$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: 83DQxM8CB1Y2JNuxsOAV02dMEREWSKX3K7d99kpnKG4= Subject key identifier: BD:9E:7A:92:90:F8:49:93:F4:2A:58:84:BD:9A:B4:B6:31:43:39:03 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 08E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 15BE Signing time: Sun 20 Sep 2026 18:20:25 +0000 Manifest this update: Sun 20 Sep 2026 18:20:25 +0000 Manifest next update: Sun 27 Sep 2026 18:20:25 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: OqB0QG6OyRs+AMDqVi0TkoOGJOKWQppUWAN6nDSl9jg=) 2: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: C7vbfjxv89XIR5NcpKz3D4uzRMsCLjoNUKAHCYrmHIY=) 3: C9C81E521D2911F18F7E6F37153D8C67.roa (hash: mXOFhSyBCv/TAJy8hqfhwv8pJyftfeyIbfuF2KBdAoc=) 4: 2F7267121DD411F18819F3DA0B3D8C67.roa (hash: oxDb8X2lz/Qtc/KEdYDIiS2xmDd6FSCv+Q74AiXUIbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2273 (0x8e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Sep 20 18:20:25 2026 GMT Not After : Sep 27 18:20:25 2026 GMT Subject: CN=6ab023e9-eb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:6a:0d:c8:85:7b:42:38:c5:81:00:4f:54: 54:0b:ae:21:a5:1e:e4:68:c1:f7:26:b6:2a:ac:d8: c8:49:5d:d4:48:b3:d5:91:be:a2:75:cc:7e:72:b3: 8c:6f:8f:c7:65:01:a7:8e:ee:90:81:9b:58:1f:bf: 21:c1:30:bc:f0:b6:24:6b:57:05:e6:93:2e:c2:7f: da:4a:08:f9:32:0f:f0:5f:57:2e:2f:70:14:f5:7f: a8:52:25:7f:d0:d8:37:27:c9:96:13:c7:d8:6b:8f: fb:5d:79:6f:18:e1:49:ad:bb:a1:4f:5c:93:d2:c2: 6c:cf:2e:04:6f:ee:66:d4:51:28:f0:6b:1b:8f:86: 3b:ef:6b:69:be:fc:34:7b:1a:a1:29:2c:71:50:66: 6b:9e:b7:45:1e:d2:ab:67:c0:83:47:a8:5f:59:a4: 45:a2:18:fd:fe:60:ef:57:70:fd:63:13:c2:27:7d: df:6a:59:d4:1a:c4:0c:17:27:38:74:4b:2d:7d:d4: 12:b8:77:7f:fd:37:3e:fb:0c:e0:ee:10:72:08:ec: bc:9c:fb:19:79:9a:c9:b6:95:c4:4c:3c:5f:cf:b6: f7:6d:92:59:16:d8:85:7a:60:6a:26:92:1f:ae:b5: a6:04:bc:bb:25:67:e5:18:7f:95:62:3f:58:e9:cd: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:7A:92:90:F8:49:93:F4:2A:58:84:BD:9A:B4:B6:31:43:39:03 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:3a:f2:a3:55:11:ff:36:7d:dc:42:43:39:3f:c9:9e:d4:19: 26:20:34:a5:c2:47:68:fb:dc:d3:25:cc:22:13:3f:1a:0d:28: 24:f2:e0:b7:6b:4c:8c:01:fe:93:ac:98:57:f9:48:de:6e:6d: 4a:0e:f7:78:00:d5:86:a0:26:ea:4d:ac:f7:8d:36:77:89:bc: 65:d4:37:b2:f0:d0:e3:fd:4f:c0:e7:da:5c:55:67:2f:c8:bd: e6:2f:7a:e2:68:77:9d:29:d5:cb:b5:d1:e0:66:91:c3:bc:4b: 6a:69:56:1d:94:db:49:a8:07:1d:b8:56:36:27:61:bc:74:7d: fb:8c:0c:86:50:29:f4:28:a5:56:6e:83:a9:d1:42:72:f6:eb: 34:ad:f1:f8:42:ee:d7:74:39:1b:4d:38:d4:3f:35:e3:e0:56: 03:33:e2:db:f8:36:34:42:5a:59:d1:78:f1:21:99:c5:f7:30: 43:ce:e2:46:2e:3d:51:f6:05:c2:ff:f1:33:7a:31:8d:85:44: 06:57:c0:cb:ed:00:c4:dd:54:1e:97:2e:90:93:ab:7c:c3:17: e4:45:4b:1f:b1:b9:2f:be:41:95:c4:0b:ad:26:a1:e1:30:d4: b9:ec:f5:f3:02:e3:79:bf:9f:fd:34:80:47:4f:6a:22:de:6d: 20:c1:93:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjYwOTIwMTgyMDI1WhcNMjYwOTI3MTgyMDI1WjAYMRYwFAYD VQQDEw02YWIwMjNlOS1lYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I9qDciFe0I4xYEAT1RUC64hpR7kaMH3JrYqrNjISV3USLPVkb6idcx+crOM b4/HZQGnju6QgZtYH78hwTC88LYka1cF5pMuwn/aSgj5Mg/wX1cuL3AU9X+oUiV/ 0Ng3J8mWE8fYa4/7XXlvGOFJrbuhT1yT0sJszy4Eb+5m1FEo8Gsbj4Y772tpvvw0 exqhKSxxUGZrnrdFHtKrZ8CDR6hfWaRFohj9/mDvV3D9YxPCJ33falnUGsQMFyc4 dEstfdQSuHd//Tc++wzg7hByCOy8nPsZeZrJtpXETDxfz7b3bZJZFtiFemBqJpIf rrWmBLy7JWflGH+VYj9Y6c2YBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2eepKQ +EmT9CpYhL2atLYxQzkDMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMDryo1UR/zZ93EJDOT/JntQZJiA0pcJHaPvc0yXMIhM/Gg0oJPLgt2tMjAH+ k6yYV/lI3m5tSg73eADVhqAm6k2s9402d4m8ZdQ3svDQ4/1PwOfaXFVnL8i95i96 4mh3nSnVy7XR4GaRw7xLamlWHZTbSagHHbhWNidhvHR9+4wMhlAp9CilVm6DqdFC cvbrNK3x+ELu13Q5G0041D814+BWAzPi2/g2NEJaWdF48SGZxfcwQ87iRi49UfYF wv/xM3oxjYVEBlfAy+0AxN1UHpcukJOrfMMX5EVLH7G5L75BlcQLrSah4TDUuez1 8wLjeb+f/TSAR09qIt5tIMGTDA== -----END CERTIFICATE-----Generated at Tue Sep 22 18:07:43 2026 by rpki-client