$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json) Hash identifier: 0N/BCB88CQ+qsEA6qv0zYyp6E58Ac3O2TEX3Mb9QxE8= Subject key identifier: F0:EF:8F:98:0E:9C:64:35:28:A1:2B:6D:34:15:51:0B:4F:10:B9:C3 Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft Manifest number: 022B Signing time: Mon 21 Sep 2026 02:47:44 +0000 Manifest this update: Mon 21 Sep 2026 02:47:43 +0000 Manifest next update: Mon 28 Sep 2026 02:47:43 +0000 Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: jDAa3hsXJWnigbowLLc6mm39SIqMYZN+60s6bfE05MU=) 2: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: 1EHDhgVqidDrXRWgA6OsvGx4WrHFvoHxphKqIoJn6qI=) 3: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: 7O2mtkzrE7WGBGsCng9QGlpq45C/QzmD5NcTuRUtGbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Validity Not Before: Sep 21 02:47:43 2026 GMT Not After : Sep 28 02:47:43 2026 GMT Subject: CN=6ab09ad0-5b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:9b:06:26:9a:83:84:3d:e1:8b:d0:7e:99: 1d:fc:6d:c0:78:4d:fb:94:d3:da:74:88:41:ac:92: 96:44:54:e6:3b:86:a6:5c:cc:61:54:a9:e9:8d:2b: 2b:b9:11:5c:b6:eb:42:7a:47:60:54:94:b6:10:03: 4c:0a:d4:38:a7:91:11:ef:72:28:d7:78:ef:8a:e5: 11:40:47:d0:32:8d:7d:63:99:94:7a:14:67:8d:26: 88:1a:91:d7:7a:d0:33:7f:fd:50:10:80:10:db:53: 1a:2c:55:70:f5:8f:64:89:bb:a5:30:5a:9a:b3:50: 6c:4d:b9:bb:c4:f6:63:7a:3b:34:f4:79:75:c4:ed: e6:c4:80:cb:58:12:62:86:d0:63:ee:fc:85:b0:a5: 31:9a:e6:09:56:d3:97:ac:a5:f0:b4:e5:5c:35:bb: e9:93:b4:c0:89:53:40:37:ce:09:72:8a:d4:7d:a6: a3:10:af:c8:f7:1d:3b:f0:ca:c1:4a:2c:4c:50:ca: 23:5b:88:c8:37:6d:cb:5b:ba:80:c2:74:3d:d4:a7: ba:ae:06:da:c0:d2:17:13:5e:96:c0:fd:b6:34:b2: 69:bb:c9:06:9d:c2:e2:2b:80:02:ff:8d:67:6f:2a: b1:cc:b6:57:6e:d6:cd:d3:06:dd:51:4c:b4:19:8c: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EF:8F:98:0E:9C:64:35:28:A1:2B:6D:34:15:51:0B:4F:10:B9:C3 X509v3 Authority Key Identifier: keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4a:84:90:bc:70:28:25:74:51:81:b7:7d:a9:9f:51:03:84: 80:3f:df:22:81:10:e2:88:4c:4f:b1:c5:ff:8a:ac:da:d3:3f: 13:97:1e:3e:90:cd:2e:71:3f:6f:81:17:e7:f1:28:09:82:b7: 5b:f0:11:54:d0:95:02:4a:9c:ab:dd:7d:af:d6:ec:ba:cf:57: b0:97:d7:be:ae:76:7a:01:18:19:17:a5:d3:e1:c4:a8:24:8e: f0:94:d6:4f:84:d3:e6:d5:b4:e6:e1:fe:3c:8e:b8:81:01:b0: 76:35:f4:b4:d7:6b:65:4d:c7:1b:f8:a8:8f:87:af:a7:6c:1f: b1:15:af:97:da:43:88:b4:a5:a3:a3:8d:35:03:37:54:bf:aa: 90:71:43:11:62:5a:ac:e7:b1:3e:49:dc:ad:9f:0f:e8:20:66: 0b:67:75:9d:10:34:1e:4e:ea:09:1d:15:41:d5:18:99:b7:5e: 45:9e:57:7b:dd:0e:ff:5c:de:e5:db:ba:00:fc:63:cf:7f:b4: 0a:6b:ec:46:e3:62:33:cc:0e:4f:a2:ed:0c:9d:a5:9d:88:a9: 39:b7:01:45:c3:4b:a5:07:3f:eb:84:dd:e1:7a:32:80:93:a4: f5:65:aa:5e:ae:70:9e:4c:cc:0a:dd:ce:b1:63:8c:60:77:e1: c0:2d:af:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky M0M0RTQ4QUIwHhcNMjYwOTIxMDI0NzQzWhcNMjYwOTI4MDI0NzQzWjAYMRYwFAYD VQQDEw02YWIwOWFkMC01YjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnObBiaag4Q94YvQfpkd/G3AeE37lNPadIhBrJKWRFTmO4amXMxhVKnpjSsr uRFctutCekdgVJS2EANMCtQ4p5ER73Io13jviuURQEfQMo19Y5mUehRnjSaIGpHX etAzf/1QEIAQ21MaLFVw9Y9kibulMFqas1BsTbm7xPZjejs09Hl1xO3mxIDLWBJi htBj7vyFsKUxmuYJVtOXrKXwtOVcNbvpk7TAiVNAN84JcorUfaajEK/I9x078MrB SixMUMojW4jIN23LW7qAwnQ91Ke6rgbawNIXE16WwP22NLJpu8kGncLiK4AC/41n byqxzLZXbtbN0wbdUUy0GYxiCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDvj5gO nGQ1KKErbTQVUQtPELnDMB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pB dG5WOEEtVmJDbGtqeE9TS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADEqEkLxwKCV0UYG3famfUQOEgD/fIoEQ4ohMT7HF/4qs2tM/E5cePpDNLnE/ b4EX5/EoCYK3W/ARVNCVAkqcq919r9bsus9XsJfXvq52egEYGRel0+HEqCSO8JTW T4TT5tW05uH+PI64gQGwdjX0tNdrZU3HG/ioj4evp2wfsRWvl9pDiLSlo6ONNQM3 VL+qkHFDEWJarOexPkncrZ8P6CBmC2d1nRA0Hk7qCR0VQdUYmbdeRZ5Xe90O/1ze 5du6APxjz3+0CmvsRuNiM8wOT6LtDJ2lnYipObcBRcNLpQc/64Td4XoygJOk9WWq Xq5wnkzMCt3OsWOMYHfhwC2vwQ== -----END CERTIFICATE-----Generated at Tue Sep 22 12:55:28 2026 by rpki-client