$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: ML4T4/1EeGR7CTs4EviXp8c5wgFpj7C6AE1GcoR2Lf4= Subject key identifier: 57:47:46:F7:DE:6A:E9:B3:C5:53:AA:19:B1:2E:12:B6:B6:D5:62:E3 Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: 01A8 Signing time: Sun 11 Oct 2026 04:45:27 +0000 Manifest this update: Sun 11 Oct 2026 04:45:26 +0000 Manifest next update: Sun 18 Oct 2026 04:45:26 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: ZoJUQUbd155U66w6GbnbNd3qiu70ooDlpMWlHfcgz7I=) 2: 84B1619E8C4511F1A27F4BE95411F970.roa (hash: hHHcMr65tn2TsQmhaKVCSv+V1ejD7S+aiBSVGPeEC88=) 3: 6A5F29CED8A511F0B3F453F094D3641D.roa (hash: VYfWP8w7wQSpKkaf4oGhEJ6l5xHKxuqJlMcTIQM/N+o=) 4: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: bYg8Dnd7GdjGYmMqKVZYgdK67dqMYGrhDZAhZPRHKBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 04:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Oct 11 04:45:26 2026 GMT Not After : Oct 18 04:45:26 2026 GMT Subject: CN=6acb1467-a90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:e6:2f:75:e6:a4:9a:7c:9e:f8:1a:ad:c3: cd:06:24:3e:e8:54:c9:9e:11:af:2a:4d:11:8e:03: 22:f3:6a:bb:b8:be:cf:4e:41:34:4d:aa:b5:c2:a7: 77:81:a1:90:8b:3f:3a:fb:09:b2:e7:e7:d1:08:02: ef:2c:c2:70:0a:64:cb:63:c1:52:f1:8b:b9:47:88: bc:42:51:ec:21:ad:71:63:c0:85:f5:36:22:c3:6a: 28:e2:42:48:1e:cb:9a:54:66:c6:93:02:53:1b:dc: 6e:9d:38:39:ea:90:69:35:a4:c0:d3:f0:7f:86:04: d2:23:3e:8e:f5:ed:4d:11:0f:75:18:f1:8e:64:c3: 78:f7:b1:12:58:1a:db:11:33:d9:d8:25:64:3e:e0: d2:b4:9f:a0:91:76:db:e9:81:98:ae:98:e5:c4:4d: 3f:83:d5:75:54:38:be:60:03:9d:fd:0c:ed:08:28: 29:b4:d1:74:95:00:dc:c4:bd:e0:f6:e9:4f:77:9a: 33:50:cc:99:ae:d0:39:78:d5:6a:cc:47:34:74:b3: d4:25:32:55:58:c3:31:5d:0f:5c:61:b7:0b:fb:20: 77:78:c8:be:27:44:39:e5:54:1a:15:20:0a:16:f5: 25:0f:90:29:2e:54:b2:4c:f3:83:67:56:a7:62:e6: b4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:47:46:F7:DE:6A:E9:B3:C5:53:AA:19:B1:2E:12:B6:B6:D5:62:E3 X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ff:15:e1:a1:4d:af:2e:9b:4f:f2:6a:13:80:4e:c2:ca:6e: 41:cf:bb:b6:4a:99:79:dc:47:22:1e:3b:3a:31:ae:dd:60:e0: 13:53:55:3c:7f:9b:29:ef:3d:a7:37:cd:c8:c7:c4:66:78:49: f1:7d:22:1e:29:2f:d8:dc:ec:f6:bc:15:01:f4:21:6d:02:61: 75:ce:6c:c5:26:80:6b:7d:3a:34:5d:22:92:08:a9:f5:d7:c0: 89:18:30:3f:c0:9e:8d:70:02:ab:de:7b:0b:e1:39:6b:78:6b: 54:1c:ab:e7:68:39:8f:42:c2:5a:08:43:11:c8:6b:4c:26:f4: 56:1a:95:fc:04:6b:bf:1a:23:22:61:ac:d6:fc:28:d8:2b:95: c4:94:fe:df:f7:5d:55:36:f6:c1:01:3c:9a:0d:78:11:ff:c0: 5c:5e:7f:2a:14:b9:7c:40:73:15:60:90:19:ae:5a:b8:5e:8c: a2:df:5c:b5:31:77:97:1a:8e:90:9c:80:69:cb:29:39:47:ab: a7:db:28:d8:76:f6:00:f9:0a:c9:42:56:e5:a9:6c:0d:73:fc: ad:df:64:f2:9d:72:19:1b:e1:5f:e2:aa:87:7d:6d:b4:68:f6: b5:8a:ea:5d:b7:e4:f8:df:3e:4d:ed:fc:cc:09:ec:65:13:82: 6b:ff:32:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjYxMDExMDQ0NTI2WhcNMjYxMDE4MDQ0NTI2WjAYMRYwFAYD VQQDEw02YWNiMTQ2Ny1hOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q/mL3XmpJp8nvgarcPNBiQ+6FTJnhGvKk0RjgMi82q7uL7PTkE0Taq1wqd3 gaGQiz86+wmy5+fRCALvLMJwCmTLY8FS8Yu5R4i8QlHsIa1xY8CF9TYiw2oo4kJI HsuaVGbGkwJTG9xunTg56pBpNaTA0/B/hgTSIz6O9e1NEQ91GPGOZMN497ESWBrb ETPZ2CVkPuDStJ+gkXbb6YGYrpjlxE0/g9V1VDi+YAOd/QztCCgptNF0lQDcxL3g 9ulPd5ozUMyZrtA5eNVqzEc0dLPUJTJVWMMxXQ9cYbcL+yB3eMi+J0Q55VQaFSAK FvUlD5ApLlSyTPODZ1anYua0bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdHRvfe aumzxVOqGbEuEra21WLjMB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAav8V4aFNry6bT/JqE4BOwspuQc+7tkqZedxHIh47OjGu3WDgE1NVPH+bKe89 pzfNyMfEZnhJ8X0iHikv2Nzs9rwVAfQhbQJhdc5sxSaAa306NF0ikgip9dfAiRgw P8CejXACq957C+E5a3hrVByr52g5j0LCWghDEchrTCb0VhqV/ARrvxojImGs1vwo 2CuVxJT+3/ddVTb2wQE8mg14Ef/AXF5/KhS5fEBzFWCQGa5auF6Mot9ctTF3lxqO kJyAacspOUerp9so2Hb2APkKyUJW5alsDXP8rd9k8p1yGRvhX+Kqh31ttGj2tYrq Xbfk+N8+Te38zAnsZROCa/8ysQ== -----END CERTIFICATE-----Generated at Mon Oct 12 19:32:13 2026 by rpki-client