$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: F8FKPGroWdKq3MxxDKiROejLY+BbcLTTHch2LLh+4K8= Subject key identifier: 27:70:F2:39:42:23:98:FF:68:AA:1F:17:FA:33:F0:E2:E4:87:D4:78 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 07B2 Signing time: Thu 20 Aug 2026 21:23:58 +0000 Manifest this update: Thu 20 Aug 2026 21:23:58 +0000 Manifest next update: Thu 27 Aug 2026 21:23:58 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: k8jYxE4rGq/rt0MH9FToQUB7h25zXkOh8Bu96ygZgDw=) 2: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=) 3: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=) 4: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Aug 20 21:23:58 2026 GMT Not After : Aug 27 21:23:58 2026 GMT Subject: CN=6a87706e-9458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:4b:8d:80:bf:8b:92:15:9f:ea:5c:7d:94: 77:2e:9a:a0:da:cc:68:a0:28:34:24:ca:7a:15:d7: 9f:da:c1:ec:ae:50:bc:f9:f1:03:a5:7f:38:e5:c5: d6:ac:70:72:e0:bf:20:3a:30:d9:f6:7e:1b:e3:c1: 60:e5:d4:a3:58:5f:23:d8:82:a0:90:b4:02:09:53: 0f:3b:76:fd:58:24:8c:7f:88:ca:de:be:ff:67:a2: 5b:0e:6b:f6:6f:d4:8d:bc:51:73:15:9c:b2:cc:c4: 8d:6e:c4:29:20:aa:1b:5f:03:f9:46:6e:62:de:e8: 09:9a:3d:2a:b1:2e:23:75:9d:07:7c:76:b9:08:f6: 60:b8:26:58:25:22:a6:d5:43:e7:7c:e5:a4:84:37: eb:a9:f8:b4:e8:72:7d:55:e7:0e:da:16:15:da:a2: 4f:86:c2:cc:e5:d8:a2:1a:63:e9:c2:76:c0:85:c9: 0d:14:53:40:9d:99:df:69:d6:8d:56:cb:7d:af:73: b3:4c:cb:62:eb:4b:65:fb:c3:ff:ed:0e:3e:29:a3: 5e:5c:cc:12:40:41:64:dd:74:33:3f:36:2d:2b:01: 26:b2:c4:e2:b7:4d:03:c9:24:ac:d7:aa:1d:f5:bf: 4d:e2:53:9c:dc:e1:1a:4b:62:a1:a4:94:bb:fd:49: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:F2:39:42:23:98:FF:68:AA:1F:17:FA:33:F0:E2:E4:87:D4:78 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6d:7e:28:8b:c8:2c:ab:aa:24:80:bc:37:f9:26:76:b2:27: 6d:35:b0:83:d1:fc:73:3a:a1:1b:ac:f2:fd:cb:01:14:9a:30: 94:70:8d:9a:56:28:cd:8c:c1:59:02:8d:89:5b:cd:44:0d:7f: ec:e7:83:b3:93:70:8a:a9:b0:d2:a9:3a:01:09:51:10:a8:70: 66:a4:5a:6d:ad:47:6e:87:4f:af:a8:12:48:c1:82:8b:93:6a: e6:d7:16:8c:86:9f:ed:01:53:ae:a8:fd:be:22:86:1c:8d:f4: 8f:d1:32:bd:7e:f8:58:16:98:ae:7c:23:71:22:52:a0:e2:81: e3:a9:5f:ec:8a:92:07:37:c0:9b:7b:e3:9b:0d:ad:77:9b:bd: e7:d5:70:6c:c5:63:53:3b:76:d5:d1:70:5b:2e:4c:87:90:85: 2b:0e:7d:d1:5f:3d:a4:3c:71:a8:a3:75:cf:e7:7b:34:cf:b6: 57:54:76:5e:b4:6f:ac:85:97:12:06:98:35:0e:a1:3c:7b:79: e0:a1:5b:f9:9e:7e:54:d3:57:7a:9d:69:06:ea:f8:d2:e5:25: fa:ff:46:77:04:20:b9:d9:a7:5d:d7:3a:62:11:02:5c:2f:e7: fe:1c:66:3d:a3:d2:1a:94:b9:73:6f:02:76:39:d6:b6:90:79: 04:80:20:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjYwODIwMjEyMzU4WhcNMjYwODI3MjEyMzU4WjAYMRYwFAYD VQQDEw02YTg3NzA2ZS05NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxZLjYC/i5IVn+pcfZR3Lpqg2sxooCg0JMp6Fdef2sHsrlC8+fEDpX845cXW rHBy4L8gOjDZ9n4b48Fg5dSjWF8j2IKgkLQCCVMPO3b9WCSMf4jK3r7/Z6JbDmv2 b9SNvFFzFZyyzMSNbsQpIKobXwP5Rm5i3ugJmj0qsS4jdZ0HfHa5CPZguCZYJSKm 1UPnfOWkhDfrqfi06HJ9VecO2hYV2qJPhsLM5diiGmPpwnbAhckNFFNAnZnfadaN Vst9r3OzTMti60tl+8P/7Q4+KaNeXMwSQEFk3XQzPzYtKwEmssTit00DySSs16od 9b9N4lOc3OEaS2KhpJS7/UlDFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdw8jlC I5j/aKofF/oz8OLkh9R4MB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ21+KIvILKuqJIC8N/kmdrInbTWwg9H8czqhG6zy/csBFJowlHCNmlYozYzB WQKNiVvNRA1/7OeDs5Nwiqmw0qk6AQlREKhwZqRaba1HbodPr6gSSMGCi5Nq5tcW jIaf7QFTrqj9viKGHI30j9EyvX74WBaYrnwjcSJSoOKB46lf7IqSBzfAm3vjmw2t d5u959VwbMVjUzt21dFwWy5Mh5CFKw590V89pDxxqKN1z+d7NM+2V1R2XrRvrIWX EgaYNQ6hPHt54KFb+Z5+VNNXep1pBur40uUl+v9GdwQgudmnXdc6YhECXC/n/hxm PaPSGpS5c28CdjnWtpB5BIAgzQ== -----END CERTIFICATE-----Generated at Thu Aug 20 23:36:09 2026 by rpki-client