$ rpki-client -vvvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json) Hash identifier: DSygEcdCUoE1KkYV+8hfm7bSXXdox1d34eU9imTejwg= Subject key identifier: FD:EA:5D:1E:EE:C2:13:72:74:9D:52:58:4C:5C:0F:82:EA:24:85:C4 Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft Manifest number: F7 Signing time: Sat 19 Sep 2026 06:30:50 +0000 Manifest this update: Sat 19 Sep 2026 06:30:50 +0000 Manifest next update: Sat 26 Sep 2026 06:30:50 +0000 Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: aWeOPB6sn1MZiuosh6ME3u1dVQaUPx9oX90beGANz8E=) 2: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: BcNgGbp9R5muzvSnB/YVBhMpcVEZktWqP0cVBxkO3vw=) 3: E641780E535211F0A795A950C4F9AE02.roa (hash: fENxtsD75pzT8XaFqFAo0t9dutKfb4gC7DIenHcT3ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Validity Not Before: Sep 19 06:30:50 2026 GMT Not After : Sep 26 06:30:50 2026 GMT Subject: CN=6aae2c1a-f351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:88:64:4a:9d:b1:15:b4:60:fb:b2:44:e5:06: 30:9a:43:f4:36:e4:3e:71:c5:8b:f1:d9:c1:d7:14: 07:3f:bd:06:a3:e2:30:55:e2:1c:a6:b9:43:c9:58: bd:25:d0:17:14:07:8b:c3:aa:b0:03:c4:f5:49:af: 69:9d:9d:c0:84:e4:c4:34:2d:fb:45:f7:ab:d2:1f: 6d:58:b9:6f:4a:98:09:19:fa:80:bb:77:88:53:f0: 47:14:cf:c5:fb:d8:89:b7:de:5e:8d:ad:da:63:85: d5:f0:43:49:a6:79:f5:ca:a0:5e:cd:e9:d6:3e:2e: 27:2c:af:f3:5e:84:ba:76:4d:83:ee:c9:de:57:c9: a2:2c:00:ea:e0:35:76:43:21:ff:a1:63:3c:b2:23: c0:cd:3c:a0:68:03:28:39:56:0e:f3:2a:d8:2d:5d: eb:f1:98:1c:be:c4:ae:8f:d8:ed:c9:ac:df:b3:c3: 8d:f9:c3:aa:77:1f:31:cf:6e:fc:ba:8a:dd:e5:f6: ef:cb:4a:b6:94:b4:dc:38:00:39:ae:1c:f4:20:37: fb:81:3d:46:5c:94:2b:2f:38:29:7c:af:ce:18:8c: 17:2b:c3:b4:e3:1b:67:1e:68:1d:23:a4:a0:ce:fd: cf:a1:3e:83:16:72:2a:98:0e:ed:36:e8:c2:51:3a: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EA:5D:1E:EE:C2:13:72:74:9D:52:58:4C:5C:0F:82:EA:24:85:C4 X509v3 Authority Key Identifier: keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b8:51:ba:b3:05:9f:ea:4b:6a:e5:82:54:b4:6d:4f:28:c2: ce:04:d4:61:e7:85:67:40:e4:92:2a:08:4d:9d:f4:b1:15:05: cf:bd:db:ff:3f:6a:e5:46:c1:7c:23:65:ca:20:46:8d:88:1f: 95:63:70:38:e3:5c:0b:28:5f:2b:b7:05:46:12:d1:ae:14:73: 9f:96:dc:45:ad:23:be:38:42:ec:9e:79:76:ab:06:0b:a8:67: 24:07:7b:76:40:04:bd:3b:a8:dc:c1:9a:88:a9:4c:34:93:7e: 25:dd:b0:3c:9f:e2:11:df:c9:b5:dc:40:fc:b2:82:7d:ef:70: cf:af:cd:0c:5a:f8:a5:0e:f6:fe:31:c1:9d:91:56:1e:07:0f: f4:bb:0a:4f:48:89:21:b5:b5:b6:c9:a9:da:eb:84:b3:15:03: 8c:db:9a:f2:c6:17:33:a9:61:0a:b3:ce:ad:56:50:8d:86:89: 13:35:a4:b9:8f:5a:a9:a7:27:1d:f4:aa:56:9c:c7:39:46:44: 8f:b7:3c:e6:5d:2d:63:c9:f6:65:3a:86:3b:44:42:2f:96:19: d8:ca:59:82:4f:ac:f6:08:f6:d3:86:19:31:c4:d8:ba:c1:ca: 99:ba:ea:fb:57:4a:fe:4b:f0:22:9a:a7:61:cd:ed:c5:a2:b0: 3e:d0:64:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFCQUMxMTAvBgNVBAUTKEI0MDM4QUI2NDAzOUYzMTQ1NjIyQTIwRkY3MEVEN0JF MUQ0RTdGOTEwHhcNMjYwOTE5MDYzMDUwWhcNMjYwOTI2MDYzMDUwWjAYMRYwFAYD VQQDEw02YWFlMmMxYS1mMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArohkSp2xFbRg+7JE5QYwmkP0NuQ+ccWL8dnB1xQHP70Go+IwVeIcprlDyVi9 JdAXFAeLw6qwA8T1Sa9pnZ3AhOTENC37Rfer0h9tWLlvSpgJGfqAu3eIU/BHFM/F +9iJt95eja3aY4XV8ENJpnn1yqBezenWPi4nLK/zXoS6dk2D7sneV8miLADq4DV2 QyH/oWM8siPAzTygaAMoOVYO8yrYLV3r8ZgcvsSuj9jtyazfs8ON+cOqdx8xz278 uord5fbvy0q2lLTcOAA5rhz0IDf7gT1GXJQrLzgpfK/OGIwXK8O04xtnHmgdI6Sg zv3PoT6DFnIqmA7tNujCUToj7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3qXR7u whNydJ1SWExcD4LqJIXEMB8GA1UdIwQYMBaAFLQDirZAOfMUViKiD/cO174dTn+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUJBQy82NDlCQzNCMjUw QzkxMUYwQjQ3MzAyNDZDNEY5QUUwMi90QU9LdGtBNTh4UldJcUlQOXc3WHZoMU9m NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RBT0t0a0E1OHhSV0lxSVA5dzdYdmgxT2Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUJBQy82NDlCQzNCMjUwQzkxMUYwQjQ3MzAyNDZDNEY5QUUwMi90QU9LdGtBNTh4 UldJcUlQOXc3WHZoMU9mNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAprhRurMFn+pLauWCVLRtTyjCzgTUYeeFZ0DkkioITZ30sRUFz73b/z9q5UbB fCNlyiBGjYgflWNwOONcCyhfK7cFRhLRrhRzn5bcRa0jvjhC7J55dqsGC6hnJAd7 dkAEvTuo3MGaiKlMNJN+Jd2wPJ/iEd/JtdxA/LKCfe9wz6/NDFr4pQ72/jHBnZFW HgcP9LsKT0iJIbW1tsmp2uuEsxUDjNua8sYXM6lhCrPOrVZQjYaJEzWkuY9aqacn HfSqVpzHOUZEj7c85l0tY8n2ZTqGO0RCL5YZ2MpZgk+s9gj204YZMcTYusHKmbrq +1dK/kvwIpqnYc3txaKwPtBkLg== -----END CERTIFICATE-----Generated at Sun Sep 20 20:14:53 2026 by rpki-client