$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: TThyOMJLn5gy5NNL/4X1mH40TW1f1PvGhaT1Kto9rFc= Subject key identifier: 15:0E:0B:C5:9C:58:2E:C2:AA:66:B1:6D:38:32:97:60:C3:6D:8D:85 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 15DC Signing time: Tue 20 Oct 2026 18:26:42 +0000 Manifest this update: Tue 20 Oct 2026 18:26:41 +0000 Manifest next update: Tue 27 Oct 2026 18:26:41 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: U2NNf5UNA+enNTjKwis8fADZabTMGTxTmn5fliSuOuA=) 2: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: C7vbfjxv89XIR5NcpKz3D4uzRMsCLjoNUKAHCYrmHIY=) 3: C9C81E521D2911F18F7E6F37153D8C67.roa (hash: mXOFhSyBCv/TAJy8hqfhwv8pJyftfeyIbfuF2KBdAoc=) 4: 2F7267121DD411F18819F3DA0B3D8C67.roa (hash: oxDb8X2lz/Qtc/KEdYDIiS2xmDd6FSCv+Q74AiXUIbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 18:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Oct 20 18:26:41 2026 GMT Not After : Oct 27 18:26:41 2026 GMT Subject: CN=6ad7b262-f646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:3a:1d:36:41:2c:5b:d6:0f:a1:7d:76:cd: 70:28:d5:7f:79:bf:0d:51:4e:8d:87:47:ad:8c:b5: c8:3d:9c:6e:c8:97:a3:75:da:d5:7f:e9:7e:55:ca: 3d:2d:6a:0a:9d:53:ad:9d:62:f3:8b:63:4e:a7:1d: ac:f4:32:59:26:5b:1d:f0:68:ed:47:0d:f7:02:9e: 7b:ab:71:bb:bd:1d:43:6d:15:41:fd:41:8f:c1:d9: 3a:8e:a8:81:48:c4:1a:2f:47:b4:5e:ab:1c:23:c1: 8a:bd:3a:5e:0f:0c:73:2f:48:73:89:ca:ee:8f:77: 6d:83:f6:76:80:fe:7f:40:03:d3:2a:a6:1d:ed:6d: 72:c8:a4:2d:76:d8:79:eb:b4:42:69:16:4d:09:82: 6b:e3:0d:87:13:02:77:c5:fa:fe:bd:1a:47:4d:f6: f5:f9:26:94:03:91:6b:71:6e:3f:9a:30:b9:55:b4: fe:c0:39:c7:86:f9:1f:48:ad:5f:7c:e1:dc:d8:f2: 71:41:9d:b8:61:f5:c6:0a:b3:09:60:42:94:24:3e: cc:22:94:21:10:e8:1e:3c:81:87:fe:ee:00:00:ae: 31:b1:61:eb:10:f4:2b:83:45:cd:87:9c:22:cc:d5: 36:55:9a:7c:48:3c:78:d8:48:6d:f9:d4:39:98:56: fc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0E:0B:C5:9C:58:2E:C2:AA:66:B1:6D:38:32:97:60:C3:6D:8D:85 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:dd:10:97:65:0d:1d:12:d9:de:a0:03:b4:8b:4e:09:aa:81: 96:1b:66:00:1f:df:1c:7e:e2:14:50:c0:32:11:7c:5c:07:31: 23:73:5b:a2:f1:2e:8a:04:22:83:34:a3:c6:62:60:12:de:38: 25:5f:3e:a1:38:2e:7c:f0:88:12:c7:27:15:01:8e:aa:b2:2a: 61:31:b0:a6:dd:11:7b:a9:96:4b:2b:ac:00:1f:89:e8:93:10: 1a:d2:a7:50:04:5c:3c:b6:fc:27:5a:14:11:0e:47:28:94:52: 77:c9:86:c4:01:31:1c:46:90:3f:af:13:70:32:36:89:56:c8: 7c:ad:d6:1a:a4:af:91:99:c7:7b:65:4f:6e:8e:a7:e1:e0:4b: 7c:f3:f4:84:f2:23:60:ca:66:ba:22:90:2c:00:7a:eb:d0:f8: 56:08:04:8b:4d:95:bd:be:12:18:35:31:34:78:33:06:df:90: 61:69:af:65:b9:07:8c:fa:b1:b8:f0:90:64:e5:9e:40:cc:73: bc:0b:11:17:77:89:31:61:59:36:b2:9d:30:d7:83:c6:38:80: d6:4b:0e:b4:f2:46:e8:4e:18:4b:4f:79:b5:ed:c9:4c:4c:ab: 4e:39:56:09:3e:4b:e4:a2:51:5b:ba:76:23:0e:ca:fe:39:cb: bb:36:34:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjYxMDIwMTgyNjQxWhcNMjYxMDI3MTgyNjQxWjAYMRYwFAYD VQQDEw02YWQ3YjI2Mi1mNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06c6HTZBLFvWD6F9ds1wKNV/eb8NUU6Nh0etjLXIPZxuyJejddrVf+l+Vco9 LWoKnVOtnWLzi2NOpx2s9DJZJlsd8GjtRw33Ap57q3G7vR1DbRVB/UGPwdk6jqiB SMQaL0e0XqscI8GKvTpeDwxzL0hzicruj3dtg/Z2gP5/QAPTKqYd7W1yyKQtdth5 67RCaRZNCYJr4w2HEwJ3xfr+vRpHTfb1+SaUA5FrcW4/mjC5VbT+wDnHhvkfSK1f fOHc2PJxQZ24YfXGCrMJYEKUJD7MIpQhEOgePIGH/u4AAK4xsWHrEPQrg0XNh5wi zNU2VZp8SDx42Eht+dQ5mFb83QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUOC8Wc WC7CqmaxbTgyl2DDbY2FMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ90Ql2UNHRLZ3qADtItOCaqBlhtmAB/fHH7iFFDAMhF8XAcxI3NbovEuigQi gzSjxmJgEt44JV8+oTgufPCIEscnFQGOqrIqYTGwpt0Re6mWSyusAB+J6JMQGtKn UARcPLb8J1oUEQ5HKJRSd8mGxAExHEaQP68TcDI2iVbIfK3WGqSvkZnHe2VPbo6n 4eBLfPP0hPIjYMpmuiKQLAB669D4VggEi02Vvb4SGDUxNHgzBt+QYWmvZbkHjPqx uPCQZOWeQMxzvAsRF3eJMWFZNrKdMNeDxjiA1ksOtPJG6E4YS095te3JTEyrTjlW CT5L5KJRW7p2Iw7K/jnLuzY0CQ== -----END CERTIFICATE-----Generated at Thu Oct 22 13:07:02 2026 by rpki-client