$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: 8BhGu9PNT+q91YN0yiFTg8RvaTUYE3eF2/OsxtoLbbo= Subject key identifier: 00:CC:17:89:B6:97:C7:44:17:9D:D4:C2:37:00:CA:0A:DF:45:89:B3 Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 022F Signing time: Thu 03 Sep 2026 02:48:29 +0000 Manifest this update: Thu 03 Sep 2026 02:48:29 +0000 Manifest next update: Thu 10 Sep 2026 02:48:29 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: w19QxmOaZun5JltjFEapRJ1GKy1Jtj5j2ySHCeV0wS0=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: dLUeKe6QaZ4GPKIE3nlD7SGlABym7P6qS+9RNwN3OQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 02:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Sep 3 02:48:29 2026 GMT Not After : Sep 10 02:48:29 2026 GMT Subject: CN=6a98dffd-ba54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:44:f8:b7:83:e5:cf:64:40:0a:e2:55:08: e0:ef:87:f6:ab:1c:d6:2d:e9:4f:88:4a:57:f3:e2: 17:98:1c:35:ac:d9:b4:a4:19:55:37:3a:a3:6a:3c: a1:ff:e6:46:d3:e4:a9:9b:f0:68:f7:50:9f:87:e6: da:9b:17:8d:77:f8:fa:7a:4f:05:5f:70:ea:f7:0f: 01:f9:4f:f1:ab:45:91:b8:c6:fd:5f:d4:21:bd:ea: 50:35:6a:4c:3a:94:b3:f3:05:f6:73:f8:77:25:ac: 95:cc:29:85:db:cc:b1:60:01:84:0e:2a:cf:75:4f: 27:71:e5:87:b6:ca:23:2c:91:06:b9:3f:a4:d1:71: df:7f:ce:f0:91:4a:a2:2c:c2:b4:bc:33:c6:a4:dc: d7:89:4a:b8:ff:81:a2:40:3c:ad:3a:45:b2:59:72: db:bf:db:0e:34:be:c4:44:54:46:5b:7e:da:cf:aa: 9c:cf:db:06:93:e6:97:8c:66:d1:23:67:20:48:8c: 9a:d5:56:54:db:af:df:06:8d:0f:8a:9b:c3:58:7b: eb:c1:2f:bc:7d:23:3c:78:c1:56:e0:44:b4:e8:ac: ee:28:f5:0a:ac:e5:18:4e:cf:1d:ed:c4:3a:12:7e: 2f:9a:90:90:4f:d0:6e:6f:eb:c4:d0:6f:81:cf:a6: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CC:17:89:B6:97:C7:44:17:9D:D4:C2:37:00:CA:0A:DF:45:89:B3 X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4e:1b:20:f1:2b:3d:87:8b:26:85:70:a6:b7:9f:92:bf:9f: 49:95:fa:26:94:04:5d:52:ac:22:c3:a8:a9:84:9d:a1:b3:2a: 6f:a1:56:a8:c8:c5:a0:6b:c5:4e:88:ed:94:25:3c:50:d5:fd: c4:3e:40:0f:b1:4e:a0:19:ab:24:27:0b:38:8d:19:a8:fb:a4: 1d:53:9d:07:94:d1:9c:ce:08:df:a9:6d:d3:18:f2:d1:57:d8: 08:34:ef:8d:f1:70:79:74:19:df:cf:ad:9e:3a:40:ca:ae:72: 09:f1:7a:6e:e8:f6:09:7e:cb:6c:3c:67:c6:75:ed:89:f9:ea: f9:1b:07:93:6e:41:dd:36:9c:8e:5d:73:81:d3:f7:cb:08:91: ab:ac:f8:39:91:6d:d8:dc:19:9f:7e:0b:07:bd:98:45:30:c0: 3a:ac:cc:54:21:e6:c3:52:8d:20:8b:c1:4f:47:74:e0:08:ec: f9:bb:c2:3e:7f:d5:01:c0:a2:f9:d4:be:f0:9c:c2:a2:81:45: e4:aa:f2:c3:94:53:a4:ba:d3:a9:da:56:55:95:a7:d9:d4:a6: 87:3a:33:bd:5b:fa:f5:34:c5:73:1c:47:fb:80:7b:d8:3c:f7: 53:0a:4d:ed:17:ab:82:01:df:9c:e6:9e:93:31:d0:08:2d:57: 18:83:7a:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjYwOTAzMDI0ODI5WhcNMjYwOTEwMDI0ODI5WjAYMRYwFAYD VQQDEw02YTk4ZGZmZC1iYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRpE+LeD5c9kQAriVQjg74f2qxzWLelPiEpX8+IXmBw1rNm0pBlVNzqjajyh /+ZG0+Spm/Bo91Cfh+bamxeNd/j6ek8FX3Dq9w8B+U/xq0WRuMb9X9QhvepQNWpM OpSz8wX2c/h3JayVzCmF28yxYAGEDirPdU8nceWHtsojLJEGuT+k0XHff87wkUqi LMK0vDPGpNzXiUq4/4GiQDytOkWyWXLbv9sONL7ERFRGW37az6qcz9sGk+aXjGbR I2cgSIya1VZU26/fBo0PipvDWHvrwS+8fSM8eMFW4ES06KzuKPUKrOUYTs8d7cQ6 En4vmpCQT9Bub+vE0G+Bz6bTowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADMF4m2 l8dEF53UwjcAygrfRYmzMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX04bIPErPYeLJoVwprefkr+fSZX6JpQEXVKsIsOoqYSdobMqb6FWqMjFoGvF TojtlCU8UNX9xD5AD7FOoBmrJCcLOI0ZqPukHVOdB5TRnM4I36lt0xjy0VfYCDTv jfFweXQZ38+tnjpAyq5yCfF6buj2CX7LbDxnxnXtifnq+RsHk25B3Tacjl1zgdP3 ywiRq6z4OZFt2NwZn34LB72YRTDAOqzMVCHmw1KNIIvBT0d04Ajs+bvCPn/VAcCi +dS+8JzCooFF5Kryw5RTpLrTqdpWVZWn2dSmhzozvVv69TTFcxxH+4B72Dz3UwpN 7RerggHfnOaekzHQCC1XGIN6Hg== -----END CERTIFICATE-----Generated at Sat Sep 5 00:55:06 2026 by rpki-client