$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.mft File: tYw5FD_NINBzXQ5fxuyMeS2sy9Y.mft (raw, json) Hash identifier: LfD+u3qI+CO+7mBR7k5ByJY/Qqn/dLETkEaTBrCpfaM= Subject key identifier: 88:EC:56:18:0A:F1:FC:F2:61:50:99:B2:9F:5F:B6:8C:3C:ED:28:95 Authority key identifier: B5:8C:39:14:3F:CD:20:D0:73:5D:0E:5F:C6:EC:8C:79:2D:AC:CB:D6 Certificate issuer: /CN=A912FAFC/serialNumber=B58C39143FCD20D0735D0E5FC6EC8C792DACCBD6 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.mft Manifest number: 17 Signing time: Sun 27 Sep 2026 09:37:32 +0000 Manifest this update: Sun 27 Sep 2026 09:37:32 +0000 Manifest next update: Sun 04 Oct 2026 09:37:32 +0000 Files and hashes: 1: tYw5FD_NINBzXQ5fxuyMeS2sy9Y.crl (hash: abqWT66E2w2tyC5GuXlIXycV9i/DpkPL2Sm4nNBFh0k=) 2: 8A3C3CFC9B8511F1B9BDE8E74411F970.roa (hash: i4jhMzHWNZrdT2Qs9wHgoXALnK/G/rEor+67GrDph+w=) 3: 0F7B0C229B8611F1BB445B204511F970.roa (hash: 40HGRSbKK+uhR55ngzdifY91Pr0rtcxBC49q87loP+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.crl rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAFC, serialNumber=B58C39143FCD20D0735D0E5FC6EC8C792DACCBD6 Validity Not Before: Sep 27 09:37:32 2026 GMT Not After : Oct 4 09:37:32 2026 GMT Subject: CN=6ab8e3dc-10d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:48:ea:eb:ec:2f:31:53:9b:fa:69:d9:c6: 4e:88:eb:61:cb:61:fd:c7:e7:e5:83:97:a5:6e:02: 7f:d5:d0:21:38:fb:d6:84:48:ce:0d:1d:18:ad:45: ca:dc:4b:28:68:17:1d:00:24:43:5b:0f:19:f0:1c: 3d:cd:e3:52:9d:31:01:a1:36:a3:6e:84:06:79:e9: 87:e5:16:ba:08:c0:9f:9a:d8:58:cb:60:80:1d:c0: 2d:0e:81:46:03:ff:41:6f:5d:94:f2:e5:7d:af:e9: 3a:83:e5:9e:81:26:4a:ea:d7:e8:18:05:b5:d8:24: a8:32:b3:a9:4b:fb:96:20:17:63:4d:1f:cc:52:e7: eb:2b:47:ae:9d:7c:db:93:3b:21:37:d4:8b:58:30: 4e:49:5a:bb:0f:78:48:b2:e8:a7:44:6e:84:c7:cb: b9:45:8e:3f:3e:f9:c5:02:e8:6f:e9:dd:c7:7a:4e: 65:21:19:80:2d:c8:18:ba:04:c8:32:c4:c0:2c:d0: 5f:74:96:0f:d1:72:33:f5:2b:64:76:75:1e:5f:c1: 10:f9:e8:81:07:05:43:a1:81:05:f9:20:57:dc:cd: cd:78:b5:83:cf:6f:fb:72:4a:1b:09:18:ce:5c:40: b2:9d:6e:6d:f0:92:08:60:0d:27:c4:55:02:ae:1f: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EC:56:18:0A:F1:FC:F2:61:50:99:B2:9F:5F:B6:8C:3C:ED:28:95 X509v3 Authority Key Identifier: keyid:B5:8C:39:14:3F:CD:20:D0:73:5D:0E:5F:C6:EC:8C:79:2D:AC:CB:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:77:4e:c3:7f:ee:d6:0e:54:12:70:6a:09:57:aa:cf:6f:e7: 01:3d:ec:41:6b:99:62:79:f4:c7:94:4b:e5:c9:11:90:15:bc: 80:eb:44:26:22:1d:1f:01:69:b3:4f:ad:29:a5:c1:eb:46:10: d6:89:90:6a:6e:5b:41:e7:8a:07:49:ab:45:98:d4:8c:f4:e8: 35:35:d6:03:b7:bc:63:a5:ef:93:36:2d:f8:23:54:8e:6f:c8: 1e:f3:cc:d6:72:34:f8:5f:53:00:0e:b1:49:68:84:40:04:10: 2c:7f:ba:fd:96:ae:0b:00:5b:14:75:aa:b0:34:fa:01:ee:e0: 45:2a:40:5f:03:54:fc:14:04:a5:55:ae:da:9a:5b:75:dc:4a: 31:a3:88:ee:77:71:b1:a4:ba:4d:b3:86:70:30:55:7c:f0:6e: 70:5c:bf:8b:ee:aa:73:dc:36:27:3f:63:02:fe:73:f7:c7:e1: 3c:d9:b5:0e:68:82:0a:e6:2c:d4:97:8e:98:fd:18:24:b9:1f: 1f:e9:39:49:84:7b:5c:dd:f8:fd:ba:98:be:08:b4:04:de:1e: ce:9e:eb:86:77:f4:3f:e5:da:12:e0:b2:c1:3c:bc:3b:e8:22: 8f:11:68:3e:fa:95:6b:45:09:a2:5f:c6:92:c6:93:21:9c:6b: 8a:19:aa:66 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RkFGQzExMC8GA1UEBRMoQjU4QzM5MTQzRkNEMjBEMDczNUQwRTVGQzZFQzhDNzky REFDQ0JENjAeFw0yNjA5MjcwOTM3MzJaFw0yNjEwMDQwOTM3MzJaMBgxFjAUBgNV BAMTDTZhYjhlM2RjLTEwZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVX0jq6+wvMVOb+mnZxk6I62HLYf3H5+WDl6VuAn/V0CE4+9aESM4NHRitRcrc SyhoFx0AJENbDxnwHD3N41KdMQGhNqNuhAZ56YflFroIwJ+a2FjLYIAdwC0OgUYD /0FvXZTy5X2v6TqD5Z6BJkrq1+gYBbXYJKgys6lL+5YgF2NNH8xS5+srR66dfNuT OyE31ItYME5JWrsPeEiy6KdEboTHy7lFjj8++cUC6G/p3cd6TmUhGYAtyBi6BMgy xMAs0F90lg/RcjP1K2R2dR5fwRD56IEHBUOhgQX5IFfczc14tYPPb/tyShsJGM5c QLKdbm3wkghgDSfEVQKuHzRXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiOxWGArx /PJhUJmyn1+2jDztKJUwHwYDVR0jBBgwFoAUtYw5FD/NINBzXQ5fxuyMeS2sy9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGQUZDL0RFMzI5MUE0OUI4 NDExRjFCOTNERkQ1ODQ0MTFGOTcwL3RZdzVGRF9OSU5CelhRNWZ4dXlNZVMyc3k5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFl3NUZEX05JTkJ6WFE1Znh1eU1lUzJzeTlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG QUZDL0RFMzI5MUE0OUI4NDExRjFCOTNERkQ1ODQ0MTFGOTcwL3RZdzVGRF9OSU5C elhRNWZ4dXlNZVMyc3k5WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCgd07Df+7WDlQScGoJV6rPb+cBPexBa5liefTHlEvlyRGQFbyA60QmIh0fAWmz T60ppcHrRhDWiZBqbltB54oHSatFmNSM9Og1NdYDt7xjpe+TNi34I1SOb8ge88zW cjT4X1MADrFJaIRABBAsf7r9lq4LAFsUdaqwNPoB7uBFKkBfA1T8FASlVa7amlt1 3Eoxo4jud3GxpLpNs4ZwMFV88G5wXL+L7qpz3DYnP2MC/nP3x+E82bUOaIIK5izU l46Y/RgkuR8f6TlJhHtc3fj9upi+CLQE3h7OnuuGd/Q/5doS4LLBPLw76CKPEWg+ +pVrRQmiX8aSxpMhnGuKGapm -----END CERTIFICATE-----Generated at Mon Sep 28 23:28:04 2026 by rpki-client