$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft File: TSkgNoEWBfjziJgBUhslcnoc12U.mft (raw, json) Hash identifier: QOBc+QcwmT/weAX5cluQxpNSY3Eok2PIO6AE5vnE5eE= Subject key identifier: A3:1C:9F:3D:BA:4C:F3:84:60:42:3A:D2:95:E5:42:38:B6:51:B4:36 Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65 Certificate issuer: /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765 Certificate serial: 040A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft Manifest number: 0403 Signing time: Mon 05 Oct 2026 00:24:44 +0000 Manifest this update: Mon 05 Oct 2026 00:24:44 +0000 Manifest next update: Mon 12 Oct 2026 00:24:44 +0000 Files and hashes: 1: TSkgNoEWBfjziJgBUhslcnoc12U.crl (hash: fXfgh/cQWU4saBfPhEbl5kdb2tOZVelG1M5JLgp1DQ4=) 2: EB4F77B8D5E411ECB31AC843C4F9AE02.roa (hash: osHneI9FvoCZRKQxl7txl+jB8Ly+Es1NyoWP2eT8CMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1034 (0x40a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765 Validity Not Before: Oct 5 00:24:44 2026 GMT Not After : Oct 12 00:24:44 2026 GMT Subject: CN=6ac2ee4c-9107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:a5:95:c3:ee:0e:e8:76:86:d6:ac:ac:61: 2f:cf:c2:e5:6e:b9:36:af:54:78:a4:96:91:f3:f3: d7:dc:6a:3f:31:b9:ff:0e:ef:83:b0:08:5e:5e:e5: 93:a2:24:7e:ab:fa:81:ca:b8:cf:0e:02:6a:20:f4: e8:1d:d3:58:32:c8:c3:a4:2f:63:1c:1e:5a:66:0b: e4:db:48:84:c4:41:d5:e2:5e:b6:f5:b8:68:2e:44: 56:9a:a8:7c:5b:c6:9f:3e:09:54:65:af:95:c6:4b: f5:a4:7e:0d:b3:c2:01:48:79:ab:a3:23:88:d6:0b: ba:9d:4f:64:28:1f:bf:91:92:0b:1d:07:97:c2:8d: bb:20:9f:5f:cb:cc:0c:34:43:92:4e:dc:da:37:7e: ba:0b:0a:1c:d7:03:79:62:f9:26:a1:fd:21:e1:6c: 35:1a:a4:ac:97:7d:d9:f2:3f:da:cc:a3:0b:c2:39: f8:d9:71:c2:33:b7:c9:bf:04:55:2e:be:f0:ed:21: 37:97:cd:27:13:3f:0f:ad:f1:20:16:f6:63:e6:5d: c7:74:1f:d1:8c:6b:dd:78:0f:07:bb:5a:0d:4b:48: d2:12:5a:d6:58:f8:b6:57:39:3a:c7:b1:44:d9:47: 20:ff:e7:98:58:28:1c:b9:ea:68:21:19:51:64:a3: 04:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1C:9F:3D:BA:4C:F3:84:60:42:3A:D2:95:E5:42:38:B6:51:B4:36 X509v3 Authority Key Identifier: keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f6:b6:06:38:7f:09:e2:bd:45:2a:af:6b:97:c5:cf:01:e4: 35:06:65:8b:ad:17:8b:e4:2f:c1:08:dd:4f:20:98:70:bc:74: 19:aa:7c:49:36:97:6a:fb:85:7b:1c:a9:a0:f1:15:56:31:bd: b4:db:b4:91:0a:68:b0:fb:28:f4:3c:fb:f2:9c:c0:8e:71:06: 21:a0:8f:e6:3e:75:39:88:bf:f7:ec:58:a7:d6:99:27:0b:69: cd:de:cc:f1:14:bb:bf:be:b4:35:3f:c5:6a:b1:59:40:10:6f: 8f:cc:1f:fe:0b:00:c6:6d:29:d8:87:ef:20:78:51:65:b1:67: 87:26:8d:3c:2f:62:41:d2:88:6e:5b:60:5e:fb:d3:42:bb:69: 3b:43:ca:40:f0:f5:01:90:e4:d0:a9:12:90:ee:90:85:a2:9f: 0a:1a:f2:94:af:cb:c1:3c:9e:80:04:a1:95:3d:79:28:2c:f2: cc:9f:97:6b:84:20:ec:b3:de:67:b1:66:62:ec:c3:09:b2:f6: e3:8e:d1:db:b2:9f:67:a7:f9:c5:2b:a2:2a:76:09:33:0b:f6: d6:40:aa:27:86:87:72:2e:ad:13:ad:67:ee:33:b9:ec:5a:84: 0b:05:f2:6c:05:1a:94:fd:9b:53:77:54:2f:b4:d6:4c:f6:7c: f3:d2:95:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRERTIxMTAvBgNVBAUTKDREMjkyMDM2ODExNjA1RjhGMzg4OTgwMTUyMUIyNTcy N0ExQ0Q3NjUwHhcNMjYxMDA1MDAyNDQ0WhcNMjYxMDEyMDAyNDQ0WjAYMRYwFAYD VQQDEw02YWMyZWU0Yy05MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue+llcPuDuh2htasrGEvz8Llbrk2r1R4pJaR8/PX3Go/Mbn/Du+DsAheXuWT oiR+q/qByrjPDgJqIPToHdNYMsjDpC9jHB5aZgvk20iExEHV4l629bhoLkRWmqh8 W8afPglUZa+Vxkv1pH4Ns8IBSHmroyOI1gu6nU9kKB+/kZILHQeXwo27IJ9fy8wM NEOSTtzaN366Cwoc1wN5Yvkmof0h4Ww1GqSsl33Z8j/azKMLwjn42XHCM7fJvwRV Lr7w7SE3l80nEz8PrfEgFvZj5l3HdB/RjGvdeA8Hu1oNS0jSElrWWPi2Vzk6x7FE 2Ucg/+eYWCgcuepoIRlRZKMECwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMcnz26 TPOEYEI60pXlQji2UbQ2MB8GA1UdIwQYMBaAFE0pIDaBFgX484iYAVIbJXJ6HNdl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NERFMi8xQzU0MjJEMEQ1 REQxMUVDQTE0Q0M2MjNDNEY5QUUwMi9UU2tnTm9FV0JmanppSmdCVWhzbGNub2Mx MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RTa2dOb0VXQmZqemlKZ0JVaHNsY25vYzEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NERFMi8xQzU0MjJEMEQ1REQxMUVDQTE0Q0M2MjNDNEY5QUUwMi9UU2tnTm9FV0Jm anppSmdCVWhzbGNub2MxMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQfa2Bjh/CeK9RSqva5fFzwHkNQZli60Xi+QvwQjdTyCYcLx0Gap8STaXavuF exypoPEVVjG9tNu0kQposPso9Dz78pzAjnEGIaCP5j51OYi/9+xYp9aZJwtpzd7M 8RS7v760NT/FarFZQBBvj8wf/gsAxm0p2IfvIHhRZbFnhyaNPC9iQdKIbltgXvvT QrtpO0PKQPD1AZDk0KkSkO6QhaKfChrylK/LwTyegAShlT15KCzyzJ+Xa4Qg7LPe Z7FmYuzDCbL2447R27KfZ6f5xSuiKnYJMwv21kCqJ4aHci6tE61n7jO57FqECwXy bAUalP2bU3dUL7TWTPZ889KVRQ== -----END CERTIFICATE-----Generated at Tue Oct 6 21:02:26 2026 by rpki-client