$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: nRl+heV+QtITle0+qUOkmLDjJKuty/FpSXH/R/C7GSc= Subject key identifier: DC:10:F0:A0:98:27:3A:73:2E:BB:81:62:17:58:1A:78:0F:3E:AB:2F Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0B25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0B14 Signing time: Sun 04 Oct 2026 19:22:04 +0000 Manifest this update: Sun 04 Oct 2026 19:22:04 +0000 Manifest next update: Sun 11 Oct 2026 19:22:04 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: AdeHQpsbsZnGF6cdlZSQYQm6AQX1rn8FuyJ7Smos0Xg=) 2: 1220DC24BC3611F1AD36CE244611F970.roa (hash: VgRZEEyO2Pbsz1Shqg6kmDZygjWZONNdXmBxf175m9E=) 3: 90456E26BC3611F1815B1C334611F970.roa (hash: wJHixHXfcZ8guV5IeCX2a4J5Iq0EmzlZ8/c9fgKTM4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2853 (0xb25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Oct 4 19:22:04 2026 GMT Not After : Oct 11 19:22:04 2026 GMT Subject: CN=6ac2a75c-abaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:c0:31:c3:7a:15:c9:dc:7b:1a:b2:f1:e3: 7f:5b:f0:a8:41:68:8f:80:95:18:40:df:74:a4:30: e0:ff:ca:98:25:d9:06:d5:0f:da:4d:ad:a9:15:88: b7:34:a4:8c:90:82:2a:2a:2b:86:f2:f9:9c:f4:22: 2d:9b:22:e7:41:99:5c:e2:a5:98:95:22:8a:86:6d: 65:b1:c2:37:b1:17:13:5a:c6:af:90:40:21:4a:99: 1b:20:6f:48:28:71:b6:fb:7a:67:e4:23:83:c3:95: d4:bd:d7:ee:5b:1a:31:ee:2d:7b:18:eb:53:e4:8b: 61:e0:db:4a:2d:0d:ac:fa:71:e9:e3:09:e5:19:dd: ff:4a:29:66:6f:d6:46:2e:aa:68:19:41:cc:13:c4: 44:c1:12:d6:10:4e:c4:88:68:ca:bd:e5:c9:eb:ad: 0e:8c:ec:f7:0f:80:12:bf:50:2e:fa:a6:de:29:8e: be:af:c6:78:97:f6:2b:33:1b:06:8c:cb:e2:df:1a: c9:b7:e6:8f:7f:b2:e9:9b:e2:63:a8:7b:c3:1c:ec: 26:ba:ea:b8:09:94:b0:f8:9f:2e:a5:c6:f2:d3:12: ad:25:4e:67:4c:fa:d2:64:4e:cb:35:50:10:1e:7e: 5c:43:c0:e1:25:54:b2:fe:7e:6b:a2:eb:33:95:37: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:10:F0:A0:98:27:3A:73:2E:BB:81:62:17:58:1A:78:0F:3E:AB:2F X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:1b:df:a1:cc:91:d2:5f:1e:78:1d:4e:ba:34:54:9f:83:3c: 75:8a:2e:e9:ce:fc:d1:b5:f5:b0:81:f2:e9:e0:bd:87:96:ea: d8:90:bd:35:71:cc:cf:2d:38:a5:89:53:fa:3d:da:f6:79:2e: e6:07:31:3a:e7:7f:68:fa:43:6a:86:8a:5d:46:26:38:d2:e0: 52:6c:26:62:ed:19:0b:1b:1d:07:06:97:4c:dc:b3:a0:3e:a7: 68:01:e7:eb:ec:f3:c0:40:35:70:2c:30:17:27:7c:2c:7d:fc: 06:60:a8:b0:34:3c:6a:bc:b7:b9:51:f0:df:f4:c2:fc:75:86: b1:03:84:11:ef:6d:51:92:c0:55:dc:00:f3:20:ef:14:48:b8: d6:42:76:da:b2:3c:62:24:60:d5:96:55:c6:09:3b:2d:fd:7b: 79:56:1c:7c:2c:9d:73:cf:43:4d:5a:44:06:15:16:e4:db:b8: 8a:c8:0a:28:89:b7:6a:02:38:1a:09:e7:16:29:b0:5a:48:b3: 05:84:3d:a5:c0:09:28:c2:97:0f:a5:e8:a0:6c:58:d2:5d:5d: 20:f7:ec:30:00:0b:1c:cf:43:a4:32:cc:0b:47:f5:28:6b:fe: 51:51:dc:cc:ec:62:e5:a3:49:2c:43:69:68:bd:a0:8e:28:55: fb:96:13:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjYxMDA0MTkyMjA0WhcNMjYxMDExMTkyMjA0WjAYMRYwFAYD VQQDEw02YWMyYTc1Yy1hYmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnD/AMcN6Fcncexqy8eN/W/CoQWiPgJUYQN90pDDg/8qYJdkG1Q/aTa2pFYi3 NKSMkIIqKiuG8vmc9CItmyLnQZlc4qWYlSKKhm1lscI3sRcTWsavkEAhSpkbIG9I KHG2+3pn5CODw5XUvdfuWxox7i17GOtT5Ith4NtKLQ2s+nHp4wnlGd3/Silmb9ZG LqpoGUHME8REwRLWEE7EiGjKveXJ660OjOz3D4ASv1Au+qbeKY6+r8Z4l/YrMxsG jMvi3xrJt+aPf7Lpm+JjqHvDHOwmuuq4CZSw+J8upcby0xKtJU5nTPrSZE7LNVAQ Hn5cQ8DhJVSy/n5rouszlTf4gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwQ8KCY JzpzLruBYhdYGngPPqsvMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYxvfocyR0l8eeB1OujRUn4M8dYou6c780bX1sIHy6eC9h5bq2JC9NXHMzy04 pYlT+j3a9nku5gcxOud/aPpDaoaKXUYmONLgUmwmYu0ZCxsdBwaXTNyzoD6naAHn 6+zzwEA1cCwwFyd8LH38BmCosDQ8ary3uVHw3/TC/HWGsQOEEe9tUZLAVdwA8yDv FEi41kJ22rI8YiRg1ZZVxgk7Lf17eVYcfCydc89DTVpEBhUW5Nu4isgKKIm3agI4 GgnnFimwWkizBYQ9pcAJKMKXD6XooGxY0l1dIPfsMAALHM9DpDLMC0f1KGv+UVHc zOxi5aNJLENpaL2gjihV+5YTwg== -----END CERTIFICATE-----Generated at Tue Oct 6 18:15:31 2026 by rpki-client