$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: VvRHtJNN5IVzqRq3GcFNBZPKQxbZNdPBjAE++pgmMco= Subject key identifier: 26:96:A9:6E:3B:F9:08:24:8B:76:6D:34:A6:21:07:21:F8:05:78:A0 Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 0510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0E21 Signing time: Fri 04 Sep 2026 20:06:08 +0000 Manifest this update: Fri 04 Sep 2026 20:06:08 +0000 Manifest next update: Fri 11 Sep 2026 20:06:08 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: 7U9QOy1lCCK7Iaedbee3z6E41ULI9YkqSPlPYUHYVwc=) 2: A1B8D10EF5C511EF83B21246C4F9AE02.roa (hash: V07yp4azfzM5YFQd3DFJvRMzAViuDBC6g0jJfgu6wvI=) 3: 8E4BBF50F5C511EF89110646C4F9AE02.roa (hash: 1qbYu5KRZI3rxH4kzvhF/miC5oW7IXAqReX/2/VUDaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1296 (0x510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Sep 4 20:06:08 2026 GMT Not After : Sep 11 20:06:08 2026 GMT Subject: CN=6a9b24b0-f240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:6b:bb:50:76:ff:34:3b:69:c5:ff:61:d6: 44:e9:50:f3:e4:eb:34:4b:10:b6:7f:84:51:d1:b7: 07:dd:ac:2c:14:73:18:bf:70:db:fc:b2:2e:b4:24: 65:79:20:24:95:e1:73:d4:04:26:20:da:d2:25:5c: 8e:42:35:05:4f:e3:96:3d:b8:55:ea:df:1b:d2:98: 56:86:f3:12:4d:8c:1a:3b:f3:0f:e1:aa:2f:bd:ea: 2d:a4:0b:ae:c9:ea:38:62:15:97:45:f2:f8:e5:cb: fa:bc:27:63:b9:76:6c:d3:da:00:5c:db:fa:06:7d: 50:67:45:e1:05:dd:fe:d9:fa:b8:ab:d9:d2:cf:da: 9a:05:f8:a6:1b:73:c2:c0:62:1c:ea:a9:f7:63:e4: 2a:db:8d:f6:2b:84:68:13:f9:a1:86:d0:90:20:e4: 4b:02:aa:49:94:61:8f:0c:fe:00:7b:68:e5:60:e8: f3:9d:10:9c:63:be:f3:47:51:be:9e:dd:7c:86:a9: 00:9a:ac:a9:96:08:7a:03:9b:ff:d5:d4:98:a4:f1: b9:f3:fa:40:db:6d:92:9c:d2:32:32:d5:eb:54:e1: ed:0a:42:f4:f4:04:26:33:7f:33:ad:e5:a9:f1:dc: 45:55:00:68:b8:4a:b6:55:ae:62:16:54:1d:84:da: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:96:A9:6E:3B:F9:08:24:8B:76:6D:34:A6:21:07:21:F8:05:78:A0 X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c9:13:e2:98:2f:23:5a:39:8e:85:fc:c7:97:8a:53:f5:8c: 8e:ec:f1:05:bd:20:33:d6:4f:5a:d3:85:98:73:f2:db:46:a6: 3a:ab:d7:b0:6b:b7:7a:18:33:91:2d:1a:42:18:91:ef:a5:00: 6b:fb:84:1d:7d:2b:9d:6b:86:7a:82:6d:f0:e6:c3:2b:39:99: 0d:c0:7d:23:29:8d:0c:9b:30:0f:c0:8e:68:4f:df:61:9c:6c: 35:d5:70:68:eb:6f:31:8a:44:bf:f1:71:00:d3:75:d5:fe:f8: a7:8d:41:99:c4:ce:95:51:2e:4f:f1:b6:28:c9:1f:3b:ab:7a: 3f:24:34:0c:4c:9c:53:d4:e2:22:f2:10:5e:ba:6d:16:6a:30: f0:f8:8a:28:a3:5d:ab:ba:e1:11:8e:8e:2d:32:e5:ff:44:d0: b6:47:82:b9:22:7d:93:e1:dc:59:f9:36:0e:b3:a7:95:50:37: b6:ca:19:41:e3:9a:51:32:c1:e1:3a:76:4f:f7:42:fa:49:02: 9d:d4:86:91:fa:30:2c:d8:26:48:4e:77:3f:7d:3d:c5:ce:90: d9:6b:74:ff:c1:fe:fe:f7:11:99:d5:32:4c:b3:7e:9d:6b:31: ee:09:32:97:cb:5b:0b:0c:89:cd:c1:77:32:f7:87:ed:56:00: 01:1c:ef:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjYwOTA0MjAwNjA4WhcNMjYwOTExMjAwNjA4WjAYMRYwFAYD VQQDEw02YTliMjRiMC1mMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZVru1B2/zQ7acX/YdZE6VDz5Os0SxC2f4RR0bcH3awsFHMYv3Db/LIutCRl eSAkleFz1AQmINrSJVyOQjUFT+OWPbhV6t8b0phWhvMSTYwaO/MP4aovveotpAuu yeo4YhWXRfL45cv6vCdjuXZs09oAXNv6Bn1QZ0XhBd3+2fq4q9nSz9qaBfimG3PC wGIc6qn3Y+Qq2432K4RoE/mhhtCQIORLAqpJlGGPDP4Ae2jlYOjznRCcY77zR1G+ nt18hqkAmqyplgh6A5v/1dSYpPG58/pA222SnNIyMtXrVOHtCkL09AQmM38zreWp 8dxFVQBouEq2Va5iFlQdhNqmzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaWqW47 +Qgki3ZtNKYhByH4BXigMB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeMkT4pgvI1o5joX8x5eKU/WMjuzxBb0gM9ZPWtOFmHPy20amOqvXsGu3ehgz kS0aQhiR76UAa/uEHX0rnWuGeoJt8ObDKzmZDcB9IymNDJswD8COaE/fYZxsNdVw aOtvMYpEv/FxANN11f74p41BmcTOlVEuT/G2KMkfO6t6PyQ0DEycU9TiIvIQXrpt Fmow8PiKKKNdq7rhEY6OLTLl/0TQtkeCuSJ9k+HcWfk2DrOnlVA3tsoZQeOaUTLB 4Tp2T/dC+kkCndSGkfowLNgmSE53P309xc6Q2Wt0/8H+/vcRmdUyTLN+nWsx7gky l8tbCwyJzcF3MveH7VYAARzv2w== -----END CERTIFICATE-----Generated at Sat Sep 5 11:04:13 2026 by rpki-client