$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: bNO8qBGxWU9ok4Ia/axoG+Wa9ZpRQPgyI37h6aND8Lc= Subject key identifier: 4F:59:07:E0:37:B4:F5:BB:19:1B:37:08:C6:F1:73:DE:82:A4:C4:37 Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 0249 Signing time: Sun 25 Oct 2026 02:44:42 +0000 Manifest this update: Sun 25 Oct 2026 02:44:42 +0000 Manifest next update: Sun 01 Nov 2026 02:44:42 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: EIekDlx1ERb/E+qPV4RQyVLXLmUqUovdM0TvVT/hL9U=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: dLUeKe6QaZ4GPKIE3nlD7SGlABym7P6qS+9RNwN3OQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Oct 25 02:44:42 2026 GMT Not After : Nov 1 02:44:42 2026 GMT Subject: CN=6add6d1a-9da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:c2:63:91:66:99:14:a8:8c:71:a4:d6:9e: ff:d1:b6:4a:34:a2:e5:37:f4:ab:ab:d5:2a:54:eb: 11:39:ba:01:bb:7a:48:df:da:80:a9:73:51:32:66: 12:39:27:9c:5b:9a:05:a5:7f:4f:f3:cd:18:0b:da: a8:e7:16:b3:17:1e:15:80:41:32:86:ff:1d:83:f4: 08:2b:7e:fa:cd:19:b9:d2:04:e6:93:13:b9:e0:c2: ea:2c:33:2b:e8:ac:96:7f:53:91:e4:f7:03:22:74: 4e:3b:66:f5:51:a9:2f:44:d6:a4:0c:f7:a2:d4:ac: 02:84:9c:5f:83:b0:9d:e1:b2:f9:8d:ee:d4:72:f4: d3:49:ca:30:58:0e:ad:38:17:e3:55:73:cc:94:44: 6c:38:5e:a9:0d:8e:cd:e2:ce:25:f5:a6:9e:25:30: 2a:67:24:9b:0a:19:27:1a:60:e9:4b:4c:2f:b8:6e: f8:01:41:ed:5b:6b:eb:59:3f:cb:88:c4:c8:56:0b: f1:86:ee:e2:d3:9a:fc:98:0f:85:84:27:25:a7:6c: 7a:af:2e:45:b7:38:38:15:c2:1b:64:70:53:78:dc: 0b:dc:64:e6:77:4c:43:ff:7d:3a:90:97:6e:c5:e9: ec:2b:b8:57:ce:6a:3e:0a:7c:2a:8c:3b:86:5c:1c: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:59:07:E0:37:B4:F5:BB:19:1B:37:08:C6:F1:73:DE:82:A4:C4:37 X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fc:b0:04:74:1f:ff:24:3b:e9:37:06:ae:22:1f:08:e4:b8: 7b:71:47:d6:5f:ca:e1:6a:ef:2c:4e:1d:86:4c:fc:71:4c:61: d9:4b:82:4a:df:d9:fd:4f:95:91:24:48:60:55:37:63:33:97: 1c:86:ec:2f:16:a1:cd:86:23:24:96:14:f3:25:c7:c6:2d:0d: 58:56:cd:c1:89:b6:53:67:d2:f4:eb:8c:0a:37:0e:a2:0d:6d: 94:6c:72:45:57:00:91:26:9c:1a:2a:47:fc:f5:02:d4:10:48: b5:d6:b5:5d:4e:4c:22:a9:5d:06:8e:2a:31:f0:05:9a:a5:6d: 76:87:23:a7:1f:9c:9b:a6:95:ca:ad:57:70:0d:9d:01:de:4e: ed:5e:aa:bd:b7:f1:04:ff:14:ee:e7:31:eb:7e:22:0b:1d:cd: ad:91:7a:c1:51:09:08:28:01:d9:dc:d0:61:46:ff:4b:e7:96: 9b:00:86:92:fe:fb:e5:98:46:71:25:a8:69:a6:fc:c7:e3:61: 8a:63:17:61:a0:da:23:45:36:bf:5e:3a:a6:55:2a:9e:b6:25: d0:02:fa:87:60:fb:72:b2:2d:4c:37:e9:4b:05:c3:ba:a6:d7: 0f:7f:56:35:82:d7:79:c6:13:cc:8f:2a:aa:c8:bd:94:51:66: 93:66:a2:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjYxMDI1MDI0NDQyWhcNMjYxMTAxMDI0NDQyWjAYMRYwFAYD VQQDEw02YWRkNmQxYS05ZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNvCY5FmmRSojHGk1p7/0bZKNKLlN/Srq9UqVOsROboBu3pI39qAqXNRMmYS OSecW5oFpX9P880YC9qo5xazFx4VgEEyhv8dg/QIK376zRm50gTmkxO54MLqLDMr 6KyWf1OR5PcDInROO2b1UakvRNakDPei1KwChJxfg7Cd4bL5je7UcvTTScowWA6t OBfjVXPMlERsOF6pDY7N4s4l9aaeJTAqZySbChknGmDpS0wvuG74AUHtW2vrWT/L iMTIVgvxhu7i05r8mA+FhCclp2x6ry5Ftzg4FcIbZHBTeNwL3GTmd0xD/306kJdu xensK7hXzmo+CnwqjDuGXBzIvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9ZB+A3 tPW7GRs3CMbxc96CpMQ3MB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmvywBHQf/yQ76TcGriIfCOS4e3FH1l/K4WrvLE4dhkz8cUxh2UuCSt/Z/U+V kSRIYFU3YzOXHIbsLxahzYYjJJYU8yXHxi0NWFbNwYm2U2fS9OuMCjcOog1tlGxy RVcAkSacGipH/PUC1BBItda1XU5MIqldBo4qMfAFmqVtdocjpx+cm6aVyq1XcA2d Ad5O7V6qvbfxBP8U7ucx634iCx3NrZF6wVEJCCgB2dzQYUb/S+eWmwCGkv775ZhG cSWoaab8x+NhimMXYaDaI0U2v146plUqnrYl0AL6h2D7crItTDfpSwXDuqbXD39W NYLXecYTzI8qqsi9lFFmk2ai+g== -----END CERTIFICATE-----Generated at Mon Oct 26 11:09:35 2026 by rpki-client