$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: ESkTjtvtbXg/xelaXXz5CXXplYhVUVZppCLOQq5V/EY= Subject key identifier: B2:9A:78:71:BB:16:F3:B6:B8:3D:C8:B4:B2:E5:02:A1:E3:69:BD:9D Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0CDE Signing time: Fri 02 Oct 2026 18:45:31 +0000 Manifest this update: Fri 02 Oct 2026 18:45:31 +0000 Manifest next update: Fri 09 Oct 2026 18:45:31 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: /9RqFxanzdGoWJBUhPabpQqPFnTWzAoXOBzJxOVeOOo=) 2: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: J2Vubqi8ic0NqlP+qdXl9htU+adGeTvh1ITR3W4ptX4=) 3: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nEmNA11Dyl7nTFmnZC9S6fy/8rzvC71ench9nRz81iE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Oct 2 18:45:31 2026 GMT Not After : Oct 9 18:45:31 2026 GMT Subject: CN=6abffbcb-4bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:65:4d:71:82:6f:a6:33:28:3b:a1:a1:16: df:33:b3:69:7c:3a:c6:08:6a:be:23:8f:1f:23:4b: ab:6e:b1:cf:21:9b:e5:75:f8:6f:0b:26:3b:dc:5d: 75:7c:ad:88:dd:6e:2a:c2:b7:5d:ee:e0:ee:83:ac: 06:b9:fa:9e:50:70:7c:fd:c0:c1:54:c7:ab:cd:19: 95:e3:2b:e9:37:dd:a9:4b:59:5c:2d:61:d4:36:d7: 27:aa:b5:86:f0:72:38:f9:fe:0d:64:cc:3f:db:9b: ac:23:08:fd:af:fd:8f:3b:64:14:24:86:1d:de:b2: 6a:1c:85:9f:53:28:b8:30:c2:a1:cd:47:3b:c1:5c: ad:b2:42:05:03:1d:d0:32:9a:68:7a:0a:9f:d6:58: df:b4:e0:72:5b:d5:9f:6a:6b:69:07:78:77:0b:c9: 54:cc:aa:80:ea:17:5f:3d:fc:7f:35:62:8a:c5:c4: e5:56:7c:86:d5:67:f6:0d:71:d3:5c:51:ee:c9:dd: 29:a3:fa:85:3b:36:71:ef:01:c2:e3:b9:8e:d1:ed: b0:9d:ba:be:19:49:6f:98:9a:02:bf:ff:72:89:b7: 4d:14:ef:6e:69:88:72:41:d5:63:7f:33:77:cc:bc: 5d:13:23:8c:82:ce:01:33:00:d5:48:73:2e:fe:dc: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9A:78:71:BB:16:F3:B6:B8:3D:C8:B4:B2:E5:02:A1:E3:69:BD:9D X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fe:d5:80:ca:ec:f2:5b:66:aa:8e:6b:ba:d3:d5:92:15:7e: b8:e2:fc:79:ec:8e:ed:f5:66:2a:a2:ad:7f:66:77:1f:ae:db: c8:d3:63:d7:41:d3:4b:0b:10:80:92:84:b1:58:cc:58:81:28: 80:d0:70:63:1f:ed:ff:d3:8e:dd:f5:cf:e6:ba:d7:3c:9f:41: 39:7e:df:cf:6e:3e:f6:de:5e:e5:8f:7f:41:c7:a6:1f:38:63: 38:db:0c:c0:01:c7:83:04:16:af:ef:66:1d:e9:1b:99:97:9b: 9c:4a:9a:d3:6d:21:1e:42:5d:ae:22:5d:ad:0d:46:a6:48:6d: 7c:53:4c:5a:52:3d:2b:63:3f:cb:f4:9d:cb:4c:79:90:44:ff: b4:21:63:5f:61:2f:b3:a7:84:33:ab:84:68:3b:33:45:63:ab: 75:bb:a5:27:b3:2b:6b:a8:c0:a3:67:21:a3:fb:7c:3a:0e:38: 5d:f9:f6:8b:23:87:33:b3:e7:b5:ff:16:ac:99:0a:87:f4:8f: cd:8c:2b:5c:32:8c:45:e4:f2:ed:26:ec:b3:d0:eb:55:68:93: a8:b2:27:d7:a0:d6:2c:a8:29:1f:ac:5c:c1:9a:a3:2c:72:df: 5c:ba:81:b5:a6:bc:f8:83:80:8d:b6:48:3d:86:82:97:20:fb: d6:d2:03:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjYxMDAyMTg0NTMxWhcNMjYxMDA5MTg0NTMxWjAYMRYwFAYD VQQDEw02YWJmZmJjYi00YmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8JlTXGCb6YzKDuhoRbfM7NpfDrGCGq+I48fI0urbrHPIZvldfhvCyY73F11 fK2I3W4qwrdd7uDug6wGufqeUHB8/cDBVMerzRmV4yvpN92pS1lcLWHUNtcnqrWG 8HI4+f4NZMw/25usIwj9r/2PO2QUJIYd3rJqHIWfUyi4MMKhzUc7wVytskIFAx3Q Mppoegqf1ljftOByW9WfamtpB3h3C8lUzKqA6hdfPfx/NWKKxcTlVnyG1Wf2DXHT XFHuyd0po/qFOzZx7wHC47mO0e2wnbq+GUlvmJoCv/9yibdNFO9uaYhyQdVjfzN3 zLxdEyOMgs4BMwDVSHMu/tyL6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKaeHG7 FvO2uD3ItLLlAqHjab2dMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW/7VgMrs8ltmqo5rutPVkhV+uOL8eeyO7fVmKqKtf2Z3H67byNNj10HTSwsQ gJKEsVjMWIEogNBwYx/t/9OO3fXP5rrXPJ9BOX7fz24+9t5e5Y9/QcemHzhjONsM wAHHgwQWr+9mHekbmZebnEqa020hHkJdriJdrQ1GpkhtfFNMWlI9K2M/y/Sdy0x5 kET/tCFjX2Evs6eEM6uEaDszRWOrdbulJ7Mra6jAo2cho/t8Og44Xfn2iyOHM7Pn tf8WrJkKh/SPzYwrXDKMReTy7Sbss9DrVWiTqLIn16DWLKgpH6xcwZqjLHLfXLqB taa8+IOAjbZIPYaClyD71tID5g== -----END CERTIFICATE-----Generated at Sun Oct 4 12:57:45 2026 by rpki-client