$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft File: tg1afDY_D02TL-MXuQzmz4DSg8k.mft (raw, json) Hash identifier: AhwG6kk4E1QjnsVrDIV46VH63w+1WyisDmX9hjRhRcw= Subject key identifier: A4:A7:C7:97:79:7D:8F:10:9E:59:88:BD:8C:BA:48:FB:95:17:65:0D Authority key identifier: B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 Certificate issuer: /CN=A9118309/serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft Manifest number: 0B2B Signing time: Sat 10 Oct 2026 19:21:19 +0000 Manifest this update: Sat 10 Oct 2026 19:21:18 +0000 Manifest next update: Sat 17 Oct 2026 19:21:18 +0000 Files and hashes: 1: tg1afDY_D02TL-MXuQzmz4DSg8k.crl (hash: bYxoazRYw/yDdMz+16X+N5PesVduOjtr/VLJQ/Lff/w=) 2: 59AA22D06FFD11EA9160902DC4F9AE02.roa (hash: wf2N7y2gm+HMhGLmDepSkmqtdRiwq+CjqsQ72qN8FGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118309, serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Validity Not Before: Oct 10 19:21:18 2026 GMT Not After : Oct 17 19:21:18 2026 GMT Subject: CN=6aca902f-ddab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:31:de:dd:ba:dd:f3:8b:10:8b:58:fc:d7:82: 0c:c4:18:88:2f:54:cf:36:f6:ac:94:b6:bc:35:72: 7d:c7:77:ae:26:9a:dd:54:e3:56:75:bd:ef:d7:a8: 66:6e:e9:67:d4:f5:e2:a3:bf:a3:65:85:1a:b0:c9: 99:8d:cc:97:67:d5:4b:5c:22:54:b7:e4:56:e8:12: 92:f7:a5:90:fc:09:0a:7f:9a:2d:d6:69:d3:08:e6: 25:b9:e3:0a:a9:f9:c7:bc:bd:48:0e:7f:b9:d0:f2: b7:5c:5f:16:7c:68:27:e3:71:a6:49:ca:46:7e:47: d7:3f:b8:1a:af:bf:7f:70:d1:53:e8:d4:48:96:d2: d3:b7:82:01:56:b1:db:0b:9b:e6:13:11:db:b6:0a: da:61:36:5f:39:73:fa:6c:fd:64:a8:33:17:bb:9e: 36:05:e6:a1:93:57:fd:c7:0c:a2:78:ce:df:26:91: 0a:f4:03:c2:77:9b:09:3f:ba:1c:26:97:ba:8e:ff: 70:9b:01:76:e5:2c:03:72:60:91:9d:01:50:4f:30: 81:3a:80:b7:3f:08:09:ef:84:af:1f:49:80:de:c4: 63:09:b6:b7:f5:3e:c5:3b:9e:68:15:33:fc:44:0f: fc:4f:0b:ad:e5:35:4b:98:7e:9d:df:ba:92:4a:1b: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A7:C7:97:79:7D:8F:10:9E:59:88:BD:8C:BA:48:FB:95:17:65:0D X509v3 Authority Key Identifier: keyid:B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f5:5f:db:e6:a4:5e:a1:35:50:6f:5b:73:54:7b:94:5f:d9: 6c:46:67:80:a1:fb:cb:9b:1e:52:f2:dd:11:83:a7:d8:b9:a3: b0:3d:3c:c9:b3:43:27:79:8e:27:5a:7d:4d:3f:e5:a9:2d:bb: d4:33:4d:ca:ce:37:26:5b:79:eb:7c:d2:1d:b6:5f:b3:c3:44: 43:fe:f1:4e:2b:8a:3a:6f:87:e4:48:24:b9:59:4a:c5:d9:a5: de:51:aa:8d:c9:f0:bb:9e:3d:fb:d2:b1:fc:a0:9f:23:05:53: c5:bf:80:ee:80:20:b0:75:42:e0:00:98:90:1c:34:00:f1:3b: 78:86:57:e3:99:82:6d:3e:63:60:b9:62:3d:7b:6d:d3:c0:db: e9:69:e0:d8:65:6e:92:aa:56:d3:52:aa:c0:da:1b:d2:18:f5: 48:b1:53:46:a8:b0:81:4c:87:25:ef:61:29:c6:42:0f:11:5f: 0d:c9:3d:96:c6:37:72:0b:4c:e7:81:8a:6e:52:42:59:a7:cb: 6a:40:29:0f:a9:16:8f:88:4b:97:1b:0f:d4:24:2a:4b:0b:1c: 4d:a4:23:65:b2:06:64:ec:b3:40:e6:d0:3c:7a:6b:f6:f5:ce: c9:73:5c:81:8a:30:0b:39:9f:cc:3b:c0:8b:fe:d1:dc:8c:48: 5c:f9:30:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzMDkxMTAvBgNVBAUTKEI2MEQ1QTdDMzYzRjBGNEQ5MzJGRTMxN0I5MENFNkNG ODBEMjgzQzkwHhcNMjYxMDEwMTkyMTE4WhcNMjYxMDE3MTkyMTE4WjAYMRYwFAYD VQQDEw02YWNhOTAyZi1kZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhzHe3brd84sQi1j814IMxBiIL1TPNvaslLa8NXJ9x3euJprdVONWdb3v16hm buln1PXio7+jZYUasMmZjcyXZ9VLXCJUt+RW6BKS96WQ/AkKf5ot1mnTCOYlueMK qfnHvL1IDn+50PK3XF8WfGgn43GmScpGfkfXP7gar79/cNFT6NRIltLTt4IBVrHb C5vmExHbtgraYTZfOXP6bP1kqDMXu542Beahk1f9xwyieM7fJpEK9APCd5sJP7oc Jpe6jv9wmwF25SwDcmCRnQFQTzCBOoC3PwgJ74SvH0mA3sRjCba39T7FO55oFTP8 RA/8Twut5TVLmH6d37qSShu9NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSnx5d5 fY8QnlmIvYy6SPuVF2UNMB8GA1UdIwQYMBaAFLYNWnw2Pw9Nky/jF7kM5s+A0oPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODMwOS8xQTQ4REM4NjZG RkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0QwMlRMLU1YdVF6bXo0RFNn OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnMWFmRFlfRDAyVEwtTVh1UXptejREU2c4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODMwOS8xQTQ4REM4NjZGRkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0Qw MlRMLU1YdVF6bXo0RFNnOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlPVf2+akXqE1UG9bc1R7lF/ZbEZngKH7y5seUvLdEYOn2LmjsD08ybNDJ3mO J1p9TT/lqS271DNNys43Jlt563zSHbZfs8NEQ/7xTiuKOm+H5EgkuVlKxdml3lGq jcnwu549+9Kx/KCfIwVTxb+A7oAgsHVC4ACYkBw0APE7eIZX45mCbT5jYLliPXtt 08Db6Wng2GVukqpW01KqwNob0hj1SLFTRqiwgUyHJe9hKcZCDxFfDck9lsY3cgtM 54GKblJCWafLakApD6kWj4hLlxsP1CQqSwscTaQjZbIGZOyzQObQPHpr9vXOyXNc gYowCzmfzDvAi/7R3IxIXPkwmw== -----END CERTIFICATE-----Generated at Sun Oct 11 07:31:32 2026 by rpki-client