$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json) Hash identifier: RrY/II3g5nMnZ2n/19LGT9Ge6Ey6ECW/gFoKL9Xf4XQ= Subject key identifier: 63:84:5C:E2:6E:AA:17:26:C7:03:EE:74:07:85:DD:41:A7:9C:F1:29 Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft Manifest number: 0156 Signing time: Sun 27 Sep 2026 05:39:58 +0000 Manifest this update: Sun 27 Sep 2026 05:39:57 +0000 Manifest next update: Sun 04 Oct 2026 05:39:57 +0000 Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: M9zyBoC9qhOdFbx/VYZtFKHQ5Ok2WwHfncN1JRBlDcc=) 2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: v6BylN14fOxA4ftijT2xm8ugkwjC+LIOM8D065x7bmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 05:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919 Validity Not Before: Sep 27 05:39:57 2026 GMT Not After : Oct 4 05:39:57 2026 GMT Subject: CN=6ab8ac2e-5906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:00:42:92:8a:4e:73:60:ea:35:dd:40:fa: ed:11:87:18:7e:ee:09:1f:37:72:e6:f1:29:ff:fb: 8a:bd:c4:7f:08:51:6a:f2:d6:66:b3:27:22:bc:b1: 36:10:10:84:a0:08:a4:15:88:5b:b5:8d:fd:de:47: 04:c9:6d:2d:1f:4a:00:53:d2:e3:e0:22:17:0f:08: 91:59:b7:3e:e7:a9:4e:46:a9:0b:ca:fe:d3:88:29: d1:b9:23:ca:a8:ce:99:23:9c:c9:02:0f:5e:2d:29: 56:a9:3e:77:22:a3:da:07:7e:c8:be:14:8a:f7:c7: fe:0d:8b:43:65:dc:eb:18:98:43:7b:42:a1:79:14: 0b:9d:55:56:c0:55:38:70:4e:ae:26:0a:04:db:2c: d6:57:4f:d2:6a:61:df:cd:8e:f3:71:3d:89:f4:ed: e2:08:54:4e:1c:db:a5:e1:b9:d1:58:4e:a2:a6:b5: b4:c7:2d:1f:88:44:07:5e:bf:09:1f:f1:4c:38:6f: 83:48:48:86:32:d6:5a:bb:6d:2b:4b:06:ae:2b:f1: d3:55:c6:62:a3:c8:04:ef:e7:71:fc:fc:54:80:da: 0d:f4:a6:1c:02:d0:2e:3c:14:dd:c1:5c:32:f1:48: bb:a4:ea:15:1e:19:dc:e2:a5:8e:8a:f5:21:a5:82: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:84:5C:E2:6E:AA:17:26:C7:03:EE:74:07:85:DD:41:A7:9C:F1:29 X509v3 Authority Key Identifier: keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:38:0f:65:a0:ea:c7:7d:a9:63:25:3e:df:3f:1b:47:2c:8a: 0d:6a:5c:dd:b6:ca:a6:bc:74:29:30:3f:50:3e:31:a3:19:26: b2:69:5c:2d:c1:ae:6f:9e:a8:02:71:b2:c6:c5:53:12:82:a1: 48:18:1b:32:22:c7:45:08:ae:8d:10:4d:a6:85:a7:d5:d1:b4: 18:a5:b8:13:2e:8c:d9:27:5f:71:34:92:03:83:54:e7:54:8e: 06:b8:d0:d6:28:ec:2b:0c:38:22:30:37:80:c8:9d:73:40:7b: cb:91:fb:d0:66:5a:ff:9e:98:29:31:3c:1c:15:3f:1f:15:b1: a8:87:ae:96:f2:d4:8e:fa:6c:04:4f:24:54:bf:32:ce:60:aa: 2f:ad:4f:29:6b:dc:c2:b0:c9:73:98:39:03:c9:14:47:ca:c6: 84:4d:c4:1e:1e:e1:f9:81:1f:1b:12:4a:d4:1c:99:b9:9f:c6: 7c:1b:73:ca:b5:1b:fd:f0:21:23:d1:c6:75:f5:28:01:81:d2: 6e:3b:eb:b1:cd:eb:66:81:44:c9:da:ce:d9:18:f7:52:91:2c: c7:f5:b5:f1:bc:52:33:64:89:13:d1:bd:78:1f:48:ca:b1:f7: 06:a7:0b:f1:3f:e8:2b:ea:0a:d0:7c:fa:6e:cd:48:b6:f2:40: 2c:b8:c5:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEI0RDIxNzkzOUEyNzUxOTM4RTA3NjU5QTc5NDg4NUE5 Qzg4NDE5MTkwHhcNMjYwOTI3MDUzOTU3WhcNMjYxMDA0MDUzOTU3WjAYMRYwFAYD VQQDEw02YWI4YWMyZS01OTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfEAQpKKTnNg6jXdQPrtEYcYfu4JHzdy5vEp//uKvcR/CFFq8tZmsycivLE2 EBCEoAikFYhbtY393kcEyW0tH0oAU9Lj4CIXDwiRWbc+56lORqkLyv7TiCnRuSPK qM6ZI5zJAg9eLSlWqT53IqPaB37IvhSK98f+DYtDZdzrGJhDe0KheRQLnVVWwFU4 cE6uJgoE2yzWV0/SamHfzY7zcT2J9O3iCFROHNul4bnRWE6iprW0xy0fiEQHXr8J H/FMOG+DSEiGMtZau20rSwauK/HTVcZio8gE7+dx/PxUgNoN9KYcAtAuPBTdwVwy 8Ui7pOoVHhnc4qWOivUhpYIPDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOEXOJu qhcmxwPudAeF3UGnnPEpMB8GA1UdIwQYMBaAFLTSF5OaJ1GTjgdlmnlIhanIhBkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy81MEJEMjMwRUIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVaT09CMldhZVVpRnFjaUVH UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUIxMy81MEJEMjMwRUIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVa T09CMldhZVVpRnFjaUVHUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsjgPZaDqx32pYyU+3z8bRyyKDWpc3bbKprx0KTA/UD4xoxkmsmlcLcGub56o AnGyxsVTEoKhSBgbMiLHRQiujRBNpoWn1dG0GKW4Ey6M2SdfcTSSA4NU51SOBrjQ 1ijsKww4IjA3gMidc0B7y5H70GZa/56YKTE8HBU/HxWxqIeulvLUjvpsBE8kVL8y zmCqL61PKWvcwrDJc5g5A8kUR8rGhE3EHh7h+YEfGxJK1ByZuZ/GfBtzyrUb/fAh I9HGdfUoAYHSbjvrsc3rZoFEydrO2Rj3UpEsx/W18bxSM2SJE9G9eB9IyrH3BqcL 8T/oK+oK0Hz6bs1ItvJALLjFCQ== -----END CERTIFICATE-----Generated at Sun Sep 27 18:37:54 2026 by rpki-client