$ rpki-client -vvvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft File: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft (raw, json) Hash identifier: kK9cg3cqZw1IZau4EQI52i9jNf4jw1+ZGBUqvE3vDT0= Subject key identifier: BE:FA:F5:20:64:E1:34:86:F6:9A:D2:77:3E:43:9F:8E:D1:D7:8F:8C Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Certificate serial: 11D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft Manifest number: 11B3 Signing time: Wed 14 Oct 2026 17:15:23 +0000 Manifest this update: Wed 14 Oct 2026 17:15:23 +0000 Manifest next update: Wed 21 Oct 2026 17:15:23 +0000 Files and hashes: 1: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl (hash: khb0qB73OBk2jCZf3GhYfioySlYXWirDdeYWO0zyvRQ=) 2: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (hash: FMzrYGVGOtWt5cmIpjK8kf84YehxjN48qZYSg0E+H9o=) 3: 0E17B1AE78F511EC83E56014C4F9AE02.roa (hash: W4h7IWYUmM/hyejWwAL7UxMd6DDsYA0doq+8X7am/ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 17:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4564 (0x11d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Validity Not Before: Oct 14 17:15:23 2026 GMT Not After : Oct 21 17:15:23 2026 GMT Subject: CN=6acfb8ab-4b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:49:92:32:a8:15:48:55:59:f5:4e:a7:7d: ee:2b:07:a3:8b:5a:5d:ce:40:fd:e1:7e:f7:8b:4b: fa:e4:d6:66:14:ea:6e:2f:a8:02:4b:ae:05:3b:1a: 0b:db:94:53:ce:d0:cc:ee:de:9b:42:d3:71:8f:53: 7e:38:7f:8c:db:69:34:68:df:19:35:5b:4e:17:a2: 09:dc:04:1f:ff:3f:5e:37:8a:dc:47:45:d5:b6:f8: 7a:38:bf:bb:10:6b:14:62:2e:79:ef:6a:3d:92:52: e7:3f:f4:0a:c0:a1:b7:e9:d7:fc:ef:fd:e6:56:48: b5:7a:b0:f6:8d:d2:e6:24:99:9a:bd:78:5f:32:24: a6:c5:44:b1:83:94:ba:ae:2b:14:79:d1:bf:54:4f: fa:79:9a:ae:34:bc:fd:9a:eb:c8:80:4d:01:18:f4: 2a:35:34:b9:a6:1d:2e:0a:f7:84:c1:75:80:a3:53: 28:df:2b:5a:a0:cf:cc:54:e4:a7:60:e6:85:d0:0e: ba:95:42:dd:79:f5:6e:e4:bc:08:b1:2e:6b:11:5e: 81:b8:e2:d7:0d:c7:1f:7c:f2:2c:98:3d:9b:b3:17: d8:51:88:2f:b9:67:28:1d:6a:99:e2:d8:ff:fb:fe: a9:20:ec:43:9c:fb:f7:81:e4:07:a2:52:03:11:2a: cb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FA:F5:20:64:E1:34:86:F6:9A:D2:77:3E:43:9F:8E:D1:D7:8F:8C X509v3 Authority Key Identifier: keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ca:27:42:bc:be:8a:4a:9d:0f:ed:44:30:37:90:68:e2:d7: 51:fd:ab:b9:46:0b:60:f1:d3:b1:64:06:c0:93:08:19:79:73: cc:bc:e8:4d:43:79:12:35:d3:0b:08:a3:0c:7f:8b:f4:b3:98: 41:44:8c:2f:f6:35:ee:13:b4:59:11:95:95:7f:ea:68:50:3e: 6b:5b:12:c4:0a:18:79:41:3d:ef:fc:a6:17:80:3f:91:76:fe: 93:70:ff:d8:f1:9a:38:b8:1b:0b:03:94:2d:1e:1f:22:e7:4f: 27:87:76:f5:25:4b:6b:5e:eb:7d:fb:e8:24:21:b1:77:25:73: fd:17:3b:28:8a:68:f1:62:84:27:62:5c:1d:93:8d:ec:a6:8e: 5c:ea:7e:c4:82:dc:8c:82:31:c4:3e:e4:ad:27:34:0a:ad:9a: 4b:91:5b:58:f9:28:5b:a8:c7:1a:1a:91:58:39:9b:de:fd:f7: 5c:5a:c5:08:2a:9c:03:31:40:1d:20:5f:79:82:c3:a1:aa:d9: 7a:c5:13:ea:86:bc:41:b3:e5:a1:31:b7:a7:71:36:24:65:b5: 10:64:a9:97:ed:74:79:d1:fd:3b:93:3c:c1:32:87:9b:a2:9c: 85:16:98:d4:d1:53:9e:88:4d:64:7e:d3:2a:ea:96:03:27:ed: 2e:88:86:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYwOEQxMTAvBgNVBAUTKEQyRDgwODA0OUE0NkVENzk3QzIxRjlGNjAyNTIzNDU2 NDYzMUIzRjkwHhcNMjYxMDE0MTcxNTIzWhcNMjYxMDIxMTcxNTIzWjAYMRYwFAYD VQQDEw02YWNmYjhhYi00YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumVJkjKoFUhVWfVOp33uKweji1pdzkD94X73i0v65NZmFOpuL6gCS64FOxoL 25RTztDM7t6bQtNxj1N+OH+M22k0aN8ZNVtOF6IJ3AQf/z9eN4rcR0XVtvh6OL+7 EGsUYi5572o9klLnP/QKwKG36df87/3mVki1erD2jdLmJJmavXhfMiSmxUSxg5S6 risUedG/VE/6eZquNLz9muvIgE0BGPQqNTS5ph0uCveEwXWAo1Mo3ytaoM/MVOSn YOaF0A66lULdefVu5LwIsS5rEV6BuOLXDccffPIsmD2bsxfYUYgvuWcoHWqZ4tj/ +/6pIOxDnPv3geQHolIDESrLNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL769SBk 4TSG9prSdz5Dn47R14+MMB8GA1UdIwQYMBaAFNLYCASaRu15fCH59gJSNFZGMbP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjA4RC84MTA3M0EzMDI4 NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdYbDhJZm4yQWxJMFZrWXhz X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB0Z0lCSnBHN1hsOElmbjJBbEkwVmtZeHNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjA4RC84MTA3M0EzMDI4NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdY bDhJZm4yQWxJMFZrWXhzX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFsonQry+ikqdD+1EMDeQaOLXUf2ruUYLYPHTsWQGwJMIGXlzzLzoTUN5EjXT CwijDH+L9LOYQUSML/Y17hO0WRGVlX/qaFA+a1sSxAoYeUE97/ymF4A/kXb+k3D/ 2PGaOLgbCwOULR4fIudPJ4d29SVLa17rffvoJCGxdyVz/Rc7KIpo8WKEJ2JcHZON 7KaOXOp+xILcjIIxxD7krSc0Cq2aS5FbWPkoW6jHGhqRWDmb3v33XFrFCCqcAzFA HSBfeYLDoarZesUT6oa8QbPloTG3p3E2JGW1EGSpl+10edH9O5M8wTKHm6KchRaY 1NFTnohNZH7TKuqWAyftLoiGJg== -----END CERTIFICATE-----Generated at Thu Oct 15 19:47:52 2026 by rpki-client