$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft File: tsy15DHkUBkVDE83IfT4Cm8u19s.mft (raw, json) Hash identifier: MGdPlSff0ULznwdy4E/wwDpbCEJiFzfLIZ8ngrXnUG8= Subject key identifier: D8:9D:3B:E3:66:4D:88:9D:07:88:B2:92:03:26:A0:55:06:19:AD:05 Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft Manifest number: 0829 Signing time: Sat 24 Oct 2026 21:12:48 +0000 Manifest this update: Sat 24 Oct 2026 21:12:47 +0000 Manifest next update: Sat 31 Oct 2026 21:12:47 +0000 Files and hashes: 1: tsy15DHkUBkVDE83IfT4Cm8u19s.crl (hash: /U5jWGR83jnAH4j4MQYbDxVaJ1ELwk7QxCTsEoWOWHo=) 2: 9C42D762163D11F19AE99B533D3D8C67.roa (hash: bXkxRodSVPRMA9XhTrb2GxuFt/+D/R2TC7v8l62JmaQ=) 3: 2574266EAA4911F09A71D135C4F9AE02.roa (hash: Yq5oiH0EmhCavwCaD+J0apl3DbYBY7zFMqkNNlPV3Kc=) 4: C098EF8E499811EFBB8C701EC4F9AE02.roa (hash: uB385efdqTb3/LugdWT8rNVy3FgK+9CSA2XsUkIjqtY=) 5: E181BAA059DD11EF9C39750CC4F9AE02.roa (hash: wNwawcsHbM0YHaF0zdZbSvwLiLwGJzedMyT2pC2bOpg=) 6: 48EFF31A621B11EF8FB5117AC4F9AE02.roa (hash: 67g+qKVwsfhFWOuOMEWITQ1nmAIPrEarQJhLRzQm0IY=) 7: BC04E5745E4E11F082F8D529C4F9AE02.roa (hash: +n6sT0DNVEtTay2c7eDEYpMLVSmyIfomBjZvDH6GPyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 21:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB Validity Not Before: Oct 24 21:12:47 2026 GMT Not After : Oct 31 21:12:47 2026 GMT Subject: CN=6add1f50-ee8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:96:6a:ab:f4:a8:c9:c9:ed:92:92:7e:94:21: dd:38:c2:08:76:89:c5:81:77:3d:2b:4a:df:68:ef: c6:85:41:19:87:bf:7b:fa:4a:3d:09:b4:c1:ca:3c: f5:2b:9f:cd:c0:58:5f:26:e8:ad:d8:ed:f2:1e:e1: 6b:bd:7b:ad:db:29:78:ab:47:64:22:22:f3:0e:9d: ee:b8:ca:b5:64:0e:ef:f5:f2:3c:9e:39:78:d8:df: 8c:09:f6:3a:46:b1:3b:c1:67:27:f8:65:1d:14:cf: 8c:ba:72:c7:f4:ea:c2:39:d8:c0:af:5e:0b:e1:17: 3a:96:13:28:da:9a:b7:2c:e7:b1:16:4d:2f:2d:93: fa:9a:67:d6:97:53:58:37:d5:e7:a1:6a:c9:f3:ae: 21:eb:d3:a0:1c:ec:1b:f9:88:8f:59:2b:8b:b5:59: d0:8e:bf:2e:db:d5:2a:8d:ce:24:6a:f5:b3:81:47: ae:ed:60:92:ab:43:77:b7:63:07:1c:32:21:8b:f9: 82:24:8b:d5:1b:55:a7:a6:2f:08:89:44:1f:f9:00: 33:93:20:17:b7:ea:10:a9:a5:44:81:88:20:33:9b: 8b:ab:63:43:7a:cc:72:a8:da:4c:05:ea:fe:8b:58: 1a:b3:ac:50:67:ad:fd:c0:57:9f:3b:bd:17:83:36: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9D:3B:E3:66:4D:88:9D:07:88:B2:92:03:26:A0:55:06:19:AD:05 X509v3 Authority Key Identifier: keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:21:b3:69:84:a9:88:9c:3d:60:7d:bf:dd:14:65:f5:2b:0c: 89:76:19:f0:fd:fb:09:4a:ec:51:34:b1:07:49:06:5c:15:39: c7:3d:92:c0:ab:a5:9b:b8:5a:b1:07:79:17:32:b5:a1:bb:92: 93:3e:30:58:fd:e1:8b:8f:1d:89:bb:3e:f2:e6:3a:cc:48:b4: a4:3d:a7:40:53:aa:8b:10:92:a6:65:0a:f8:e9:02:17:94:c2: 58:9b:a8:47:4a:bd:58:8d:11:4f:9d:25:f5:28:8c:2b:e9:58: 97:e4:cd:07:65:a3:6e:08:3f:e4:4e:3f:0d:d3:43:09:4e:68: 1e:bb:c8:79:07:e7:ab:36:a9:0e:2b:b3:a7:b7:9c:5a:d3:d5: 2d:ef:90:de:1a:1c:68:63:d1:b3:4a:4d:35:ff:9d:8c:e0:e3: 5a:f3:ba:d3:cd:e7:5b:40:7d:42:3a:52:d9:d8:51:01:0c:e7: 36:f6:41:f4:64:45:6e:c7:73:1a:1a:a4:84:19:ff:f3:f1:6b: e6:65:c3:25:d0:24:b9:a1:47:c0:75:de:e5:c3:01:65:aa:7b: 6f:16:50:2a:58:54:3d:e2:17:c7:62:5a:2c:61:9a:1a:09:11: b2:90:1f:23:af:35:e0:0a:44:4f:c1:4a:08:c5:fe:c2:08:63: 81:82:07:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MTMxMTAvBgNVBAUTKEI2Q0NCNUU0MzFFNDUwMTkxNTBDNEYzNzIxRjRGODBB NkYyRUQ3REIwHhcNMjYxMDI0MjExMjQ3WhcNMjYxMDMxMjExMjQ3WjAYMRYwFAYD VQQDEw02YWRkMWY1MC1lZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pZqq/SoycntkpJ+lCHdOMIIdonFgXc9K0rfaO/GhUEZh797+ko9CbTByjz1 K5/NwFhfJuit2O3yHuFrvXut2yl4q0dkIiLzDp3uuMq1ZA7v9fI8njl42N+MCfY6 RrE7wWcn+GUdFM+MunLH9OrCOdjAr14L4Rc6lhMo2pq3LOexFk0vLZP6mmfWl1NY N9XnoWrJ864h69OgHOwb+YiPWSuLtVnQjr8u29Uqjc4kavWzgUeu7WCSq0N3t2MH HDIhi/mCJIvVG1Wnpi8IiUQf+QAzkyAXt+oQqaVEgYggM5uLq2NDesxyqNpMBer+ i1gas6xQZ639wFefO70XgzZaBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNidO+Nm TYidB4iykgMmoFUGGa0FMB8GA1UdIwQYMBaAFLbMteQx5FAZFQxPNyH0+ApvLtfb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUxMy9DMkJBNkJGMDQy MDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VCa1ZERTgzSWZUNENtOHUx OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzeTE1REhrVUJrVkRFODNJZlQ0Q204dTE5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUxMy9DMkJBNkJGMDQyMDExMUVCQUJGRDVFNjBDNEY5QUUwMi90c3kxNURIa1VC a1ZERTgzSWZUNENtOHUxOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOiGzaYSpiJw9YH2/3RRl9SsMiXYZ8P37CUrsUTSxB0kGXBU5xz2SwKulm7ha sQd5FzK1obuSkz4wWP3hi48dibs+8uY6zEi0pD2nQFOqixCSpmUK+OkCF5TCWJuo R0q9WI0RT50l9SiMK+lYl+TNB2Wjbgg/5E4/DdNDCU5oHrvIeQfnqzapDiuzp7ec WtPVLe+Q3hocaGPRs0pNNf+djODjWvO6083nW0B9QjpS2dhRAQznNvZB9GRFbsdz GhqkhBn/8/Fr5mXDJdAkuaFHwHXe5cMBZap7bxZQKlhUPeIXx2JaLGGaGgkRspAf I6814ApET8FKCMX+wghjgYIHiw== -----END CERTIFICATE-----Generated at Mon Oct 26 12:43:39 2026 by rpki-client