$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft File: TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json) Hash identifier: psxwsmFG9BwXk7P71t/m110S8fX5L24NObhaniUZJPs= Subject key identifier: 84:46:D4:80:DC:DE:28:C5:8B:A0:30:46:FB:9A:21:B0:64:85:A2:8C Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 Certificate issuer: /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft Manifest number: 0159 Signing time: Mon 05 Oct 2026 05:33:06 +0000 Manifest this update: Mon 05 Oct 2026 05:33:05 +0000 Manifest next update: Mon 12 Oct 2026 05:33:05 +0000 Files and hashes: 1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: Ox41QeV9/HIJXVUiI/utlUOYVVIR7CvOf/lZeypd/rA=) 2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 05:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Validity Not Before: Oct 5 05:33:05 2026 GMT Not After : Oct 12 05:33:05 2026 GMT Subject: CN=6ac33692-87d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:f0:aa:7d:6f:be:9b:47:67:aa:7e:da:3b: 2e:55:94:3c:58:f5:81:2a:37:05:37:9a:97:7e:2b: 07:b8:c3:fa:d2:0c:3e:cc:85:dd:bc:5e:2d:99:5e: 57:98:a9:f7:22:08:c4:a7:2d:fb:c5:0d:5f:c7:f7: 23:93:70:45:09:74:64:71:1a:8f:58:96:dd:61:1f: 88:da:4b:91:a6:01:62:56:6a:29:c4:ba:6f:b9:cb: 9a:c2:88:0f:a0:8c:24:d6:e5:22:ab:c5:db:4a:47: 61:a5:dc:67:8c:14:bb:46:8a:d6:30:ff:87:b9:38: a4:e8:fe:6d:c3:71:c7:c2:8e:c9:7b:78:0d:38:04: a1:a6:eb:de:e2:24:3f:00:d9:92:59:b0:ae:d6:b8: 19:61:a7:6a:6b:93:76:c5:0d:97:4d:c6:fe:26:44: df:80:c5:62:18:1a:5a:bd:a6:d4:89:08:a2:70:e7: 29:13:6c:f2:f7:28:0d:4d:0f:c3:87:c5:bc:32:81: d7:54:a9:17:f9:7b:1c:30:17:f1:6d:10:5d:8c:bc: 07:ee:07:af:58:8a:43:78:82:a9:13:74:c7:a6:06: de:c3:92:86:1e:f5:c4:de:30:9e:42:c9:32:81:ee: eb:06:09:dc:ad:f5:22:e5:8b:01:fd:b1:ba:12:06: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:46:D4:80:DC:DE:28:C5:8B:A0:30:46:FB:9A:21:B0:64:85:A2:8C X509v3 Authority Key Identifier: keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:30:e0:0a:a3:6d:66:26:77:9f:2d:a5:e4:53:90:9b:df:d9: e6:96:0a:07:c3:ba:65:5e:42:82:ff:8f:4f:12:e3:ab:47:99: af:67:2d:a8:f0:96:1e:bc:64:5e:06:e4:f0:bb:48:d0:71:5c: 5d:1d:b2:7f:86:1b:6e:5a:87:ac:0f:3f:e7:17:77:09:d9:0a: 66:4e:87:9d:11:f4:4d:44:ba:3b:47:4c:19:97:2e:01:9a:7e: ba:9d:6f:1d:3e:99:86:67:41:a0:21:a5:f2:50:06:b5:e2:46: 11:a0:dd:a9:e5:14:61:bf:b1:d5:d9:08:93:44:df:11:0e:ae: 13:47:4c:6f:38:70:44:8d:b7:5c:21:96:e9:df:02:0b:07:2a: 76:c3:48:65:35:80:19:c4:22:24:34:4d:c5:c9:2f:11:f2:df: 15:75:2e:ea:39:47:94:e4:a2:fb:b1:b3:6a:4d:25:10:f0:a0: 9f:64:e3:96:1a:93:ad:6a:97:9e:a9:cc:bd:4d:18:9d:a7:6b: 2c:ee:73:2e:19:40:ef:ad:6e:dc:9d:3c:a6:87:c0:31:57:a9: 01:aa:bc:aa:62:aa:db:44:97:8f:41:db:ae:17:76:8c:46:b6: dd:db:0c:ab:af:57:e8:69:79:4d:cd:34:ce:37:2a:3a:d3:58: 34:25:8c:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyMzMxMTAvBgNVBAUTKDRFNzU5QUIyREUyNDU0NjlGODMxMUI5MjczQjU1NTM4 N0U3NTBBOTAwHhcNMjYxMDA1MDUzMzA1WhcNMjYxMDEyMDUzMzA1WjAYMRYwFAYD VQQDEw02YWMzMzY5Mi04N2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OHwqn1vvptHZ6p+2jsuVZQ8WPWBKjcFN5qXfisHuMP60gw+zIXdvF4tmV5X mKn3IgjEpy37xQ1fx/cjk3BFCXRkcRqPWJbdYR+I2kuRpgFiVmopxLpvucuawogP oIwk1uUiq8XbSkdhpdxnjBS7RorWMP+HuTik6P5tw3HHwo7Je3gNOAShpuve4iQ/ ANmSWbCu1rgZYadqa5N2xQ2XTcb+JkTfgMViGBpavabUiQiicOcpE2zy9ygNTQ/D h8W8MoHXVKkX+XscMBfxbRBdjLwH7gevWIpDeIKpE3THpgbew5KGHvXE3jCeQsky ge7rBgncrfUi5YsB/bG6EgbRFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRG1IDc 3ijFi6AwRvuaIbBkhaKMMB8GA1UdIwQYMBaAFE51mrLeJFRp+DEbknO1VTh+dQqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjIzMy8wOEYwNTI2MEIz NzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZHbjRNUnVTYzdWVk9INTFD cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuV2FzdDRrVkduNE1SdVNjN1ZWT0g1MUNwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjIzMy8wOEYwNTI2MEIzNzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZH bjRNUnVTYzdWVk9INTFDcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAATDgCqNtZiZ3ny2l5FOQm9/Z5pYKB8O6ZV5Cgv+PTxLjq0eZr2ctqPCWHrxk Xgbk8LtI0HFcXR2yf4YbblqHrA8/5xd3CdkKZk6HnRH0TUS6O0dMGZcuAZp+up1v HT6ZhmdBoCGl8lAGteJGEaDdqeUUYb+x1dkIk0TfEQ6uE0dMbzhwRI23XCGW6d8C CwcqdsNIZTWAGcQiJDRNxckvEfLfFXUu6jlHlOSi+7Gzak0lEPCgn2TjlhqTrWqX nqnMvU0YnadrLO5zLhlA761u3J08pofAMVepAaq8qmKq20SXj0Hbrhd2jEa23dsM q69X6Gl5Tc00zjcqOtNYNCWMhQ== -----END CERTIFICATE-----Generated at Tue Oct 6 20:03:24 2026 by rpki-client