$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: 5tMlFPWtwbVJb6yBTg29FTUiLr2D2K4NkQ1lxBbyVvA= Subject key identifier: EA:AA:40:D9:9A:50:3B:89:0C:A6:52:4D:FA:90:CC:D1:CB:6F:91:BF Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 060C Signing time: Tue 22 Sep 2026 22:35:15 +0000 Manifest this update: Tue 22 Sep 2026 22:35:14 +0000 Manifest next update: Tue 29 Sep 2026 22:35:14 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: FdLM5IT3bqq4V3s8we4Y8ihxNd3XpwJbvHAF5oIoRvM=) 2: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: ZwaaaCTB5MJnKC+ti5oXMWpTHrYQMXviyJGrRl6G7v4=) 3: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: 39dWXtJ3zNJllsdeoKvUITiTmTYBuJqx9UsYIBiECf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Sep 22 22:35:14 2026 GMT Not After : Sep 29 22:35:14 2026 GMT Subject: CN=6ab302a3-619e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:9c:32:76:a2:3f:1c:c1:c1:93:65:f0:e4: bd:97:ec:70:31:bf:ae:f6:94:e0:76:10:65:09:da: 9a:ca:dc:df:ec:79:02:7a:0d:a2:23:ba:e3:0a:10: aa:7e:97:8f:ca:a6:89:42:3e:d8:e4:72:f4:70:9a: 6b:ad:99:66:a3:29:b2:9b:7d:c3:29:fe:12:ae:72: d0:cd:16:95:45:25:69:c0:89:bc:94:75:1b:de:88: aa:1e:35:20:80:c6:66:2f:4b:a7:4c:65:98:4a:39: 3a:07:84:38:1c:05:4e:3c:03:0e:77:93:41:37:b2: 1f:b8:4e:cf:25:80:f4:00:dd:f4:cf:71:72:3a:39: ed:66:b3:29:a0:c5:6a:33:10:a5:5f:18:d4:52:70: 57:c3:5e:93:28:5e:08:e9:f8:05:74:cd:f1:2e:5b: cb:8a:5e:81:e7:20:43:c9:3b:9d:bc:b6:07:b2:c3: 1d:26:e9:17:83:3d:a2:54:dd:9f:40:57:00:af:04: c6:15:60:fd:5e:1f:81:01:35:70:cc:12:62:23:60: 21:46:6a:09:e8:2c:7b:96:53:28:cf:11:ad:d1:4c: 96:4a:dd:b1:99:3d:08:3e:0f:e2:ec:c3:79:a5:c4: 32:5e:11:08:60:3c:03:ad:7e:f3:f1:e1:60:9b:15: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AA:40:D9:9A:50:3B:89:0C:A6:52:4D:FA:90:CC:D1:CB:6F:91:BF X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c2:14:f8:79:43:5d:e6:9e:38:b2:cc:fe:10:b7:9e:d3:94: 99:8f:5a:f9:df:63:ee:fa:d7:23:e8:ba:9b:bb:68:fd:c4:e4: 14:28:3d:8e:df:7b:a6:10:d9:69:8e:98:a2:68:40:05:7c:34: c3:b4:56:b1:6e:58:c5:cb:5c:39:c5:13:a8:ba:da:fd:8a:68: 06:9b:f2:01:7b:fd:91:37:5d:7e:b0:51:fe:94:0a:5d:f3:df: b5:46:ff:d4:64:1c:76:3a:8d:35:3e:32:4b:c4:4f:0d:b8:22: 3f:9a:e7:77:69:fc:a0:9c:a5:f0:2c:5f:b7:41:2f:c7:45:54: da:ba:60:6b:15:27:d5:b1:74:9c:1e:ce:c1:de:3b:88:ac:1f: d8:63:62:13:f1:0d:60:9f:8b:5d:c1:5c:3e:2b:68:b7:99:c4: 3c:dd:1d:eb:3d:56:a1:22:cd:1c:4d:fc:51:07:6e:58:d7:97: 6b:b6:e9:26:6e:55:ef:0e:d5:f8:c7:4d:51:ca:a6:f6:0e:9a: a3:9f:a5:07:23:ee:60:17:79:b6:04:b2:5c:65:a0:90:78:bb: f6:4a:72:06:aa:98:c8:bc:92:07:3c:5e:02:dd:80:63:de:fe: e7:71:a8:a3:e6:02:2f:08:ac:c3:cc:ba:b5:da:ee:93:8b:82: 38:46:a4:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjYwOTIyMjIzNTE0WhcNMjYwOTI5MjIzNTE0WjAYMRYwFAYD VQQDEw02YWIzMDJhMy02MTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoecMnaiPxzBwZNl8OS9l+xwMb+u9pTgdhBlCdqaytzf7HkCeg2iI7rjChCq fpePyqaJQj7Y5HL0cJprrZlmoymym33DKf4SrnLQzRaVRSVpwIm8lHUb3oiqHjUg gMZmL0unTGWYSjk6B4Q4HAVOPAMOd5NBN7IfuE7PJYD0AN30z3FyOjntZrMpoMVq MxClXxjUUnBXw16TKF4I6fgFdM3xLlvLil6B5yBDyTudvLYHssMdJukXgz2iVN2f QFcArwTGFWD9Xh+BATVwzBJiI2AhRmoJ6Cx7llMozxGt0UyWSt2xmT0IPg/i7MN5 pcQyXhEIYDwDrX7z8eFgmxUwIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqqQNma UDuJDKZSTfqQzNHLb5G/MB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlcIU+HlDXeaeOLLM/hC3ntOUmY9a+d9j7vrXI+i6m7to/cTkFCg9jt97phDZ aY6YomhABXw0w7RWsW5YxctcOcUTqLra/YpoBpvyAXv9kTddfrBR/pQKXfPftUb/ 1GQcdjqNNT4yS8RPDbgiP5rnd2n8oJyl8Cxft0Evx0VU2rpgaxUn1bF0nB7Owd47 iKwf2GNiE/ENYJ+LXcFcPitot5nEPN0d6z1WoSLNHE38UQduWNeXa7bpJm5V7w7V +MdNUcqm9g6ao5+lByPuYBd5tgSyXGWgkHi79kpyBqqYyLySBzxeAt2AY97+53Go o+YCLwisw8y6tdruk4uCOEak4Q== -----END CERTIFICATE-----Generated at Fri Sep 25 00:53:46 2026 by rpki-client