$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json) Hash identifier: FjePep55vdLOhQw2sHPD6niX6KXd6fMgmc4MOaP9D1w= Subject key identifier: 40:22:8A:8D:84:A1:30:15:F0:FB:5A:1E:92:A1:89:FA:C7:09:B9:2E Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 0560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft Manifest number: 0556 Signing time: Sat 24 Oct 2026 23:23:00 +0000 Manifest this update: Sat 24 Oct 2026 23:22:59 +0000 Manifest next update: Sat 31 Oct 2026 23:22:59 +0000 Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: EulbROyjA2ZHOnNimDSscetPZ6IG7TuyrotHuvMxUd8=) 2: 4B7BB35ABBE011F1B1509A316A11F970.roa (hash: mnmEjF7LvnYTy9lFX6jResY23dSEgpZJ0cqqaqIOAsw=) 3: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: IckI08GnWY7VkqyIQpUbqPFyMQQDG/IZLaBCKjOdxWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Oct 24 23:22:59 2026 GMT Not After : Oct 31 23:22:59 2026 GMT Subject: CN=6add3dd4-cc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:19:91:75:20:b4:7e:b2:5c:af:36:59:b4: fc:4b:dc:ff:2d:c0:9c:cd:08:a4:ff:78:99:5a:5c: 5d:33:31:07:b6:d8:14:6d:bd:01:65:c1:1a:d9:dd: 20:cf:41:f2:bd:be:d7:ee:2a:a3:78:68:0c:3b:ea: 1f:7d:86:ee:fa:27:8e:04:7a:d7:4f:66:23:1a:28: b2:9e:01:39:60:0d:81:eb:3e:96:eb:d8:f3:5e:3f: 2d:3c:b8:87:2f:12:40:28:bf:65:f8:03:7a:87:79: 53:8d:1b:35:66:da:4f:a5:89:6e:f2:ad:6e:a1:52: 79:61:ae:87:5b:a8:0d:b8:bd:f3:5b:07:3e:e3:32: 47:e3:fc:a6:92:10:2b:29:1a:38:5c:a8:17:c0:ab: 24:18:62:89:ba:8a:9a:68:c5:70:6a:b9:6c:12:c7: 6a:59:97:6d:76:58:07:94:f1:c3:ea:77:86:81:f1: 5a:b1:ac:00:88:a1:c4:5a:76:f5:72:60:b1:f6:57: ec:32:12:bb:e6:21:29:92:cc:7d:84:cb:f5:a1:cf: 2c:a2:0c:95:13:e0:2e:39:8e:2c:7d:17:8a:f5:9b: 9a:e8:ec:10:43:8c:4a:c2:69:f5:da:5a:9b:b5:90: 79:f3:60:28:1d:d6:10:61:cb:c8:9d:1d:6e:26:10: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:8A:8D:84:A1:30:15:F0:FB:5A:1E:92:A1:89:FA:C7:09:B9:2E X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:04:f3:d6:a4:10:12:08:f6:7b:f0:33:87:68:a9:d2:38:1c: 7e:4e:9b:ab:b7:3e:10:51:db:ef:7a:3f:5f:26:46:1a:c7:7b: 37:8c:ba:67:6a:42:d0:2f:ac:6a:78:68:14:73:e6:b2:38:b4: 69:32:ac:4b:d8:a8:d2:d7:42:a6:9e:62:42:22:1d:67:d9:9a: 86:80:fc:87:cb:d2:05:03:cf:08:a5:0f:8e:0a:c3:a2:c1:2b: 57:25:95:a3:d0:b8:00:04:4f:f7:ea:39:28:74:24:a9:3a:21: 26:4a:dd:7d:33:39:d8:59:4d:7d:e5:6d:f7:75:01:ee:4c:cc: 7b:1f:61:15:d4:a5:fb:5e:6f:ab:3c:76:ac:d6:e0:71:2a:a1: f0:fd:d3:f7:5f:09:90:f8:d2:c7:ef:0d:bd:9f:39:7f:a7:c4: 76:34:6a:4e:60:42:cc:28:d6:89:cd:4f:55:21:7e:43:28:da: 08:fa:2e:5c:c8:d7:88:c0:f4:3e:aa:a9:33:e3:15:1d:20:98: 45:bc:12:38:46:6f:3d:54:df:83:d4:13:2e:4e:20:75:cb:ae: f9:1e:2b:19:fb:92:7c:90:50:85:5b:23:58:bb:e5:e8:c0:14: 93:0b:c1:bd:0d:ac:31:58:d7:62:de:10:55:6e:53:8d:e7:45: 44:aa:52:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjYxMDI0MjMyMjU5WhcNMjYxMDMxMjMyMjU5WjAYMRYwFAYD VQQDEw02YWRkM2RkNC1jYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmcZkXUgtH6yXK82WbT8S9z/LcCczQik/3iZWlxdMzEHttgUbb0BZcEa2d0g z0Hyvb7X7iqjeGgMO+offYbu+ieOBHrXT2YjGiiyngE5YA2B6z6W69jzXj8tPLiH LxJAKL9l+AN6h3lTjRs1ZtpPpYlu8q1uoVJ5Ya6HW6gNuL3zWwc+4zJH4/ymkhAr KRo4XKgXwKskGGKJuoqaaMVwarlsEsdqWZdtdlgHlPHD6neGgfFasawAiKHEWnb1 cmCx9lfsMhK75iEpksx9hMv1oc8sogyVE+AuOY4sfReK9Zua6OwQQ4xKwmn12lqb tZB582AoHdYQYcvInR1uJhDF9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEAiio2E oTAV8PtaHpKhifrHCbkuMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF VFM5MkRxcXJEaXJrdmpGQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACQTz1qQQEgj2e/Azh2ip0jgcfk6bq7c+EFHb73o/XyZGGsd7N4y6Z2pC0C+s anhoFHPmsji0aTKsS9io0tdCpp5iQiIdZ9mahoD8h8vSBQPPCKUPjgrDosErVyWV o9C4AARP9+o5KHQkqTohJkrdfTM52FlNfeVt93UB7kzMex9hFdSl+15vqzx2rNbg cSqh8P3T918JkPjSx+8NvZ85f6fEdjRqTmBCzCjWic1PVSF+QyjaCPouXMjXiMD0 PqqpM+MVHSCYRbwSOEZvPVTfg9QTLk4gdcuu+R4rGfuSfJBQhVsjWLvl6MAUkwvB vQ2sMVjXYt4QVW5TjedFRKpSVQ== -----END CERTIFICATE-----Generated at Sun Oct 25 08:09:38 2026 by rpki-client