$ rpki-client -vvf rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft File: tg1afDY_D02TL-MXuQzmz4DSg8k.mft (raw, json) Hash identifier: OFyKzpnBKuwpxehdBRijWK0nQB+NOoThnJroyfK+P8U= Subject key identifier: 28:B2:B7:3F:F5:1A:C8:C9:BC:57:AE:23:8D:41:F7:41:0B:05:2B:64 Authority key identifier: B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 Certificate issuer: /CN=A9118309/serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Certificate serial: 0B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft Manifest number: 0B01 Signing time: Mon 20 Jul 2026 19:44:43 +0000 Manifest this update: Mon 20 Jul 2026 19:44:43 +0000 Manifest next update: Mon 27 Jul 2026 19:44:43 +0000 Files and hashes: 1: tg1afDY_D02TL-MXuQzmz4DSg8k.crl (hash: J83JtSprxhtTRZjA09zRLSEnSw/QkaSUgAeCyZG7kLU=) 2: 59AA22D06FFD11EA9160902DC4F9AE02.roa (hash: wf2N7y2gm+HMhGLmDepSkmqtdRiwq+CjqsQ72qN8FGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2830 (0xb0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118309, serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Validity Not Before: Jul 20 19:44:43 2026 GMT Not After : Jul 27 19:44:43 2026 GMT Subject: CN=6a5e7aab-70ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:fb:f8:46:03:c1:ae:78:38:ac:8c:9b:80: e0:01:6c:32:4e:3a:2b:87:42:67:b1:c2:e0:7a:eb: 4e:e5:4d:f1:39:9d:57:a5:3c:5b:9d:64:1a:3e:06: 3d:76:fb:e6:74:98:74:f9:29:a6:65:d6:6b:fa:f6: c0:1d:f1:c5:a2:2f:fe:a6:94:c7:07:52:0d:77:b3: 8e:ba:55:a1:42:9f:7d:26:87:14:87:7e:82:b0:b9: a3:21:45:99:f1:f2:04:25:af:30:85:6e:53:79:b5: 76:f0:e2:b8:48:1c:8d:f7:d7:85:d1:02:53:13:47: 9b:aa:0a:70:94:d2:5c:93:de:c8:f9:f1:92:61:7f: 48:b9:68:5e:bd:b0:f0:3b:da:01:e9:4d:32:ae:ff: e2:96:45:f8:d5:19:43:e7:c3:d1:f8:c9:a6:bb:16: ee:fe:1c:86:21:86:f5:15:a8:24:e3:9c:e4:c5:bc: 8b:0c:fe:03:bb:a5:5b:1b:2b:84:71:f8:20:71:af: 2d:07:19:67:74:85:3e:0d:f0:54:7f:aa:06:c4:a6: b1:88:0e:35:78:ee:e7:e2:6a:df:08:46:0c:d7:3b: 89:88:b0:db:1d:93:ba:f5:1d:fe:c3:fd:0e:ea:f7: 90:fc:57:e2:54:1b:de:30:27:e7:c4:4e:de:6a:2b: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B2:B7:3F:F5:1A:C8:C9:BC:57:AE:23:8D:41:F7:41:0B:05:2B:64 X509v3 Authority Key Identifier: keyid:B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:fc:9a:f6:0a:79:fd:cc:85:b0:9f:28:49:32:66:f4:78:eb: e7:8f:8d:bf:96:82:a4:78:73:28:9f:00:b7:33:65:63:e6:67: be:ab:b7:b1:55:49:9a:ae:5e:9a:da:ed:32:b8:60:d9:ff:0e: 30:d0:4c:64:f3:1d:9f:a9:67:e0:02:d6:79:37:3b:69:34:65: 58:7b:d1:0a:08:3f:6a:95:ed:93:18:0d:57:65:f9:94:04:37: 54:cf:52:34:08:85:ec:6f:49:d6:20:8a:30:80:0a:1d:e3:b9: 9d:a6:4a:21:3d:8c:c9:1a:10:11:17:32:f8:d1:c8:89:69:11: 76:1b:d9:d2:0b:87:86:7a:7c:9e:20:04:b4:69:06:90:04:3d: a4:7f:a1:eb:d6:44:54:48:6e:5f:17:c1:67:70:26:9c:c6:52: 03:0a:d8:4f:d3:e9:e7:c6:08:57:57:11:30:fe:a8:b5:27:ee: 6d:cc:9d:14:c4:b5:54:01:1b:5e:12:b4:c2:2b:80:39:a4:57: f2:9f:43:5b:bf:26:68:a2:ed:21:81:01:69:ff:e6:d7:d7:98: 6a:0c:c0:54:26:f7:3c:16:bd:a5:4d:18:29:de:db:64:69:e9: a2:af:98:5e:8b:a6:3c:9a:1b:66:b3:ce:b2:66:17:3d:a3:7c: 9d:80:c1:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzMDkxMTAvBgNVBAUTKEI2MEQ1QTdDMzYzRjBGNEQ5MzJGRTMxN0I5MENFNkNG ODBEMjgzQzkwHhcNMjYwNzIwMTk0NDQzWhcNMjYwNzI3MTk0NDQzWjAYMRYwFAYD VQQDEw02YTVlN2FhYi03MGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmy77+EYDwa54OKyMm4DgAWwyTjorh0JnscLgeutO5U3xOZ1XpTxbnWQaPgY9 dvvmdJh0+SmmZdZr+vbAHfHFoi/+ppTHB1INd7OOulWhQp99JocUh36CsLmjIUWZ 8fIEJa8whW5TebV28OK4SByN99eF0QJTE0ebqgpwlNJck97I+fGSYX9IuWhevbDw O9oB6U0yrv/ilkX41RlD58PR+Mmmuxbu/hyGIYb1Fagk45zkxbyLDP4Du6VbGyuE cfggca8tBxlndIU+DfBUf6oGxKaxiA41eO7n4mrfCEYM1zuJiLDbHZO69R3+w/0O 6veQ/FfiVBveMCfnxE7eaiv4ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiytz/1 GsjJvFeuI41B90ELBStkMB8GA1UdIwQYMBaAFLYNWnw2Pw9Nky/jF7kM5s+A0oPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODMwOS8xQTQ4REM4NjZG RkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0QwMlRMLU1YdVF6bXo0RFNn OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnMWFmRFlfRDAyVEwtTVh1UXptejREU2c4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODMwOS8xQTQ4REM4NjZGRkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0Qw MlRMLU1YdVF6bXo0RFNnOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhfya9gp5/cyFsJ8oSTJm9Hjr54+Nv5aCpHhzKJ8AtzNlY+Znvqu3sVVJmq5e mtrtMrhg2f8OMNBMZPMdn6ln4ALWeTc7aTRlWHvRCgg/apXtkxgNV2X5lAQ3VM9S NAiF7G9J1iCKMIAKHeO5naZKIT2MyRoQERcy+NHIiWkRdhvZ0guHhnp8niAEtGkG kAQ9pH+h69ZEVEhuXxfBZ3AmnMZSAwrYT9Pp58YIV1cRMP6otSfubcydFMS1VAEb XhK0wiuAOaRX8p9DW78maKLtIYEBaf/m19eYagzAVCb3PBa9pU0YKd7bZGnpoq+Y XoumPJobZrPOsmYXPaN8nYDBSw== -----END CERTIFICATE-----Generated at Tue Jul 21 23:03:46 2026 by rpki-client