$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft File: tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft (raw, json) Hash identifier: Oc7Gh88F08gk8CFuFLLjYyw9iWt6KB3HP1wCBi/qfQU= Subject key identifier: F6:FF:35:46:3C:96:3B:BD:22:B4:3C:EC:1D:78:32:86:11:A3:1F:11 Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft Manifest number: 0207 Signing time: Thu 01 Oct 2026 04:03:28 +0000 Manifest this update: Thu 01 Oct 2026 04:03:27 +0000 Manifest next update: Thu 08 Oct 2026 04:03:27 +0000 Files and hashes: 1: tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl (hash: Gm2j8xKk/9FbzRFHHOpgoI0kBrK2+qU8SHr4iK+J7iI=) 2: ACC45B54619411F19AF0775A8347A888.roa (hash: JuZvLZgp7cBMbz5SArZAcdTlGbnZq2/Za1QddcsY5rg=) 3: 79E25D40601211F1AD9319218A47A888.roa (hash: q30SnaEDLTLFEYzr3C7O98SoFArm/k9dGLI4gYwGx7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 04:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Validity Not Before: Oct 1 04:03:27 2026 GMT Not After : Oct 8 04:03:27 2026 GMT Subject: CN=6abddb90-0a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:ed:f0:8c:f2:cd:78:c3:92:2e:e3:9f:ee: 96:a0:5a:6c:dc:7b:e2:84:a7:f8:f1:5f:5d:3c:2f: fb:5b:d9:b9:7f:28:ab:25:a9:5b:00:2a:56:53:2d: 4e:01:df:6e:af:14:78:c9:12:52:6a:53:52:bc:bb: 3a:7d:79:bd:31:d1:da:c6:75:40:9e:31:56:f1:eb: 36:a1:88:f8:e5:1f:11:30:f4:d6:83:94:7c:ae:9a: a5:01:57:00:98:3f:ee:ce:de:ed:44:cd:5a:a3:47: 0e:ab:c5:20:bb:c7:68:10:12:e5:06:1e:5f:d2:3d: 3d:ad:25:97:6c:7a:79:62:b1:b0:fb:c3:f3:ba:22: 2f:a2:6a:39:0b:3e:9b:f7:6a:a1:e5:af:78:7b:45: 75:54:ad:51:a1:c9:0d:62:36:08:76:a8:e7:c0:ae: 43:ba:59:b9:a9:7c:d4:4e:b1:06:cb:cb:1b:5d:3d: 36:9b:a4:c8:df:b1:57:23:b1:42:f9:3c:d5:af:a7: c9:53:39:b2:d3:3c:a2:25:d1:c7:29:7b:9d:a4:96: da:62:4b:0a:0b:fa:e0:df:7a:01:78:47:06:07:ea: 7d:b9:25:1d:ef:50:07:bb:1d:70:9c:84:d9:e7:c3: e5:70:a7:dd:38:36:dc:f1:a3:1b:f3:cc:8c:00:9e: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FF:35:46:3C:96:3B:BD:22:B4:3C:EC:1D:78:32:86:11:A3:1F:11 X509v3 Authority Key Identifier: keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a3:ba:b4:be:48:8d:5f:ac:98:e5:b4:79:1c:75:4d:83:15: 6d:c8:e9:5e:ba:ba:55:ea:a4:bd:ec:c1:09:d0:41:af:ed:68: 56:21:23:b6:de:8b:3a:64:43:14:97:aa:fa:9a:dd:27:9c:dc: dd:e5:e6:95:4a:4a:75:8f:25:d4:b1:bd:b4:d3:43:3a:48:5e: 90:48:9c:93:c6:ce:6b:63:49:04:9e:a4:82:0d:e2:b1:d4:5d: 83:47:d8:cc:13:51:19:2b:c4:5a:05:a2:ab:5c:46:d0:29:1f: 64:63:f5:e6:32:82:60:73:9b:a5:ab:37:8d:da:0d:fa:de:61: e2:87:11:d6:6a:d7:bb:1e:dd:9a:a1:4a:17:e2:de:2a:22:c0: 90:f6:fd:72:f5:41:3f:90:7c:14:13:9a:a9:d0:03:d9:ef:b5: 8e:26:ff:01:a4:bd:a6:d9:fa:c3:87:21:16:48:dc:4b:ee:30: c7:18:88:26:e6:8d:d0:ab:55:c8:3f:a4:94:a8:d3:78:8d:7a: 9f:49:18:43:8b:bf:e7:e5:7a:55:77:57:73:8c:8a:d7:f9:48: 62:8a:30:33:6f:44:93:bb:16:87:01:78:98:8c:e9:d4:97:07: 1c:dd:92:9e:9a:53:4a:9a:46:19:8f:30:d3:9a:f2:d3:64:63: 44:00:aa:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKEI0ODY1RTNCRTlDNTY5RDJCOTNGMkMzNTFDQUIyNEQx NTA2QUFDMEQwHhcNMjYxMDAxMDQwMzI3WhcNMjYxMDA4MDQwMzI3WjAYMRYwFAYD VQQDEw02YWJkZGI5MC0wYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyD7t8IzyzXjDki7jn+6WoFps3HvihKf48V9dPC/7W9m5fyirJalbACpWUy1O Ad9urxR4yRJSalNSvLs6fXm9MdHaxnVAnjFW8es2oYj45R8RMPTWg5R8rpqlAVcA mD/uzt7tRM1ao0cOq8Ugu8doEBLlBh5f0j09rSWXbHp5YrGw+8PzuiIvomo5Cz6b 92qh5a94e0V1VK1RockNYjYIdqjnwK5Dulm5qXzUTrEGy8sbXT02m6TI37FXI7FC +TzVr6fJUzmy0zyiJdHHKXudpJbaYksKC/rg33oBeEcGB+p9uSUd71AHux1wnITZ 58PlcKfdODbc8aMb88yMAJ7rTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPb/NUY8 lju9IrQ87B14MoYRox8RMB8GA1UdIwQYMBaAFLSGXjvpxWnSuT8sNRyrJNFQaqwN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zNTcwREYyRUIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFkSzVQeXcxSEtzazBWQnFy QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJWmVPLW5GYWRLNVB5dzFIS3NrMFZCcXJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zNTcwREYyRUIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFk SzVQeXcxSEtzazBWQnFyQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAaO6tL5IjV+smOW0eRx1TYMVbcjpXrq6VeqkvezBCdBBr+1oViEjtt6LOmRD FJeq+prdJ5zc3eXmlUpKdY8l1LG9tNNDOkhekEick8bOa2NJBJ6kgg3isdRdg0fY zBNRGSvEWgWiq1xG0CkfZGP15jKCYHObpas3jdoN+t5h4ocR1mrXux7dmqFKF+Le KiLAkPb9cvVBP5B8FBOaqdAD2e+1jib/AaS9ptn6w4chFkjcS+4wxxiIJuaN0KtV yD+klKjTeI16n0kYQ4u/5+V6VXdXc4yK1/lIYoowM29Ek7sWhwF4mIzp1JcHHN2S nppTSppGGY8w05ry02RjRACqVQ== -----END CERTIFICATE-----Generated at Thu Oct 1 13:37:49 2026 by rpki-client