$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft File: TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft (raw, json) Hash identifier: hBv3OHpp6CtE6GZWPiN66kn/0reUjtDpE+Hm/pDba/g= Subject key identifier: D1:6B:BB:20:A6:0B:81:F0:19:AA:20:75:A6:EA:77:18:40:6F:D4:25 Authority key identifier: 4D:62:DD:EF:19:BB:45:2F:14:19:56:10:08:CB:12:1C:82:99:20:DD Certificate issuer: /CN=A917A95A/serialNumber=4D62DDEF19BB452F1419561008CB121C829920DD Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft Manifest number: 0B Signing time: Mon 21 Sep 2026 09:11:34 +0000 Manifest this update: Mon 21 Sep 2026 09:11:34 +0000 Manifest next update: Mon 28 Sep 2026 09:11:34 +0000 Files and hashes: 1: TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl (hash: 13HapnyxdbmVoPQEieqRdUg5mPnWmEuit3lsQJmoeFM=) 2: 8C6619A0ABFF11F19384BB506B11F970.roa (hash: fwPkncf6zvafOH+RT4hBG8YBRTtfW1is9bJpin0TTsA=) 3: 8D6DE39AABFB11F1BD809E3B6A11F970.roa (hash: 0jsLrFd0r2t1mnTgi3WM/0wopvNFV+Zm/9y/PiTR4bk=) 4: 495EADB4ABFC11F1817FA89C6A11F970.roa (hash: FBNqPMPTEYHVvGU77MxzJrj7KAVcUXffGlg20+PyVOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A95A, serialNumber=4D62DDEF19BB452F1419561008CB121C829920DD Validity Not Before: Sep 21 09:11:34 2026 GMT Not After : Sep 28 09:11:34 2026 GMT Subject: CN=6ab0f4c6-0d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:6b:7d:ae:df:cb:65:bc:9b:f2:84:c9:1c: 7a:9c:f6:ca:00:62:a0:35:af:60:a2:38:e4:10:27: 69:de:6b:03:ba:0d:a1:4f:17:5a:32:6e:fd:09:7f: e5:80:b3:08:43:a8:a2:a9:67:62:4b:a5:1a:da:ce: 85:08:67:75:f4:af:7d:78:38:ff:d8:32:47:53:7d: b3:45:dd:24:9a:6c:92:a2:e1:c7:5d:6a:3d:e7:a8: 77:a8:b1:bd:b5:0e:27:c3:20:83:45:b7:f6:71:bf: f9:52:a4:43:ad:09:27:f1:31:25:f9:0c:c0:bb:47: be:91:19:ad:d7:97:9b:4a:f9:5d:3b:9d:2b:be:b2: aa:42:eb:93:cc:8e:9a:13:a7:32:88:67:98:11:6d: 43:b6:34:af:ca:07:c1:b7:16:83:db:6a:32:da:08: 74:c7:a9:2d:57:a5:46:68:de:10:29:4a:86:8c:20: 9f:f9:e6:3a:05:9c:56:2b:e0:a5:f7:a9:fe:24:94: 40:5b:ac:51:58:d6:e7:1c:73:7a:52:64:25:cc:cf: ac:6d:9c:46:7b:f6:8c:5a:47:96:30:87:23:0f:cc: 1c:4a:d9:69:74:4a:14:b7:92:0d:02:fb:f8:2d:0f: 8b:f5:62:65:2b:fd:f8:88:87:71:d8:84:2d:a4:e8: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6B:BB:20:A6:0B:81:F0:19:AA:20:75:A6:EA:77:18:40:6F:D4:25 X509v3 Authority Key Identifier: keyid:4D:62:DD:EF:19:BB:45:2F:14:19:56:10:08:CB:12:1C:82:99:20:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:3a:a6:35:9d:7b:ca:74:47:cb:87:e0:d2:ce:8b:b1:1b:23: 1c:66:de:00:4e:63:64:17:2d:5f:4b:47:37:a8:f4:0b:01:26: 61:07:82:e4:24:6d:18:1a:f4:96:59:b9:fd:cd:90:30:96:de: b4:72:4d:61:ff:70:ff:27:69:b0:ae:28:c4:91:ed:e9:ce:62: 0f:89:33:2e:7b:1a:26:48:89:c4:e9:95:01:f4:83:64:c1:2d: a6:b1:96:f0:4a:25:fc:be:0e:93:e5:36:29:32:82:db:ec:aa: e1:4a:74:0f:b9:40:08:b8:1d:52:81:10:12:d1:56:42:3a:18: 1c:66:7c:c1:a4:00:7f:c0:9b:ae:24:4e:c8:d2:4d:c5:27:33: 7f:d5:2f:38:fe:09:ab:a9:01:e7:11:97:53:99:a0:32:7c:0f: 7a:fc:49:ba:e1:2a:0d:5b:08:88:ae:66:4b:6c:1a:26:c9:5c: f2:e5:a9:a8:23:63:f8:1b:2d:64:a9:c4:ac:67:68:4b:4e:05: 79:9c:ed:08:16:de:f8:f1:b0:c1:da:c0:12:50:51:6e:90:73: ce:9e:f9:ca:52:6c:30:fa:c6:77:1b:cb:27:3c:a9:57:70:dc: 5e:c7:fb:b8:33:ef:7f:92:98:d7:00:b0:57:51:24:6b:a4:24: 61:42:92:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTk1QTExMC8GA1UEBRMoNEQ2MkRERUYxOUJCNDUyRjE0MTk1NjEwMDhDQjEyMUM4 Mjk5MjBERDAeFw0yNjA5MjEwOTExMzRaFw0yNjA5MjgwOTExMzRaMBgxFjAUBgNV BAMTDTZhYjBmNGM2LTBkMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFGWt9rt/LZbyb8oTJHHqc9soAYqA1r2CiOOQQJ2neawO6DaFPF1oybv0Jf+WA swhDqKKpZ2JLpRrazoUIZ3X0r314OP/YMkdTfbNF3SSabJKi4cddaj3nqHeosb21 DifDIINFt/Zxv/lSpEOtCSfxMSX5DMC7R76RGa3Xl5tK+V07nSu+sqpC65PMjpoT pzKIZ5gRbUO2NK/KB8G3FoPbajLaCHTHqS1XpUZo3hApSoaMIJ/55joFnFYr4KX3 qf4klEBbrFFY1uccc3pSZCXMz6xtnEZ79oxaR5YwhyMPzBxK2Wl0ShS3kg0C+/gt D4v1YmUr/fiIh3HYhC2k6K8bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0Wu7IKYL gfAZqiB1pup3GEBv1CUwHwYDVR0jBBgwFoAUTWLd7xm7RS8UGVYQCMsSHIKZIN0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBOTVBLzcyODRGQjI4QUJG QTExRjE5M0ZENUZBNDY5MTFGOTcwL1RXTGQ3eG03UlM4VUdWWVFDTXNTSElLWklO MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFdMZDd4bTdSUzhVR1ZZUUNNc1NISUtaSU4wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB OTVBLzcyODRGQjI4QUJGQTExRjE5M0ZENUZBNDY5MTFGOTcwL1RXTGQ3eG03UlM4 VUdWWVFDTXNTSElLWklOMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB1OqY1nXvKdEfLh+DSzouxGyMcZt4ATmNkFy1fS0c3qPQLASZhB4LkJG0YGvSW Wbn9zZAwlt60ck1h/3D/J2mwrijEke3pzmIPiTMuexomSInE6ZUB9INkwS2msZbw SiX8vg6T5TYpMoLb7KrhSnQPuUAIuB1SgRAS0VZCOhgcZnzBpAB/wJuuJE7I0k3F JzN/1S84/gmrqQHnEZdTmaAyfA96/Em64SoNWwiIrmZLbBomyVzy5amoI2P4Gy1k qcSsZ2hLTgV5nO0IFt748bDB2sASUFFukHPOnvnKUmww+sZ3G8snPKlXcNxex/u4 M+9/kpjXALBXUSRrpCRhQpIE -----END CERTIFICATE-----Generated at Mon Sep 21 12:38:30 2026 by rpki-client