$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json) Hash identifier: TNxOAshpnuSMWmQjL+egwWviQ+t496Q7m6qH882UTm0= Subject key identifier: AE:AA:3A:94:37:B4:D0:10:FD:30:FC:52:C6:8B:E0:43:0C:4C:B2:F9 Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft Manifest number: 01C3 Signing time: Tue 27 Oct 2026 04:04:02 +0000 Manifest this update: Tue 27 Oct 2026 04:04:01 +0000 Manifest next update: Tue 03 Nov 2026 04:04:01 +0000 Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: 4+rrZdeJ8+8i4fEGww3qqjbMVfBY/9JHUpsk9FXscC8=) 2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: LWLPDEv7RUMRJMl4Bmz6X6FEvG0pqY80ldWBL6Y3d3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Validity Not Before: Oct 27 04:04:01 2026 GMT Not After : Nov 3 04:04:01 2026 GMT Subject: CN=6ae022b1-a936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:44:88:60:b1:23:4e:a0:5b:fd:a5:47:20: 21:13:ec:cb:5b:d5:dc:35:be:1f:35:a6:07:03:56: 43:62:b9:02:83:ad:a9:f7:a6:1c:b2:e6:2e:17:a5: a2:af:5f:7a:e0:a4:31:0b:71:2c:66:b6:28:9b:47: 88:79:93:74:a9:84:b3:00:4a:41:67:74:3d:44:e4: 70:b3:6f:d6:70:91:02:2b:8c:be:8e:84:e9:b9:34: c6:0f:8b:36:03:57:a4:f9:c8:be:b6:f8:b6:a2:e2: 53:4c:5d:b1:f0:d7:7b:ea:bc:cb:b5:d7:8f:67:d4: 1c:d5:e4:e9:2a:0c:7a:42:61:30:a5:80:f1:d8:8a: f5:05:aa:7e:0d:a2:a4:4c:e0:3f:a0:d4:4e:a8:78: 92:45:1e:78:c6:62:dc:f7:9e:08:6c:9e:51:42:0f: ad:e9:8e:a9:b9:a1:b5:47:20:9c:62:bc:83:35:db: f9:ea:0d:8a:97:65:c9:62:21:7c:b2:c2:49:1f:51: 8a:fc:cb:4a:ff:90:7e:10:9d:7b:71:86:13:a3:3f: 45:8f:ba:a6:9b:c7:8a:2a:04:28:a8:ff:d6:1a:87: 0d:70:24:51:23:4b:cf:76:46:0f:e7:45:41:c0:ea: 4f:a1:59:50:61:26:7c:62:38:b0:b9:75:ca:8d:66: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AA:3A:94:37:B4:D0:10:FD:30:FC:52:C6:8B:E0:43:0C:4C:B2:F9 X509v3 Authority Key Identifier: keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3f:4c:eb:2a:73:69:30:18:61:98:ef:10:fc:a7:de:cd:25: ae:0e:df:c4:93:7b:81:da:92:59:8e:ae:83:33:56:41:63:76: c9:2d:80:5d:96:a9:f7:f3:dc:17:fc:fb:a7:25:96:60:63:da: c3:5e:f0:c8:a2:64:f8:fc:bf:d2:d1:3f:9b:e4:75:a5:4f:dc: 86:9d:f3:6d:9e:7b:ac:b0:e8:47:68:f6:b6:07:9e:85:e9:98: 3a:81:48:ee:ef:49:b9:f6:54:6d:96:bd:de:41:14:d7:73:de: 2a:f5:68:6d:07:8e:c2:e3:ea:08:58:ea:1b:91:dc:59:6f:fd: 68:87:4b:fb:73:cc:26:5c:6c:90:74:3e:1c:81:2b:39:3b:52: 76:8b:bc:e7:33:4a:b2:97:1e:4a:0a:b0:37:61:4d:bb:3e:d6: 3e:5f:e0:b3:ae:15:ff:43:c3:70:52:6f:fd:c5:40:88:07:6a: 66:82:bd:af:e1:5c:9a:e8:84:7e:ea:74:61:7e:7a:90:13:fe: 7a:ae:a0:f5:3e:ce:86:10:25:03:22:8a:4b:e8:d2:23:19:bb: f6:4e:17:1a:0d:9f:19:99:4e:06:99:b9:51:8c:39:ea:37:54: dd:b6:15:cc:27:70:da:c4:66:70:1c:cf:21:82:a6:df:f0:fa: 12:51:62:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwMjMxMTAvBgNVBAUTKDRGMTQ2RjVDQzRGNEJDODczODIyRkExRTMzNDUyQTU0 MUExRUU1NDYwHhcNMjYxMDI3MDQwNDAxWhcNMjYxMTAzMDQwNDAxWjAYMRYwFAYD VQQDEw02YWUwMjJiMS1hOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PVEiGCxI06gW/2lRyAhE+zLW9XcNb4fNaYHA1ZDYrkCg62p96YcsuYuF6Wi r1964KQxC3EsZrYom0eIeZN0qYSzAEpBZ3Q9RORws2/WcJECK4y+joTpuTTGD4s2 A1ek+ci+tvi2ouJTTF2x8Nd76rzLtdePZ9Qc1eTpKgx6QmEwpYDx2Ir1Bap+DaKk TOA/oNROqHiSRR54xmLc954IbJ5RQg+t6Y6puaG1RyCcYryDNdv56g2Kl2XJYiF8 ssJJH1GK/MtK/5B+EJ17cYYToz9Fj7qmm8eKKgQoqP/WGocNcCRRI0vPdkYP50VB wOpPoVlQYSZ8YjiwuXXKjWY1zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK6qOpQ3 tNAQ/TD8UsaL4EMMTLL5MB8GA1UdIwQYMBaAFE8Ub1zE9LyHOCL6HjNFKlQaHuVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAyMy9GMzNCQjRBNjIy ODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJYzRJdm9lTTBVcVZCb2U1 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1R4UnZYTVQwdkljNEl2b2VNMFVxVkJvZTVVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTAyMy9GMzNCQjRBNjIyODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJ YzRJdm9lTTBVcVZCb2U1VVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPz9M6ypzaTAYYZjvEPyn3s0lrg7fxJN7gdqSWY6ugzNWQWN2yS2AXZap9/Pc F/z7pyWWYGPaw17wyKJk+Py/0tE/m+R1pU/chp3zbZ57rLDoR2j2tgeehemYOoFI 7u9JufZUbZa93kEU13PeKvVobQeOwuPqCFjqG5HcWW/9aIdL+3PMJlxskHQ+HIEr OTtSdou85zNKspceSgqwN2FNuz7WPl/gs64V/0PDcFJv/cVAiAdqZoK9r+FcmuiE fup0YX56kBP+eq6g9T7OhhAlAyKKS+jSIxm79k4XGg2fGZlOBpm5UYw56jdU3bYV zCdw2sRmcBzPIYKm3/D6ElFiew== -----END CERTIFICATE-----Generated at Tue Oct 27 22:47:44 2026 by rpki-client