$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: tKjlrUQ3TJZe4jyddhnvc6XbdYvx5osYVt4zr1iuKpE= Subject key identifier: 2B:F0:7E:AD:32:23:FA:55:8A:74:69:DA:78:F1:25:C4:B0:81:38:D2 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 07C3 Signing time: Tue 22 Sep 2026 21:11:20 +0000 Manifest this update: Tue 22 Sep 2026 21:11:19 +0000 Manifest next update: Tue 29 Sep 2026 21:11:19 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: aw9sxn4wJwVh7ssQcqbwM7YXVs3FCJ2dpwgovHNFgX4=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Sep 22 21:11:19 2026 GMT Not After : Sep 29 21:11:19 2026 GMT Subject: CN=6ab2eef8-9ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:88:7b:7e:ee:91:56:9e:d7:a5:d0:80:4b:a2: fa:bb:aa:99:05:bb:12:37:f8:0b:f8:c7:0d:14:11: fe:ce:87:46:6e:7e:14:57:4b:d7:31:46:86:43:ce: 0e:78:e6:ad:c9:44:96:c9:03:fb:e7:8f:7c:aa:dd: ce:34:53:42:cd:5b:6c:78:c2:82:f8:c2:44:ea:00: 5e:f5:e5:29:28:1c:f5:fb:2e:2f:1f:04:f9:12:00: dd:b9:60:81:0c:a3:29:6d:04:7c:3f:2d:9c:90:da: 69:77:69:8f:c0:97:53:4f:e4:dd:61:fc:2d:18:60: 9f:06:04:03:bb:1d:c3:73:d8:95:41:ad:5d:75:b6: c0:fa:07:a2:ec:b5:8a:7d:dd:90:04:0a:68:da:d9: b6:46:94:b4:58:a7:76:e8:33:53:1b:e9:5c:1a:f2: db:a1:b1:6f:13:87:5d:5f:b5:db:2e:e8:5d:04:dc: 67:e8:a4:75:97:85:f3:ad:e4:30:74:79:a2:7b:ca: 84:9e:f3:fa:b0:92:36:6d:be:9d:d3:0f:fc:7e:b7: c1:e8:a0:a8:a9:32:74:6d:d3:b3:c1:ee:87:b5:c4: 38:ec:d7:30:2f:32:e1:5a:8c:e6:64:05:1f:9e:6b: 0a:ce:c4:e7:52:88:f3:e5:52:92:e9:ef:2d:88:c3: 26:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F0:7E:AD:32:23:FA:55:8A:74:69:DA:78:F1:25:C4:B0:81:38:D2 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:28:b6:01:b5:d4:da:e2:d5:a3:23:97:36:b5:35:0e:cd:ef: 40:1d:46:a8:2c:a8:03:de:30:0b:83:94:bb:3b:d9:de:79:8e: db:31:e1:b7:a2:5b:40:db:b2:68:d0:e3:4b:2f:0f:c4:37:50: dc:c3:ab:c9:89:84:26:08:0b:8f:f4:46:50:0a:9c:87:56:e6: 34:89:39:65:c1:4e:60:1e:9e:a2:5d:a4:07:9d:ed:b1:f1:d7: b4:b8:bd:71:8c:a8:9b:0c:83:5f:1c:2d:13:6e:e7:e3:d4:ff: 1d:1e:7c:2a:b0:53:f6:8d:32:5c:e8:28:8e:5c:62:0b:04:ac: b6:b4:f3:ce:64:09:e9:75:9d:49:c5:21:a1:4f:ac:ae:cf:e2: 8f:94:ee:e2:aa:c1:05:04:01:5d:ba:02:47:76:1e:d2:ac:4d: 4e:cb:d5:7e:c3:62:8b:e4:ee:69:e3:0e:a4:63:cc:e2:99:48: f6:e5:a8:3b:de:03:6b:1d:30:ce:2a:46:d7:3c:78:3d:cd:36: 77:e6:90:50:17:29:40:ad:9a:df:2f:fb:77:3f:d6:a9:90:8c: 91:68:6d:77:98:7f:4a:2c:b0:5d:78:16:d5:34:59:d9:34:19: 27:7d:cc:98:44:f1:b3:10:7f:57:d6:d9:b9:36:7f:01:2a:41: 6d:5d:45:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjYwOTIyMjExMTE5WhcNMjYwOTI5MjExMTE5WjAYMRYwFAYD VQQDEw02YWIyZWVmOC05YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4h7fu6RVp7XpdCAS6L6u6qZBbsSN/gL+McNFBH+zodGbn4UV0vXMUaGQ84O eOatyUSWyQP75498qt3ONFNCzVtseMKC+MJE6gBe9eUpKBz1+y4vHwT5EgDduWCB DKMpbQR8Py2ckNppd2mPwJdTT+TdYfwtGGCfBgQDux3Dc9iVQa1ddbbA+gei7LWK fd2QBApo2tm2RpS0WKd26DNTG+lcGvLbobFvE4ddX7XbLuhdBNxn6KR1l4XzreQw dHmie8qEnvP6sJI2bb6d0w/8frfB6KCoqTJ0bdOzwe6HtcQ47NcwLzLhWozmZAUf nmsKzsTnUojz5VKS6e8tiMMmGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvwfq0y I/pVinRp2njxJcSwgTjSMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnSi2AbXU2uLVoyOXNrU1Ds3vQB1GqCyoA94wC4OUuzvZ3nmO2zHht6JbQNuy aNDjSy8PxDdQ3MOryYmEJggLj/RGUAqch1bmNIk5ZcFOYB6eol2kB53tsfHXtLi9 cYyomwyDXxwtE27n49T/HR58KrBT9o0yXOgojlxiCwSstrTzzmQJ6XWdScUhoU+s rs/ij5Tu4qrBBQQBXboCR3Ye0qxNTsvVfsNii+TuaeMOpGPM4plI9uWoO94Dax0w zipG1zx4Pc02d+aQUBcpQK2a3y/7dz/WqZCMkWhtd5h/SiywXXgW1TRZ2TQZJ33M mETxsxB/V9bZuTZ/ASpBbV1FJQ== -----END CERTIFICATE-----Generated at Thu Sep 24 08:50:54 2026 by rpki-client