$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft File: TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft (raw, json) Hash identifier: LeRAAqtx/plNAyrJR+VEyNiBARNNJ59by1zWsVVzRK8= Subject key identifier: 67:0C:AF:AC:2A:87:96:A8:C3:AB:B7:57:90:93:8B:8A:AF:DC:9D:E6 Authority key identifier: 4D:62:DD:EF:19:BB:45:2F:14:19:56:10:08:CB:12:1C:82:99:20:DD Certificate issuer: /CN=A917A95A/serialNumber=4D62DDEF19BB452F1419561008CB121C829920DD Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft Manifest number: 09 Signing time: Thu 17 Sep 2026 09:36:07 +0000 Manifest this update: Thu 17 Sep 2026 09:36:07 +0000 Manifest next update: Thu 24 Sep 2026 09:36:07 +0000 Files and hashes: 1: TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl (hash: e9+bgOVLqWMuoHM/HYC/fnRvEPqucz3V57EQkgeHkdI=) 2: 8C6619A0ABFF11F19384BB506B11F970.roa (hash: fwPkncf6zvafOH+RT4hBG8YBRTtfW1is9bJpin0TTsA=) 3: 8D6DE39AABFB11F1BD809E3B6A11F970.roa (hash: 0jsLrFd0r2t1mnTgi3WM/0wopvNFV+Zm/9y/PiTR4bk=) 4: 495EADB4ABFC11F1817FA89C6A11F970.roa (hash: FBNqPMPTEYHVvGU77MxzJrj7KAVcUXffGlg20+PyVOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A95A, serialNumber=4D62DDEF19BB452F1419561008CB121C829920DD Validity Not Before: Sep 17 09:36:07 2026 GMT Not After : Sep 24 09:36:07 2026 GMT Subject: CN=6aabb487-21c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:e1:7c:e4:00:e3:53:5a:e5:bb:36:fb:90: a5:ee:75:33:48:99:75:d6:2a:d5:2e:ad:f4:80:5b: a0:97:8b:2c:a6:42:6a:72:b6:ed:60:41:8c:9f:de: 4b:ec:88:b5:ac:c7:bf:b3:53:84:e6:02:ff:6b:71: b9:49:12:91:08:44:9b:6a:c3:d4:00:2f:75:a6:cb: 1e:41:b7:df:8d:cb:4e:a0:04:cf:08:0e:ba:78:75: 01:f3:42:af:e5:6e:2c:65:2c:5c:e6:43:cc:3c:5f: 0d:d3:3b:e9:cf:2c:b0:1c:c9:5b:9b:66:01:72:e0: 84:20:90:2a:df:6a:ce:6a:d0:f6:95:ad:4d:18:be: 13:37:14:bb:af:89:ea:2c:cd:1d:ea:57:01:a3:7a: 41:c4:c9:7d:97:ba:5c:ae:ba:7c:e4:b6:d9:3a:27: cd:ca:8c:9b:bb:6f:38:ba:df:76:2a:41:bf:8b:14: d4:16:ef:4f:3f:fc:a9:ef:6c:23:b9:ad:93:b8:f4: 9d:d9:78:fe:e5:f0:0b:7c:8c:51:0b:83:aa:01:d7: 04:4d:f0:2f:0f:39:3c:5e:ba:02:d5:d6:52:c1:ea: 73:80:7c:5d:31:d9:b1:19:2f:34:10:b1:4e:fa:98: 72:00:cc:6c:62:58:1d:34:28:d3:0f:27:b4:d1:58: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:AF:AC:2A:87:96:A8:C3:AB:B7:57:90:93:8B:8A:AF:DC:9D:E6 X509v3 Authority Key Identifier: keyid:4D:62:DD:EF:19:BB:45:2F:14:19:56:10:08:CB:12:1C:82:99:20:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a1:e5:f0:60:3b:81:23:fa:be:c3:5b:f7:4a:cd:a5:b6:3b: ef:16:53:87:d7:1d:e1:a8:f8:62:40:61:01:70:50:72:a5:cc: d2:64:27:15:bb:ac:52:ab:90:98:74:b5:bb:d6:86:2a:8f:a5: 76:84:b9:01:7b:c3:07:9b:13:86:76:4a:60:dc:38:74:22:43: 24:a2:6c:b9:f3:8e:37:f6:bf:09:26:d2:a2:af:71:4a:28:49: 6f:6e:45:50:5f:09:7a:6a:4e:6f:a9:8a:af:81:ba:b4:b3:83: 50:22:39:3f:0a:54:b9:7d:d0:d0:e6:f1:02:54:41:1f:fd:4d: 8b:b2:43:af:62:74:d1:22:a1:0b:6c:63:c5:db:d9:d9:f3:af: 54:ab:9f:7b:47:96:ae:e8:ca:e5:0d:6b:9c:d7:12:bc:df:b1: d0:0d:79:bd:83:d5:8e:15:b5:3f:ee:5b:1a:2a:46:bd:7c:eb: ed:2d:ea:49:d5:be:5c:6b:aa:4e:1e:86:98:6e:38:a4:c6:2a: 25:7c:0f:af:2b:82:10:da:13:f3:67:5f:df:eb:5f:51:b1:7f: 41:8a:0d:a7:23:de:24:fe:4f:b2:bd:d5:63:49:63:25:06:66: 03:e7:8c:7a:8b:d7:70:56:9a:96:12:e1:c3:c8:5c:7a:a6:a3: a5:e5:64:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTk1QTExMC8GA1UEBRMoNEQ2MkRERUYxOUJCNDUyRjE0MTk1NjEwMDhDQjEyMUM4 Mjk5MjBERDAeFw0yNjA5MTcwOTM2MDdaFw0yNjA5MjQwOTM2MDdaMBgxFjAUBgNV BAMTDTZhYWJiNDg3LTIxYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ieF85ADjU1rluzb7kKXudTNImXXWKtUurfSAW6CXiyymQmpytu1gQYyf3kvs iLWsx7+zU4TmAv9rcblJEpEIRJtqw9QAL3Wmyx5Bt9+Ny06gBM8IDrp4dQHzQq/l bixlLFzmQ8w8Xw3TO+nPLLAcyVubZgFy4IQgkCrfas5q0PaVrU0YvhM3FLuvieos zR3qVwGjekHEyX2Xulyuunzkttk6J83KjJu7bzi633YqQb+LFNQW708//KnvbCO5 rZO49J3ZeP7l8At8jFELg6oB1wRN8C8POTxeugLV1lLB6nOAfF0x2bEZLzQQsU76 mHIAzGxiWB00KNMPJ7TRWBWvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZwyvrCqH lqjDq7dXkJOLiq/cneYwHwYDVR0jBBgwFoAUTWLd7xm7RS8UGVYQCMsSHIKZIN0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBOTVBLzcyODRGQjI4QUJG QTExRjE5M0ZENUZBNDY5MTFGOTcwL1RXTGQ3eG03UlM4VUdWWVFDTXNTSElLWklO MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFdMZDd4bTdSUzhVR1ZZUUNNc1NISUtaSU4wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB OTVBLzcyODRGQjI4QUJGQTExRjE5M0ZENUZBNDY5MTFGOTcwL1RXTGQ3eG03UlM4 VUdWWVFDTXNTSElLWklOMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0oeXwYDuBI/q+w1v3Ss2ltjvvFlOH1x3hqPhiQGEBcFBypczSZCcVu6xSq5CY dLW71oYqj6V2hLkBe8MHmxOGdkpg3Dh0IkMkomy584439r8JJtKir3FKKElvbkVQ Xwl6ak5vqYqvgbq0s4NQIjk/ClS5fdDQ5vECVEEf/U2LskOvYnTRIqELbGPF29nZ 869Uq597R5au6MrlDWuc1xK837HQDXm9g9WOFbU/7lsaKka9fOvtLepJ1b5ca6pO HoaYbjikxiolfA+vK4IQ2hPzZ1/f619RsX9Big2nI94k/k+yvdVjSWMlBmYD54x6 i9dwVpqWEuHDyFx6pqOl5WS6 -----END CERTIFICATE-----Generated at Sat Sep 19 06:54:32 2026 by rpki-client