$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: mNTRGnmYuQMJ+S3kPgve3ycdC9oPKIp1FuAGcV6BmfE= Subject key identifier: 69:3E:7F:9A:11:5B:08:32:26:B6:79:04:CC:67:F6:C6:46:9F:E7:E2 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 0435 Signing time: Wed 07 Oct 2026 00:22:42 +0000 Manifest this update: Wed 07 Oct 2026 00:22:41 +0000 Manifest next update: Wed 14 Oct 2026 00:22:41 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: QeZUCfbH+WQPof2sBXkVIkUWXEFk3EwC2jjgZypZTQ4=) 2: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=) 3: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=) 4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 00:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Oct 7 00:22:41 2026 GMT Not After : Oct 14 00:22:41 2026 GMT Subject: CN=6ac590d1-7aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:59:c9:78:0c:7d:09:b3:1e:05:58:68:6b: 03:0c:6c:9d:14:ae:c3:45:b7:b7:be:5c:d3:0a:52: c0:e9:b4:be:51:1b:2b:7a:03:b1:b8:aa:8a:2d:13: 73:38:ca:bc:6a:ad:ea:65:1e:c0:47:30:f6:43:91: f5:0c:e0:0f:3c:62:8d:1e:26:71:1b:8b:73:19:5c: fd:75:bf:db:22:b9:f8:99:c2:45:b3:b9:df:eb:4c: 48:87:cc:26:7c:5a:ac:ee:86:ed:6b:da:c1:78:0f: dc:61:1d:09:9b:9e:73:59:1e:64:74:fa:f7:f6:cb: 5a:6a:63:66:ac:a7:98:fb:27:f7:85:4e:a6:05:ad: da:32:17:9d:ba:cd:e5:c3:d8:b1:62:17:cd:37:6b: 43:96:17:07:1c:d0:f1:dd:7b:12:7a:99:03:e3:d8: c4:c7:1a:69:2e:10:4e:03:34:62:d9:c3:57:62:dc: 85:f8:30:db:66:cf:e3:47:19:06:88:10:3f:e3:f5: e9:fe:ab:99:77:bd:f7:a2:49:b4:46:c0:6c:99:9a: 22:2e:76:6f:83:b8:2b:a4:f7:23:4e:8a:5e:73:e6: 31:80:a6:7a:5f:51:bd:52:52:ad:60:2e:0c:87:e3: 3e:96:bb:2a:56:13:40:a6:bc:ea:ba:e8:0d:ed:18: 6a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3E:7F:9A:11:5B:08:32:26:B6:79:04:CC:67:F6:C6:46:9F:E7:E2 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:67:84:af:22:6b:b9:19:f3:1b:d4:63:9c:b9:33:75:97:41: 78:ab:03:4d:b9:9e:9b:68:ac:cb:91:d4:5f:de:48:37:f0:58: a0:4b:3d:6c:f5:58:fd:7c:40:c9:ad:51:f7:7d:ce:61:89:02: 8f:9d:da:76:4c:da:37:69:cc:93:45:81:75:b5:79:b4:59:62: 25:69:05:e3:cb:c2:05:7f:60:05:7d:ef:24:19:14:b7:2b:45: ad:48:7d:fc:5c:0d:8e:63:e6:7a:de:5a:c6:a5:7c:e6:88:9a: 90:00:98:18:89:ab:a2:08:67:b3:3e:4c:53:3d:3f:dd:c3:57: 53:a4:15:c9:a7:fe:56:9d:15:e1:6f:a5:59:23:68:32:81:a5: 02:2c:a1:8b:a6:d7:22:47:c0:dc:44:4e:d9:3c:ff:c9:59:bb: 3f:fa:9f:3d:45:2e:c3:fb:50:06:77:87:8f:26:03:ef:63:02: ba:59:77:c8:dc:5e:4d:f4:c0:83:67:52:56:bb:b9:d3:d2:0e: 6d:e2:5c:7e:03:79:72:ff:20:3c:19:5e:a2:4d:dc:cc:d7:d3: 52:2d:91:25:ba:97:d1:64:f4:15:9f:78:98:66:0b:04:e0:ee: 6d:ec:16:9b:20:4c:4f:04:89:9d:99:dc:43:d7:58:93:8c:69: 82:16:dd:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYxMDA3MDAyMjQxWhcNMjYxMDE0MDAyMjQxWjAYMRYwFAYD VQQDEw02YWM1OTBkMS03YWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtItZyXgMfQmzHgVYaGsDDGydFK7DRbe3vlzTClLA6bS+URsregOxuKqKLRNz OMq8aq3qZR7ARzD2Q5H1DOAPPGKNHiZxG4tzGVz9db/bIrn4mcJFs7nf60xIh8wm fFqs7obta9rBeA/cYR0Jm55zWR5kdPr39staamNmrKeY+yf3hU6mBa3aMhedus3l w9ixYhfNN2tDlhcHHNDx3XsSepkD49jExxppLhBOAzRi2cNXYtyF+DDbZs/jRxkG iBA/4/Xp/quZd733okm0RsBsmZoiLnZvg7grpPcjTopec+YxgKZ6X1G9UlKtYC4M h+M+lrsqVhNAprzquugN7RhqPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGk+f5oR WwgyJrZ5BMxn9sZGn+fiMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi2eEryJruRnzG9RjnLkzdZdBeKsDTbmem2isy5HUX95IN/BYoEs9bPVY/XxA ya1R933OYYkCj53adkzaN2nMk0WBdbV5tFliJWkF48vCBX9gBX3vJBkUtytFrUh9 /FwNjmPmet5axqV85oiakACYGImroghnsz5MUz0/3cNXU6QVyaf+Vp0V4W+lWSNo MoGlAiyhi6bXIkfA3ERO2Tz/yVm7P/qfPUUuw/tQBneHjyYD72MCull3yNxeTfTA g2dSVru509IObeJcfgN5cv8gPBleok3czNfTUi2RJbqX0WT0FZ94mGYLBODubewW myBMTwSJnZncQ9dYk4xpghbdUw== -----END CERTIFICATE-----Generated at Wed Oct 7 05:59:18 2026 by rpki-client