw02YWMzNGQ5MS0xMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiJa8kxTTHBScMO/+vgB+HUkLehWFSlR+dFfsoeP9ETexRFdjQxwV6vpWd1Sf TAQz5N9bc8ZGtij3fiIP/t8ITGxk3f9oS6o6nYfws5Hv6u3nxUMeSymnwIM0Dnd/ UX2RR7hwup8Z0n00m8lRExW+kmyQ2+CtjHUk1imgHn8o48zFCHhVR7mVbHwV4pRw yp5IXAtEE6y9hWaV5QUPhTk6fpQqT1TwrHVMAtsHZebpOU38wYAZsGwd8ZA0l8mI BQh9ADqWPNzeZ6Bq1VWjbHggvnDFXE+NhBczSdpNMaKFQfNxQVET4Zbs2f+L4+ji G9+//ROLczPgxyBR1QrADgSMuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrBGK0r Ns6AtLfOqv1lB4JHdbUvMB8GA1UdIwQYMBaAFLZLgQQqtBFgfYYHb+/J5ZYmu4gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzAzNy84QjhERTI3RThF REMxMUYwOTg4MEM0NzhDNEY5QUUwMi90a3VCQkNxMEVXQjloZ2R2NzhubGxpYTdp QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrdUJCQ3EwRVdCOWhnZHY3OG5sbGlhN2lCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzAzNy84QjhERTI3RThFREMxMUYwOTg4MEM0NzhDNEY5QUUwMi90a3VCQkNxMEVX QjloZ2R2NzhubGxpYTdpQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlEcY9kfAjuqk7mzm/urFpH9tQtHpr3RRcouQg7wF/7vpioMOXS42KYFoGoD/ gSrK/2oi9IJhl15tN5eLXmcA330W/UoEZIKhb2fXVChDD7t7EwShcqriGcDxA4aq +tDIBPYPIYZl9S6aFy6snXqoypWJc6rulwjO9U9ZPZjmCvLIHgw5yjk15s0O7Jq2 1GVeZY5Py06+x/RmvC3AEvD2f5TWltoVmhAbyp2AG7f/IMHiYSOKmR0RC0moYk3t yfoskzMjYiSS65C6E9LrIBYHwRlhC5zw+n98kPVtzjyW+xNe7HPwv4e6AJVKanCI iLHV/K0n6MHk7hOhgPgO2JqG1g== -----END CERTIFICATE-----Generated at Tue Oct 6 22:12:16 2026 by rpki-client