$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json) Hash identifier: Lro/hqXDrsTpKqDo3S30cVT1pInRnzSuco9pwHScdFw= Subject key identifier: 34:08:74:F1:0A:D8:0A:5E:39:D8:A5:51:27:A3:78:BA:02:60:2C:3F Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft Manifest number: 01EF Signing time: Fri 25 Sep 2026 03:32:23 +0000 Manifest this update: Fri 25 Sep 2026 03:32:23 +0000 Manifest next update: Fri 02 Oct 2026 03:32:23 +0000 Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: 3O7WuJ38bRcWM9zslyrD4md4NIAUgmmUwpYGIiXSSeU=) 2: 90D05F8EABB711F1BEA6DAFF5411F970.roa (hash: MkS+e7RWc04qmAprNFSaDQdzetMMyHG8u/16PJQSYfQ=) 3: 61437CA4ABB911F1BD08353C5611F970.roa (hash: 7zLyRUO2jbdPU/ju8XFNTwlDh0zc8bJo13HRv/HfWCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Validity Not Before: Sep 25 03:32:23 2026 GMT Not After : Oct 2 03:32:23 2026 GMT Subject: CN=6ab5eb47-05d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:23:3a:4c:a3:f3:02:57:74:1e:71:c0:92: 43:ab:b3:6d:4a:ff:4c:83:b5:96:c5:9d:c0:00:e9: d0:9d:78:2f:b5:43:a9:cd:c5:8b:da:6d:d0:c0:ab: 6f:e0:6f:27:f1:b4:0c:c5:42:5c:02:d0:4f:ac:8b: 01:82:ac:4c:1e:77:d3:7e:02:a1:5e:44:0d:2d:99: b1:e6:20:a5:fe:1f:ca:e8:89:2c:a6:bc:dd:5b:67: ba:89:79:ca:fc:2d:6a:4b:c1:15:7d:a4:a1:f9:d6: 50:f4:ac:35:d0:bc:1b:c7:bb:77:d6:ab:d0:a8:f3: 5c:41:8e:3e:f1:b9:63:c7:11:24:f8:e5:8c:03:76: f4:a2:49:6c:f1:51:b2:1e:59:ff:85:77:6f:17:38: a7:41:94:a9:44:76:de:55:f6:f1:af:8b:a5:fe:d1: 81:31:b6:54:d2:04:54:5c:eb:9b:45:f6:89:3b:75: 1d:17:bb:6f:71:ea:38:50:a7:38:76:a8:65:fc:8b: 70:16:d8:a5:7f:75:bf:fa:c2:df:21:0e:6b:58:5e: 69:f9:41:64:c6:e3:52:55:a4:56:db:fa:d3:48:64: 49:af:fd:fb:8b:2f:f7:ae:1b:20:2d:32:b3:23:67: e2:c8:cc:5e:a3:61:b5:6e:a5:b8:9f:98:f4:35:c7: f7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:08:74:F1:0A:D8:0A:5E:39:D8:A5:51:27:A3:78:BA:02:60:2C:3F X509v3 Authority Key Identifier: keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:2e:7f:d3:ae:2d:db:4c:09:a1:56:f6:cd:06:ea:ec:fd:38: 4d:7e:37:57:ea:7a:e8:a8:50:07:49:cc:f4:4f:8a:86:3e:84: 4a:aa:1c:fe:24:39:80:cc:61:42:0d:05:e1:42:30:dc:0f:bc: e4:be:0b:cb:29:8c:f4:6f:15:e4:39:3b:a3:46:17:99:5b:e2: da:65:b7:b2:5a:05:33:25:ff:ad:ac:1f:a5:bc:6e:28:4c:fe: e4:78:40:99:70:f4:85:d6:8b:ae:e6:2e:3f:a6:93:af:c8:ac: c3:ee:b9:8d:1d:a7:a2:c2:ed:c9:05:70:73:d8:24:5b:be:ed: 6e:b1:c1:36:9e:ef:4e:e0:4b:16:24:52:20:3d:f3:17:d0:9d: 96:6c:60:20:69:c0:d0:eb:37:11:7b:af:aa:c6:c0:84:54:c7: 97:46:c4:d5:4c:df:ef:3a:e5:db:1e:00:16:f7:5a:ce:93:f6: 00:5e:ba:5b:f0:75:83:ed:78:0e:bf:d9:5c:21:8b:58:c1:0e: 57:51:27:f8:fe:5b:68:01:b3:0d:fc:dc:f8:14:1e:4a:c5:24: ee:2e:f3:52:4d:2b:b9:f0:03:48:39:4b:1e:fa:df:92:ca:07: 2c:ae:6e:aa:15:9c:02:e9:ce:64:cc:40:7c:d0:38:00:09:7d: ef:46:be:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx RjQwMTU4RTUwHhcNMjYwOTI1MDMzMjIzWhcNMjYxMDAyMDMzMjIzWjAYMRYwFAYD VQQDEw02YWI1ZWI0Ny0wNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEcjOkyj8wJXdB5xwJJDq7NtSv9Mg7WWxZ3AAOnQnXgvtUOpzcWL2m3QwKtv 4G8n8bQMxUJcAtBPrIsBgqxMHnfTfgKhXkQNLZmx5iCl/h/K6IksprzdW2e6iXnK /C1qS8EVfaSh+dZQ9Kw10Lwbx7t31qvQqPNcQY4+8bljxxEk+OWMA3b0okls8VGy Hln/hXdvFzinQZSpRHbeVfbxr4ul/tGBMbZU0gRUXOubRfaJO3UdF7tvceo4UKc4 dqhl/ItwFtilf3W/+sLfIQ5rWF5p+UFkxuNSVaRW2/rTSGRJr/37iy/3rhsgLTKz I2fiyMxeo2G1bqW4n5j0Ncf3hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQIdPEK 2ApeOdilUSejeLoCYCw/MB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS85ODcyNkQ2RUQxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlw OXgybUNyT1NEZ29mUUJXT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoC5/064t20wJoVb2zQbq7P04TX43V+p66KhQB0nM9E+Khj6ESqoc/iQ5gMxh Qg0F4UIw3A+85L4LyymM9G8V5Dk7o0YXmVvi2mW3sloFMyX/rawfpbxuKEz+5HhA mXD0hdaLruYuP6aTr8isw+65jR2nosLtyQVwc9gkW77tbrHBNp7vTuBLFiRSID3z F9CdlmxgIGnA0Os3EXuvqsbAhFTHl0bE1Uzf7zrl2x4AFvdazpP2AF66W/B1g+14 Dr/ZXCGLWMEOV1En+P5baAGzDfzc+BQeSsUk7i7zUk0rufADSDlLHvrfksoHLK5u qhWcAunOZMxAfNA4AAl970a+Gw== -----END CERTIFICATE-----Generated at Sat Sep 26 00:27:20 2026 by rpki-client