$ rpki-client -vvvf rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft File: TonyDOHR4q7I1gVlBTEwvWB9W_0.mft (raw, json) Hash identifier: 6BdGcQIGMoF5qWTxBBGA6+/k7BBccXJiaUpDWPWbDyM= Subject key identifier: 3E:15:03:68:80:FE:CD:65:9A:46:D1:2E:B8:75:59:A6:9D:54:EF:CD Authority key identifier: 4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD Certificate issuer: /CN=A912465F/serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft Manifest number: 7E Signing time: Sat 03 Oct 2026 08:29:27 +0000 Manifest this update: Sat 03 Oct 2026 08:29:26 +0000 Manifest next update: Sat 10 Oct 2026 08:29:26 +0000 Files and hashes: 1: TonyDOHR4q7I1gVlBTEwvWB9W_0.crl (hash: MJ/kODu3tsl7nshAC0wi95kwD9pZx7WYz7tchVhRfw4=) 2: 78CCC796100411F190DA552F0F3D8C67.roa (hash: 9ijSIQLwt2Gy2XEyUcUffnJwapZcaQTrQntZZWP4Uss=) 3: A885DC48100411F1A3563A300F3D8C67.roa (hash: tF3ywN7eYQwZg7AMUnYYT38GsrrKw6HcmRM3Hqi+nbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912465F, serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD Validity Not Before: Oct 3 08:29:26 2026 GMT Not After : Oct 10 08:29:26 2026 GMT Subject: CN=6ac0bce7-40b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:bf:f7:21:08:9f:01:f2:ed:9b:50:58:76: fc:18:c0:1c:e0:e9:34:f8:05:a6:28:09:0c:10:8a: f6:b4:d0:9c:3b:b0:fd:bf:82:c5:d6:84:a4:65:a3: 21:ce:6c:df:be:d5:9e:f0:3e:87:ee:c6:d9:fb:3e: 8e:48:6f:ec:ed:73:31:45:2e:90:c2:0a:9f:c2:9b: 5d:3b:90:74:a3:82:0c:90:2e:66:5e:51:96:e1:cf: 8f:4d:d1:28:d7:11:63:81:6f:6f:d7:fb:4a:a1:49: fa:bf:8f:77:44:ad:50:af:6f:ff:67:26:07:33:c5: 06:c6:50:22:1c:c7:42:07:6a:c9:37:f4:33:4d:9b: c0:3f:5d:f8:a2:1f:7d:33:f3:4b:b8:29:6e:a8:c1: 6b:e7:60:f8:89:66:10:98:b3:fa:70:b8:52:01:da: 26:a5:7e:ee:a9:a1:40:ab:9e:a8:db:1a:6b:d3:42: 68:a9:7f:7e:53:aa:50:89:fe:3d:a6:b9:34:8c:32: 3e:e4:6b:37:54:3c:e6:d3:e1:62:0a:5b:29:14:c7: 19:f8:34:9a:bd:d6:cd:90:93:de:61:1a:f0:84:fb: 47:66:20:dc:71:c2:50:ce:72:25:72:ff:e9:64:6b: 60:61:94:27:1c:b0:8a:c3:77:b4:0b:3c:4d:80:f3: a7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:15:03:68:80:FE:CD:65:9A:46:D1:2E:B8:75:59:A6:9D:54:EF:CD X509v3 Authority Key Identifier: keyid:4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3f:02:88:5b:56:fb:a9:56:88:ae:62:11:e5:92:9a:51:74: 79:4a:d6:a7:8b:b8:d9:29:e5:7d:12:56:10:e8:04:87:af:32: 62:d4:96:1d:1a:3c:7d:05:5e:2e:2e:27:4f:3b:d3:b5:6c:90: 15:76:11:a5:87:fd:99:d1:aa:55:29:b1:97:37:e5:81:d3:d7: 64:a0:16:e1:fa:e8:df:fe:5a:e4:df:8c:50:e9:47:22:dd:37: 1b:29:8c:d2:d0:ea:60:4e:f2:c0:54:d9:d2:07:51:07:a5:0d: ba:08:b0:17:41:29:b3:51:dc:5e:ae:73:63:64:70:c9:17:9f: ec:fe:98:43:e2:22:4b:78:74:6f:49:fe:f3:fd:0d:9b:5f:fa: 06:ac:c3:fd:56:aa:37:55:21:d3:e0:b4:07:0e:ce:72:78:7b: 02:87:73:bf:d3:9e:8f:73:2c:09:14:e4:c1:db:25:20:0f:65: f1:f4:ae:16:ff:18:00:25:b2:c0:c6:4a:e5:8b:45:78:0b:80: 14:8c:ef:fe:ba:65:d6:b8:0b:da:ba:16:91:50:f4:35:28:d6: 63:88:24:e3:ea:ed:ec:8f:70:4d:92:e1:99:c1:e5:1a:39:7c: 77:f9:42:80:05:7a:35:86:c4:a9:40:b5:74:2a:7e:17:91:18: 18:47:de:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NUYxMTAvBgNVBAUTKDRFODlGMjBDRTFEMUUyQUVDOEQ2MDU2NTA1MzEzMEJE NjA3RDVCRkQwHhcNMjYxMDAzMDgyOTI2WhcNMjYxMDEwMDgyOTI2WjAYMRYwFAYD VQQDEw02YWMwYmNlNy00MGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLO/9yEInwHy7ZtQWHb8GMAc4Ok0+AWmKAkMEIr2tNCcO7D9v4LF1oSkZaMh zmzfvtWe8D6H7sbZ+z6OSG/s7XMxRS6QwgqfwptdO5B0o4IMkC5mXlGW4c+PTdEo 1xFjgW9v1/tKoUn6v493RK1Qr2//ZyYHM8UGxlAiHMdCB2rJN/QzTZvAP134oh99 M/NLuCluqMFr52D4iWYQmLP6cLhSAdompX7uqaFAq56o2xpr00JoqX9+U6pQif49 prk0jDI+5Gs3VDzm0+FiClspFMcZ+DSavdbNkJPeYRrwhPtHZiDcccJQznIlcv/p ZGtgYZQnHLCKw3e0CzxNgPOnfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4VA2iA /s1lmkbRLrh1WaadVO/NMB8GA1UdIwQYMBaAFE6J8gzh0eKuyNYFZQUxML1gfVv9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY1Ri83MDJDMzRDNjA2 NDcxMUYxQjRCQUZCQzUyRDNEOEM2Ny9Ub255RE9IUjRxN0kxZ1ZsQlRFd3ZXQjlX XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1RvbnlET0hSNHE3STFnVmxCVEV3dldCOVdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY1Ri83MDJDMzRDNjA2NDcxMUYxQjRCQUZCQzUyRDNEOEM2Ny9Ub255RE9IUjRx N0kxZ1ZsQlRFd3ZXQjlXXzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABT8CiFtW+6lWiK5iEeWSmlF0eUrWp4u42SnlfRJWEOgEh68yYtSWHRo8fQVe Li4nTzvTtWyQFXYRpYf9mdGqVSmxlzflgdPXZKAW4fro3/5a5N+MUOlHIt03GymM 0tDqYE7ywFTZ0gdRB6UNugiwF0Eps1HcXq5zY2RwyRef7P6YQ+IiS3h0b0n+8/0N m1/6BqzD/VaqN1Uh0+C0Bw7Ocnh7Aodzv9Oej3MsCRTkwdslIA9l8fSuFv8YACWy wMZK5YtFeAuAFIzv/rpl1rgL2roWkVD0NSjWY4gk4+rt7I9wTZLhmcHlGjl8d/lC gAV6NYbEqUC1dCp+F5EYGEfe/A== -----END CERTIFICATE-----Generated at Sun Oct 4 01:27:51 2026 by rpki-client