$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: iq88dPxUFrupcBX5MCoZdEbA3BBj2JvVzWn+Hi7/hj0= Subject key identifier: 86:13:AF:8C:6E:5C:61:B5:A8:44:D0:F1:6E:82:70:5D:3E:4D:5D:D2 Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 04BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 04A2 Signing time: Fri 04 Sep 2026 23:41:17 +0000 Manifest this update: Fri 04 Sep 2026 23:41:16 +0000 Manifest next update: Fri 11 Sep 2026 23:41:16 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: yATN7lxZLf67ZWruPKFuFrcYKirlSDezoDWQR6sIj08=) 2: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c=) 3: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: 9Fd943GuQnIJTghRawSBwpY1MlmUVR4OO3uXynSyRN8=) 4: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: YLvOpo/gAJOyi4aEbUEuHHlI1c0Z1SZvTOBlRFCy2+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Sep 4 23:41:16 2026 GMT Not After : Sep 11 23:41:16 2026 GMT Subject: CN=6a9b571d-3d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:e7:74:1e:d2:d4:ef:39:fc:3c:40:20:86: 27:bb:d2:fe:a9:a9:ad:dc:f2:17:3f:93:3c:ff:49: 4c:79:25:fe:ea:99:3d:d8:cb:5a:5f:b6:e9:78:b0: 8d:96:8b:21:4b:ed:04:43:84:b8:8b:c6:e5:1c:39: 35:95:fc:39:b1:ba:5f:ca:7e:3b:5b:9c:ec:55:96: b6:f9:5d:73:e2:9b:5e:d9:45:ee:3f:4f:93:67:e7: a5:83:d8:a1:32:e6:be:76:ec:5c:95:84:f6:20:73: a5:77:d2:d3:cd:95:a9:a0:6f:c0:53:f1:ba:d1:b2: 7e:4d:54:05:b3:c3:cb:8b:98:02:a4:7f:87:58:e0: 0c:64:05:82:46:63:de:31:53:a8:cd:0a:e0:f8:75: f3:1b:2b:c3:73:e5:e7:c6:1f:5a:a9:83:10:99:4c: 3e:fb:9d:64:99:e1:e1:70:5d:5a:c1:52:13:7e:77: e1:41:57:e2:ee:cf:3a:0f:f4:0f:f1:28:d2:e2:be: a5:91:a0:7d:b4:19:69:8a:d5:32:02:54:ac:56:7f: 48:7f:f9:8f:7c:8f:38:20:41:49:43:3e:c3:9a:e5: ad:1f:a7:dd:d6:e8:77:fd:c0:a9:70:2c:e2:25:69: 4f:50:73:ff:55:d7:e5:a2:e6:5a:99:c9:be:ed:dc: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:13:AF:8C:6E:5C:61:B5:A8:44:D0:F1:6E:82:70:5D:3E:4D:5D:D2 X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:28:ee:e7:7e:36:28:c2:94:cd:91:f4:6d:4b:3a:ee:38:e1: e5:03:9a:b8:35:22:9e:01:e6:7a:c0:13:6b:c8:fd:38:a5:da: c3:19:f7:e7:04:93:9b:74:60:cd:29:aa:10:83:ca:8b:6b:cc: 30:25:42:51:b9:bb:99:61:f3:d9:ca:0e:ec:83:5a:96:db:39: b1:91:c4:a1:63:6e:80:75:4c:c2:8f:f7:06:ec:87:78:23:e8: d9:ba:43:d3:80:6f:06:f5:de:48:af:4b:57:1e:3e:08:81:cd: ae:7f:f5:4a:f1:62:84:21:7e:f2:f5:b6:e6:32:42:40:88:72: 21:1e:78:e1:ef:a6:ea:94:aa:3f:7f:04:92:9f:15:73:63:5c: 3f:e4:62:f9:46:6a:09:83:42:20:fe:e3:7f:15:c6:c8:2a:d1: f2:c0:b4:f1:8e:e3:66:9a:62:c0:8c:f6:bc:d9:03:11:ec:74: de:bd:6a:e5:5f:a1:84:36:9c:b7:ac:0d:64:3d:30:83:41:ab: e5:f8:98:5d:87:6a:79:e0:cd:29:72:13:ea:02:b2:c4:dc:b0: 74:7a:18:3f:bb:fb:51:40:f9:fa:43:75:22:32:da:65:15:3b: fc:02:e7:c9:43:90:20:c9:95:29:b9:8c:ba:33:27:7b:ac:83: 25:ad:20:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjYwOTA0MjM0MTE2WhcNMjYwOTExMjM0MTE2WjAYMRYwFAYD VQQDEw02YTliNTcxZC0zZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DbndB7S1O85/DxAIIYnu9L+qamt3PIXP5M8/0lMeSX+6pk92MtaX7bpeLCN loshS+0EQ4S4i8blHDk1lfw5sbpfyn47W5zsVZa2+V1z4pte2UXuP0+TZ+elg9ih Mua+duxclYT2IHOld9LTzZWpoG/AU/G60bJ+TVQFs8PLi5gCpH+HWOAMZAWCRmPe MVOozQrg+HXzGyvDc+Xnxh9aqYMQmUw++51kmeHhcF1awVITfnfhQVfi7s86D/QP 8SjS4r6lkaB9tBlpitUyAlSsVn9If/mPfI84IEFJQz7DmuWtH6fd1uh3/cCpcCzi JWlPUHP/VdflouZamcm+7dzmHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYTr4xu XGG1qETQ8W6CcF0+TV3SMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASCju5342KMKUzZH0bUs67jjh5QOauDUingHmesATa8j9OKXawxn35wSTm3Rg zSmqEIPKi2vMMCVCUbm7mWHz2coO7INalts5sZHEoWNugHVMwo/3BuyHeCPo2bpD 04BvBvXeSK9LVx4+CIHNrn/1SvFihCF+8vW25jJCQIhyIR544e+m6pSqP38Ekp8V c2NcP+Ri+UZqCYNCIP7jfxXGyCrR8sC08Y7jZppiwIz2vNkDEex03r1q5V+hhDac t6wNZD0wg0Gr5fiYXYdqeeDNKXIT6gKyxNywdHoYP7v7UUD5+kN1IjLaZRU7/ALn yUOQIMmVKbmMujMne6yDJa0guw== -----END CERTIFICATE-----Generated at Sat Sep 5 04:04:49 2026 by rpki-client