$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft File: tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json) Hash identifier: cyOOSjAffMJJ2uX1ct4nwce/lJUPyZiY9rW2zxmpzFM= Subject key identifier: FD:FF:C8:42:FC:AC:98:03:C1:4C:D7:3B:DA:68:E6:C8:F9:9E:7A:72 Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft Manifest number: 01A3 Signing time: Fri 25 Sep 2026 04:16:26 +0000 Manifest this update: Fri 25 Sep 2026 04:16:25 +0000 Manifest next update: Fri 02 Oct 2026 04:16:25 +0000 Files and hashes: 1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: TOjybD1tT1TYM6LaDELVSPPgkWMUoAuohCNOW0yGC2k=) 2: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: Mem81CDNt2s+1wxtJl9qhDaTI/CWwYf0sPuRtvT/byE=) 3: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: cYJup+wUJGtYgdIrc1oUwAkSXzmV3AlmQSx4GJxEnkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Validity Not Before: Sep 25 04:16:25 2026 GMT Not After : Oct 2 04:16:25 2026 GMT Subject: CN=6ab5f599-6e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:f9:10:eb:67:4a:a6:39:f2:59:91:c7:9c: 63:21:09:07:4f:5d:8f:d1:7d:a5:a8:3b:ce:3f:5b: 90:30:9b:24:82:62:12:8d:3a:9c:05:06:ad:9d:29: 02:54:0c:0d:b6:ce:29:74:b9:f8:03:7c:07:ea:3b: 24:62:41:71:5f:c8:d6:55:88:da:c9:f4:33:55:10: 9b:a3:2b:8f:a7:8c:49:6f:05:79:f2:48:c0:f2:c7: 82:2f:5d:3d:99:e6:b8:99:3e:24:9f:15:4a:79:21: 86:5e:d4:fa:ba:e2:c2:79:f1:40:86:b1:0a:a9:70: dd:cb:07:52:b3:e0:1f:96:94:84:f0:d6:bd:07:88: 17:3e:59:6b:5a:82:d4:e4:85:0b:53:28:3d:d3:d7: 0d:b0:b2:fa:76:a4:57:26:23:d1:cf:32:b8:ee:ab: 4d:73:c6:72:76:56:e6:98:b5:7a:59:bb:45:25:9a: a7:ae:86:34:2b:76:f1:0d:ed:5f:b8:d9:c1:5d:99: c8:2f:dd:df:9e:e1:b3:c4:0a:5a:38:dc:88:07:48: 07:67:c0:a9:0b:8f:f7:6f:20:32:d1:9e:1d:3f:f4: fe:c7:f8:60:ed:2e:36:4a:3e:33:aa:b9:61:18:2d: f8:59:04:ce:2f:6c:9c:4f:96:8d:08:53:16:ff:cf: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FF:C8:42:FC:AC:98:03:C1:4C:D7:3B:DA:68:E6:C8:F9:9E:7A:72 X509v3 Authority Key Identifier: keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:63:9e:d8:4e:41:37:7d:d1:71:f0:9e:6e:ac:46:fe:3b:c4: ca:8b:38:33:ac:47:83:6e:a8:13:76:98:4d:f1:7b:5f:f6:26: 64:30:ff:ad:91:9c:85:04:76:b7:2c:45:02:98:5f:96:18:9d: a7:27:d7:39:83:25:a5:76:2d:50:cc:3b:1c:dc:94:c5:d9:3e: f9:be:a6:97:c0:55:5a:fa:51:98:67:a5:f4:b0:10:78:3a:74: 2a:ee:93:a2:8c:fa:70:52:68:44:0d:17:f6:df:a0:c7:7c:e5: 79:62:59:4b:e0:58:dd:1b:3a:73:27:70:f4:90:71:72:d2:00: d7:65:9c:99:9e:b1:89:5b:e2:1e:bc:d8:68:e5:d6:84:9c:14: b1:39:13:22:9d:d8:a8:43:ea:95:df:c3:a0:e3:a4:09:da:5c: 5a:5a:8d:3f:7d:3a:13:8c:69:19:33:9d:78:72:53:0a:e4:15: 50:02:54:78:68:21:1f:6a:54:79:f7:75:d8:41:da:fb:41:51: f8:51:f1:b2:68:17:37:07:fd:95:57:2c:92:af:3d:29:d2:6e: b2:5e:e2:02:e2:9a:68:eb:f6:be:6a:4f:22:58:61:ce:06:fd: dc:74:ad:a8:c5:5a:f2:f1:25:27:ff:aa:73:84:5e:a6:4d:05: ad:0b:b8:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEI0M0M0RTNEMzJGOTVCNTA1NUQwNEZEQzAxRjg1MTk2 MzdDODlBNkYwHhcNMjYwOTI1MDQxNjI1WhcNMjYxMDAyMDQxNjI1WjAYMRYwFAYD VQQDEw02YWI1ZjU5OS02ZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj35EOtnSqY58lmRx5xjIQkHT12P0X2lqDvOP1uQMJskgmISjTqcBQatnSkC VAwNts4pdLn4A3wH6jskYkFxX8jWVYjayfQzVRCboyuPp4xJbwV58kjA8seCL109 mea4mT4knxVKeSGGXtT6uuLCefFAhrEKqXDdywdSs+AflpSE8Na9B4gXPllrWoLU 5IULUyg909cNsLL6dqRXJiPRzzK47qtNc8ZydlbmmLV6WbtFJZqnroY0K3bxDe1f uNnBXZnIL93fnuGzxApaONyIB0gHZ8CpC4/3byAy0Z4dP/T+x/hg7S42Sj4zqrlh GC34WQTOL2ycT5aNCFMW/88JeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3/yEL8 rJgDwUzXO9po5sj5nnpyMB8GA1UdIwQYMBaAFLQ8Tj0y+VtQVdBP3AH4UZY3yJpv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My82REYwRTEwODNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcxQlYwRV9jQWZoUmxqZklt bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3REeE9QVEw1VzFCVjBFX2NBZmhSbGpmSW1tOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My82REYwRTEwODNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcx QlYwRV9jQWZoUmxqZkltbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARmOe2E5BN33RcfCebqxG/jvEyos4M6xHg26oE3aYTfF7X/YmZDD/rZGchQR2 tyxFAphflhidpyfXOYMlpXYtUMw7HNyUxdk++b6ml8BVWvpRmGel9LAQeDp0Ku6T ooz6cFJoRA0X9t+gx3zleWJZS+BY3Rs6cydw9JBxctIA12WcmZ6xiVviHrzYaOXW hJwUsTkTIp3YqEPqld/DoOOkCdpcWlqNP306E4xpGTOdeHJTCuQVUAJUeGghH2pU efd12EHa+0FR+FHxsmgXNwf9lVcskq89KdJusl7iAuKaaOv2vmpPIlhhzgb93HSt qMVa8vElJ/+qc4Repk0FrQu47w== -----END CERTIFICATE-----Generated at Fri Sep 25 17:16:06 2026 by rpki-client