$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: i4tLI0Uq4thiQI4expIGRdcB7i1itwCMzL340ePGWYY= Subject key identifier: 19:75:7E:86:BF:86:E1:45:B7:59:E9:29:37:71:45:2E:46:58:E2:CC Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 0A14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 21B3 Signing time: Thu 10 Sep 2026 16:32:30 +0000 Manifest this update: Thu 10 Sep 2026 16:32:29 +0000 Manifest next update: Thu 17 Sep 2026 16:32:29 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: +5YpfYPotMzMEpHJDbr52mcHNwrVjbgcMse+NQj/DRE=) 2: EDA7924C4C6A11F18E27EE0BC2833773.roa (hash: 1Bx4zBsmcdQadh2Lc0q70WKfY8U9Q8aKMXPEm63RlMk=) 3: 5FBC810E2C6C11F1AFD97E4FB3833773.roa (hash: g2RLVtOivjuUFJpHbhY01dBDwhC9Sd+LiRmcxISqRKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2580 (0xa14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Sep 10 16:32:29 2026 GMT Not After : Sep 17 16:32:29 2026 GMT Subject: CN=6aa2db9d-f07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b8:c6:c0:f7:ee:16:ef:75:e3:bc:f4:c5:ac: b5:68:df:03:b5:47:03:d6:97:3a:4d:b4:53:2c:c0: f3:ca:f9:0f:a0:fa:8c:e3:9b:5c:8c:11:31:af:08: 0d:2f:08:67:60:e4:f5:a5:62:6c:ca:4e:3f:34:df: 34:aa:fc:b7:73:7d:56:e1:c0:3e:fe:5e:5f:49:7e: e1:0d:4f:6c:c9:16:97:b1:b1:95:35:bf:1e:84:8e: b5:f5:da:3a:7f:75:11:96:6c:05:6b:fb:9b:47:8f: ad:28:e9:9b:1d:03:66:25:3b:98:4b:95:33:6f:38: ac:fc:99:18:13:ae:06:1d:84:bc:70:09:38:6d:86: a0:02:a4:66:7a:c8:b5:61:fc:3a:51:9f:2d:8e:83: 94:07:8a:81:6f:ac:64:f5:2d:ec:5d:98:c2:88:c2: 95:ce:48:24:bf:8a:07:09:a3:94:f0:c4:de:93:f8: 39:8e:a0:02:42:0f:6e:34:a0:31:a8:5f:a1:ab:fc: dc:11:41:3f:4c:b5:43:77:55:0c:fb:d4:c3:63:c7: df:32:a5:8b:d5:b8:28:3b:cf:77:07:d1:db:ba:47: 39:f6:a3:51:de:7d:dd:a5:9b:c8:f3:16:6e:b3:77: 4c:7d:10:bb:7c:af:73:8d:80:53:92:82:8f:4a:80: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:75:7E:86:BF:86:E1:45:B7:59:E9:29:37:71:45:2E:46:58:E2:CC X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:98:98:e3:59:90:1a:7a:0f:53:a9:91:1c:83:5c:05:ee:45: 7c:6a:4e:81:f9:01:82:bb:5d:30:82:39:3f:cc:ca:05:a5:87: d7:74:5a:6f:21:09:66:50:00:21:09:78:c5:93:1b:db:c8:b5: f9:38:db:8f:78:65:da:b7:34:8e:22:f3:85:4d:d8:b1:2f:99: a8:b2:af:6d:12:99:62:70:8c:77:2e:e5:f4:86:5f:6b:e5:89: c3:b4:d1:f4:8a:a0:4f:ab:b5:9e:bc:f8:89:9c:87:e2:db:ce: 99:3e:a3:d5:9f:b4:c3:d9:33:f5:b0:4b:cb:4f:6c:3f:b1:29: 87:40:28:25:45:9b:02:06:fa:9e:29:5b:e9:90:8c:c3:d7:60: ca:10:df:2d:c6:2c:34:96:61:d2:5f:eb:74:75:29:2f:c3:8c: aa:8f:d5:af:ef:2a:d6:42:37:e1:f8:51:98:5d:5f:1b:2e:31: 20:2c:53:9f:b2:a0:1c:44:aa:d1:bd:7a:cb:b2:8b:dc:d5:5c: 8c:70:26:09:81:3d:84:95:f4:d1:72:1e:03:1f:9b:cb:c3:75: 3b:4d:21:40:4c:ff:77:bc:b3:d6:bd:82:ed:9a:65:34:f5:26: b7:5d:63:03:49:5a:5c:ea:94:2d:42:52:3f:99:9c:2f:0d:b1: 71:65:13:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjYwOTEwMTYzMjI5WhcNMjYwOTE3MTYzMjI5WjAYMRYwFAYD VQQDEw02YWEyZGI5ZC1mMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rjGwPfuFu9147z0xay1aN8DtUcD1pc6TbRTLMDzyvkPoPqM45tcjBExrwgN LwhnYOT1pWJsyk4/NN80qvy3c31W4cA+/l5fSX7hDU9syRaXsbGVNb8ehI619do6 f3URlmwFa/ubR4+tKOmbHQNmJTuYS5Uzbzis/JkYE64GHYS8cAk4bYagAqRmesi1 Yfw6UZ8tjoOUB4qBb6xk9S3sXZjCiMKVzkgkv4oHCaOU8MTek/g5jqACQg9uNKAx qF+hq/zcEUE/TLVDd1UM+9TDY8ffMqWL1bgoO893B9Hbukc59qNR3n3dpZvI8xZu s3dMfRC7fK9zjYBTkoKPSoBdhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBl1foa/ huFFt1npKTdxRS5GWOLMMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABpiY41mQGnoPU6mRHINcBe5FfGpOgfkBgrtdMII5P8zKBaWH13RabyEJZlAA IQl4xZMb28i1+Tjbj3hl2rc0jiLzhU3YsS+ZqLKvbRKZYnCMdy7l9IZfa+WJw7TR 9IqgT6u1nrz4iZyH4tvOmT6j1Z+0w9kz9bBLy09sP7Eph0AoJUWbAgb6nilb6ZCM w9dgyhDfLcYsNJZh0l/rdHUpL8OMqo/Vr+8q1kI34fhRmF1fGy4xICxTn7KgHESq 0b16y7KL3NVcjHAmCYE9hJX00XIeAx+by8N1O00hQEz/d7yz1r2C7ZplNPUmt11j A0laXOqULUJSP5mcLw2xcWUT+Q== -----END CERTIFICATE-----Generated at Fri Sep 11 06:16:26 2026 by rpki-client