$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: 6u2k5V2RVs/poU6R/ucKKlJh9QEBS6MqYydrAJh24Xk= Subject key identifier: 3D:26:0A:77:89:6F:38:03:BC:F4:5D:7B:F1:D1:1E:8E:D4:2B:0A:BE Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0D03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0CE4 Signing time: Wed 14 Oct 2026 18:40:43 +0000 Manifest this update: Wed 14 Oct 2026 18:40:43 +0000 Manifest next update: Wed 21 Oct 2026 18:40:43 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: cfN46wECgBx+tSwnCRCjFGsnK49zBcV8OY2zomozmbI=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nEmNA11Dyl7nTFmnZC9S6fy/8rzvC71ench9nRz81iE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: J2Vubqi8ic0NqlP+qdXl9htU+adGeTvh1ITR3W4ptX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 18:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3331 (0xd03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Oct 14 18:40:43 2026 GMT Not After : Oct 21 18:40:43 2026 GMT Subject: CN=6acfccab-e106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:6a:fb:47:6e:a1:95:64:58:ff:0c:e7:e3: 07:93:be:d1:4c:87:3e:1a:7c:04:98:6d:a3:19:03: 31:4b:eb:1b:2e:b6:08:96:c5:b6:6f:fe:58:b6:ed: 10:4a:a6:a6:69:73:08:f7:df:ae:c7:f7:60:de:ba: 3e:59:82:c1:b5:e5:11:47:40:48:04:bf:80:e1:ab: 0a:5d:97:46:6b:3b:a4:87:7a:d6:d9:64:4f:92:7a: 30:05:5f:c7:95:c2:55:b4:d4:5a:5a:2d:68:9a:f7: 7d:f8:6b:d3:29:3c:1c:dc:f1:d2:b3:f6:11:2f:57: e7:8f:83:97:7e:43:1a:eb:3c:99:de:cd:7a:1f:1c: 49:e7:c5:02:59:45:97:6f:79:1d:db:cb:db:14:8d: e1:71:e1:bc:1d:c9:de:67:37:c9:30:2a:a0:c4:2b: ee:f6:34:c4:01:af:8e:13:c1:7d:88:3b:ff:04:cd: 2e:4a:01:43:ae:5f:21:aa:b3:33:cb:21:b1:94:08: 49:8b:09:88:4c:ca:5d:f8:5f:8e:9c:0a:22:f8:b6: c4:a3:fc:c6:44:af:ee:08:8d:6b:e7:d5:ae:5c:2e: e2:f4:fc:8f:f4:7e:02:5d:7e:df:e0:c0:b0:f3:01: bb:e6:93:a0:aa:27:5d:9c:1f:d9:13:1d:74:01:38: c8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:26:0A:77:89:6F:38:03:BC:F4:5D:7B:F1:D1:1E:8E:D4:2B:0A:BE X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:53:90:d0:02:5c:71:f8:e3:a0:5c:4f:2f:1b:ea:ec:1a:42: f3:b9:34:a7:c8:11:31:05:27:81:36:85:e4:fc:56:81:d6:e7: 29:a4:91:cd:c5:d3:b2:d0:ab:62:17:d7:a5:03:0b:bb:1d:6e: 89:ec:3e:14:95:50:05:f4:5f:bc:05:a4:92:90:af:15:a0:bf: ae:56:21:44:19:6e:59:bb:4d:11:cf:60:8a:fe:dd:19:7d:e6: 89:ec:75:26:b7:05:b5:bd:e1:99:58:61:74:08:49:d5:69:50: d1:87:4c:50:eb:7f:72:f5:b7:7a:de:a3:8e:65:ba:28:9a:9e: 0b:1a:c8:d1:9a:91:4c:ae:a1:cb:cd:d9:f9:a1:83:f5:67:2f: 12:60:9a:d2:50:c8:c3:41:5b:37:65:0f:94:a7:58:a9:93:3b: 1c:82:f0:74:ad:ad:ec:a8:8c:be:55:b6:46:9e:a7:2c:8f:c4: c0:f7:18:1f:d2:dc:28:23:14:99:57:5c:1f:e0:ae:ca:c7:80: 06:c0:77:c6:9d:f5:7c:1c:f8:61:eb:5f:b6:5f:d7:c0:17:b3: ff:6d:0d:ac:91:bd:56:ab:3d:51:3c:03:29:04:c7:59:48:01: 74:7a:1d:dd:b6:a9:69:6e:f9:68:23:c8:8c:a4:5f:a8:bc:c7: 14:60:ff:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjYxMDE0MTg0MDQzWhcNMjYxMDIxMTg0MDQzWjAYMRYwFAYD VQQDEw02YWNmY2NhYi1lMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM9q+0duoZVkWP8M5+MHk77RTIc+GnwEmG2jGQMxS+sbLrYIlsW2b/5Ytu0Q SqamaXMI99+ux/dg3ro+WYLBteURR0BIBL+A4asKXZdGazukh3rW2WRPknowBV/H lcJVtNRaWi1omvd9+GvTKTwc3PHSs/YRL1fnj4OXfkMa6zyZ3s16HxxJ58UCWUWX b3kd28vbFI3hceG8HcneZzfJMCqgxCvu9jTEAa+OE8F9iDv/BM0uSgFDrl8hqrMz yyGxlAhJiwmITMpd+F+OnAoi+LbEo/zGRK/uCI1r59WuXC7i9PyP9H4CXX7f4MCw 8wG75pOgqiddnB/ZEx10ATjIZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0mCneJ bzgDvPRde/HRHo7UKwq+MB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhVOQ0AJccfjjoFxPLxvq7BpC87k0p8gRMQUngTaF5PxWgdbnKaSRzcXTstCr YhfXpQMLux1uiew+FJVQBfRfvAWkkpCvFaC/rlYhRBluWbtNEc9giv7dGX3miex1 JrcFtb3hmVhhdAhJ1WlQ0YdMUOt/cvW3et6jjmW6KJqeCxrI0ZqRTK6hy83Z+aGD 9WcvEmCa0lDIw0FbN2UPlKdYqZM7HILwdK2t7KiMvlW2Rp6nLI/EwPcYH9LcKCMU mVdcH+CuyseABsB3xp31fBz4Yetftl/XwBez/20NrJG9Vqs9UTwDKQTHWUgBdHod 3bapaW75aCPIjKRfqLzHFGD/uQ== -----END CERTIFICATE-----Generated at Thu Oct 15 08:26:17 2026 by rpki-client