$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft File: tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft (raw, json) Hash identifier: YiNf0Ns2EIaJPJX6NiM5/eyZ1w3Bv8A9Wl0t9D7j8LE= Subject key identifier: 4F:28:2F:78:5E:32:00:BC:80:E9:EF:5D:F3:F7:62:FC:72:F6:33:C2 Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft Manifest number: 0203 Signing time: Wed 23 Sep 2026 03:04:51 +0000 Manifest this update: Wed 23 Sep 2026 03:04:51 +0000 Manifest next update: Wed 30 Sep 2026 03:04:51 +0000 Files and hashes: 1: tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl (hash: qAinKuz9O1aIOZlA6Db1nZ9XplUWS2On943EFuOfeFw=) 2: 79E25D40601211F1AD9319218A47A888.roa (hash: q30SnaEDLTLFEYzr3C7O98SoFArm/k9dGLI4gYwGx7A=) 3: ACC45B54619411F19AF0775A8347A888.roa (hash: JuZvLZgp7cBMbz5SArZAcdTlGbnZq2/Za1QddcsY5rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Validity Not Before: Sep 23 03:04:51 2026 GMT Not After : Sep 30 03:04:51 2026 GMT Subject: CN=6ab341d3-955e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:d1:3c:2d:05:6d:d9:f8:ac:e8:39:9d:44: 3b:c7:19:72:56:53:fb:a0:fb:39:d1:3b:74:60:0b: 31:a0:ec:11:10:20:01:5f:4e:ec:c2:c5:5f:05:ba: e8:af:4c:7f:ac:6c:4e:85:0e:e5:30:8d:07:74:6a: 09:81:77:88:5b:a5:2f:f0:ca:c2:d1:f7:c2:77:21: 37:5b:2b:54:98:a3:d4:ad:ac:db:15:51:06:9b:40: 7c:ec:df:95:e8:b7:bf:db:cc:56:85:a4:1c:96:bc: b3:5c:39:2c:3e:a5:92:9c:83:37:de:4a:85:2a:1a: 00:8c:5f:c3:bd:14:07:ce:b0:a9:76:0b:4a:7d:05: 64:10:eb:39:69:37:ea:92:a6:7e:c5:2b:11:f5:ce: a5:7b:50:90:0d:8e:7a:6e:49:d1:0c:d3:b1:1a:59: b2:2f:4f:5f:25:e9:06:89:f1:8a:de:46:4e:73:69: 31:aa:05:c4:c1:57:af:62:4f:dc:8c:9a:fa:7f:77: c3:92:50:d1:00:7c:0a:38:55:28:48:74:0e:8a:5d: 23:04:93:9d:54:96:be:84:6a:cb:1d:93:4e:7d:81: 93:d0:68:73:f8:f3:eb:45:d8:b2:d1:26:bd:ab:2b: 64:dc:a1:c1:4c:a6:33:24:f9:a7:d5:d6:2e:e3:5c: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:28:2F:78:5E:32:00:BC:80:E9:EF:5D:F3:F7:62:FC:72:F6:33:C2 X509v3 Authority Key Identifier: keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:fd:ab:e8:ab:7a:c3:cc:84:1a:17:06:ab:f8:02:e4:5c:ca: cd:1e:11:22:85:1b:d1:4e:45:42:38:7b:d9:3c:cd:35:0a:6d: 18:6e:2b:1e:f6:c8:2e:e4:b4:20:c7:ca:59:03:87:61:73:dc: ce:a1:1d:8b:0a:2f:b3:19:7d:d0:96:b0:da:33:c1:4b:4b:83: be:26:b7:b1:07:dd:b0:3f:42:5e:df:21:02:60:db:64:c3:a2: 1e:25:5d:ce:4e:f8:96:4f:e5:9f:11:25:eb:b2:92:70:0e:58: 76:69:37:d9:4a:74:55:a5:f9:98:91:0d:18:35:be:01:70:35: 82:3f:e6:8b:e4:4b:17:52:c4:17:6a:f7:84:59:a6:43:c9:f5: a5:77:b9:9b:a3:b8:15:56:ff:3d:ba:f8:0a:43:7f:5a:7f:cd: da:13:60:5a:77:72:42:92:84:b9:1c:96:69:f7:d2:a7:be:c7: 0d:95:0e:4f:f5:f9:48:38:a3:88:83:e2:53:76:dd:c6:a2:ec: 20:86:ac:d1:b8:27:42:44:24:20:fc:0a:e1:af:f0:8e:99:41: 67:e4:27:0b:e4:ab:d4:6b:ef:b6:2e:69:3c:a1:e8:97:f8:19: fc:c8:1f:c4:c6:be:55:11:c1:56:a1:e5:67:8e:9a:f8:35:dc: be:fa:a9:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKEI0ODY1RTNCRTlDNTY5RDJCOTNGMkMzNTFDQUIyNEQx NTA2QUFDMEQwHhcNMjYwOTIzMDMwNDUxWhcNMjYwOTMwMDMwNDUxWjAYMRYwFAYD VQQDEw02YWIzNDFkMy05NTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdbRPC0Fbdn4rOg5nUQ7xxlyVlP7oPs50Tt0YAsxoOwRECABX07swsVfBbro r0x/rGxOhQ7lMI0HdGoJgXeIW6Uv8MrC0ffCdyE3WytUmKPUrazbFVEGm0B87N+V 6Le/28xWhaQclryzXDksPqWSnIM33kqFKhoAjF/DvRQHzrCpdgtKfQVkEOs5aTfq kqZ+xSsR9c6le1CQDY56bknRDNOxGlmyL09fJekGifGK3kZOc2kxqgXEwVevYk/c jJr6f3fDklDRAHwKOFUoSHQOil0jBJOdVJa+hGrLHZNOfYGT0Ghz+PPrRdiy0Sa9 qytk3KHBTKYzJPmn1dYu41xkjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8oL3he MgC8gOnvXfP3Yvxy9jPCMB8GA1UdIwQYMBaAFLSGXjvpxWnSuT8sNRyrJNFQaqwN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zNTcwREYyRUIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFkSzVQeXcxSEtzazBWQnFy QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJWmVPLW5GYWRLNVB5dzFIS3NrMFZCcXJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zNTcwREYyRUIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFk SzVQeXcxSEtzazBWQnFyQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcf2r6Kt6w8yEGhcGq/gC5FzKzR4RIoUb0U5FQjh72TzNNQptGG4rHvbILuS0 IMfKWQOHYXPczqEdiwovsxl90Jaw2jPBS0uDvia3sQfdsD9CXt8hAmDbZMOiHiVd zk74lk/lnxEl67KScA5Ydmk32Up0VaX5mJENGDW+AXA1gj/mi+RLF1LEF2r3hFmm Q8n1pXe5m6O4FVb/Pbr4CkN/Wn/N2hNgWndyQpKEuRyWaffSp77HDZUOT/X5SDij iIPiU3bdxqLsIIas0bgnQkQkIPwK4a/wjplBZ+QnC+Sr1Gvvti5pPKHol/gZ/Mgf xMa+VRHBVqHlZ46a+DXcvvqpJA== -----END CERTIFICATE-----Generated at Wed Sep 23 12:30:29 2026 by rpki-client