$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft File: tg1afDY_D02TL-MXuQzmz4DSg8k.mft (raw, json) Hash identifier: 157MDcQah+HCReFrLe+bq72fNAEpQbHA9gl5JxCn9rY= Subject key identifier: D1:DB:77:22:A2:7E:C0:C5:B5:D0:EF:65:74:AC:75:7C:73:F1:37:9F Authority key identifier: B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 Certificate issuer: /CN=A9118309/serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Certificate serial: 0B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft Manifest number: 0B33 Signing time: Mon 26 Oct 2026 19:17:07 +0000 Manifest this update: Mon 26 Oct 2026 19:17:06 +0000 Manifest next update: Mon 02 Nov 2026 19:17:06 +0000 Files and hashes: 1: tg1afDY_D02TL-MXuQzmz4DSg8k.crl (hash: UXVGWFI4Qopy3puRLOw1dHmKpKv9mAqWWjfkyf+Lx1U=) 2: 59AA22D06FFD11EA9160902DC4F9AE02.roa (hash: wf2N7y2gm+HMhGLmDepSkmqtdRiwq+CjqsQ72qN8FGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118309, serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Validity Not Before: Oct 26 19:17:06 2026 GMT Not After : Nov 2 19:17:06 2026 GMT Subject: CN=6adfa733-3ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:bd:fe:fb:4b:2d:cd:95:82:24:03:7a:30: c2:42:ea:08:5e:73:15:b1:19:bc:8c:a8:eb:b7:ba: 0c:8b:82:98:36:da:9d:aa:0b:c4:77:ca:1c:e2:f7: 8a:d5:14:06:19:58:0e:cb:48:e8:a7:5d:4d:84:f9: 3a:a5:5a:79:9b:a8:3a:8f:29:38:f3:c1:03:d1:2e: 7f:2d:ed:f8:6e:fb:22:ed:f3:b3:51:1a:24:91:94: c9:78:cc:4f:8d:3f:77:9c:be:11:ad:bb:38:5e:bb: 89:41:30:fc:64:23:e6:e8:41:d0:d2:12:ef:7e:07: b9:01:fb:f4:2e:53:ce:0d:ad:e5:06:53:7c:98:72: 9d:4c:3d:be:6a:09:39:38:e7:36:ba:1c:3e:7d:ca: f4:66:04:bc:50:66:ed:4f:12:5b:05:31:ad:91:d5: e0:42:c4:64:20:f3:d8:27:94:b2:ad:fa:6d:e3:e2: 77:8b:19:da:aa:78:37:1d:03:89:8e:d9:a4:9d:c5: f6:ef:5a:03:36:18:1c:b2:2c:a9:2f:e2:60:4c:9a: da:d0:c7:59:48:4d:fe:05:53:79:ff:0b:99:e1:9d: 88:da:5a:31:32:ca:b6:96:89:c5:90:2e:ab:72:af: 6a:f9:9d:1b:25:64:3f:df:9e:7c:dc:e9:b8:8c:95: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DB:77:22:A2:7E:C0:C5:B5:D0:EF:65:74:AC:75:7C:73:F1:37:9F X509v3 Authority Key Identifier: keyid:B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:54:2d:e3:98:eb:f0:59:da:3c:9f:c3:35:45:91:19:00:c0: d8:19:8a:d2:6f:bf:c1:dc:66:c8:37:55:64:ae:a8:6e:bf:9f: f9:f6:d7:54:cd:17:ce:4a:f3:2a:31:b6:9b:49:a6:c9:c0:09: 85:aa:af:d5:6f:cf:d8:04:19:a3:a1:2a:8f:ac:e7:17:44:b1: 21:f6:01:3b:50:94:7d:da:42:86:5b:d3:80:ba:0e:d1:c3:39: 24:04:cf:6a:93:c9:9d:91:7b:67:89:03:35:67:91:e0:4f:63: c7:4e:5f:84:17:11:1f:ab:75:77:93:85:76:a3:f4:5d:d9:b5: e9:72:cf:98:a9:20:78:e7:5a:bb:b9:1a:c6:8a:65:20:26:d5: 19:65:d2:f7:83:47:fb:57:1b:48:e4:b6:55:6b:da:e2:d6:51: 58:cf:d2:3a:71:33:3e:71:31:20:66:0d:2e:2f:2e:a5:46:82: 71:6d:ab:9d:60:27:6e:b8:86:97:c0:ea:f9:c8:93:62:35:b2: ec:27:74:41:d4:13:8d:3f:94:d7:19:fa:4f:68:84:b8:1b:64: b2:87:74:ef:cc:2e:5c:8a:af:e5:a3:d2:59:00:14:a4:29:c6: 2d:ba:cb:52:4c:2f:14:3e:2e:61:39:dd:ec:ca:b7:32:2d:ec: f6:5b:39:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzMDkxMTAvBgNVBAUTKEI2MEQ1QTdDMzYzRjBGNEQ5MzJGRTMxN0I5MENFNkNG ODBEMjgzQzkwHhcNMjYxMDI2MTkxNzA2WhcNMjYxMTAyMTkxNzA2WjAYMRYwFAYD VQQDEw02YWRmYTczMy0zZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGG9/vtLLc2VgiQDejDCQuoIXnMVsRm8jKjrt7oMi4KYNtqdqgvEd8oc4veK 1RQGGVgOy0jop11NhPk6pVp5m6g6jyk488ED0S5/Le34bvsi7fOzURokkZTJeMxP jT93nL4Rrbs4XruJQTD8ZCPm6EHQ0hLvfge5Afv0LlPODa3lBlN8mHKdTD2+agk5 OOc2uhw+fcr0ZgS8UGbtTxJbBTGtkdXgQsRkIPPYJ5Syrfpt4+J3ixnaqng3HQOJ jtmkncX271oDNhgcsiypL+JgTJra0MdZSE3+BVN5/wuZ4Z2I2loxMsq2lonFkC6r cq9q+Z0bJWQ/35583Om4jJWdhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHbdyKi fsDFtdDvZXSsdXxz8TefMB8GA1UdIwQYMBaAFLYNWnw2Pw9Nky/jF7kM5s+A0oPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODMwOS8xQTQ4REM4NjZG RkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0QwMlRMLU1YdVF6bXo0RFNn OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnMWFmRFlfRDAyVEwtTVh1UXptejREU2c4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODMwOS8xQTQ4REM4NjZGRkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0Qw MlRMLU1YdVF6bXo0RFNnOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjFQt45jr8FnaPJ/DNUWRGQDA2BmK0m+/wdxmyDdVZK6obr+f+fbXVM0Xzkrz KjG2m0mmycAJhaqv1W/P2AQZo6Eqj6znF0SxIfYBO1CUfdpChlvTgLoO0cM5JATP apPJnZF7Z4kDNWeR4E9jx05fhBcRH6t1d5OFdqP0Xdm16XLPmKkgeOdau7kaxopl ICbVGWXS94NH+1cbSOS2VWva4tZRWM/SOnEzPnExIGYNLi8upUaCcW2rnWAnbriG l8Dq+ciTYjWy7Cd0QdQTjT+U1xn6T2iEuBtksod078wuXIqv5aPSWQAUpCnGLbrL UkwvFD4uYTnd7Mq3Mi3s9ls5vg== -----END CERTIFICATE-----Generated at Tue Oct 27 22:50:46 2026 by rpki-client