$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: yEHkSI+ou0I4krdTvrAlmkROjGeyqQsaGwqe+Nm6dGk= Subject key identifier: 2F:8E:24:CC:C9:CA:48:DE:13:14:E5:5A:EB:F1:63:F3:A8:9C:FE:3A Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 052F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0E5A Signing time: Wed 28 Oct 2026 20:21:26 +0000 Manifest this update: Wed 28 Oct 2026 20:21:25 +0000 Manifest next update: Wed 04 Nov 2026 20:21:25 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: YmptkdeFTFCW9ztiO6aLasXnCsWmBWuyvrxFQQkQOkE=) 2: 8E4BBF50F5C511EF89110646C4F9AE02.roa (hash: SV52PCZ2QLtu2V0EGB8QTkXhOJlyBxhJjpVrFVWrla4=) 3: A1B8D10EF5C511EF83B21246C4F9AE02.roa (hash: mXAMy97Aa670ZhM2hALSQp3avmcppB/5FPkm9qaohYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 20:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1327 (0x52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Oct 28 20:21:25 2026 GMT Not After : Nov 4 20:21:25 2026 GMT Subject: CN=6ae25945-d3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f4:5e:25:77:b0:cd:11:eb:39:9b:00:97:f4: a8:97:39:98:7e:33:08:c1:71:df:48:b5:26:8c:a1: 43:0e:fc:e7:44:b4:48:fd:18:16:c8:9d:95:38:31: f8:0c:11:05:6f:4c:6f:1c:1a:a8:15:80:73:1c:59: 8a:97:75:64:9a:8d:c9:99:ee:5e:c8:a3:e6:9d:72: 15:29:d2:a2:7d:a2:57:91:e3:5f:9b:1d:9c:26:cc: d4:44:75:e2:19:5a:cf:9c:9a:76:33:2c:e9:3b:5e: 27:48:23:56:e3:ed:fe:cd:25:46:17:a4:3c:cd:fb: 83:41:a8:43:0d:00:b2:53:46:39:20:ca:66:32:cb: de:5f:19:c4:85:ae:ad:dd:da:55:ef:05:68:09:8f: 6c:c9:04:68:ee:3d:42:85:61:53:ce:98:fe:75:8f: 50:fa:09:17:b8:12:2e:7e:a4:c6:35:ed:1d:ad:71: d0:a5:dd:5e:3e:a5:1b:37:53:6a:a9:88:86:b0:62: 43:3d:d9:a7:39:65:59:db:25:46:db:8e:84:74:3b: 23:61:5c:6c:ec:7f:52:8f:b3:1a:22:9e:d6:f2:a0: 27:31:c9:87:83:57:0c:da:22:cd:b6:a4:53:a3:59: c7:87:67:a6:f8:55:64:5e:0e:dc:20:b6:9a:76:53: fe:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8E:24:CC:C9:CA:48:DE:13:14:E5:5A:EB:F1:63:F3:A8:9C:FE:3A X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:53:7c:d7:97:ec:c6:57:09:3e:77:07:07:61:23:67:03:42: 73:59:10:3b:6a:b2:43:0f:c4:cb:12:28:c8:47:94:1b:d2:1d: bd:4f:c6:b3:98:4f:81:54:98:a0:5a:85:16:06:e9:e3:f5:58: 24:23:10:81:5b:31:ed:e0:38:12:57:b7:24:37:63:08:5d:fe: 78:bc:b6:d2:8b:c1:e8:6e:fd:e7:b6:ef:d4:20:50:52:f8:e0: cd:b4:c4:f0:f2:ec:08:79:35:46:5f:9a:ee:23:e3:ca:1d:f5: df:c2:25:8a:4c:a0:3e:44:65:3c:b1:3e:9b:6b:cc:8f:28:ce: 70:7c:2c:85:1d:54:0c:ae:35:7b:fb:41:7f:a1:54:84:01:1c: a1:00:e0:f2:f7:21:d6:4c:53:cd:7b:3b:1f:ca:c3:28:91:9c: a1:80:8c:c7:96:be:41:98:71:2a:b6:3f:56:2c:fb:b6:38:7a: cd:1e:4d:5c:7d:02:ea:6a:2b:4f:70:f2:2a:42:57:4b:a4:e5: 7f:1d:2b:4b:b7:08:ad:8f:b9:fa:42:46:05:b3:37:66:84:83: d9:1b:32:53:f1:7b:e8:76:c4:f1:3c:0f:67:15:cf:f2:0f:82: 66:9b:1d:31:94:fe:17:ba:eb:14:c0:ce:11:31:b4:8d:31:3d: 5a:92:97:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjYxMDI4MjAyMTI1WhcNMjYxMTA0MjAyMTI1WjAYMRYwFAYD VQQDEw02YWUyNTk0NS1kM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/ReJXewzRHrOZsAl/SolzmYfjMIwXHfSLUmjKFDDvznRLRI/RgWyJ2VODH4 DBEFb0xvHBqoFYBzHFmKl3Vkmo3Jme5eyKPmnXIVKdKifaJXkeNfmx2cJszURHXi GVrPnJp2MyzpO14nSCNW4+3+zSVGF6Q8zfuDQahDDQCyU0Y5IMpmMsveXxnEha6t 3dpV7wVoCY9syQRo7j1ChWFTzpj+dY9Q+gkXuBIufqTGNe0drXHQpd1ePqUbN1Nq qYiGsGJDPdmnOWVZ2yVG246EdDsjYVxs7H9Sj7MaIp7W8qAnMcmHg1cM2iLNtqRT o1nHh2em+FVkXg7cILaadlP+TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+OJMzJ ykjeExTlWuvxY/OonP46MB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm1N815fsxlcJPncHB2EjZwNCc1kQO2qyQw/EyxIoyEeUG9IdvU/Gs5hPgVSY oFqFFgbp4/VYJCMQgVsx7eA4Ele3JDdjCF3+eLy20ovB6G7957bv1CBQUvjgzbTE 8PLsCHk1Rl+a7iPjyh3138IlikygPkRlPLE+m2vMjyjOcHwshR1UDK41e/tBf6FU hAEcoQDg8vch1kxTzXs7H8rDKJGcoYCMx5a+QZhxKrY/Viz7tjh6zR5NXH0C6mor T3DyKkJXS6Tlfx0rS7cIrY+5+kJGBbM3ZoSD2RsyU/F76HbE8TwPZxXP8g+CZpsd MZT+F7rrFMDOETG0jTE9WpKXUw== -----END CERTIFICATE-----Generated at Thu Oct 29 17:05:41 2026 by rpki-client