$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: ofRDKJkL3UyNgEWE37cIrvN/jEex35HnOLCdgX/KQSQ= Subject key identifier: 99:E8:78:E7:ED:B7:4C:CB:98:AC:9E:75:C0:8C:C8:BE:91:A6:75:9F Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 35CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 35A1 Signing time: Tue 22 Sep 2026 14:29:39 +0000 Manifest this update: Tue 22 Sep 2026 14:29:39 +0000 Manifest next update: Tue 29 Sep 2026 14:29:39 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: HXCWpytylw1w5vs9N1kzdLcAlZgP6fvs1nHi99hYJ2Y=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13772 (0x35cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Sep 22 14:29:39 2026 GMT Not After : Sep 29 14:29:39 2026 GMT Subject: CN=6ab290d3-a339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:1f:a1:80:00:47:77:09:db:4f:27:cd:b6: a3:1c:79:72:21:64:93:38:c3:26:5b:4e:b7:c1:98: b9:53:3c:d6:e4:9e:45:e3:70:d2:b4:f5:5e:ed:03: e7:a6:3b:ab:28:67:2f:56:d9:c1:fa:f0:bb:0c:79: d7:e4:69:52:1b:81:d0:9e:7b:58:8f:33:c2:ec:9a: b6:9f:cb:86:48:2b:de:93:96:3d:45:a2:89:0a:cc: ec:5d:26:e4:fb:ab:46:7e:f5:56:af:63:24:31:d2: 32:2f:cc:5c:56:a8:08:4f:8c:56:71:32:76:0d:33: fc:6c:1a:03:17:db:73:e1:9c:09:83:15:d2:ff:31: 23:8d:19:f2:08:27:c1:65:8d:b9:db:d6:1d:ce:af: 5a:21:8c:f0:ff:40:36:be:29:77:2a:22:6c:a4:6e: 12:36:39:e9:96:a8:b2:0b:5f:94:eb:e9:96:41:e0: 13:82:3d:22:2d:c6:be:47:c9:7a:d3:8a:99:ab:ae: c4:ef:31:c5:96:1e:ff:be:8f:1b:37:5d:22:6f:70: 56:56:0b:a1:8b:02:2b:cb:2a:e2:3d:e6:e8:c7:12: 17:ab:f4:02:12:9d:3e:44:68:b6:b9:10:7b:fc:12: 0a:c8:3d:39:f5:3e:f2:21:85:27:31:0d:1f:57:44: f9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E8:78:E7:ED:B7:4C:CB:98:AC:9E:75:C0:8C:C8:BE:91:A6:75:9F X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ca:ad:e6:76:04:e2:43:6f:71:2a:11:18:3f:0c:45:fe:07: 45:c5:b5:93:89:ad:b5:b1:49:99:ae:7c:25:9e:5f:04:48:16: c9:67:25:02:cb:c9:34:fa:d8:05:a5:48:f8:61:81:6b:3f:71: 6d:1b:82:37:b4:3b:f0:30:ca:e0:86:e3:e7:75:2b:8f:53:eb: 22:70:c2:68:ee:c2:cc:00:0c:d4:18:6f:94:ec:6a:5a:23:78: d8:48:dc:23:f5:69:a0:42:14:86:48:48:ba:09:f9:46:f0:3e: 1e:a1:43:5c:23:c6:ed:ae:ae:e0:f8:28:1d:4c:47:13:66:c2: 57:cb:c2:d7:2a:cf:c3:7a:77:80:c2:a3:1d:23:73:79:46:8a: 20:6c:c4:aa:1d:73:74:d3:80:3b:ef:ba:57:2f:93:5a:ea:da: 6f:63:06:42:e9:78:87:2f:11:f8:ca:30:75:0e:9e:63:f4:f2: 1e:5f:ed:23:36:3c:fe:7e:23:88:54:9d:2d:50:2b:cb:4f:eb: d1:b9:e0:84:af:f0:36:05:e2:e4:3a:ac:c6:b8:86:cc:b9:14: 49:44:09:2d:36:ea:29:20:c8:ec:b9:1d:29:12:97:80:c6:86: df:98:1c:a1:4e:b8:a4:e2:73:25:4b:24:03:3e:53:1f:f0:26: 27:9d:34:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjYwOTIyMTQyOTM5WhcNMjYwOTI5MTQyOTM5WjAYMRYwFAYD VQQDEw02YWIyOTBkMy1hMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSQfoYAAR3cJ208nzbajHHlyIWSTOMMmW063wZi5UzzW5J5F43DStPVe7QPn pjurKGcvVtnB+vC7DHnX5GlSG4HQnntYjzPC7Jq2n8uGSCvek5Y9RaKJCszsXSbk +6tGfvVWr2MkMdIyL8xcVqgIT4xWcTJ2DTP8bBoDF9tz4ZwJgxXS/zEjjRnyCCfB ZY2529Ydzq9aIYzw/0A2vil3KiJspG4SNjnplqiyC1+U6+mWQeATgj0iLca+R8l6 04qZq67E7zHFlh7/vo8bN10ib3BWVguhiwIryyriPeboxxIXq/QCEp0+RGi2uRB7 /BIKyD059T7yIYUnMQ0fV0T5tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnoeOft t0zLmKyedcCMyL6RpnWfMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHcqt5nYE4kNvcSoRGD8MRf4HRcW1k4mttbFJma58JZ5fBEgWyWclAsvJNPrY BaVI+GGBaz9xbRuCN7Q78DDK4Ibj53Urj1PrInDCaO7CzAAM1BhvlOxqWiN42Ejc I/VpoEIUhkhIugn5RvA+HqFDXCPG7a6u4PgoHUxHE2bCV8vC1yrPw3p3gMKjHSNz eUaKIGzEqh1zdNOAO++6Vy+TWurab2MGQul4hy8R+MowdQ6eY/TyHl/tIzY8/n4j iFSdLVAry0/r0bnghK/wNgXi5DqsxriGzLkUSUQJLTbqKSDI7LkdKRKXgMaG35gc oU64pOJzJUskAz5TH/AmJ500sw== -----END CERTIFICATE-----Generated at Thu Sep 24 09:28:56 2026 by rpki-client