$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json) Hash identifier: fSmlkh9MHPJRvLUYL/poWrsFpTxlzTSdjCzslMPPeTU= Subject key identifier: CF:16:03:1F:7A:6E:D0:19:90:6A:3B:C2:56:B3:51:4A:C0:22:83:78 Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C Certificate issuer: /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft Manifest number: 01F1 Signing time: Sun 27 Sep 2026 03:47:02 +0000 Manifest this update: Sun 27 Sep 2026 03:47:01 +0000 Manifest next update: Sun 04 Oct 2026 03:47:01 +0000 Files and hashes: 1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: TnHq594rQam85mr/K4GLYvk7WSiz8MECyfgSNDNXctc=) 2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: xllDJ7wsryQrkSvX97smRm5LJiMbi7ECfICbiD0R3+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Validity Not Before: Sep 27 03:47:01 2026 GMT Not After : Oct 4 03:47:01 2026 GMT Subject: CN=6ab891b6-a639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:1f:ab:be:b1:22:99:38:a3:b1:f5:65:8c:1d: ce:9d:40:21:3d:b7:25:50:87:cb:88:84:7b:2e:a9: a9:07:4c:03:d4:5c:48:fe:56:f6:2f:dc:bf:c9:7f: dd:4e:43:b1:44:44:b8:44:1b:ff:76:2b:55:ac:95: d6:b0:72:29:17:a3:dd:3d:08:88:4a:83:9b:ff:5d: ea:c0:69:6e:a6:6c:72:cf:df:1b:d6:96:84:7f:3f: df:b5:9c:b4:d8:a5:49:1e:d1:a4:78:45:8f:58:09: 9c:95:83:fa:52:f0:c6:65:b9:9d:e2:01:1f:9a:9c: 8e:ba:c8:19:2f:53:27:eb:be:98:af:b0:e0:52:5d: 3f:f8:ed:ab:24:f0:99:2d:28:4c:97:9e:ae:7c:65: d5:13:4a:92:67:bc:9b:96:13:7c:01:b2:00:e2:f0: f9:50:32:6a:16:5e:2c:4f:5e:bf:cc:dd:d0:33:72: ab:b5:94:f6:93:a6:57:c5:44:51:ab:e6:10:f9:75: d2:4a:89:9f:4d:57:ff:4c:0c:2c:63:52:78:d8:57: 83:2f:d3:a9:df:64:6a:fe:d9:58:d8:28:bb:86:ee: 8b:10:95:aa:65:f2:64:d7:61:3d:2b:88:70:08:ca: 9d:ee:46:1f:ed:90:98:01:eb:53:f2:17:a7:bb:f5: 75:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:16:03:1F:7A:6E:D0:19:90:6A:3B:C2:56:B3:51:4A:C0:22:83:78 X509v3 Authority Key Identifier: keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:2b:f3:a9:de:c5:0a:bb:73:e2:8d:5c:1c:ab:2d:dc:d8:9d: b4:5b:a1:d1:65:62:a3:0f:28:98:d2:7f:66:04:99:01:40:1b: ce:56:59:b2:44:b7:0e:ff:67:f2:e4:bb:4f:26:ed:c5:e5:fb: cf:88:f2:c4:27:c5:2c:7e:19:7b:6e:9b:58:0c:ac:0b:77:02: a3:b6:0c:e9:81:74:4c:d6:14:84:62:ef:83:23:26:6c:53:91: c3:c3:a0:1f:7e:c1:d4:5b:f4:95:50:8e:48:b0:1a:53:dc:30: 1e:83:99:d7:6b:d1:c4:3e:06:08:33:bf:80:e4:bc:46:e6:b4: a6:19:7a:4f:e4:a1:82:ea:d8:6a:5c:46:62:08:de:91:7d:62: 10:cc:f0:36:88:15:38:85:f9:29:65:e4:c8:cb:89:8f:b6:53: 40:56:9b:75:60:24:8e:29:42:da:ab:b6:36:b9:f8:ef:a2:c2: 3c:b0:e4:99:6a:22:a6:e1:e7:be:8b:0f:15:80:4e:af:29:d4: 1e:1d:37:60:b9:f6:fa:a5:ce:2c:68:61:ab:2e:df:2b:7a:53: 4a:e1:a3:4e:0a:67:8c:97:17:95:7b:20:aa:6c:38:53:13:15: a5:2a:20:59:73:e1:8d:54:da:63:f4:b8:50:e9:f0:ac:ff:a2: d5:21:0c:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3MTExMTAvBgNVBAUTKEI1N0IyMDdGMEUxQzFCQTg3M0EwNzkzNTgyQzdBODEz NDA5ODY3NEMwHhcNMjYwOTI3MDM0NzAxWhcNMjYxMDA0MDM0NzAxWjAYMRYwFAYD VQQDEw02YWI4OTFiNi1hNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+x+rvrEimTijsfVljB3OnUAhPbclUIfLiIR7LqmpB0wD1FxI/lb2L9y/yX/d TkOxRES4RBv/ditVrJXWsHIpF6PdPQiISoOb/13qwGlupmxyz98b1paEfz/ftZy0 2KVJHtGkeEWPWAmclYP6UvDGZbmd4gEfmpyOusgZL1Mn676Yr7DgUl0/+O2rJPCZ LShMl56ufGXVE0qSZ7yblhN8AbIA4vD5UDJqFl4sT16/zN3QM3KrtZT2k6ZXxURR q+YQ+XXSSomfTVf/TAwsY1J42FeDL9Op32Rq/tlY2Ci7hu6LEJWqZfJk12E9K4hw CMqd7kYf7ZCYAetT8henu/V16wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8WAx96 btAZkGo7wlazUUrAIoN4MB8GA1UdIwQYMBaAFLV7IH8OHBuoc6B5NYLHqBNAmGdM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS85RkREMkRBMEM5 OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2aHpvSGsxZ3Nlb0UwQ1la MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RYc2dmdzRjRzZoem9IazFnc2VvRTBDWVowdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTcxMS85RkREMkRBMEM5OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2 aHpvSGsxZ3Nlb0UwQ1laMHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkCvzqd7FCrtz4o1cHKst3NidtFuh0WViow8omNJ/ZgSZAUAbzlZZskS3Dv9n 8uS7TybtxeX7z4jyxCfFLH4Ze26bWAysC3cCo7YM6YF0TNYUhGLvgyMmbFORw8Og H37B1Fv0lVCOSLAaU9wwHoOZ12vRxD4GCDO/gOS8Rua0phl6T+ShgurYalxGYgje kX1iEMzwNogVOIX5KWXkyMuJj7ZTQFabdWAkjilC2qu2Nrn476LCPLDkmWoipuHn vosPFYBOrynUHh03YLn2+qXOLGhhqy7fK3pTSuGjTgpnjJcXlXsgqmw4UxMVpSog WXPhjVTaY/S4UOnwrP+i1SEM6w== -----END CERTIFICATE-----Generated at Tue Sep 29 02:52:20 2026 by rpki-client