$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft File: tg1afDY_D02TL-MXuQzmz4DSg8k.mft (raw, json) Hash identifier: cxhM8uIdv3hPY7HUCDrE/mcN54V7nAIC0Dgv+g7uDJs= Subject key identifier: A6:53:DA:3E:FE:8F:3A:30:1D:11:61:3B:72:3D:E3:C5:D0:9D:4F:67 Authority key identifier: B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 Certificate issuer: /CN=A9118309/serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft Manifest number: 0B25 Signing time: Mon 28 Sep 2026 19:26:00 +0000 Manifest this update: Mon 28 Sep 2026 19:25:59 +0000 Manifest next update: Mon 05 Oct 2026 19:25:59 +0000 Files and hashes: 1: tg1afDY_D02TL-MXuQzmz4DSg8k.crl (hash: 5Oj1bko0gVr1QNqQklDHY0bMl91wM3uSexn8oJRYWp0=) 2: 59AA22D06FFD11EA9160902DC4F9AE02.roa (hash: wf2N7y2gm+HMhGLmDepSkmqtdRiwq+CjqsQ72qN8FGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 19:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118309, serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Validity Not Before: Sep 28 19:25:59 2026 GMT Not After : Oct 5 19:25:59 2026 GMT Subject: CN=6ababf48-b456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:11:7e:38:64:48:db:83:16:7c:ee:60:21: 11:68:e7:1d:25:40:df:7c:fe:17:4e:f4:dd:c0:28: 4e:3e:5a:1a:00:1f:a0:05:11:66:29:f9:ea:9f:40: 80:2c:8d:82:95:5b:d1:f4:cf:12:df:f3:36:30:af: 3c:57:36:02:71:91:02:23:3c:54:e5:fc:92:b8:ca: 9f:1b:c1:26:4b:f6:57:dd:40:a4:52:2f:54:33:60: 8f:c8:4b:16:ff:1c:c6:c8:c7:13:83:aa:f1:13:b1: 51:9e:9e:04:d6:fa:fa:3b:9b:ca:3b:9e:c3:71:66: b6:f7:e6:8d:01:59:63:67:a6:7a:4d:7c:83:71:78: af:34:f0:ac:cd:16:dd:d3:2f:d3:c9:ca:da:1b:6c: 7a:44:83:b4:fb:e0:bc:88:57:2b:b8:18:43:de:b0: 60:52:97:58:bc:f3:6a:99:2e:1a:69:9b:1c:6c:71: f6:65:fb:84:5f:80:ff:1e:ca:db:d5:f7:5a:10:fb: 37:b6:20:b0:49:46:40:a3:8f:a3:84:b6:38:c0:53: 74:84:79:a2:2d:d9:86:6f:dd:1f:e2:74:f8:4d:a7: 45:22:d1:b1:77:74:22:cb:ac:29:f5:44:fb:3f:71: ce:c8:0f:0d:59:d1:e7:8d:b5:bb:4f:98:79:a2:80: 28:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:53:DA:3E:FE:8F:3A:30:1D:11:61:3B:72:3D:E3:C5:D0:9D:4F:67 X509v3 Authority Key Identifier: keyid:B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:12:0d:57:9f:d0:6f:35:75:67:40:4b:b1:d3:e7:e7:79:4d: 40:81:95:9b:20:ec:5a:19:d0:a0:c6:00:a7:e8:52:cf:3a:57: 1b:7d:33:28:f8:6a:c5:72:17:c9:ac:98:78:5a:41:4a:01:d7: c6:07:d7:ae:01:df:7b:32:d7:36:b6:7c:22:6d:c1:37:67:af: 16:e4:60:3f:0d:7b:35:39:4f:e4:26:e1:3e:c4:03:9b:57:ac: b1:ea:3a:46:ac:96:8d:9c:56:00:66:69:d1:cc:0d:30:e9:c6: 40:02:fb:fc:f3:5e:eb:dc:b8:95:19:82:90:e0:45:47:9c:20: 63:72:25:b1:56:32:a6:93:15:b9:22:d5:f0:76:90:cb:56:40: fd:d7:89:a5:4f:76:e8:84:e3:74:30:1f:f9:ed:ca:75:17:fe: f4:a4:bf:c7:5f:df:c3:9f:08:45:17:ed:78:e1:9d:23:0c:d2: 75:53:a1:11:85:17:31:66:bd:3a:7a:0a:ab:2b:d9:0d:27:9e: de:5b:07:ab:f8:46:e9:fe:b9:28:81:2f:67:76:df:48:17:24: d7:9f:cc:0a:f9:ed:f1:de:33:a8:91:97:f6:06:00:ae:6a:aa: 95:54:43:92:8f:8a:45:b5:99:3f:01:18:40:f2:cf:9f:04:d4: 79:57:06:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzMDkxMTAvBgNVBAUTKEI2MEQ1QTdDMzYzRjBGNEQ5MzJGRTMxN0I5MENFNkNG ODBEMjgzQzkwHhcNMjYwOTI4MTkyNTU5WhcNMjYxMDA1MTkyNTU5WjAYMRYwFAYD VQQDEw02YWJhYmY0OC1iNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1j4RfjhkSNuDFnzuYCERaOcdJUDffP4XTvTdwChOPloaAB+gBRFmKfnqn0CA LI2ClVvR9M8S3/M2MK88VzYCcZECIzxU5fySuMqfG8EmS/ZX3UCkUi9UM2CPyEsW /xzGyMcTg6rxE7FRnp4E1vr6O5vKO57DcWa29+aNAVljZ6Z6TXyDcXivNPCszRbd 0y/TycraG2x6RIO0++C8iFcruBhD3rBgUpdYvPNqmS4aaZscbHH2ZfuEX4D/Hsrb 1fdaEPs3tiCwSUZAo4+jhLY4wFN0hHmiLdmGb90f4nT4TadFItGxd3Qiy6wp9UT7 P3HOyA8NWdHnjbW7T5h5ooAotwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZT2j7+ jzowHRFhO3I948XQnU9nMB8GA1UdIwQYMBaAFLYNWnw2Pw9Nky/jF7kM5s+A0oPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODMwOS8xQTQ4REM4NjZG RkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0QwMlRMLU1YdVF6bXo0RFNn OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnMWFmRFlfRDAyVEwtTVh1UXptejREU2c4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODMwOS8xQTQ4REM4NjZGRkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0Qw MlRMLU1YdVF6bXo0RFNnOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApxINV5/QbzV1Z0BLsdPn53lNQIGVmyDsWhnQoMYAp+hSzzpXG30zKPhqxXIX yayYeFpBSgHXxgfXrgHfezLXNrZ8Im3BN2evFuRgPw17NTlP5CbhPsQDm1esseo6 RqyWjZxWAGZp0cwNMOnGQAL7/PNe69y4lRmCkOBFR5wgY3IlsVYyppMVuSLV8HaQ y1ZA/deJpU926ITjdDAf+e3KdRf+9KS/x1/fw58IRRfteOGdIwzSdVOhEYUXMWa9 OnoKqyvZDSee3lsHq/hG6f65KIEvZ3bfSBck15/MCvnt8d4zqJGX9gYArmqqlVRD ko+KRbWZPwEYQPLPnwTUeVcGVA== -----END CERTIFICATE-----Generated at Tue Sep 29 20:07:02 2026 by rpki-client