$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json) Hash identifier: 4FTD284aFL+UVrcvaetatt4EM4g59TVJXfGblnc1YgI= Subject key identifier: B6:49:38:80:B2:90:19:1F:63:B9:78:9A:91:BC:76:55:FD:77:1D:04 Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0D48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft Manifest number: 0D37 Signing time: Wed 14 Oct 2026 18:25:27 +0000 Manifest this update: Wed 14 Oct 2026 18:25:27 +0000 Manifest next update: Wed 21 Oct 2026 18:25:27 +0000 Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: 0dvToq+uEUUQxgufjswk0qxFwHqgJ91A+6efVMCnG/s=) 2: C3401DEC16E811F1A339CAE0373D8C67.roa (hash: yBowxfuCjhrMqbpO4ruB7+0RN+biV4Rph+HZV83yUAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 18:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3400 (0xd48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: Oct 14 18:25:27 2026 GMT Not After : Oct 21 18:25:27 2026 GMT Subject: CN=6acfc917-ef5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:f6:53:85:ee:b6:88:55:46:e3:96:3d:e3: c8:a3:bb:ab:9a:81:44:d8:c7:08:bc:36:b7:17:5d: 55:04:a4:45:ce:05:5b:59:31:ba:18:92:9d:58:35: e2:6f:14:c3:1c:16:1f:aa:bc:3a:b2:31:4e:e2:4d: 1a:c0:85:7b:83:c6:97:4f:79:c3:e4:af:4a:ad:d2: 00:3d:25:c8:6e:56:1e:a8:22:3a:69:e9:a1:44:b6: 0d:06:fa:e1:19:f7:18:6b:78:3f:b6:49:9b:c2:61: 67:c4:6c:14:66:57:1a:0e:bd:3a:00:72:0f:9e:40: d1:fb:76:e9:ae:87:ae:1f:b3:ac:b4:07:eb:e0:ee: 9c:e0:89:e4:45:6a:5f:3f:c3:69:f9:92:e7:ef:8f: bd:5a:c3:1c:39:ec:87:49:79:0b:5a:d8:20:be:58: 2d:9e:e4:9d:4c:4f:45:28:d1:74:6d:05:5d:e3:64: 0d:77:c5:cb:04:2d:0d:9d:2a:29:cc:34:64:91:31: ed:74:55:b1:76:41:88:25:d2:df:71:4a:a7:99:22: a1:39:4d:32:35:67:4f:6e:e9:6a:5b:74:af:c7:83: cd:d0:06:03:4d:7f:45:49:5d:39:6e:37:cd:ba:c4: 84:01:fc:73:2d:7e:78:cf:37:79:8b:be:05:03:d0: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:49:38:80:B2:90:19:1F:63:B9:78:9A:91:BC:76:55:FD:77:1D:04 X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:55:d1:ae:2f:55:d9:d5:a5:72:0a:5d:33:c9:52:1b:ea:94: b0:af:9e:ff:ea:d9:37:f1:fa:39:d9:af:32:81:18:36:52:64: 92:73:a3:90:2e:49:24:6d:cb:07:2c:11:c1:ab:a4:cd:48:a8: 65:00:92:ce:cd:7e:43:e7:2e:1e:08:95:a3:32:7a:28:25:9b: 87:15:15:7b:5b:fc:4a:c2:27:37:e6:7f:2f:03:bd:e6:5d:83: ba:34:51:91:3d:9a:cc:af:d7:31:8a:bc:63:38:7f:73:c1:46: 30:a8:28:29:ba:f1:10:2d:5b:ec:b6:71:3f:3a:73:24:3c:d5: 81:cf:8d:9d:92:f8:8d:b9:de:02:46:01:06:4d:a3:54:dc:ee: d0:7f:78:3c:1f:b0:d5:89:80:f7:12:4d:f2:7a:19:12:91:02: c3:9a:03:46:59:67:6e:b8:ed:b6:c1:0d:55:42:7c:c9:78:af: 46:8d:0c:e0:25:9b:68:90:b0:2a:61:e9:d4:1c:41:00:6a:e3: ba:78:fe:52:a1:c1:29:e0:6e:21:0d:d2:d1:24:ad:89:12:83: 59:c3:bf:a2:c1:f7:08:19:0f:9b:2e:42:ac:df:7e:72:c7:d2: b8:dd:f3:0d:b4:72:5f:70:a9:3b:b6:2e:46:f3:63:ec:ea:7c: 9c:8c:c2:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjYxMDE0MTgyNTI3WhcNMjYxMDIxMTgyNTI3WjAYMRYwFAYD VQQDEw02YWNmYzkxNy1lZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgP2U4XutohVRuOWPePIo7urmoFE2McIvDa3F11VBKRFzgVbWTG6GJKdWDXi bxTDHBYfqrw6sjFO4k0awIV7g8aXT3nD5K9KrdIAPSXIblYeqCI6aemhRLYNBvrh GfcYa3g/tkmbwmFnxGwUZlcaDr06AHIPnkDR+3bproeuH7OstAfr4O6c4InkRWpf P8Np+ZLn74+9WsMcOeyHSXkLWtggvlgtnuSdTE9FKNF0bQVd42QNd8XLBC0NnSop zDRkkTHtdFWxdkGIJdLfcUqnmSKhOU0yNWdPbulqW3Svx4PN0AYDTX9FSV05bjfN usSEAfxzLX54zzd5i74FA9CLBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZJOICy kBkfY7l4mpG8dlX9dx0EMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S SlNBSGhpbDdrMmxfanlTSzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADVXRri9V2dWlcgpdM8lSG+qUsK+e/+rZN/H6OdmvMoEYNlJkknOjkC5JJG3L BywRwaukzUioZQCSzs1+Q+cuHgiVozJ6KCWbhxUVe1v8SsInN+Z/LwO95l2DujRR kT2azK/XMYq8Yzh/c8FGMKgoKbrxEC1b7LZxPzpzJDzVgc+NnZL4jbneAkYBBk2j VNzu0H94PB+w1YmA9xJN8noZEpECw5oDRllnbrjttsENVUJ8yXivRo0M4CWbaJCw KmHp1BxBAGrjunj+UqHBKeBuIQ3S0SStiRKDWcO/osH3CBkPmy5CrN9+csfSuN3z DbRyX3CpO7YuRvNj7Op8nIzCOg== -----END CERTIFICATE-----Generated at Thu Oct 15 19:13:35 2026 by rpki-client