$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: XqK+MaUarq/F9DLDOReqR/nIPtMWKpDMHnsuTxiY7qs= Subject key identifier: 3A:12:DF:42:46:83:D8:57:BD:D5:98:8E:73:85:A2:A9:FC:D0:F4:4D Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 0634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 0622 Signing time: Sat 31 Oct 2026 23:21:20 +0000 Manifest this update: Sat 31 Oct 2026 23:21:20 +0000 Manifest next update: Sat 07 Nov 2026 23:21:20 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: sRAeH5k8mH9xdQoGVMl+I4sUppGwZ5CPxoSH6iALcqU=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: M1rs5Jtjb/8qlLdnyinO0cvyLVXNvhWmogVMuh2j644=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: aJ+bHuc4Zc6Z7F5hh4vQZGqOEcDlOE1jPj72U82lOCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 23:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1588 (0x634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Oct 31 23:21:20 2026 GMT Not After : Nov 7 23:21:20 2026 GMT Subject: CN=6ae677f0-c58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1a:7c:ad:7c:35:07:17:a1:a8:30:0c:15:74: b8:f9:3f:d4:30:53:e0:50:5f:03:6e:c6:7b:02:0c: b9:c5:d6:f2:d1:ed:fd:1d:94:30:dd:d0:75:47:2c: e2:7a:4d:f1:45:aa:da:a2:33:4c:61:64:38:c9:00: 24:28:55:98:a2:2b:75:16:c0:20:27:00:74:21:b1: f5:93:09:a5:9c:b3:f2:32:9b:1b:db:de:63:14:e7: a8:de:9a:a1:49:77:fd:1d:82:2f:93:50:df:69:b2: 93:12:78:73:c2:09:5b:7c:7d:d2:14:a3:91:37:f1: 7f:e9:90:eb:e7:80:61:96:01:f5:c5:dd:f9:f7:bd: df:4c:dd:e8:32:5f:4e:11:fd:1a:d2:28:1c:51:4a: 7f:e1:af:4e:76:b0:f8:e1:05:b6:83:b7:b3:a2:d3: 34:e9:67:fd:c1:48:3e:b1:37:ae:9a:c5:20:6b:bb: ce:db:78:3d:80:b0:6f:d5:42:f0:a0:a3:a6:99:fc: 9a:d9:21:2f:6c:43:f6:82:5f:db:a9:8f:87:f3:dd: da:fa:97:e8:74:41:68:79:3a:b5:b4:ec:cf:db:f5: 50:c8:34:99:09:ab:3a:2a:bf:5c:03:f6:7a:f4:ac: 0a:0e:da:ac:19:a6:64:60:51:bb:95:c7:e6:22:5e: ec:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:12:DF:42:46:83:D8:57:BD:D5:98:8E:73:85:A2:A9:FC:D0:F4:4D X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0f:37:2c:1c:5b:72:3f:e4:21:f9:b0:29:d7:c1:b6:00:87: 09:d0:cd:ae:e2:d7:f2:04:40:3f:71:54:d7:92:9b:fa:a7:ba: 46:2b:47:f6:a1:0e:7f:0f:8b:16:40:d6:1c:f3:e4:de:08:dc: 3a:5a:94:79:09:26:91:2b:5c:4d:dc:24:31:45:dd:76:95:99: 5b:4f:f6:f1:b2:99:14:96:0f:f3:78:2f:ee:a4:12:77:fc:2d: ef:76:ee:0c:1e:5f:c4:50:ad:72:cb:12:ef:ba:11:07:86:79: dd:7a:b3:49:59:1c:54:79:19:96:23:05:b3:d8:8b:c5:ba:a1: cc:c3:25:72:26:38:07:5b:65:56:aa:55:f7:c9:bb:0d:e3:1b: 6f:04:ba:e2:52:51:ae:93:35:c3:b1:09:40:dd:2e:4d:0b:14: 13:b5:e5:11:cf:05:9c:ae:f1:23:93:63:a5:12:6f:a3:d2:0e: 42:1b:c2:d2:59:7f:6c:17:79:13:fd:b5:e1:08:57:ec:96:1b: 69:f2:19:76:51:8c:a8:4a:68:99:a9:55:c3:c4:7c:24:15:4a: c7:dd:a7:43:37:94:75:1c:c6:35:2a:1f:d3:5d:3f:88:33:da: 9e:52:17:46:48:85:11:0a:ee:9a:41:64:97:ee:69:fe:69:82: 9e:d1:de:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjYxMDMxMjMyMTIwWhcNMjYxMTA3MjMyMTIwWjAYMRYwFAYD VQQDEw02YWU2NzdmMC1jNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Bp8rXw1BxehqDAMFXS4+T/UMFPgUF8DbsZ7Agy5xdby0e39HZQw3dB1Ryzi ek3xRaraojNMYWQ4yQAkKFWYoit1FsAgJwB0IbH1kwmlnLPyMpsb295jFOeo3pqh SXf9HYIvk1DfabKTEnhzwglbfH3SFKORN/F/6ZDr54BhlgH1xd35973fTN3oMl9O Ef0a0igcUUp/4a9OdrD44QW2g7ezotM06Wf9wUg+sTeumsUga7vO23g9gLBv1ULw oKOmmfya2SEvbEP2gl/bqY+H893a+pfodEFoeTq1tOzP2/VQyDSZCas6Kr9cA/Z6 9KwKDtqsGaZkYFG7lcfmIl7sHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDoS30JG g9hXvdWYjnOFoqn80PRNMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATw83LBxbcj/kIfmwKdfBtgCHCdDNruLX8gRAP3FU15Kb+qe6RitH9qEOfw+L FkDWHPPk3gjcOlqUeQkmkStcTdwkMUXddpWZW0/28bKZFJYP83gv7qQSd/wt73bu DB5fxFCtcssS77oRB4Z53XqzSVkcVHkZliMFs9iLxbqhzMMlciY4B1tlVqpV98m7 DeMbbwS64lJRrpM1w7EJQN0uTQsUE7XlEc8FnK7xI5NjpRJvo9IOQhvC0ll/bBd5 E/214QhX7JYbafIZdlGMqEpomalVw8R8JBVKx92nQzeUdRzGNSof010/iDPanlIX RkiFEQrumkFkl+5p/mmCntHe3A== -----END CERTIFICATE-----Generated at Sun Nov 1 13:02:39 2026 by rpki-client