$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft File: TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft (raw, json) Hash identifier: o/ASysRMj6gfnpp0mfsfQw8eG9H+bJ0bvGU4wI3h6e0= Subject key identifier: F0:FA:82:4A:85:B6:A7:56:85:7D:A7:CA:EB:CB:E4:39:84:58:7E:3B Authority key identifier: 4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8 Certificate issuer: /CN=A9129FB7/serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft Manifest number: 32 Signing time: Mon 21 Sep 2026 08:38:41 +0000 Manifest this update: Mon 21 Sep 2026 08:38:41 +0000 Manifest next update: Mon 28 Sep 2026 08:38:41 +0000 Files and hashes: 1: TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl (hash: MmNgnIREn9kOtYefhJYwMjY5Gfcgg9Qbrb9jIXAzSqU=) 2: C524767269FD11F1BAFBB65F6847A888.roa (hash: ygqljUs8p8UwgEQzC1Y+C3YKpEUTVGsqmNq6WUEwm9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129FB7, serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8 Validity Not Before: Sep 21 08:38:41 2026 GMT Not After : Sep 28 08:38:41 2026 GMT Subject: CN=6ab0ed11-558d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:58:9a:0b:87:9d:26:9b:55:bb:a0:a5:3c: 3c:46:c2:27:bf:39:f3:35:19:a9:61:d6:78:13:31: 91:0a:32:24:35:77:f9:29:46:38:5a:e1:27:01:0b: c2:78:6c:4e:84:b2:60:09:d7:b3:2d:48:61:02:34: e8:ec:b2:e9:dc:e5:a1:58:fa:be:bd:36:0c:cf:9e: d2:b9:56:ca:0d:ca:ee:2c:5f:a5:44:43:24:d9:db: 0c:1a:1a:3f:fd:ff:6d:d2:d0:da:20:43:0d:f8:4a: c6:e5:43:3f:7d:b7:b5:71:4b:1f:4e:fb:b7:55:a3: e9:70:88:06:4f:38:66:dc:67:45:9a:10:a2:54:23: 56:a3:63:de:ce:8c:4e:8e:c1:d5:8a:68:72:83:59: b6:c7:b2:ce:21:63:ae:39:fd:33:d4:9e:9f:b9:b1: f5:72:72:a3:b4:bf:03:76:40:ca:c5:88:fc:4b:34: 2c:57:cb:62:08:24:44:21:0f:36:33:ab:6e:a1:ec: d8:d7:3f:a2:75:c7:33:68:d5:7c:9d:8c:68:9b:ab: ba:9e:18:6a:56:0b:ca:d2:04:71:88:26:15:50:ac: 41:e2:25:a2:19:26:93:3e:b7:c4:c9:00:c4:2c:3b: b1:4c:b7:96:0b:cb:66:3e:c1:ae:fb:17:13:06:bd: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FA:82:4A:85:B6:A7:56:85:7D:A7:CA:EB:CB:E4:39:84:58:7E:3B X509v3 Authority Key Identifier: keyid:4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:f0:8c:5f:fd:41:d5:c0:15:0e:b4:d8:82:fb:31:fb:b3:2d: 3f:40:ef:05:4b:dc:cd:0d:e1:36:a2:de:11:6c:a3:56:33:84: 26:9e:41:2e:6c:59:9c:22:2c:80:56:34:7b:f2:c2:3a:b5:f3: eb:78:ee:a4:6f:a2:86:dc:61:f8:9d:fb:bf:a6:f3:c0:6e:3b: 95:55:7e:af:5c:ff:ac:45:eb:64:20:c3:9e:dc:fb:59:02:ce: 06:df:59:e1:7b:15:8c:0c:9c:1a:23:dd:74:8c:44:94:5a:a6: e8:28:36:d1:30:21:b5:25:e2:b4:33:ab:68:e3:93:15:12:07: 50:1e:9c:7c:77:08:c7:8d:3d:75:f2:b5:c0:70:f6:27:b0:03: 2a:10:67:fc:23:e1:c0:6b:dc:fa:bc:58:5e:ea:77:5a:d1:f1: 9c:41:84:61:75:0d:31:bb:95:2c:c0:7b:ae:9a:7c:5c:67:d3: 41:2f:93:d4:a8:ec:27:c5:2b:02:f2:55:08:f9:e7:bb:7b:57: 14:89:62:a1:e9:88:c6:ee:71:8a:01:b6:48:e9:5b:62:f1:f4: 51:00:c5:16:b1:17:ed:69:26:a6:48:6b:95:84:4b:ee:67:7a: 8b:34:e9:7b:47:55:9c:11:e3:1b:86:69:d8:a7:7e:39:6b:c1: ba:79:64:e7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OUZCNzExMC8GA1UEBRMoNEM2MjUzMTBFODNDNDBENzMyRERCMDM4NDc4NTg3NjNE NDhCREREODAeFw0yNjA5MjEwODM4NDFaFw0yNjA5MjgwODM4NDFaMBgxFjAUBgNV BAMTDTZhYjBlZDExLTU1OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiS1iaC4edJptVu6ClPDxGwie/OfM1Galh1ngTMZEKMiQ1d/kpRjha4ScBC8J4 bE6EsmAJ17MtSGECNOjssunc5aFY+r69NgzPntK5VsoNyu4sX6VEQyTZ2wwaGj/9 /23S0NogQw34SsblQz99t7VxSx9O+7dVo+lwiAZPOGbcZ0WaEKJUI1ajY97OjE6O wdWKaHKDWbbHss4hY645/TPUnp+5sfVycqO0vwN2QMrFiPxLNCxXy2IIJEQhDzYz q26h7NjXP6J1xzNo1XydjGibq7qeGGpWC8rSBHGIJhVQrEHiJaIZJpM+t8TJAMQs O7FMt5YLy2Y+wa77FxMGvaDvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8PqCSoW2 p1aFfafK68vkOYRYfjswHwYDVR0jBBgwFoAUTGJTEOg8QNcy3bA4R4WHY9SL3dgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5RkI3LzU0MTBEQzVDNjlG QjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4UU5jeTNiQTRSNFdIWTlTTDNk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEdKVEVPZzhRTmN5M2JBNFI0V0hZOVNMM2RnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 RkI3LzU0MTBEQzVDNjlGQjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4UU5j eTNiQTRSNFdIWTlTTDNkZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCD8Ixf/UHVwBUOtNiC+zH7sy0/QO8FS9zNDeE2ot4RbKNWM4QmnkEubFmcIiyA VjR78sI6tfPreO6kb6KG3GH4nfu/pvPAbjuVVX6vXP+sRetkIMOe3PtZAs4G31nh exWMDJwaI910jESUWqboKDbRMCG1JeK0M6to45MVEgdQHpx8dwjHjT118rXAcPYn sAMqEGf8I+HAa9z6vFhe6nda0fGcQYRhdQ0xu5UswHuumnxcZ9NBL5PUqOwnxSsC 8lUI+ee7e1cUiWKh6YjG7nGKAbZI6Vti8fRRAMUWsRftaSamSGuVhEvuZ3qLNOl7 R1WcEeMbhmnYp345a8G6eWTn -----END CERTIFICATE-----Generated at Tue Sep 22 20:09:29 2026 by rpki-client