$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft File: TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft (raw, json) Hash identifier: ekSR4qjDSkF9gwxMy0p095Rgqc+E5fBIECuH7+ZLVnE= Subject key identifier: 11:E2:63:69:32:04:1C:A5:3E:B9:D9:37:11:7E:34:19:4F:59:E9:90 Authority key identifier: 4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8 Certificate issuer: /CN=A9129FB7/serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft Manifest number: 40 Signing time: Mon 19 Oct 2026 09:13:29 +0000 Manifest this update: Mon 19 Oct 2026 09:13:29 +0000 Manifest next update: Mon 26 Oct 2026 09:13:29 +0000 Files and hashes: 1: TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl (hash: MQvhbG+VroVu24PP1/XXB5OYS3cxRRYGBII8t82ew9A=) 2: C524767269FD11F1BAFBB65F6847A888.roa (hash: ygqljUs8p8UwgEQzC1Y+C3YKpEUTVGsqmNq6WUEwm9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129FB7, serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8 Validity Not Before: Oct 19 09:13:29 2026 GMT Not After : Oct 26 09:13:29 2026 GMT Subject: CN=6ad5df39-60b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:d4:9e:2b:d3:ef:08:57:d3:af:8f:c9:3f: c7:f6:ec:12:59:bd:fe:83:cb:43:79:74:b2:f3:80: 46:a7:16:66:d2:14:59:e0:8f:8b:54:6a:2d:78:0b: 4c:5b:98:80:fa:c1:ab:19:11:4d:c6:55:e9:4b:fa: 4d:e5:dc:2c:da:45:e0:d0:0c:b0:97:d0:44:ad:62: 4e:2a:33:61:56:fd:e8:bd:24:58:07:09:12:45:b9: e0:cf:84:99:96:94:7d:61:77:c8:13:c3:51:6c:ac: 29:49:35:e2:55:f5:04:92:02:83:4c:2d:5d:66:46: 99:c0:2e:de:cf:2e:75:3f:e7:b9:eb:4a:04:be:3b: 3c:7d:bc:a5:21:63:63:6e:b3:08:d3:33:79:76:40: e7:9c:18:d7:47:e9:36:86:82:ea:62:35:9b:4f:0c: 8d:ac:02:0d:8d:83:ad:c8:ae:2f:90:a6:cb:2b:0e: 10:a9:11:40:b0:3e:68:9a:6f:c9:5d:be:a1:8c:52: d3:56:0c:e7:e4:fd:17:4e:c6:a5:91:6a:7f:24:65: d0:00:38:b2:77:12:07:15:ff:7a:6e:c3:b5:e1:0d: b2:4c:75:f8:f8:dc:1f:e6:a1:cd:84:72:b5:80:57: 6d:07:01:1a:10:7d:a3:5d:db:6b:ba:0e:4f:b7:bc: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E2:63:69:32:04:1C:A5:3E:B9:D9:37:11:7E:34:19:4F:59:E9:90 X509v3 Authority Key Identifier: keyid:4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b4:40:2d:81:c7:38:14:77:ec:64:cb:fd:ec:2e:34:49:49: 17:18:72:eb:7d:a2:5e:3b:79:c0:71:7a:1d:a6:71:f0:29:cf: f8:2f:fe:53:b9:98:70:fd:99:9e:1c:c6:7c:d3:4b:1d:0e:07: 9c:d7:b1:d0:91:0f:63:fc:5b:c0:a5:43:62:1f:52:03:e4:dd: 31:84:32:c3:03:01:18:5a:8e:b0:e3:4f:e0:2e:f1:f6:85:44: 2d:f7:b4:72:0a:10:4b:ea:47:f3:ee:13:45:e1:54:13:35:59: 5f:ef:71:ac:c7:5f:ab:ed:48:aa:bc:a3:ca:b6:ee:87:4d:9c: 3a:dc:0f:5c:29:fd:c2:fd:e4:f3:fd:3d:69:c3:e8:c2:09:71: e6:6a:8a:4e:dd:75:e8:56:62:00:e8:28:16:e9:cf:72:76:7e: 09:d8:37:76:ae:20:b7:bf:96:28:d7:12:45:d0:f5:a1:62:75: 29:8d:ae:cc:9a:de:f1:a8:d3:d7:20:fe:53:f3:25:2d:72:1f: 81:24:a0:ea:0f:37:05:d6:a2:6b:8e:a8:d1:98:00:d3:03:e8: af:7e:92:58:32:01:2c:ff:9c:52:e5:62:37:74:50:20:d7:0e: e6:23:0b:67:84:f3:cc:b7:a3:2c:27:3a:60:90:e5:93:8d:52: 9b:cc:36:11 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OUZCNzExMC8GA1UEBRMoNEM2MjUzMTBFODNDNDBENzMyRERCMDM4NDc4NTg3NjNE NDhCREREODAeFw0yNjEwMTkwOTEzMjlaFw0yNjEwMjYwOTEzMjlaMBgxFjAUBgNV BAMTDTZhZDVkZjM5LTYwYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTVNSeK9PvCFfTr4/JP8f27BJZvf6Dy0N5dLLzgEanFmbSFFngj4tUai14C0xb mID6wasZEU3GVelL+k3l3CzaReDQDLCX0EStYk4qM2FW/ei9JFgHCRJFueDPhJmW lH1hd8gTw1FsrClJNeJV9QSSAoNMLV1mRpnALt7PLnU/57nrSgS+Ozx9vKUhY2Nu swjTM3l2QOecGNdH6TaGgupiNZtPDI2sAg2Ng63Iri+QpssrDhCpEUCwPmiab8ld vqGMUtNWDOfk/RdOxqWRan8kZdAAOLJ3EgcV/3puw7XhDbJMdfj43B/moc2EcrWA V20HARoQfaNd22u6Dk+3vDLHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEeJjaTIE HKU+udk3EX40GU9Z6ZAwHwYDVR0jBBgwFoAUTGJTEOg8QNcy3bA4R4WHY9SL3dgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5RkI3LzU0MTBEQzVDNjlG QjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4UU5jeTNiQTRSNFdIWTlTTDNk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEdKVEVPZzhRTmN5M2JBNFI0V0hZOVNMM2RnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 RkI3LzU0MTBEQzVDNjlGQjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4UU5j eTNiQTRSNFdIWTlTTDNkZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdtEAtgcc4FHfsZMv97C40SUkXGHLrfaJeO3nAcXodpnHwKc/4L/5TuZhw/Zme HMZ800sdDgec17HQkQ9j/FvApUNiH1ID5N0xhDLDAwEYWo6w40/gLvH2hUQt97Ry ChBL6kfz7hNF4VQTNVlf73Gsx1+r7UiqvKPKtu6HTZw63A9cKf3C/eTz/T1pw+jC CXHmaopO3XXoVmIA6CgW6c9ydn4J2Dd2riC3v5Yo1xJF0PWhYnUpja7Mmt7xqNPX IP5T8yUtch+BJKDqDzcF1qJrjqjRmADTA+ivfpJYMgEs/5xS5WI3dFAg1w7mIwtn hPPMt6MsJzpgkOWTjVKbzDYR -----END CERTIFICATE-----Generated at Mon Oct 19 19:54:12 2026 by rpki-client