$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft File: tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json) Hash identifier: Dp4jtnYjUyWe7ON/Xts45Qwco8iEwtGArtMSGcbbr50= Subject key identifier: 75:7D:3D:BB:B5:B2:DF:CC:11:71:F7:41:A7:8E:A2:7A:75:0A:05:9E Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft Manifest number: 0A21 Signing time: Mon 26 Oct 2026 19:45:23 +0000 Manifest this update: Mon 26 Oct 2026 19:45:23 +0000 Manifest next update: Mon 02 Nov 2026 19:45:23 +0000 Files and hashes: 1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: oUq7U4ZXuomgzYv50Fkw1w0ZBv8Je24EfX7pgc9Y6KQ=) 2: B350B67E964611EDA10D8777C4F9AE02.roa (hash: aMRVpWtmZnwUR1mTSqb8jU7v8RNHSZIpMkATgGb8rEM=) 3: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: wBIj83x+5tbUquS7FIlQQAMIzPRLzq+ZJDvfE+mcXhY=) 4: 4AA9F8CC75B511F18A3D446262A30FBC.roa (hash: MSBf0iBfpnkN8OR9PwqpSLdIh53j/55U/eb6DNv2y94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Validity Not Before: Oct 26 19:45:23 2026 GMT Not After : Nov 2 19:45:23 2026 GMT Subject: CN=6adfadd3-4daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:7f:01:d3:6b:27:f1:08:cd:9b:c0:a9:ff: 6d:c5:47:df:c1:b0:d2:d9:5e:88:47:f3:9e:68:ea: 2c:dd:01:88:62:bd:84:f7:28:14:53:17:20:31:2d: 2a:74:d0:f4:12:ed:15:0e:45:3d:2f:5a:7a:29:3a: 66:b4:a5:ea:b7:12:c9:9e:d9:2b:03:a4:53:ae:c7: c7:0d:55:5d:c2:e9:9b:da:8f:2b:d0:20:e1:d6:7f: 01:80:56:20:b1:75:2a:b0:27:48:cf:ed:54:eb:d8: 05:46:31:5f:bd:c1:a1:ca:1d:b1:9d:b1:ff:55:e6: ea:2a:31:4f:b5:c4:e0:14:ce:00:09:93:c3:b5:88: 08:61:75:88:e5:79:a9:13:7d:9b:e8:06:0e:f5:cd: 3c:40:30:be:56:f6:ab:e5:ae:64:e3:19:50:18:65: 8c:da:70:ae:65:68:1d:99:1e:b0:74:b7:0a:55:35: 58:63:4d:d4:f8:2e:2f:12:4d:c1:c7:ae:7e:a9:81: aa:4e:31:cb:2e:10:ce:d4:2c:95:73:5b:1f:64:87: 30:25:c5:eb:ca:b3:e2:06:d9:e1:a9:b6:a9:dc:aa: 6c:76:59:ff:f2:41:61:f9:87:71:1c:97:af:e5:d3: dd:28:c0:48:53:77:8b:9b:e8:63:37:98:8c:aa:af: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7D:3D:BB:B5:B2:DF:CC:11:71:F7:41:A7:8E:A2:7A:75:0A:05:9E X509v3 Authority Key Identifier: keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d7:2a:82:85:4c:3d:63:72:30:75:dc:48:4c:71:a1:1b:8a: d4:62:0b:99:1b:05:0d:01:75:e5:90:78:6e:7c:94:16:e5:07: 6a:f8:91:3c:ac:06:f3:ef:89:f3:c3:a4:a8:22:6f:86:44:e4: 6f:df:4c:c9:92:6e:0d:b3:9d:6a:4a:2d:0e:23:16:0a:1f:2d: 78:c0:e8:b5:2a:15:47:fc:8b:a5:ac:48:fd:0c:0c:2a:34:b9: 80:85:57:f0:a9:45:20:56:80:5f:09:fa:83:cd:87:c8:da:05: e1:25:37:23:77:00:05:9a:93:a7:95:11:d3:1e:0a:4c:5a:d5: 41:5b:a4:2f:e9:6d:36:83:78:a8:e9:0d:ba:f9:46:7c:f0:34: 83:61:b3:e0:68:56:e0:2c:52:ea:20:2d:db:0c:44:10:c5:01: da:aa:32:06:df:8b:46:73:c8:cf:16:2b:87:e0:da:7a:61:b6: 44:43:51:39:38:d0:3c:db:44:41:12:b9:45:93:11:47:61:75: 14:3f:a0:d0:41:e9:e7:40:7a:ff:a8:3e:f4:3b:3e:9b:f2:92: e3:60:a7:22:49:a1:ed:b6:85:04:f0:ff:ae:6a:0a:b3:29:8f: ae:68:f6:4c:27:a8:ae:9b:ef:1c:ec:41:b2:9f:2e:06:7d:22: 57:16:b5:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2 REQzQ0I2QzgwHhcNMjYxMDI2MTk0NTIzWhcNMjYxMTAyMTk0NTIzWjAYMRYwFAYD VQQDEw02YWRmYWRkMy00ZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhl/AdNrJ/EIzZvAqf9txUffwbDS2V6IR/OeaOos3QGIYr2E9ygUUxcgMS0q dND0Eu0VDkU9L1p6KTpmtKXqtxLJntkrA6RTrsfHDVVdwumb2o8r0CDh1n8BgFYg sXUqsCdIz+1U69gFRjFfvcGhyh2xnbH/VebqKjFPtcTgFM4ACZPDtYgIYXWI5Xmp E32b6AYO9c08QDC+Vvar5a5k4xlQGGWM2nCuZWgdmR6wdLcKVTVYY03U+C4vEk3B x65+qYGqTjHLLhDO1CyVc1sfZIcwJcXryrPiBtnhqbap3Kpsdln/8kFh+YdxHJev 5dPdKMBIU3eLm+hjN5iMqq9mdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHV9Pbu1 st/MEXH3QaeOonp1CgWeMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3 RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0 c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1OC9CMzg5MzA0RUE3RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVK Qjgwb2lMNTB1SnB0MDh0c2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARdcqgoVMPWNyMHXcSExxoRuK1GILmRsFDQF15ZB4bnyUFuUHaviRPKwG8++J 88OkqCJvhkTkb99MyZJuDbOdakotDiMWCh8teMDotSoVR/yLpaxI/QwMKjS5gIVX 8KlFIFaAXwn6g82HyNoF4SU3I3cABZqTp5UR0x4KTFrVQVukL+ltNoN4qOkNuvlG fPA0g2Gz4GhW4CxS6iAt2wxEEMUB2qoyBt+LRnPIzxYrh+DaemG2RENROTjQPNtE QRK5RZMRR2F1FD+g0EHp50B6/6g+9Ds+m/KS42CnIkmh7baFBPD/rmoKsymPrmj2 TCeorpvvHOxBsp8uBn0iVxa1kw== -----END CERTIFICATE-----Generated at Wed Oct 28 14:38:41 2026 by rpki-client