$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft File: TsOvwYXRL5hOdelqRL-yme8J6kM.mft (raw, json) Hash identifier: NQBzzre9TsTh5aF+jeHmgAgwFOLRjPe8H3KliYDEMX4= Subject key identifier: 2B:03:4F:F5:55:07:E1:EA:03:7E:E0:92:CE:39:0A:68:5A:62:CA:FE Authority key identifier: 4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43 Certificate issuer: /CN=A91FE40B/serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft Manifest number: 3A Signing time: Sat 10 Oct 2026 18:35:50 +0000 Manifest this update: Sat 10 Oct 2026 18:35:49 +0000 Manifest next update: Sat 17 Oct 2026 18:35:49 +0000 Files and hashes: 1: TsOvwYXRL5hOdelqRL-yme8J6kM.crl (hash: lw+f48Ty23Gu70ozZcfPfDefXjD/QHmcBHJWeZZyZgw=) 2: A409C5D2746611F187F6609D76A30FBC.roa (hash: tiKplu1qT1GoUcJ4ddjN4UtgXJrJ59ZmPU/cpNeDfZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 18:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43 Validity Not Before: Oct 10 18:35:49 2026 GMT Not After : Oct 17 18:35:49 2026 GMT Subject: CN=6aca8586-c519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:bb:98:7e:f1:e2:b9:0b:a2:a8:66:15:d2: a3:5d:8e:7d:65:ea:c1:1c:d5:30:69:96:99:ba:e8: 8d:60:4d:5e:bd:84:98:8d:ab:a6:4a:74:07:54:40: 48:f3:58:4a:63:94:dc:a8:3d:75:3c:06:43:08:16: 07:98:53:fb:07:03:bd:08:e1:e7:ad:ed:77:dc:82: 50:6a:1d:4d:45:eb:22:4d:5a:5e:ff:3a:53:2b:0e: 90:33:d4:9e:55:f7:b6:db:d5:1c:b8:53:04:33:95: 70:53:35:b4:b1:fb:8d:07:0a:db:a9:c8:0a:41:89: 5a:17:18:09:e0:f0:06:4e:9d:9e:43:98:e1:7e:61: bd:da:29:c0:45:5f:29:a8:cd:69:19:fb:90:f0:3a: 3a:ae:d6:f2:c6:fd:1c:95:cf:f4:3c:0d:f1:f0:4f: eb:2f:91:3a:70:df:13:a5:28:d4:29:a2:18:e6:75: c4:da:cc:50:d9:86:d6:b1:9c:65:09:f8:5a:91:ce: a5:c2:14:9d:98:c6:9c:c7:a2:b6:1e:e6:45:57:72: ce:a3:73:50:a3:d4:59:84:50:99:01:a9:38:24:ce: 6a:8e:10:59:b8:f8:71:c0:dc:74:72:c4:4f:83:3b: a4:38:0c:6f:47:71:61:0e:52:bd:21:54:98:75:4a: b2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:03:4F:F5:55:07:E1:EA:03:7E:E0:92:CE:39:0A:68:5A:62:CA:FE X509v3 Authority Key Identifier: keyid:4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d7:82:70:42:f7:d9:0e:c1:41:6d:d6:05:fb:2e:de:22:d8: 8c:36:a5:44:25:34:4c:16:f8:c8:8e:62:d5:c9:63:3c:a1:57: 4b:c0:83:03:55:60:51:be:22:5b:82:d1:4f:bd:54:60:23:4c: 71:15:ed:8c:5e:2c:47:46:d6:6e:07:15:64:a2:d9:a9:19:79: 94:c7:df:97:9a:c3:1c:7d:a7:01:f8:31:ec:3b:f1:f7:61:8f: d4:a6:5d:60:28:4b:42:2c:f0:98:ff:df:eb:f5:f3:7d:b3:93: 52:79:2c:c9:b5:fb:2f:d4:41:78:60:47:7c:dd:c3:65:a0:1a: 9c:08:d1:25:1a:61:cd:ec:f0:b3:11:15:e9:ee:1a:c9:bc:83: d2:ce:10:54:5e:09:0c:35:e5:cb:3d:37:ac:08:68:41:1e:b8: 70:b9:24:bd:dc:0b:a5:ad:f3:ac:f6:04:e5:3e:1e:cd:46:d3: 5b:32:fa:bf:59:0a:8e:d6:bb:a1:e8:13:ec:bf:00:4d:e0:61: d3:1e:19:ea:14:90:53:e4:09:3d:2e:fc:4d:a1:e4:f7:eb:45: b8:b7:c7:20:5d:6a:73:88:3b:2a:b8:7b:0f:3c:df:ea:d0:86: c6:2d:fd:ac:b6:dd:43:4e:08:d1:5d:01:19:fa:6d:ba:31:40: 18:04:af:2b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTQwQjExMC8GA1UEBRMoNEVDM0FGQzE4NUQxMkY5ODRFNzVFOTZBNDRCRkIyOTlF RjA5RUE0MzAeFw0yNjEwMTAxODM1NDlaFw0yNjEwMTcxODM1NDlaMBgxFjAUBgNV BAMTDTZhY2E4NTg2LWM1MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCVbuYfvHiuQuiqGYV0qNdjn1l6sEc1TBplpm66I1gTV69hJiNq6ZKdAdUQEjz WEpjlNyoPXU8BkMIFgeYU/sHA70I4eet7XfcglBqHU1F6yJNWl7/OlMrDpAz1J5V 97bb1Ry4UwQzlXBTNbSx+40HCtupyApBiVoXGAng8AZOnZ5DmOF+Yb3aKcBFXymo zWkZ+5DwOjqu1vLG/RyVz/Q8DfHwT+svkTpw3xOlKNQpohjmdcTazFDZhtaxnGUJ +FqRzqXCFJ2YxpzHorYe5kVXcs6jc1Cj1FmEUJkBqTgkzmqOEFm4+HHA3HRyxE+D O6Q4DG9HcWEOUr0hVJh1SrIXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKwNP9VUH 4eoDfuCSzjkKaFpiyv4wHwYDVR0jBBgwFoAUTsOvwYXRL5hOdelqRL+yme8J6kMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNDBCLzVDN0UxNzI4NzQz ODExRjE5RTYyNzFDNDY1QTMwRkJDL1RzT3Z3WVhSTDVoT2RlbHFSTC15bWU4SjZr TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVHNPdndZWFJMNWhPZGVscVJMLXltZThKNmtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF NDBCLzVDN0UxNzI4NzQzODExRjE5RTYyNzFDNDY1QTMwRkJDL1RzT3Z3WVhSTDVo T2RlbHFSTC15bWU4SjZrTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBQ14JwQvfZDsFBbdYF+y7eItiMNqVEJTRMFvjIjmLVyWM8oVdLwIMDVWBRviJb gtFPvVRgI0xxFe2MXixHRtZuBxVkotmpGXmUx9+XmsMcfacB+DHsO/H3YY/Upl1g KEtCLPCY/9/r9fN9s5NSeSzJtfsv1EF4YEd83cNloBqcCNElGmHN7PCzERXp7hrJ vIPSzhBUXgkMNeXLPTesCGhBHrhwuSS93AulrfOs9gTlPh7NRtNbMvq/WQqO1ruh 6BPsvwBN4GHTHhnqFJBT5Ak9LvxNoeT360W4t8cgXWpziDsquHsPPN/q0IbGLf2s tt1DTgjRXQEZ+m26MUAYBK8r -----END CERTIFICATE-----Generated at Sun Oct 11 19:23:22 2026 by rpki-client