$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft File: TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft (raw, json) Hash identifier: VWwKtvqzq/WdciE+ikNFJIc/ZzB4OdKb85iQZih3Mk4= Subject key identifier: FD:E0:9E:FC:35:6C:8C:FD:3B:B5:76:5F:11:63:F0:AC:57:6C:2E:4E Authority key identifier: 4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8 Certificate issuer: /CN=A9129FB7/serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft Manifest number: 33 Signing time: Wed 23 Sep 2026 08:23:42 +0000 Manifest this update: Wed 23 Sep 2026 08:23:41 +0000 Manifest next update: Wed 30 Sep 2026 08:23:41 +0000 Files and hashes: 1: TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl (hash: /5SDlRdkFs11tr5/RbP8Xl9xTYCdNPFy31yxB4yTCF8=) 2: C524767269FD11F1BAFBB65F6847A888.roa (hash: ygqljUs8p8UwgEQzC1Y+C3YKpEUTVGsqmNq6WUEwm9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129FB7, serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8 Validity Not Before: Sep 23 08:23:41 2026 GMT Not After : Sep 30 08:23:41 2026 GMT Subject: CN=6ab38c8e-2ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:c1:6d:a4:35:f5:71:2b:34:ca:f8:27:db: 37:21:54:ae:de:3a:4e:05:d7:53:61:94:f5:47:ee: bf:89:8e:54:5a:4d:4b:57:60:1b:5c:f0:d1:e3:20: b1:23:55:e3:c0:eb:d3:d8:33:ef:73:ec:fb:64:21: 9f:a6:85:1f:d5:3a:34:44:70:98:38:f5:d6:33:9d: 30:07:1c:95:60:40:6d:e6:fb:03:db:e2:ef:db:9d: d2:15:7f:53:73:68:ce:6c:ef:32:9f:7f:17:f7:df: 4b:78:8b:dc:72:10:7d:bd:40:d1:e8:22:ad:a2:0f: 65:f0:d7:8e:9a:b3:0c:6a:48:96:f4:92:ef:5a:ad: 6a:88:eb:7d:4b:45:65:6b:f6:40:b2:7f:ca:1b:60: 81:3a:e8:bc:72:44:a8:f3:f9:8f:a9:1d:1c:d6:3a: 80:22:87:84:30:c0:fe:3a:7e:ec:d1:8d:3c:f5:54: 41:d0:ad:b4:a4:ac:7a:7c:92:e0:5e:b9:8f:b7:60: 20:fd:dc:4a:1a:30:0f:29:6d:e9:fd:a0:72:55:35: 44:c4:d3:8d:e5:04:2c:f0:b7:c2:3d:72:0e:d7:78: 31:94:a9:d9:70:1b:3a:e3:95:52:03:ac:99:48:c4: fd:bb:64:9f:3c:1b:37:0e:d2:b5:b2:5b:77:71:43: ef:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E0:9E:FC:35:6C:8C:FD:3B:B5:76:5F:11:63:F0:AC:57:6C:2E:4E X509v3 Authority Key Identifier: keyid:4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0f:00:94:ba:10:e5:90:2b:09:3e:69:a0:11:3d:2c:7f:f5: f3:3e:59:20:b3:32:3e:c1:3d:75:38:c3:5f:7d:a9:24:49:97: 48:d4:97:2c:7d:00:96:41:65:2b:47:f0:bd:ac:b4:22:99:99: fc:55:f9:9d:fa:8c:e1:48:0e:34:00:8f:15:f0:67:99:08:ee: 1c:53:90:a6:9c:71:10:35:c4:cc:c9:45:ef:18:81:de:9d:e4: 2c:ac:fa:81:cf:d0:3c:0e:23:2d:6b:89:9a:64:b7:98:1b:e3: 94:43:a2:32:3a:a2:34:8a:fa:4b:ca:fa:1b:c7:44:db:fb:6a: 16:c2:d7:c2:3b:1b:91:1c:ce:99:00:9c:ff:0c:84:46:4c:47: 02:88:13:49:aa:be:9f:1f:e1:75:96:40:22:68:1f:e4:45:04: 98:49:be:fa:c1:09:d7:e6:1c:dc:d5:57:4b:27:72:07:63:e1: b6:bd:d6:50:28:e8:cc:a3:71:76:34:1b:e1:5c:82:ee:0f:c8: 49:55:a3:b1:ea:bc:b0:6d:37:56:52:5f:e0:a4:6e:7b:4b:d7: 85:5e:59:a0:a6:b6:ed:f8:02:52:a9:b7:17:be:a6:50:53:ed: 9d:30:08:0c:a4:fe:6a:5f:93:e7:c6:fb:dd:bb:5d:32:19:33: cc:10:f9:f9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OUZCNzExMC8GA1UEBRMoNEM2MjUzMTBFODNDNDBENzMyRERCMDM4NDc4NTg3NjNE NDhCREREODAeFw0yNjA5MjMwODIzNDFaFw0yNjA5MzAwODIzNDFaMBgxFjAUBgNV BAMTDTZhYjM4YzhlLTJkZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiesFtpDX1cSs0yvgn2zchVK7eOk4F11NhlPVH7r+JjlRaTUtXYBtc8NHjILEj VePA69PYM+9z7PtkIZ+mhR/VOjREcJg49dYznTAHHJVgQG3m+wPb4u/bndIVf1Nz aM5s7zKffxf330t4i9xyEH29QNHoIq2iD2Xw146aswxqSJb0ku9arWqI631LRWVr 9kCyf8obYIE66LxyRKjz+Y+pHRzWOoAih4QwwP46fuzRjTz1VEHQrbSkrHp8kuBe uY+3YCD93EoaMA8pben9oHJVNUTE043lBCzwt8I9cg7XeDGUqdlwGzrjlVIDrJlI xP27ZJ88GzcO0rWyW3dxQ++hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/eCe/DVs jP07tXZfEWPwrFdsLk4wHwYDVR0jBBgwFoAUTGJTEOg8QNcy3bA4R4WHY9SL3dgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5RkI3LzU0MTBEQzVDNjlG QjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4UU5jeTNiQTRSNFdIWTlTTDNk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEdKVEVPZzhRTmN5M2JBNFI0V0hZOVNMM2RnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 RkI3LzU0MTBEQzVDNjlGQjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4UU5j eTNiQTRSNFdIWTlTTDNkZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdDwCUuhDlkCsJPmmgET0sf/XzPlkgszI+wT11OMNffakkSZdI1JcsfQCWQWUr R/C9rLQimZn8Vfmd+ozhSA40AI8V8GeZCO4cU5CmnHEQNcTMyUXvGIHeneQsrPqB z9A8DiMta4maZLeYG+OUQ6IyOqI0ivpLyvobx0Tb+2oWwtfCOxuRHM6ZAJz/DIRG TEcCiBNJqr6fH+F1lkAiaB/kRQSYSb76wQnX5hzc1VdLJ3IHY+G2vdZQKOjMo3F2 NBvhXILuD8hJVaOx6rywbTdWUl/gpG57S9eFXlmgprbt+AJSqbcXvqZQU+2dMAgM pP5qX5Pnxvvdu10yGTPMEPn5 -----END CERTIFICATE-----Generated at Fri Sep 25 07:08:54 2026 by rpki-client