$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft File: _thOn-AVmpk3ohk6C326I7bCZbg.mft (raw, json) Hash identifier: xBW9WgqmL3yytd9pJ/yWM9FcrsgAcjArIk9MsHsxUNs= Subject key identifier: 0F:7D:E5:4A:AD:B7:0B:8B:AB:47:EA:58:BC:DC:11:99:25:23:54:93 Authority key identifier: FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8 Certificate issuer: /CN=A91EDBB0/serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft Manifest number: 0125 Signing time: Mon 05 Oct 2026 06:13:00 +0000 Manifest this update: Mon 05 Oct 2026 06:13:00 +0000 Manifest next update: Mon 12 Oct 2026 06:13:00 +0000 Files and hashes: 1: _thOn-AVmpk3ohk6C326I7bCZbg.crl (hash: 0MNgfGFP7ZL9t0qmZOjA6nyDms/EG0NOJ0AaR83Vj0I=) 2: 18317928083911F0A2909A72C4F9AE02.roa (hash: aWC9Z9bpEAKz9IJhY7xU/+8CcFBubkzB7CX939nqCu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 06:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDBB0, serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8 Validity Not Before: Oct 5 06:13:00 2026 GMT Not After : Oct 12 06:13:00 2026 GMT Subject: CN=6ac33fec-4e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:87:b5:39:c7:22:13:f0:67:83:50:8e:c1: 8f:76:2d:39:d5:fe:81:1e:8a:bd:31:71:8d:a4:6e: b7:53:1e:4b:63:b8:79:72:1d:a3:34:d1:4c:f0:94: 83:12:6a:75:74:ca:b3:9c:27:14:de:39:8c:38:fd: 83:95:a5:b6:ea:2c:6a:22:53:2a:33:fd:0c:d2:83: 60:f1:36:c8:04:43:80:47:59:bb:fe:90:bc:b4:8f: 9b:fe:e0:d8:d7:7f:05:38:8f:81:57:4a:00:70:eb: 0e:a1:60:64:40:a9:f7:1b:3d:74:bd:cc:7d:0d:13: 14:77:0d:98:9c:ba:8c:4d:69:ae:2f:95:2d:ba:1c: 50:9c:ae:31:33:a2:75:7b:d8:c1:d6:90:d6:ea:a3: b3:9e:20:69:f0:e8:1f:80:92:57:ac:1c:df:09:c9: 88:c2:ba:81:6c:a1:de:a7:af:f7:67:ea:14:5b:8b: 97:17:42:ae:64:ca:dc:99:a3:1d:55:62:35:24:1d: 28:dd:28:a1:1b:26:04:be:05:28:bd:6d:04:0e:7f: 33:82:32:bf:80:ab:f8:b4:f2:5b:1b:6d:64:95:21: 70:ea:94:c7:bd:f0:ff:e0:d8:eb:3c:f6:bd:1f:fa: ab:0d:8f:de:6c:9e:28:5f:7b:27:ca:c0:90:21:77: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7D:E5:4A:AD:B7:0B:8B:AB:47:EA:58:BC:DC:11:99:25:23:54:93 X509v3 Authority Key Identifier: keyid:FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:08:b3:98:bf:32:34:bf:bb:61:ea:45:0f:7d:93:ec:09:78: b5:86:4c:e7:18:74:36:8f:97:25:db:fe:86:d9:12:ae:61:0e: ee:53:26:8e:aa:a1:32:e7:28:95:e6:8e:05:b4:8e:9b:17:b4: db:27:1c:ee:47:24:cb:e2:db:7f:99:10:dd:f5:70:ea:5a:b2: 9f:44:c2:be:73:9f:d4:36:62:60:ec:43:bb:8b:cc:de:da:06: 20:c3:60:aa:fe:8f:9a:f0:13:ec:2a:d6:60:6d:8c:b3:a0:bc: 98:61:9a:54:d2:6a:ad:c2:46:6d:4a:a1:30:43:f3:83:8a:2b: 2f:ce:f3:f7:04:16:4c:36:47:d2:6f:14:b3:91:43:be:b5:98: 1b:c0:2b:9c:00:37:05:33:4d:46:a0:88:cf:8a:1c:d1:6d:c4: f0:52:59:cd:93:3d:0a:b5:f4:6b:62:05:54:c4:23:3f:df:72: 27:2e:ae:7c:9e:0a:64:c5:30:89:3e:09:36:ad:e4:0d:58:30: ca:74:37:00:3b:26:95:f9:01:73:50:63:45:d4:b3:7a:66:2d: 54:40:7e:b6:5b:31:22:b3:67:57:04:3f:2f:bb:d1:62:8a:ab: 6c:2a:ed:7a:31:6e:f3:c5:f4:9b:e0:2b:39:f2:35:25:3e:0f: be:3e:20:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCQjAxMTAvBgNVBAUTKEZFRDg0RTlGRTAxNTlBOTkzN0EyMTkzQTBCN0RCQTIz QjZDMjY1QjgwHhcNMjYxMDA1MDYxMzAwWhcNMjYxMDEyMDYxMzAwWjAYMRYwFAYD VQQDEw02YWMzM2ZlYy00ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowiHtTnHIhPwZ4NQjsGPdi051f6BHoq9MXGNpG63Ux5LY7h5ch2jNNFM8JSD Emp1dMqznCcU3jmMOP2DlaW26ixqIlMqM/0M0oNg8TbIBEOAR1m7/pC8tI+b/uDY 138FOI+BV0oAcOsOoWBkQKn3Gz10vcx9DRMUdw2YnLqMTWmuL5UtuhxQnK4xM6J1 e9jB1pDW6qOzniBp8OgfgJJXrBzfCcmIwrqBbKHep6/3Z+oUW4uXF0KuZMrcmaMd VWI1JB0o3SihGyYEvgUovW0EDn8zgjK/gKv4tPJbG21klSFw6pTHvfD/4NjrPPa9 H/qrDY/ebJ4oX3snysCQIXeexwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA995Uqt twuLq0fqWLzcEZklI1STMB8GA1UdIwQYMBaAFP7YTp/gFZqZN6IZOgt9uiO2wmW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREJCMC9FNjUzRTUxMjA3 RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1wazNvaGs2QzMyNkk3YkNa YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL190aE9uLUFWbXBrM29oazZDMzI2STdiQ1piZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REJCMC9FNjUzRTUxMjA3RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1w azNvaGs2QzMyNkk3YkNaYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIAizmL8yNL+7YepFD32T7Al4tYZM5xh0No+XJdv+htkSrmEO7lMmjqqhMuco leaOBbSOmxe02ycc7kcky+Lbf5kQ3fVw6lqyn0TCvnOf1DZiYOxDu4vM3toGIMNg qv6PmvAT7CrWYG2Ms6C8mGGaVNJqrcJGbUqhMEPzg4orL87z9wQWTDZH0m8Us5FD vrWYG8ArnAA3BTNNRqCIz4oc0W3E8FJZzZM9CrX0a2IFVMQjP99yJy6ufJ4KZMUw iT4JNq3kDVgwynQ3ADsmlfkBc1BjRdSzemYtVEB+tlsxIrNnVwQ/L7vRYoqrbCrt ejFu88X0m+ArOfI1JT4Pvj4gvw== -----END CERTIFICATE-----Generated at Tue Oct 6 01:24:56 2026 by rpki-client