$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft File: tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft (raw, json) Hash identifier: VCPRMsQC0J0/bwHr1IMQkaK0fJgXa+g1se8P/tE6z4I= Subject key identifier: 6D:C6:F5:CD:73:9F:BB:59:A1:21:D2:45:66:80:9A:9C:B0:92:6F:17 Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft Manifest number: 0202 Signing time: Mon 21 Sep 2026 03:14:39 +0000 Manifest this update: Mon 21 Sep 2026 03:14:39 +0000 Manifest next update: Mon 28 Sep 2026 03:14:39 +0000 Files and hashes: 1: tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl (hash: YVoBfJp5gixRKmruieQrUTa/CzvOFbR3S2gseE6RmEc=) 2: 79E25D40601211F1AD9319218A47A888.roa (hash: q30SnaEDLTLFEYzr3C7O98SoFArm/k9dGLI4gYwGx7A=) 3: ACC45B54619411F19AF0775A8347A888.roa (hash: JuZvLZgp7cBMbz5SArZAcdTlGbnZq2/Za1QddcsY5rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Validity Not Before: Sep 21 03:14:39 2026 GMT Not After : Sep 28 03:14:39 2026 GMT Subject: CN=6ab0a11f-9e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:be:09:80:26:e6:bb:dc:a8:ec:e8:8d:22: 9c:c4:5c:fa:44:e2:04:20:3a:47:0f:8c:a3:a1:44: cf:2c:16:7f:75:f6:22:06:a5:d8:28:ac:3d:10:64: 1b:14:3a:d0:86:2c:ee:6c:5f:49:d9:b0:0c:36:53: 80:d9:94:3d:b6:18:9d:90:1a:67:13:40:18:34:10: 52:55:90:e2:4e:43:25:75:df:41:e0:7d:0b:01:42: 62:bd:aa:ad:5f:56:df:ad:57:b7:ea:7c:db:dc:f8: b1:7d:c2:01:f9:4c:6d:0f:71:6f:90:0a:ff:f1:ee: 3a:ca:72:5f:00:6e:51:0d:7f:a0:71:94:f2:41:60: 0b:2f:93:ae:20:36:8f:3f:42:4b:a7:27:6e:ae:5c: 67:8f:5e:9e:71:4f:d9:a6:00:c2:b1:14:2a:32:fd: 94:ee:28:a6:83:58:ac:2e:c3:4d:61:3b:76:76:3e: 0b:88:96:99:66:96:ac:ef:a7:7c:68:0e:ee:95:c4: 6b:2b:63:b0:17:d8:e5:cf:13:77:d3:7e:be:5b:eb: b4:ff:01:cc:da:78:fd:8f:53:47:34:b4:02:ca:97: b8:78:c3:7e:f2:cb:43:7c:89:08:9f:35:d6:63:68: b5:f5:ce:11:ed:c9:8f:2f:b4:f5:0a:85:80:70:58: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C6:F5:CD:73:9F:BB:59:A1:21:D2:45:66:80:9A:9C:B0:92:6F:17 X509v3 Authority Key Identifier: keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ec:b5:a5:e4:0c:08:39:39:48:3e:ed:3f:81:36:ed:9d:3e: a6:f0:f7:cc:58:4f:db:e6:a6:e2:22:2e:af:46:ba:00:c6:43: 19:ac:2d:b9:14:8e:e8:32:9c:74:40:ce:d1:84:3d:6d:7d:de: f1:c1:a9:7a:e8:3c:2e:fb:1b:c6:1b:d3:e3:ed:cc:08:85:6a: b1:32:6f:ff:8e:92:65:50:83:ab:2e:1c:9f:b2:7e:c3:79:d9: 4b:dc:98:e5:f0:77:90:21:a0:cd:a9:22:24:5a:05:3b:4a:d1: a0:ea:33:3b:26:eb:83:d4:be:9c:f3:6e:5b:86:92:23:3a:36: 6f:14:3b:0d:65:67:64:05:42:98:3a:91:af:eb:4f:d4:ac:43: f5:1b:03:2d:ae:6a:67:f3:22:03:c5:8d:5a:f1:10:4f:ca:5f: 59:6f:d9:51:01:c0:bc:b5:bc:b9:bc:cf:cd:57:25:d0:82:74: a5:b4:35:96:8b:ab:c1:90:68:c8:d2:d2:1d:1f:34:96:91:cf: 70:f9:2a:73:68:a1:f4:9b:6b:14:11:c2:76:e1:d4:b3:fc:bb: af:08:84:2c:93:ff:fb:f5:5a:ae:b5:e5:9e:7c:2c:aa:a9:66: f9:1f:cd:01:52:8e:12:25:e5:8c:e3:9f:71:fa:44:35:1c:8e: dd:a3:d2:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKEI0ODY1RTNCRTlDNTY5RDJCOTNGMkMzNTFDQUIyNEQx NTA2QUFDMEQwHhcNMjYwOTIxMDMxNDM5WhcNMjYwOTI4MDMxNDM5WjAYMRYwFAYD VQQDEw02YWIwYTExZi05ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgK+CYAm5rvcqOzojSKcxFz6ROIEIDpHD4yjoUTPLBZ/dfYiBqXYKKw9EGQb FDrQhizubF9J2bAMNlOA2ZQ9thidkBpnE0AYNBBSVZDiTkMldd9B4H0LAUJivaqt X1bfrVe36nzb3PixfcIB+UxtD3FvkAr/8e46ynJfAG5RDX+gcZTyQWALL5OuIDaP P0JLpydurlxnj16ecU/ZpgDCsRQqMv2U7iimg1isLsNNYTt2dj4LiJaZZpas76d8 aA7ulcRrK2OwF9jlzxN3036+W+u0/wHM2nj9j1NHNLQCype4eMN+8stDfIkInzXW Y2i19c4R7cmPL7T1CoWAcFjCDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG3G9c1z n7tZoSHSRWaAmpywkm8XMB8GA1UdIwQYMBaAFLSGXjvpxWnSuT8sNRyrJNFQaqwN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zNTcwREYyRUIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFkSzVQeXcxSEtzazBWQnFy QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJWmVPLW5GYWRLNVB5dzFIS3NrMFZCcXJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zNTcwREYyRUIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFk SzVQeXcxSEtzazBWQnFyQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmey1peQMCDk5SD7tP4E27Z0+pvD3zFhP2+am4iIur0a6AMZDGawtuRSO6DKc dEDO0YQ9bX3e8cGpeug8LvsbxhvT4+3MCIVqsTJv/46SZVCDqy4cn7J+w3nZS9yY 5fB3kCGgzakiJFoFO0rRoOozOybrg9S+nPNuW4aSIzo2bxQ7DWVnZAVCmDqRr+tP 1KxD9RsDLa5qZ/MiA8WNWvEQT8pfWW/ZUQHAvLW8ubzPzVcl0IJ0pbQ1lourwZBo yNLSHR80lpHPcPkqc2ih9JtrFBHCduHUs/y7rwiELJP/+/VarrXlnnwsqqlm+R/N AVKOEiXljOOfcfpENRyO3aPSOA== -----END CERTIFICATE-----Generated at Mon Sep 21 22:00:45 2026 by rpki-client