$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft File: mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft (raw, json) Hash identifier: 2liJB+5y/EsrtFyOCl56hK4tLy0MgTmiwMyO3SZ5pPE= Subject key identifier: EB:52:AF:A0:31:6F:ED:5D:3F:DA:C4:79:63:E0:28:ED:5D:49:35:DC Authority key identifier: 99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46 Certificate issuer: /CN=A915A797/serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft Manifest number: DE Signing time: Mon 21 Sep 2026 06:39:19 +0000 Manifest this update: Mon 21 Sep 2026 06:39:18 +0000 Manifest next update: Mon 28 Sep 2026 06:39:18 +0000 Files and hashes: 1: mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl (hash: Mi7cGKPfCNcQXNEo0vPk3JY1z1ggxE15g6i+WEjW9zk=) 2: 77B72AD6944E11F0AE3B5D3BC4F9AE02.roa (hash: KtvTVjgCAWOcBuPKSwBd9An16OYSBYspJW9eNvVNuDM=) 3: 1110B336733A11F0A50CB40BC4F9AE02.roa (hash: Bky8qK2Bolvx6AryWBaKtcOLwH8O2VIIKpjzNANFsIY=) 4: 117FF3C2733A11F0A50CB40BC4F9AE02.roa (hash: eFMqMx1XcwIYfwPU0YRygEin11c4JG6O8A2+m4ByoGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A797, serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46 Validity Not Before: Sep 21 06:39:18 2026 GMT Not After : Sep 28 06:39:18 2026 GMT Subject: CN=6ab0d116-ec49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:06:69:87:a1:a4:76:49:0a:67:e0:43:5c:ec: 03:f8:b2:e1:08:50:7d:de:d6:a8:e4:79:b9:9f:43: b0:2a:5b:f1:e4:bb:ca:81:ef:37:e2:ea:cc:5c:1d: 3c:1d:1c:61:28:7c:1e:65:38:02:42:31:44:07:d0: 02:10:c9:e5:78:23:ef:cd:49:fd:b9:fb:c4:08:78: 07:f8:db:17:44:f0:4a:20:45:00:5b:1c:dd:20:b0: 91:56:a1:3e:c7:e6:4a:98:f9:97:fd:48:dc:06:c3: c7:9b:10:47:75:90:c2:0a:3a:94:0d:21:9d:fd:0c: f2:0b:8f:9a:2c:f5:88:6c:14:52:fa:f0:ff:93:8f: cf:5a:36:e9:df:16:bf:eb:89:93:35:3d:e8:47:a6: 9b:73:d4:69:79:06:9a:87:cb:f2:e5:16:56:26:8f: 90:d8:50:4e:23:23:cb:1e:13:8b:0c:1c:cb:a5:6b: 7e:14:1e:95:2b:87:da:41:8f:c8:1c:28:c7:43:07: 81:fd:c1:c8:8a:ba:34:00:9d:99:a0:20:91:ba:13: df:ab:04:2a:99:d1:51:2f:89:00:33:43:cd:c6:d9: 8a:e5:13:9e:cf:7e:d8:84:cd:7b:e9:04:9e:be:fa: 84:a0:56:54:37:fe:cd:44:f6:e6:aa:44:0b:92:3d: b8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:52:AF:A0:31:6F:ED:5D:3F:DA:C4:79:63:E0:28:ED:5D:49:35:DC X509v3 Authority Key Identifier: keyid:99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:7f:59:4b:5e:68:ea:b6:53:15:43:c8:ae:49:1c:cd:f7:2d: 2d:a8:21:14:32:7c:e5:3d:b5:85:81:02:96:ad:96:48:90:f0: 6f:7b:e0:32:60:ca:7b:72:95:bd:84:44:e5:e1:bb:a7:dc:b5: 20:0f:9d:8d:f3:9d:72:cc:8a:2e:db:7a:f2:92:08:fb:d0:f5: 8f:a0:29:44:04:8c:16:50:30:b5:e3:9c:5d:2a:29:51:7e:c7: 89:e8:40:4d:af:09:71:26:b6:42:46:c7:5d:40:61:55:b4:69: 67:d1:40:bd:9b:10:1e:ff:b2:5d:58:01:09:09:4f:0d:d4:69: e6:58:f6:12:ea:ee:88:84:ab:cc:c4:a3:24:ad:f9:25:11:67: f2:a4:9a:54:b8:cf:56:73:b6:7e:38:8d:ad:4e:f8:29:a1:45: 91:f5:d0:e3:13:aa:d5:cd:66:3d:7d:1f:df:72:ba:bf:57:73: 46:c1:38:22:19:66:fe:4a:d0:99:0c:7c:06:e5:b3:ef:12:68: 03:57:d9:b7:83:a1:6a:7c:a0:82:39:a2:59:2a:80:ca:c0:b2: 00:07:93:94:d6:42:0f:0d:1d:37:0d:78:3f:b5:fc:b6:82:46: 64:36:b8:f3:dd:43:90:ee:0f:9a:c3:46:7a:a3:07:c5:79:ab: 47:55:5a:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE3OTcxMTAvBgNVBAUTKDk5M0IwMUJBNDEzRUU1NDhGM0ZDN0ZDQjA5QTMzQjkx OTU5NjZGNDYwHhcNMjYwOTIxMDYzOTE4WhcNMjYwOTI4MDYzOTE4WjAYMRYwFAYD VQQDEw02YWIwZDExNi1lYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QZph6GkdkkKZ+BDXOwD+LLhCFB93tao5Hm5n0OwKlvx5LvKge834urMXB08 HRxhKHweZTgCQjFEB9ACEMnleCPvzUn9ufvECHgH+NsXRPBKIEUAWxzdILCRVqE+ x+ZKmPmX/UjcBsPHmxBHdZDCCjqUDSGd/QzyC4+aLPWIbBRS+vD/k4/PWjbp3xa/ 64mTNT3oR6abc9RpeQaah8vy5RZWJo+Q2FBOIyPLHhOLDBzLpWt+FB6VK4faQY/I HCjHQweB/cHIiro0AJ2ZoCCRuhPfqwQqmdFRL4kAM0PNxtmK5ROez37YhM176QSe vvqEoFZUN/7NRPbmqkQLkj24FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtSr6Ax b+1dP9rEeWPgKO1dSTXcMB8GA1UdIwQYMBaAFJk7AbpBPuVI8/x/ywmjO5GVlm9G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTc5Ny83NjZBQzlCMjZF OTIxMUYwQkJFQjdDM0FDNEY5QUUwMi9tVHNCdWtFLTVVanpfSF9MQ2FNN2taV1di MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Uc0J1a0UtNVVqel9IX0xDYU03a1pXV2IwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTc5Ny83NjZBQzlCMjZFOTIxMUYwQkJFQjdDM0FDNEY5QUUwMi9tVHNCdWtFLTVV anpfSF9MQ2FNN2taV1diMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR39ZS15o6rZTFUPIrkkczfctLaghFDJ85T21hYEClq2WSJDwb3vgMmDKe3KV vYRE5eG7p9y1IA+djfOdcsyKLtt68pII+9D1j6ApRASMFlAwteOcXSopUX7HiehA Ta8JcSa2QkbHXUBhVbRpZ9FAvZsQHv+yXVgBCQlPDdRp5lj2EuruiISrzMSjJK35 JRFn8qSaVLjPVnO2fjiNrU74KaFFkfXQ4xOq1c1mPX0f33K6v1dzRsE4Ihlm/krQ mQx8BuWz7xJoA1fZt4OhanyggjmiWSqAysCyAAeTlNZCDw0dNw14P7X8toJGZDa4 891DkO4PmsNGeqMHxXmrR1Va2w== -----END CERTIFICATE-----Generated at Mon Sep 21 19:11:08 2026 by rpki-client