$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: yeOKwy3T8BDbUpVqiNJfSCFx752XzSQGYzNYMcKzOn8= Subject key identifier: E0:8C:86:CA:A7:24:56:85:18:D7:A3:9C:9F:D1:22:18:AC:67:BA:6D Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 0273 Signing time: Sat 05 Sep 2026 01:59:58 +0000 Manifest this update: Sat 05 Sep 2026 01:59:57 +0000 Manifest next update: Sat 12 Sep 2026 01:59:57 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: OA10eaS5Ri4yi37eapI6lNmaZ0fa8+iHS30HPJ5qkaI=) 2: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: SmxK1GgjoBjC23E2cMN3xNRhJXyAe9oj/ORTb6kLl1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 01:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Sep 5 01:59:57 2026 GMT Not After : Sep 12 01:59:57 2026 GMT Subject: CN=6a9b779e-3bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5e:37:a6:de:e0:5d:72:93:cf:21:12:47:13: e4:42:f1:53:7c:02:4e:a8:fc:2e:4c:7e:78:dd:ca: a1:7d:ba:51:ae:d9:5f:83:61:0c:9c:c7:f8:76:f0: 5b:db:fd:20:dd:05:0f:1e:da:54:94:e8:c6:da:92: d6:78:2f:7c:46:d9:16:e6:de:f8:97:82:61:c3:c8: 3f:35:84:7d:c5:b5:3c:22:49:95:a3:bf:5f:da:c1: 9d:ca:cc:29:bd:78:69:54:ff:e5:ab:24:d4:7d:e8: 43:35:95:23:9d:47:bf:fd:0f:29:c4:91:99:72:3a: 47:c2:68:5d:2d:01:9f:19:6b:ae:98:90:ae:62:c2: 49:ed:ee:c2:58:56:89:38:a6:35:4f:eb:3b:f0:f1: f7:1b:ff:05:a7:45:d1:29:b3:46:68:2a:ae:c1:2b: 27:e4:41:cd:87:57:6c:a1:50:21:a1:69:88:08:da: da:ce:ac:31:bc:4a:31:51:2b:1e:1c:aa:13:c3:6a: 3b:a0:f5:5e:0b:45:56:d4:24:ed:92:50:20:8c:12: ad:87:9f:5e:d9:0d:f0:85:e8:99:71:09:66:8b:f8: b1:03:2e:47:a7:72:fb:aa:6c:a1:82:4e:0e:61:8e: 6c:2d:af:5d:ab:4b:4a:41:3d:08:4e:92:a9:c5:c1: 4b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8C:86:CA:A7:24:56:85:18:D7:A3:9C:9F:D1:22:18:AC:67:BA:6D X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:61:b4:fa:b5:1c:fe:7d:17:76:4a:87:d8:24:36:87:5c:a1: 7a:e3:19:71:7e:19:7c:33:09:47:c7:bc:79:15:1b:e6:84:7d: b2:96:9f:5a:4c:c0:91:d3:76:43:69:91:fb:b2:d8:70:8e:8d: 21:9e:f8:2f:56:66:5c:6c:3d:87:86:63:f3:45:75:00:d7:84: cc:c5:ca:69:df:1f:ce:ee:56:69:95:14:11:52:ba:a3:2d:34: 56:07:ac:b5:cb:2b:d7:41:06:9f:c0:d0:63:e0:46:36:32:37: 52:a1:af:d0:33:7e:89:68:81:10:dc:c3:fc:c4:9f:3a:be:d5: dd:86:00:a3:f8:5c:c6:7e:01:da:90:0e:30:ac:17:4f:e0:8a: 3a:bb:a2:a9:e3:62:f7:7a:dc:06:55:f2:71:45:d7:12:ec:20: 78:9a:8a:29:7a:17:aa:32:e7:62:db:a1:67:3b:af:f9:b6:b4: a0:d2:07:d0:bd:44:1b:ec:c4:6c:27:69:2a:ea:e4:72:b5:91: fd:79:a4:61:80:10:2b:e2:b3:c8:59:5a:a8:ea:6b:ce:c6:bd: 52:6d:c6:22:90:b3:4b:ed:a0:1c:c7:f0:b6:41:28:f8:6b:ab: e1:c0:c8:76:3a:5c:95:89:ca:2e:ca:fc:7a:2e:12:eb:85:50: 1a:2f:cf:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjYwOTA1MDE1OTU3WhcNMjYwOTEyMDE1OTU3WjAYMRYwFAYD VQQDEw02YTliNzc5ZS0zYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4143pt7gXXKTzyESRxPkQvFTfAJOqPwuTH543cqhfbpRrtlfg2EMnMf4dvBb 2/0g3QUPHtpUlOjG2pLWeC98RtkW5t74l4Jhw8g/NYR9xbU8IkmVo79f2sGdyswp vXhpVP/lqyTUfehDNZUjnUe//Q8pxJGZcjpHwmhdLQGfGWuumJCuYsJJ7e7CWFaJ OKY1T+s78PH3G/8Fp0XRKbNGaCquwSsn5EHNh1dsoVAhoWmICNrazqwxvEoxUSse HKoTw2o7oPVeC0VW1CTtklAgjBKth59e2Q3wheiZcQlmi/ixAy5Hp3L7qmyhgk4O YY5sLa9dq0tKQT0ITpKpxcFLGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCMhsqn JFaFGNejnJ/RIhisZ7ptMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVGG0+rUc/n0XdkqH2CQ2h1yheuMZcX4ZfDMJR8e8eRUb5oR9spafWkzAkdN2 Q2mR+7LYcI6NIZ74L1ZmXGw9h4Zj80V1ANeEzMXKad8fzu5WaZUUEVK6oy00Vges tcsr10EGn8DQY+BGNjI3UqGv0DN+iWiBENzD/MSfOr7V3YYAo/hcxn4B2pAOMKwX T+CKOruiqeNi93rcBlXycUXXEuwgeJqKKXoXqjLnYtuhZzuv+ba0oNIH0L1EG+zE bCdpKurkcrWR/XmkYYAQK+KzyFlaqOprzsa9Um3GIpCzS+2gHMfwtkEo+Gur4cDI djpclYnKLsr8ei4S64VQGi/P+A== -----END CERTIFICATE-----Generated at Sat Sep 5 12:35:51 2026 by rpki-client