$ rpki-client -vvvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft File: tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json) Hash identifier: /4rHg1NY72BsLAo3bmbWywlfRVnbhcmaZo50Pj5R6hI= Subject key identifier: 90:A3:5C:73:FD:13:B7:90:FF:A7:27:94:78:70:3A:C9:1C:5F:7F:C3 Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft Manifest number: 0281 Signing time: Sat 26 Sep 2026 18:39:19 +0000 Manifest this update: Sat 26 Sep 2026 18:39:18 +0000 Manifest next update: Sat 03 Oct 2026 18:39:18 +0000 Files and hashes: 1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: QcJw0fcrNHPFWONPH4Ru8Zdg4qMzawdUZN6RQa3kA3k=) 2: DD40AF5AA77E11F1AC50A9373F11F970.roa (hash: 6Uowsef2jJ1DQ1gBAp/T7MapE+BFd720LL4HH47jr0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Validity Not Before: Sep 26 18:39:18 2026 GMT Not After : Oct 3 18:39:18 2026 GMT Subject: CN=6ab81157-073a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:da:44:7d:16:8b:0c:4a:ce:17:e3:3c:6f: de:09:44:db:48:86:76:44:60:5d:4a:06:c6:a2:81: dd:02:16:ee:2c:79:c3:21:27:22:6d:6f:16:b6:63: 55:12:09:a1:0b:ed:81:6e:07:90:fd:cd:29:3a:60: 44:65:c5:d6:d3:9c:9b:1b:b1:99:2d:a4:e5:88:1a: a9:d0:7d:74:a3:a4:07:e9:ae:b3:e4:72:d4:72:8c: 3c:bf:08:01:bd:c4:c5:26:72:75:91:5d:ae:f1:39: 92:d8:ac:ba:75:86:29:55:05:6a:3b:17:aa:da:f6: 4f:8d:73:95:e7:35:c8:ee:ec:56:b0:0e:32:ae:01: e4:0b:02:5e:d7:5f:c1:12:e2:b5:c0:a4:80:d3:e7: 51:af:5f:9d:2a:a3:67:8b:06:95:0c:4a:66:16:68: c2:1b:32:71:db:17:53:e5:b8:e0:cf:10:ef:44:e0: b6:51:44:0f:ab:06:a0:9c:b9:fe:9a:b7:84:db:4e: be:72:03:f8:ce:bc:5c:42:6e:63:71:02:a1:f2:f7: 9f:69:c8:ce:a0:9e:bb:02:74:5a:85:f3:06:68:20: d0:1e:7f:83:fa:ef:7d:49:1b:17:08:c3:04:d0:d7: ce:c3:4a:61:40:49:a1:3e:18:f1:1e:ea:03:d7:51: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A3:5C:73:FD:13:B7:90:FF:A7:27:94:78:70:3A:C9:1C:5F:7F:C3 X509v3 Authority Key Identifier: keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:19:e3:e8:45:ba:31:91:3b:de:15:2f:0e:1e:1d:4c:6a:ef: 82:57:7a:5e:6b:75:fc:59:38:da:3a:50:31:bf:3b:fa:c8:fb: 7d:f0:73:96:57:a1:7b:53:7a:75:f3:e2:40:8b:7e:59:8b:00: a0:09:6a:e8:a5:2c:06:f4:96:90:6f:06:17:87:16:9f:74:fd: 59:d4:24:31:52:05:11:41:ed:32:4e:e9:56:8d:4b:65:51:b1: 41:10:52:14:11:7d:c1:19:3d:44:16:fc:fd:4c:8c:b5:7e:53: 1f:d6:cb:86:97:5d:73:4b:c8:74:4b:25:b9:33:a6:09:bd:0d: 3c:0a:bd:92:4c:e7:0a:62:cc:ac:2c:11:de:62:56:e6:28:57: ad:f9:49:61:c5:86:cb:a1:5f:6e:f8:cf:a2:10:36:9b:63:d7: b5:1c:0f:93:6c:60:37:40:ba:90:df:a5:b2:a1:83:79:7a:1e: 78:a1:40:e2:65:17:09:00:a9:f5:cf:92:0c:f7:4f:60:f0:25: 19:3d:de:9e:41:3f:de:a9:a2:e2:d7:44:16:5e:68:9d:42:04: 0e:db:7b:67:17:4a:ed:27:8d:d3:79:66:87:55:da:57:6a:d5: a8:5f:0b:69:5f:c4:9a:cd:37:98:d7:1d:2d:0e:d9:e5:31:3b: 5d:3b:0b:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKEI0ODNEQTA1RjgxMDhGQUQ1NkI5NjdBREFERDI1MUM2 Qzk2OUMyNTIwHhcNMjYwOTI2MTgzOTE4WhcNMjYxMDAzMTgzOTE4WjAYMRYwFAYD VQQDEw02YWI4MTE1Ny0wNzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXfaRH0WiwxKzhfjPG/eCUTbSIZ2RGBdSgbGooHdAhbuLHnDIScibW8WtmNV EgmhC+2BbgeQ/c0pOmBEZcXW05ybG7GZLaTliBqp0H10o6QH6a6z5HLUcow8vwgB vcTFJnJ1kV2u8TmS2Ky6dYYpVQVqOxeq2vZPjXOV5zXI7uxWsA4yrgHkCwJe11/B EuK1wKSA0+dRr1+dKqNniwaVDEpmFmjCGzJx2xdT5bjgzxDvROC2UUQPqwagnLn+ mreE206+cgP4zrxcQm5jcQKh8vefacjOoJ67AnRahfMGaCDQHn+D+u99SRsXCMME 0NfOw0phQEmhPhjxHuoD11GrtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCjXHP9 E7eQ/6cnlHhwOskcX3/DMB8GA1UdIwQYMBaAFLSD2gX4EI+tVrlnra3SUcbJacJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9CRjBBMUU5QUYw QjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2MVd1V2V0cmRKUnhzbHB3 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJUGFCZmdRajYxV3VXZXRyZEpSeHNscHdsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9CRjBBMUU5QUYwQjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2 MVd1V2V0cmRKUnhzbHB3bEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOxnj6EW6MZE73hUvDh4dTGrvgld6Xmt1/Fk42jpQMb87+sj7ffBzllehe1N6 dfPiQIt+WYsAoAlq6KUsBvSWkG8GF4cWn3T9WdQkMVIFEUHtMk7pVo1LZVGxQRBS FBF9wRk9RBb8/UyMtX5TH9bLhpddc0vIdEsluTOmCb0NPAq9kkznCmLMrCwR3mJW 5ihXrflJYcWGy6FfbvjPohA2m2PXtRwPk2xgN0C6kN+lsqGDeXoeeKFA4mUXCQCp 9c+SDPdPYPAlGT3enkE/3qmi4tdEFl5onUIEDtt7ZxdK7SeN03lmh1XaV2rVqF8L aV/Ems03mNcdLQ7Z5TE7XTsL6Q== -----END CERTIFICATE-----Generated at Mon Sep 28 18:43:34 2026 by rpki-client