$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: C0beLMqd4J4If0ZWbNtZhbuWejFLhqCPL21TJJb71RI= Subject key identifier: 12:10:37:57:05:53:59:8B:92:DA:DF:9E:CC:2E:7A:96:50:A1:19:45 Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 04BA Signing time: Thu 22 Oct 2026 23:57:22 +0000 Manifest this update: Thu 22 Oct 2026 23:57:22 +0000 Manifest next update: Thu 29 Oct 2026 23:57:22 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: U5fdQJWkSdrYLWC9bB3a/QtjueMX8vZ3wqcHThkJQ3w=) 2: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: 9Fd943GuQnIJTghRawSBwpY1MlmUVR4OO3uXynSyRN8=) 3: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: YLvOpo/gAJOyi4aEbUEuHHlI1c0Z1SZvTOBlRFCy2+E=) 4: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 23:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Oct 22 23:57:22 2026 GMT Not After : Oct 29 23:57:22 2026 GMT Subject: CN=6adaa2e2-96d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7d:ca:74:f3:10:9e:fa:51:d0:2d:34:b7:65: f3:8b:6a:34:92:6c:23:b3:7b:8f:b7:23:67:9e:0c: 01:ae:ec:61:42:9e:33:6a:cd:cc:be:af:02:0e:ac: ce:36:69:79:a4:cd:0e:23:86:0b:3b:5f:42:d9:bd: 28:7f:b4:99:b9:f5:71:d0:b9:67:3e:23:ec:48:1b: c2:ac:aa:ac:12:08:20:c4:f1:d3:41:65:45:f1:0f: 6e:c8:ae:f8:9d:c5:8f:97:e8:96:0f:3b:4d:ff:7a: 4a:e5:e2:ab:ab:d9:08:9b:8e:96:75:1e:ad:8f:cd: 56:31:a4:93:fc:f0:dc:06:99:96:55:62:99:c8:8c: 61:73:0d:79:a6:ec:c2:b6:8a:f4:fa:d0:5d:48:3e: 4f:60:ef:d9:8a:24:eb:b5:fe:e4:f9:90:33:9c:ac: 5c:0c:3d:bd:9b:18:3a:dc:6e:fa:a6:74:1f:6e:da: 6c:15:3d:7e:71:93:42:f1:b2:00:5d:20:fc:c8:9c: 8c:96:d5:8e:0b:63:e8:ab:05:d2:cd:44:84:17:3a: e2:6e:75:f2:7b:c8:42:ed:de:4a:eb:42:52:c7:38: d7:07:f4:cd:ea:77:1b:f4:ee:e3:ba:4e:4a:b4:37: c5:d6:55:1c:94:c1:45:20:69:b5:04:4d:06:2c:95: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:10:37:57:05:53:59:8B:92:DA:DF:9E:CC:2E:7A:96:50:A1:19:45 X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:97:b2:fb:ee:7a:07:cd:82:23:3b:c1:af:80:0c:26:bc:5c: b4:67:6e:2f:2e:40:27:cc:ac:19:96:d9:bd:f6:4a:0e:8a:9a: bd:ac:0f:dc:98:05:7f:cd:9a:6c:6a:e0:e3:d3:f0:1e:83:92: 06:7b:fd:69:ee:1f:89:57:10:1c:a0:f9:88:84:7a:62:b2:6c: 7e:9c:8a:a1:10:62:f3:cb:b6:d3:29:35:32:23:f9:83:a3:51: df:9a:bb:8a:70:86:44:78:30:87:1e:4f:9d:03:54:c5:08:66: 92:a0:84:2a:44:66:4b:ce:be:d8:3c:61:f4:44:35:c0:18:a2: 41:c4:2c:be:e6:24:86:91:31:f2:1b:9a:74:a7:71:4e:5e:93: ce:dc:fd:c4:62:8b:35:2a:75:00:2c:1c:94:42:2f:f7:06:53: 50:22:84:7a:14:49:54:a5:bf:06:33:f0:2c:dc:42:ed:2b:27: fb:fc:a5:e7:fe:8f:15:eb:9c:4e:65:83:65:48:f9:61:f4:9f: 79:d8:78:c8:9f:33:d6:38:b7:2c:9a:ea:bc:df:4d:e2:83:99: af:b4:00:49:22:a1:40:c3:39:ae:ac:17:3a:78:ca:1b:ce:03: 1c:c1:76:85:eb:1d:2a:e4:40:c2:59:0f:fc:49:cc:97:af:2f: 41:d1:88:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjYxMDIyMjM1NzIyWhcNMjYxMDI5MjM1NzIyWjAYMRYwFAYD VQQDEw02YWRhYTJlMi05NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmX3KdPMQnvpR0C00t2Xzi2o0kmwjs3uPtyNnngwBruxhQp4zas3Mvq8CDqzO Nml5pM0OI4YLO19C2b0of7SZufVx0LlnPiPsSBvCrKqsEgggxPHTQWVF8Q9uyK74 ncWPl+iWDztN/3pK5eKrq9kIm46WdR6tj81WMaST/PDcBpmWVWKZyIxhcw15puzC tor0+tBdSD5PYO/ZiiTrtf7k+ZAznKxcDD29mxg63G76pnQfbtpsFT1+cZNC8bIA XSD8yJyMltWOC2PoqwXSzUSEFzribnXye8hC7d5K60JSxzjXB/TN6ncb9O7juk5K tDfF1lUclMFFIGm1BE0GLJX1AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBIQN1cF U1mLktrfnswuepZQoRlFMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGpey++56B82CIzvBr4AMJrxctGduLy5AJ8ysGZbZvfZKDoqavawP3JgFf82a bGrg49PwHoOSBnv9ae4fiVcQHKD5iIR6YrJsfpyKoRBi88u20yk1MiP5g6NR35q7 inCGRHgwhx5PnQNUxQhmkqCEKkRmS86+2Dxh9EQ1wBiiQcQsvuYkhpEx8huadKdx Tl6Tztz9xGKLNSp1ACwclEIv9wZTUCKEehRJVKW/BjPwLNxC7Ssn+/yl5/6PFeuc TmWDZUj5YfSfedh4yJ8z1ji3LJrqvN9N4oOZr7QASSKhQMM5rqwXOnjKG84DHMF2 hesdKuRAwlkP/EnMl68vQdGInw== -----END CERTIFICATE-----Generated at Fri Oct 23 07:28:32 2026 by rpki-client