$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json) Hash identifier: ph7JNaJrr+mTHRRJDSc+jXVIfeq/787YbYh2Q3COUDo= Subject key identifier: 8D:2D:B9:D6:58:70:A4:D6:35:4D:D4:5C:A7:A2:E1:C4:A7:75:6F:41 Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft Manifest number: 0128 Signing time: Wed 21 Oct 2026 06:19:16 +0000 Manifest this update: Wed 21 Oct 2026 06:19:15 +0000 Manifest next update: Wed 28 Oct 2026 06:19:15 +0000 Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: qpczrKjO+iGOfjpSeALO9QQpRLK8yJf8G0b/vke9gDM=) 2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: kJueAKUE3Sd3o6wDYoPNiGbGdW9zWY3YeQpVU6pBXdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Validity Not Before: Oct 21 06:19:15 2026 GMT Not After : Oct 28 06:19:15 2026 GMT Subject: CN=6ad85964-0c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:8a:e3:0a:89:5b:e5:8c:20:ae:8d:8e:a9: 05:07:ea:91:4c:7f:99:01:68:6e:36:7c:ae:c0:4f: 46:d4:b8:ab:f5:12:ef:93:3d:d0:59:4f:90:d5:1d: 16:7b:07:c4:61:c5:05:a9:ec:95:1f:0a:70:6d:76: ff:4a:d6:31:af:db:98:ad:f0:90:09:15:0c:1c:de: f7:5e:4c:9a:bf:1d:70:6f:cd:ef:fb:94:24:b0:7b: cd:ff:45:21:55:d0:ee:67:63:a3:ab:ee:59:a4:db: 85:45:f0:88:1e:c4:2f:21:36:92:8c:99:b5:b7:0d: c9:49:9e:d8:6e:2d:44:76:19:8f:63:ab:98:15:d6: 85:3b:31:6f:bf:b4:2c:6e:1c:01:3c:7b:59:c1:ce: c9:4d:db:29:80:74:6d:38:d3:ea:be:da:ac:fe:0d: eb:aa:eb:05:3d:40:8a:53:df:4e:06:58:16:75:69: 84:88:52:1a:a8:17:84:d3:b4:7f:e5:25:5a:f1:88: 10:e6:ed:3d:72:da:5a:51:19:f6:7c:7a:53:f4:51: 45:d0:ad:20:2c:1e:bb:10:a4:c6:a8:c8:2f:24:83: 1b:ab:d8:53:45:b4:27:3b:e3:0c:e7:08:f1:62:21: c6:de:1e:6f:12:34:ac:1c:a2:8a:ae:b0:f3:50:4d: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2D:B9:D6:58:70:A4:D6:35:4D:D4:5C:A7:A2:E1:C4:A7:75:6F:41 X509v3 Authority Key Identifier: keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d1:e6:d2:29:f8:9b:10:54:13:05:8d:7d:02:2e:eb:c0:2a: 38:e9:f6:03:8a:66:49:2f:72:07:30:dc:79:ec:5c:73:23:d0: 23:c6:4c:04:b9:4b:cd:b3:a7:03:d4:31:b2:72:79:01:a4:ec: 27:b0:76:d2:d3:39:ae:f0:f1:b2:6c:00:29:7a:5c:1a:16:3f: d1:21:63:93:0c:e5:e5:2e:9d:ba:a3:35:1d:7f:44:96:15:9f: 28:92:fe:bf:45:29:ed:b8:a9:3f:43:2d:b0:e9:79:77:59:9a: b8:18:39:25:cd:99:8e:c4:fe:56:4c:f8:26:21:36:8e:16:b9: 4d:eb:36:6b:44:f3:fc:d1:c6:48:7d:19:a9:9f:8c:3b:ee:50: 1b:b6:36:5f:39:59:70:33:08:40:a2:47:8e:80:60:14:67:56: a7:9b:30:1d:83:e6:5b:9a:4d:54:f1:77:fc:1f:f2:ae:d6:93: ae:e3:c8:e4:66:d9:69:6e:c2:81:45:8b:fe:21:c7:af:08:1a: 9a:52:fa:bf:93:7a:e1:fa:6b:6e:2e:03:ec:0f:16:c3:f9:ff: 92:7b:27:6e:24:1d:50:7d:83:91:5c:b8:3b:4f:4c:76:b2:a4: 7c:62:dd:69:8b:ed:6c:92:af:ca:4c:76:ae:9b:bd:44:a3:08: ef:06:b9:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExODExMTAvBgNVBAUTKEI0ODM5RjRGQzNGOEVERkNCRDIyREExQTc5OUQ4NjVB Q0ZFMDMyNUYwHhcNMjYxMDIxMDYxOTE1WhcNMjYxMDI4MDYxOTE1WjAYMRYwFAYD VQQDEw02YWQ4NTk2NC0wYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMeK4wqJW+WMIK6NjqkFB+qRTH+ZAWhuNnyuwE9G1Lir9RLvkz3QWU+Q1R0W ewfEYcUFqeyVHwpwbXb/StYxr9uYrfCQCRUMHN73Xkyavx1wb83v+5QksHvN/0Uh VdDuZ2Ojq+5ZpNuFRfCIHsQvITaSjJm1tw3JSZ7Ybi1EdhmPY6uYFdaFOzFvv7Qs bhwBPHtZwc7JTdspgHRtONPqvtqs/g3rqusFPUCKU99OBlgWdWmEiFIaqBeE07R/ 5SVa8YgQ5u09ctpaURn2fHpT9FFF0K0gLB67EKTGqMgvJIMbq9hTRbQnO+MM5wjx YiHG3h5vEjSsHKKKrrDzUE0rZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0tudZY cKTWNU3UXKei4cSndW9BMB8GA1UdIwQYMBaAFLSDn0/D+O38vSLaGnmdhlrP4DJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTE4MS9BQTA4N0Y3QTBC NzkxMUYwQkI5OUVENkFDNEY5QUUwMi90SU9mVDhQNDdmeTlJdG9hZVoyR1dzX2dN bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTE4MS9BQTA4N0Y3QTBCNzkxMUYwQkI5OUVENkFDNEY5QUUwMi90SU9mVDhQNDdm eTlJdG9hZVoyR1dzX2dNbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOdHm0in4mxBUEwWNfQIu68AqOOn2A4pmSS9yBzDceexccyPQI8ZMBLlLzbOn A9QxsnJ5AaTsJ7B20tM5rvDxsmwAKXpcGhY/0SFjkwzl5S6duqM1HX9ElhWfKJL+ v0Up7bipP0MtsOl5d1mauBg5Jc2ZjsT+Vkz4JiE2jha5Tes2a0Tz/NHGSH0ZqZ+M O+5QG7Y2XzlZcDMIQKJHjoBgFGdWp5swHYPmW5pNVPF3/B/yrtaTruPI5GbZaW7C gUWL/iHHrwgamlL6v5N64fprbi4D7A8Ww/n/knsnbiQdUH2DkVy4O09MdrKkfGLd aYvtbJKvykx2rpu9RKMI7wa5yw== -----END CERTIFICATE-----Generated at Thu Oct 22 12:08:47 2026 by rpki-client