$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json) Hash identifier: mgYXw36FSIUi1jjXkB+VmEwmT10wJFmEgAMDeFKNHP8= Subject key identifier: AB:B3:06:A2:2B:6C:57:66:E3:21:5B:D1:FE:03:05:D5:6E:EB:B1:76 Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft Manifest number: 0159 Signing time: Sat 03 Oct 2026 05:50:09 +0000 Manifest this update: Sat 03 Oct 2026 05:50:09 +0000 Manifest next update: Sat 10 Oct 2026 05:50:09 +0000 Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: unDentlEy8Ps3/SYXvPVIOGoFiF/PiC+eK/RERF43S4=) 2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: v6BylN14fOxA4ftijT2xm8ugkwjC+LIOM8D065x7bmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919 Validity Not Before: Oct 3 05:50:09 2026 GMT Not After : Oct 10 05:50:09 2026 GMT Subject: CN=6ac09791-e07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:9d:45:43:aa:d9:34:e6:43:b3:96:f9:3c: 2b:c8:fa:19:a6:45:84:53:ef:97:50:bd:5f:51:bb: 35:d5:17:46:6e:ad:82:02:4a:0b:b1:c5:1c:7d:be: 8f:50:2f:45:bf:f6:ff:17:2e:82:72:f7:b6:bd:b6: 26:22:66:ad:f5:02:d0:87:1a:06:f7:97:cd:3e:1c: e7:c0:04:6b:0e:d5:e5:59:bd:9b:47:29:55:76:58: 94:ad:52:e2:2e:b1:3b:6e:e5:e8:58:c2:42:8e:58: b0:53:83:b3:a8:15:c4:9c:ed:fd:d0:c6:72:d7:4a: 83:7d:1d:03:47:52:e8:77:2a:10:79:83:c1:5e:7d: 37:0c:52:f6:59:6a:e5:42:17:ef:8f:72:b6:45:c3: 9c:3a:90:00:74:9f:dd:89:c0:c4:97:ce:97:30:70: a2:4b:3a:d8:6b:10:8d:8a:bd:ee:25:d9:39:73:c7: cf:2f:19:60:9c:54:63:ab:56:57:23:f3:9c:67:30: 2f:89:1c:87:85:92:65:9f:0b:ea:b6:77:c4:ee:16: 87:a1:92:dc:18:2f:29:db:4e:64:9d:5e:5d:84:3c: b9:19:e3:6b:29:c6:ca:d8:31:bb:e4:bd:4c:a2:3f: ed:01:b2:73:5e:11:17:95:3f:9f:2e:fa:d1:ac:87: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B3:06:A2:2B:6C:57:66:E3:21:5B:D1:FE:03:05:D5:6E:EB:B1:76 X509v3 Authority Key Identifier: keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:09:c6:5d:ae:bd:f1:35:90:d0:38:6a:5b:37:ad:66:75:e4: 59:65:a2:4f:61:e9:7c:27:d7:9c:b9:fa:af:79:f0:5a:fb:69: c8:e5:5e:0d:ca:d8:5f:f0:7b:ad:7b:4f:39:9c:75:8b:58:71: 01:a1:31:ef:27:40:90:e6:12:70:58:15:71:25:c4:77:1e:f2: e7:76:25:a8:57:4d:1a:86:51:5c:cf:27:1f:b9:fb:e2:33:c9: 45:58:89:26:52:32:ce:75:b1:ba:aa:90:28:b0:79:db:23:9d: 3f:57:b2:08:04:e1:96:02:85:ea:85:16:6b:d7:6a:ce:c8:23: e5:ff:f4:c6:59:f3:3d:84:f4:a7:2e:af:6f:cb:9b:48:b6:39: 91:ae:8f:83:fc:eb:07:54:17:bd:a8:a8:6a:05:d3:a3:3a:02: 81:63:c2:59:f6:3d:cd:7c:19:94:e9:82:62:d1:f8:4b:9b:aa: 6f:73:07:fe:55:ab:61:7c:23:9f:98:dc:88:7c:aa:d6:b0:d4: 20:f4:e4:69:d6:d0:47:9c:78:85:17:fb:19:13:20:d2:a8:d3: 5f:cf:b2:c2:ab:47:5c:30:a5:33:24:6a:9b:63:4c:1e:f9:f3: 5d:9a:02:54:ba:d0:79:dc:0a:c9:d2:1d:6d:c6:99:d3:cd:f7: 73:0c:c1:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEI0RDIxNzkzOUEyNzUxOTM4RTA3NjU5QTc5NDg4NUE5 Qzg4NDE5MTkwHhcNMjYxMDAzMDU1MDA5WhcNMjYxMDEwMDU1MDA5WjAYMRYwFAYD VQQDEw02YWMwOTc5MS1lMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9SdRUOq2TTmQ7OW+TwryPoZpkWEU++XUL1fUbs11RdGbq2CAkoLscUcfb6P UC9Fv/b/Fy6Ccve2vbYmImat9QLQhxoG95fNPhznwARrDtXlWb2bRylVdliUrVLi LrE7buXoWMJCjliwU4OzqBXEnO390MZy10qDfR0DR1LodyoQeYPBXn03DFL2WWrl Qhfvj3K2RcOcOpAAdJ/dicDEl86XMHCiSzrYaxCNir3uJdk5c8fPLxlgnFRjq1ZX I/OcZzAviRyHhZJlnwvqtnfE7haHoZLcGC8p205knV5dhDy5GeNrKcbK2DG75L1M oj/tAbJzXhEXlT+fLvrRrIerAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKuzBqIr bFdm4yFb0f4DBdVu67F2MB8GA1UdIwQYMBaAFLTSF5OaJ1GTjgdlmnlIhanIhBkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy81MEJEMjMwRUIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVaT09CMldhZVVpRnFjaUVH UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUIxMy81MEJEMjMwRUIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVa T09CMldhZVVpRnFjaUVHUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIQnGXa698TWQ0DhqWzetZnXkWWWiT2HpfCfXnLn6r3nwWvtpyOVeDcrYX/B7 rXtPOZx1i1hxAaEx7ydAkOYScFgVcSXEdx7y53YlqFdNGoZRXM8nH7n74jPJRViJ JlIyznWxuqqQKLB52yOdP1eyCAThlgKF6oUWa9dqzsgj5f/0xlnzPYT0py6vb8ub SLY5ka6Pg/zrB1QXvaioagXTozoCgWPCWfY9zXwZlOmCYtH4S5uqb3MH/lWrYXwj n5jciHyq1rDUIPTkadbQR5x4hRf7GRMg0qjTX8+ywqtHXDClMyRqm2NMHvnzXZoC VLrQedwKydIdbcaZ0833cwzBlw== -----END CERTIFICATE-----Generated at Sun Oct 4 20:00:24 2026 by rpki-client