$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: rlqUVLs3X+zmbmNZzT4mvUsq02cZkmea2wWBKPByvPU= Subject key identifier: 9E:88:32:C5:F8:C5:8A:EC:34:93:9C:AD:4C:7F:DC:E8:D8:B6:B3:23 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0B14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 1B2E Signing time: Fri 02 Oct 2026 17:36:43 +0000 Manifest this update: Fri 02 Oct 2026 17:36:43 +0000 Manifest next update: Fri 09 Oct 2026 17:36:43 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: Bis4q7+7CVHBRXm8xYkc+Q5dBhapgWUyXfiRAMk3vps=) 2: AC262AE896E011F1AACCC6D55B11F970.roa (hash: VFreQWvwqoUHhufjMC+/zSTILelzYSaJo4dghHUSpM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 17:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2836 (0xb14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Oct 2 17:36:43 2026 GMT Not After : Oct 9 17:36:43 2026 GMT Subject: CN=6abfebab-2d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7c:43:c2:1a:6e:a5:54:42:3d:d2:47:3f:e5: 45:67:38:65:b1:82:9b:24:84:89:de:86:60:b5:cd: 37:e3:c6:6b:21:32:c3:14:f5:f0:76:45:85:65:40: f5:70:75:b3:f2:6f:53:db:62:b7:69:cb:cf:fa:11: c9:24:3b:c3:73:59:b2:66:1b:48:39:6e:d9:ff:c4: 00:ef:bb:97:0c:a4:7c:c2:0c:c9:58:55:68:1e:bd: 2e:ce:6a:e8:d4:75:98:40:17:95:00:46:94:16:cb: a8:a6:dd:7b:9e:5a:f1:6d:06:cb:0e:8e:55:92:a5: 13:98:48:37:8e:62:cd:33:0a:22:0e:6d:34:d8:02: 81:77:38:a7:e9:96:b8:5e:fd:7f:bb:d8:a6:bc:5a: c3:32:91:d9:3c:1e:a0:7a:7d:d5:4a:4b:2e:3d:87: fb:aa:14:a0:c4:07:be:dd:35:cb:08:10:d6:d3:a7: e9:a3:b7:b2:8d:8a:69:e0:38:3e:95:38:bb:6b:7b: 64:ac:5e:eb:41:1d:81:cd:92:c1:2f:14:e0:fa:82: 72:70:d8:a0:b6:76:29:2a:8f:1b:bf:9b:4f:94:7e: af:5e:80:11:3f:5f:63:29:f6:4f:fb:9d:cb:bd:cd: d6:9c:8b:92:05:a5:d5:45:08:e3:b6:80:3e:74:9c: 44:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:88:32:C5:F8:C5:8A:EC:34:93:9C:AD:4C:7F:DC:E8:D8:B6:B3:23 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8e:88:51:d3:45:26:d1:82:12:2b:13:84:b8:e2:ff:b4:05: cf:c2:70:48:ae:9b:2e:4f:ac:e1:27:ff:69:40:bb:f9:b5:d9: 7f:ed:0d:63:43:30:b9:52:1a:ff:61:e2:eb:56:85:c1:e2:64: 4d:59:fa:c1:2b:49:95:f7:d8:27:d4:63:8d:2f:1e:04:e7:ab: be:84:bb:d9:79:c6:35:03:bf:8f:20:79:45:93:d4:31:98:ff: 18:f3:7c:bb:ea:26:73:63:8d:cf:89:93:c7:e1:42:32:f6:bb: 2e:ce:4c:21:3d:9d:37:c6:d6:1e:43:3d:b8:51:ae:54:b5:00: b2:ed:7c:9a:2e:a9:43:b9:ac:0a:9c:04:74:94:a6:28:2f:6d: 2c:0d:9f:9d:3b:32:16:58:76:89:b9:b4:75:d6:79:bd:a5:31: ee:3c:68:ca:ec:8c:59:71:d0:7b:05:69:ae:7c:d5:5c:26:7e: 2c:10:ce:85:3a:9f:ea:d6:a3:2c:91:2e:3c:71:b0:0c:b7:dd: be:e4:11:db:47:be:51:99:10:9a:da:59:2f:1d:0b:2e:d7:c3: 0d:3e:cf:b9:4a:5f:1a:5b:80:ec:a0:dc:c8:66:d9:01:76:85: 45:44:04:7c:62:00:b4:21:a8:75:5a:f2:ea:08:d0:65:ba:c0: 47:0c:11:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjYxMDAyMTczNjQzWhcNMjYxMDA5MTczNjQzWjAYMRYwFAYD VQQDEw02YWJmZWJhYi0yZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnxDwhpupVRCPdJHP+VFZzhlsYKbJISJ3oZgtc0348ZrITLDFPXwdkWFZUD1 cHWz8m9T22K3acvP+hHJJDvDc1myZhtIOW7Z/8QA77uXDKR8wgzJWFVoHr0uzmro 1HWYQBeVAEaUFsuopt17nlrxbQbLDo5VkqUTmEg3jmLNMwoiDm002AKBdzin6Za4 Xv1/u9imvFrDMpHZPB6gen3VSksuPYf7qhSgxAe+3TXLCBDW06fpo7eyjYpp4Dg+ lTi7a3tkrF7rQR2BzZLBLxTg+oJycNigtnYpKo8bv5tPlH6vXoARP19jKfZP+53L vc3WnIuSBaXVRQjjtoA+dJxEvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6IMsX4 xYrsNJOcrUx/3OjYtrMjMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi46IUdNFJtGCEisThLji/7QFz8JwSK6bLk+s4Sf/aUC7+bXZf+0NY0MwuVIa /2Hi61aFweJkTVn6wStJlffYJ9RjjS8eBOervoS72XnGNQO/jyB5RZPUMZj/GPN8 u+omc2ONz4mTx+FCMva7Ls5MIT2dN8bWHkM9uFGuVLUAsu18mi6pQ7msCpwEdJSm KC9tLA2fnTsyFlh2ibm0ddZ5vaUx7jxoyuyMWXHQewVprnzVXCZ+LBDOhTqf6taj LJEuPHGwDLfdvuQR20e+UZkQmtpZLx0LLtfDDT7PuUpfGluA7KDcyGbZAXaFRUQE fGIAtCGodVry6gjQZbrARwwRbg== -----END CERTIFICATE-----Generated at Sun Oct 4 20:03:00 2026 by rpki-client