$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft File: tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json) Hash identifier: ZabiipGSMxEU+2l2Y8Xd9GvpQcqxGfMwsekED4XRKus= Subject key identifier: D6:84:37:20:6E:C5:11:90:8E:6F:91:53:E6:A8:07:3A:A8:9D:BD:90 Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft Manifest number: 0123 Signing time: Mon 21 Sep 2026 07:03:31 +0000 Manifest this update: Mon 21 Sep 2026 07:03:30 +0000 Manifest next update: Mon 28 Sep 2026 07:03:30 +0000 Files and hashes: 1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: k/UFDM3YCfNl4B3KqCCXnxhH3Mk71a9T8nQqkIfqu1w=) 2: A4BC6B5699C811F19653C7033B11F970.roa (hash: DqYOnXpwLmKKYMjJJokS/b8klmENEW8C0tDont5K9Pw=) 3: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: Rqu5d6Iyt5RvWg05t+Bs6MR1vP48lOt2FAst15Iu7bg=) 4: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: 4HZ72AqLXMi7Oo7fFl4c7MxtfYI6Hr7/6V24G0+ZxdI=) 5: ABCCE66C445C11F1AD9768EE92833773.roa (hash: 9iBZLQ9uktWZ65mu8nlRlZWV5ecR8Ndx/Ji4IWLuSGw=) 6: B9DCE45A347111F19700968FA5833773.roa (hash: 6QpnuOmxKQrcMtBDCLToCXkzosmzHxUQUPokRTTJH3w=) 7: 2AFD25C0A10311F1ABE0DDFE3411F970.roa (hash: hiQnkW/a3aw4sFHOLrSxIlaGj0c/SkbWMstmNg55aU4=) 8: D33618D2A59011F193111DFE6011F970.roa (hash: HrkKSxhRpAmy9I0iwuLSShrDvnrHJsSmxa97enwplS8=) 9: 9FA8D4DCA50411F18265DE6C3311F970.roa (hash: ncxhXez+ge66tRuP9GlI5BQTNpxBURFVOTzkOlVAARM=) 10: 0F05CF767A6011F1976E05638BA30FBC.roa (hash: 7B1bqD+6h9jyiiQRYsB8Q16/B9nLv79GenM8klf3G4g=) 11: A2517D166EAD11F18743D71861A30FBC.roa (hash: EXYW07HU+PDuF2Sjxw7qGLvDdb4Ds1WxfwmESxYCYx4=) 12: DF86A79EAA4711F18D6FC91D5811F970.roa (hash: di6G4Ok2YL2ICDAjJ+SX840gtU1xkz52o/rsk7i69L0=) 13: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=) 14: D1D5C8C0A59011F193111DFE6011F970.roa (hash: qCJvwBrlqKx5E3VgjdWqgEUqcE6G1sCbDQGpoZR3Wb0=) 15: 80CB68A68EC811F1946CF5105A11F970.roa (hash: Ow3UmxXOic3HNzm9LDvmvAwHX174ghnh0IzFZYxiFW0=) 16: D2D5E3A2429111F1A9B50A47B2833773.roa (hash: JNJnwJdlLDhaD1G/+iNzHqjRU67B9dzGcdSz2okho74=) 17: CFF23F5457FA11F1947AF89298833773.roa (hash: 70J08+H/ExNxc8jpD+BsqCt2q0k+wbGOjpsoiz2ROjA=) 18: 050E38E62E3E11F18FB4E28692833773.roa (hash: /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=) 19: 04910FD2A1A311F1B09ED42E6611F970.roa (hash: YhlkiTpSvf0X1OyOQCbOLY2s/yzWRi7pqB/JUq+tVwg=) 20: 300E55D2645B11F19DFE990E7247A888.roa (hash: B8rZI43b2LUCXU8rE+xRAPdthQYs+K3MurmJh+dDXVg=) 21: 23967BF24A7711F1A7BED77BA6833773.roa (hash: Fp0dYx6TPqms3ShBwcnNza2eQIEhSvJF0hdWgmkuGzo=) 22: A7349B8A499E11F19CE2905A97833773.roa (hash: tv8Ttyi8smlY2FRZQxJdaalHWRaIZpl5MIGpz7txhiY=) 23: 0A4D26588F9811F187E520485C11F970.roa (hash: 3DRYyDNZn0xnswRBJSAxhjSfQjHsJA8mc7gZgee0QnE=) 24: 5B9CF7B8541011F193006E3293833773.roa (hash: UEPdDUTRui+ayW3AbcnrWggT880Cdd6becbTRiUrqEI=) 25: AFBA3B6099CC11F1A36A837B3B11F970.roa (hash: H/OHVH3gHMbF1VZocaHnojjYPp+zCG+XnnmhJV9htu8=) 26: 3A70BFEC8C6F11F185F85D156111F970.roa (hash: XCQ95gaGyvxA7SNwZiogDe3J8T2Hjl5LHuJIkuOVpsw=) 27: DF3E21307BFE11F198B5A8F78EA30FBC.roa (hash: NT30pur8xhY9PcKqmg6IwjPQmddy3T3G46Qh5vdQmt8=) 28: 0E6E84F47A6011F1976E05638BA30FBC.roa (hash: HtUuAkol0mHQrD42lO6MoPJ+Ejb03iZZDhqfCwpcfTY=) 29: 8FFB3BA07E4A11F1907D372082A30FBC.roa (hash: 2pEoKCofwg8TjGaQHu2CywBBegMX4ui6vfX3Ybywow4=) 30: 620D8D92B24311F1B988EDDC6311F970.roa (hash: qxlzMzNMGw6ZR6vXmyZ4a2jsUlkB5KPOP3YwetQdzwA=) 31: A5C7652899C811F19653C7033B11F970.roa (hash: VH6+CPwDbSz/ISDti0F/lzMzff0Xd0BlKucLWf6GuRY=) 32: 1A44C40648FF11F1AE16E45D93833773.roa (hash: q7YWA5SPxz9lm686m7SUsJ/DXFlxCYiGkRbWYzw7qBs=) 33: 88221330A26D11F19D29C37F6511F970.roa (hash: z551IATQrx2AVRTObISYemc3UykqMiktmWx2mC6/YLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Validity Not Before: Sep 21 07:03:30 2026 GMT Not After : Sep 28 07:03:30 2026 GMT Subject: CN=6ab0d6c3-98ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:d4:53:40:0a:6c:9e:a7:e6:eb:bb:3a:a7: 06:bd:b5:01:de:c1:2f:c9:47:1e:e9:d1:09:1e:e6: f2:9f:3f:f1:b8:6e:b5:ae:4e:21:9f:67:f8:9f:ea: 76:7d:df:0a:e6:31:f8:c8:e3:72:99:4e:c3:2c:50: 0d:02:a0:8f:c5:80:68:8e:e5:8d:f5:3f:90:5d:20: 58:d5:9e:b3:4f:60:7a:89:83:09:0b:ae:0e:9d:1f: 65:34:0b:c0:5d:a9:5c:9e:8e:45:16:51:02:4e:74: 3c:05:36:5a:44:52:d9:8a:fe:18:5e:d0:d6:23:b8: b0:7c:a8:5c:1d:2d:2a:49:b1:c1:e2:9f:01:9e:d5: 46:52:97:e9:e7:a6:90:0d:55:b4:c8:ba:a3:54:d4: f2:2b:c4:aa:cc:ee:e1:af:be:bf:c7:fc:cc:56:eb: 7f:27:4a:96:f5:9b:ff:fd:ca:3e:c5:b3:21:f3:9f: 41:0a:b9:1d:da:ba:a1:17:40:79:0d:e8:0f:c4:c8: 8d:e3:28:81:40:8f:16:bc:6a:13:0d:3f:34:32:d8: c4:6f:fa:57:24:15:b9:63:71:7d:ad:68:e8:46:4d: dd:69:50:5f:5f:dc:2c:ec:34:d7:03:0b:6f:f0:f6: 2f:0e:84:a0:b2:e0:e4:40:07:2a:cd:1e:86:56:5f: 14:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:84:37:20:6E:C5:11:90:8E:6F:91:53:E6:A8:07:3A:A8:9D:BD:90 X509v3 Authority Key Identifier: keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f1:33:19:f4:be:34:a9:21:22:ad:4f:23:f7:10:50:d2:69:ec: f8:7e:36:2a:7d:5f:42:76:3e:9b:62:d1:1d:7b:61:f7:b5:b8: 0f:58:7a:ab:ac:34:50:b2:98:17:8a:ce:9f:b2:49:8a:34:04: 08:47:8e:de:e4:44:ee:fe:00:a8:9b:f6:cf:cf:89:2f:93:08: f4:13:03:73:55:95:ab:90:15:28:a6:31:17:2a:6d:64:6e:a0: e8:06:64:e6:06:2b:40:36:8b:7b:d3:e7:a9:c0:09:56:b6:29: 32:9e:4c:a1:b3:4b:7d:2b:6d:4f:01:a1:a1:7f:ef:15:fe:36: ee:89:cc:20:dc:2c:70:15:9c:77:e7:ec:0f:7a:33:73:34:77: 5a:c1:bc:a6:aa:f6:ed:3b:83:19:38:d1:db:4f:2b:ec:42:41: e7:8b:a7:9d:0e:d5:f5:87:f2:db:8a:2a:30:9b:b5:35:d8:f6: fc:72:38:b7:04:31:7b:f5:32:48:6f:b3:f3:41:19:c4:62:8e: ce:fa:c1:f3:72:65:76:94:70:22:b0:cb:6a:71:8e:c6:e0:90: 1b:5a:38:a9:ad:15:80:ff:97:64:a8:82:1f:47:00:50:f5:0d: e2:e2:0f:13:87:cc:b4:92:7d:e7:40:f5:f9:18:13:76:4e:fb: d6:37:35:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC QTQxMkI2M0QwHhcNMjYwOTIxMDcwMzMwWhcNMjYwOTI4MDcwMzMwWjAYMRYwFAYD VQQDEw02YWIwZDZjMy05OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wbUU0AKbJ6n5uu7OqcGvbUB3sEvyUce6dEJHubynz/xuG61rk4hn2f4n+p2 fd8K5jH4yONymU7DLFANAqCPxYBojuWN9T+QXSBY1Z6zT2B6iYMJC64OnR9lNAvA Xalcno5FFlECTnQ8BTZaRFLZiv4YXtDWI7iwfKhcHS0qSbHB4p8BntVGUpfp56aQ DVW0yLqjVNTyK8SqzO7hr76/x/zMVut/J0qW9Zv//co+xbMh859BCrkd2rqhF0B5 DegPxMiN4yiBQI8WvGoTDT80MtjEb/pXJBW5Y3F9rWjoRk3daVBfX9ws7DTXAwtv 8PYvDoSgsuDkQAcqzR6GVl8UWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaENyBu xRGQjm+RU+aoBzqonb2QMB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0 ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI0Ni8wODg3MDFCOEFCQjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhP N3g0dUVBbDNYWkc2UVN0ajAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA8TMZ9L40qSEirU8j9xBQ0mns+H42Kn1fQnY+m2LRHXth97W4D1h6q6w0ULKY F4rOn7JJijQECEeO3uRE7v4AqJv2z8+JL5MI9BMDc1WVq5AVKKYxFyptZG6g6AZk 5gYrQDaLe9PnqcAJVrYpMp5MobNLfSttTwGhoX/vFf427onMINwscBWcd+fsD3oz czR3WsG8pqr27TuDGTjR208r7EJB54unnQ7V9Yfy24oqMJu1Ndj2/HI4twQxe/Uy SG+z80EZxGKOzvrB83JldpRwIrDLanGOxuCQG1o4qa0VgP+XZKiCH0cAUPUN4uIP E4fMtJJ950D1+RgTdk771jc1Bg== -----END CERTIFICATE-----Generated at Mon Sep 21 13:32:30 2026 by rpki-client