$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft File: tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json) Hash identifier: ptgKVBvqR0p2BkYvA4sS9zrM5Snq84LVD03mMcBJUeY= Subject key identifier: 8D:20:D8:0E:5E:C8:01:BD:A4:91:7C:FB:7B:BA:B5:26:01:90:54:B5 Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft Manifest number: 01A1 Signing time: Mon 21 Sep 2026 04:14:04 +0000 Manifest this update: Mon 21 Sep 2026 04:14:04 +0000 Manifest next update: Mon 28 Sep 2026 04:14:04 +0000 Files and hashes: 1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: fHPMV8hKh0xnX7I3EMT79ldObGS4gsUoewKC/lGBaSE=) 2: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: Mem81CDNt2s+1wxtJl9qhDaTI/CWwYf0sPuRtvT/byE=) 3: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: cYJup+wUJGtYgdIrc1oUwAkSXzmV3AlmQSx4GJxEnkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Validity Not Before: Sep 21 04:14:04 2026 GMT Not After : Sep 28 04:14:04 2026 GMT Subject: CN=6ab0af0c-2497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:10:93:cc:94:cf:1e:0b:86:3e:e0:fe:36: 31:87:bd:ad:f6:0c:1b:f4:db:4d:54:a9:a8:a4:fb: c6:68:69:12:9a:0d:2f:64:57:7b:16:00:e2:10:ae: 8a:36:8a:43:93:f4:f5:00:02:b9:bf:f4:c7:42:74: f2:0f:d7:31:e5:bd:8f:8e:1e:58:7c:87:cc:6e:76: 0c:19:ca:8d:94:c8:a8:d6:1e:5d:13:a1:b6:f8:be: a3:36:30:0e:e8:7c:04:5d:70:cb:d5:f3:81:35:33: ec:a8:98:57:64:49:2c:4d:1a:2a:23:c5:f1:eb:88: 03:20:44:ea:40:92:1f:f5:8b:32:63:03:89:72:21: 73:91:07:6a:7d:df:d7:7c:d4:52:5b:25:4d:28:5d: 39:77:de:9c:f6:60:e2:c1:fe:82:2e:fc:21:10:86: 76:46:f8:1d:d1:b9:c0:71:be:e9:1a:8e:fd:5e:35: 86:7c:2b:7e:92:93:16:d3:cf:5c:9f:f4:96:24:65: ef:52:26:c4:6d:aa:ca:cf:e6:ba:03:02:ce:75:83: 59:02:8e:63:26:58:ea:d4:e7:03:f4:af:ad:2d:25: c3:ba:ad:80:ee:aa:4e:38:74:05:27:43:99:77:5d: 18:6e:f4:00:6a:e1:f1:5e:4e:d2:ef:76:e2:e8:ee: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:20:D8:0E:5E:C8:01:BD:A4:91:7C:FB:7B:BA:B5:26:01:90:54:B5 X509v3 Authority Key Identifier: keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9c:8b:dc:93:95:09:06:0d:46:bb:13:a0:17:7a:96:dd:79: 5d:b8:37:71:64:90:3d:0a:2d:01:6b:f4:f5:06:94:9f:52:8a: b4:11:67:3d:59:be:2a:52:73:e3:48:3a:33:6e:3b:c4:58:82: 5e:f1:2c:b4:56:34:3b:24:ca:cb:59:a7:2c:e1:71:80:4f:a0: f9:ba:76:7a:6c:f9:b7:19:68:19:e9:c2:f9:07:07:5a:56:d6: 6f:af:f3:4b:1d:d5:16:d7:6f:9f:0b:52:d9:87:ef:0c:12:99: fb:53:2f:b5:29:35:a1:1a:a9:54:cf:f3:ae:1d:7a:56:b1:bc: 5f:0b:fb:94:3f:0c:5b:ae:b0:fd:5e:c7:12:ec:89:11:78:76: 0d:cb:c4:b2:6d:e6:64:a2:28:e5:b9:48:b6:97:b1:a8:21:90: 29:0e:bc:27:2b:04:98:05:06:55:03:ac:d5:b1:f3:9c:56:4b: ad:8f:23:8c:fc:e2:b4:8b:ea:c2:bf:30:20:e2:d3:01:d6:a4: 52:8c:b0:8b:68:19:1e:83:9c:95:09:0c:49:f0:66:ff:ab:3a: 7c:93:d2:03:c9:e0:9f:0d:a1:93:68:f6:01:e0:0d:0a:59:f8: 7a:07:2a:15:89:90:b7:5c:62:92:5d:68:78:e5:80:9d:e5:44: 30:8e:0b:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEI0M0M0RTNEMzJGOTVCNTA1NUQwNEZEQzAxRjg1MTk2 MzdDODlBNkYwHhcNMjYwOTIxMDQxNDA0WhcNMjYwOTI4MDQxNDA0WjAYMRYwFAYD VQQDEw02YWIwYWYwYy0yNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVQQk8yUzx4Lhj7g/jYxh72t9gwb9NtNVKmopPvGaGkSmg0vZFd7FgDiEK6K NopDk/T1AAK5v/THQnTyD9cx5b2Pjh5YfIfMbnYMGcqNlMio1h5dE6G2+L6jNjAO 6HwEXXDL1fOBNTPsqJhXZEksTRoqI8Xx64gDIETqQJIf9YsyYwOJciFzkQdqfd/X fNRSWyVNKF05d96c9mDiwf6CLvwhEIZ2Rvgd0bnAcb7pGo79XjWGfCt+kpMW089c n/SWJGXvUibEbarKz+a6AwLOdYNZAo5jJljq1OcD9K+tLSXDuq2A7qpOOHQFJ0OZ d10YbvQAauHxXk7S73bi6O5jPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0g2A5e yAG9pJF8+3u6tSYBkFS1MB8GA1UdIwQYMBaAFLQ8Tj0y+VtQVdBP3AH4UZY3yJpv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My82REYwRTEwODNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcxQlYwRV9jQWZoUmxqZklt bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3REeE9QVEw1VzFCVjBFX2NBZmhSbGpmSW1tOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My82REYwRTEwODNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcx QlYwRV9jQWZoUmxqZkltbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC5yL3JOVCQYNRrsToBd6lt15Xbg3cWSQPQotAWv09QaUn1KKtBFnPVm+KlJz 40g6M247xFiCXvEstFY0OyTKy1mnLOFxgE+g+bp2emz5txloGenC+QcHWlbWb6/z Sx3VFtdvnwtS2YfvDBKZ+1MvtSk1oRqpVM/zrh16VrG8Xwv7lD8MW66w/V7HEuyJ EXh2DcvEsm3mZKIo5blItpexqCGQKQ68JysEmAUGVQOs1bHznFZLrY8jjPzitIvq wr8wIOLTAdakUoywi2gZHoOclQkMSfBm/6s6fJPSA8ngnw2hk2j2AeANCln4egcq FYmQt1xikl1oeOWAneVEMI4LXg== -----END CERTIFICATE-----Generated at Tue Sep 22 13:16:53 2026 by rpki-client