$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: RYgW/1XA1HpuROqMpOZbaiGRJDcklH0eFTFOi+8O/88= Subject key identifier: 51:19:46:58:BE:BC:FB:E0:BB:06:9A:CC:44:E1:B5:56:AA:FD:DD:7F Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: 01A0 Signing time: Fri 25 Sep 2026 04:19:51 +0000 Manifest this update: Fri 25 Sep 2026 04:19:51 +0000 Manifest next update: Fri 02 Oct 2026 04:19:51 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: 0yC+ycY/iMon0DZSrQeNlZo3jxHjHUfL15c9m89y514=) 2: 6A5F29CED8A511F0B3F453F094D3641D.roa (hash: VYfWP8w7wQSpKkaf4oGhEJ6l5xHKxuqJlMcTIQM/N+o=) 3: 84B1619E8C4511F1A27F4BE95411F970.roa (hash: hHHcMr65tn2TsQmhaKVCSv+V1ejD7S+aiBSVGPeEC88=) 4: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: bYg8Dnd7GdjGYmMqKVZYgdK67dqMYGrhDZAhZPRHKBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Sep 25 04:19:51 2026 GMT Not After : Oct 2 04:19:51 2026 GMT Subject: CN=6ab5f667-1404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:e3:b8:3b:23:ac:94:20:77:1c:03:d7:78: 07:a5:93:2c:d9:4c:e0:78:59:97:73:a4:b7:3c:68: 07:cd:94:b3:8b:e1:62:7e:e1:80:bf:9e:8b:d9:54: 1c:8d:1e:a3:91:b8:da:fb:fe:61:bf:cd:97:a9:52: f6:e5:e2:36:f1:54:b0:61:00:df:8a:cf:b6:d0:c7: f5:f9:ad:9c:be:69:7d:60:a1:7c:7e:59:fb:7a:6d: eb:3c:6b:56:d4:90:ce:3b:b0:a7:70:14:94:65:09: 07:ae:4c:d3:5f:bd:14:b0:b9:84:f0:17:99:91:6f: 3a:25:7f:41:f7:d2:95:e4:e1:82:e5:e4:ac:9c:b9: b2:80:f2:fd:bc:42:ac:d8:fd:ba:b2:b8:43:07:69: 18:cd:df:e7:fc:5c:a7:e9:42:72:4b:56:bd:53:e1: c7:d5:3a:69:81:37:21:23:92:52:f8:2a:84:18:ae: ee:7d:c5:93:cc:1b:04:94:47:77:8d:0b:b6:88:89: be:1f:1e:ae:ca:c7:d1:8b:1d:4d:ac:39:e1:d5:b0: 48:95:b1:80:c0:5b:2e:5d:55:b5:45:e1:1e:f8:53: fa:43:28:67:e2:f0:55:23:b3:f3:46:1a:3e:76:69: e1:1b:42:0f:06:c5:74:7a:a1:af:3e:c5:c0:44:ee: 90:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:46:58:BE:BC:FB:E0:BB:06:9A:CC:44:E1:B5:56:AA:FD:DD:7F X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:76:57:9b:65:7b:11:91:89:f4:52:90:c8:6d:59:8a:35:9c: d1:eb:78:0a:a0:1e:60:a2:e8:52:65:b6:b0:e4:00:2b:5a:1e: e0:28:d0:e9:46:76:66:0c:08:cc:a1:2a:15:b5:f9:cf:77:34: ea:1c:e2:e3:0f:f3:3b:f6:1c:f3:1c:2e:dd:ce:0a:ff:27:57: fa:54:a6:a5:55:ba:66:54:87:c0:df:56:76:25:29:40:30:0f: 09:a7:a6:f6:87:1b:00:ea:24:de:32:09:da:8f:07:c8:5e:18: 9c:10:80:c9:ec:ad:1b:22:9e:b6:8c:8f:bc:db:86:87:b6:08: d0:7a:4c:4b:5f:b8:f3:8e:b4:60:ef:cf:c0:3e:cb:fe:af:7b: ee:2e:9f:1d:0c:20:fb:37:3b:a5:81:7b:5d:9e:e9:aa:b6:5b: bf:c7:2e:cb:3a:fe:57:e0:f8:80:98:23:cf:59:f7:c8:29:8d: 55:9b:cb:91:93:c4:0e:43:d4:99:c1:b5:ad:04:2e:e9:9a:70: 60:b0:62:fc:9b:48:e3:b0:b7:4c:35:6f:b4:03:1e:9c:aa:b1: 93:07:79:71:34:86:10:34:be:4f:25:69:e0:35:51:18:19:97: 29:38:09:e7:09:40:a6:0a:4e:b5:54:cc:79:8c:36:66:1a:dd: f6:39:6c:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjYwOTI1MDQxOTUxWhcNMjYxMDAyMDQxOTUxWjAYMRYwFAYD VQQDEw02YWI1ZjY2Ny0xNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWfjuDsjrJQgdxwD13gHpZMs2UzgeFmXc6S3PGgHzZSzi+FifuGAv56L2VQc jR6jkbja+/5hv82XqVL25eI28VSwYQDfis+20Mf1+a2cvml9YKF8fln7em3rPGtW 1JDOO7CncBSUZQkHrkzTX70UsLmE8BeZkW86JX9B99KV5OGC5eSsnLmygPL9vEKs 2P26srhDB2kYzd/n/Fyn6UJyS1a9U+HH1TppgTchI5JS+CqEGK7ufcWTzBsElEd3 jQu2iIm+Hx6uysfRix1NrDnh1bBIlbGAwFsuXVW1ReEe+FP6Qyhn4vBVI7PzRho+ dmnhG0IPBsV0eqGvPsXARO6QkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEZRli+ vPvguwaazEThtVaq/d1/MB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA3ZXm2V7EZGJ9FKQyG1ZijWc0et4CqAeYKLoUmW2sOQAK1oe4CjQ6UZ2ZgwI zKEqFbX5z3c06hzi4w/zO/Yc8xwu3c4K/ydX+lSmpVW6ZlSHwN9WdiUpQDAPCaem 9ocbAOok3jIJ2o8HyF4YnBCAyeytGyKetoyPvNuGh7YI0HpMS1+48460YO/PwD7L /q977i6fHQwg+zc7pYF7XZ7pqrZbv8cuyzr+V+D4gJgjz1n3yCmNVZvLkZPEDkPU mcG1rQQu6ZpwYLBi/JtI47C3TDVvtAMenKqxkwd5cTSGEDS+TyVp4DVRGBmXKTgJ 5wlApgpOtVTMeYw2Zhrd9jlsSA== -----END CERTIFICATE-----Generated at Sat Sep 26 13:21:08 2026 by rpki-client