$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft File: tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json) Hash identifier: 3mfTNkxmtkpqaVJnDl2oc8g77Ng5/rGfC0tq8YOSYLo= Subject key identifier: 67:4D:72:34:0F:37:57:2B:BC:46:01:57:20:FB:D5:9E:16:EF:46:D3 Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Certificate serial: 0A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft Manifest number: 09EE Signing time: Mon 20 Jul 2026 20:17:09 +0000 Manifest this update: Mon 20 Jul 2026 20:17:08 +0000 Manifest next update: Mon 27 Jul 2026 20:17:08 +0000 Files and hashes: 1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: s59VLy2R8/Hr7jjf8QqVpTerxCATXekT2M09BrvQNtI=) 2: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: wBIj83x+5tbUquS7FIlQQAMIzPRLzq+ZJDvfE+mcXhY=) 3: B350B67E964611EDA10D8777C4F9AE02.roa (hash: aMRVpWtmZnwUR1mTSqb8jU7v8RNHSZIpMkATgGb8rEM=) 4: 4AA9F8CC75B511F18A3D446262A30FBC.roa (hash: a8REmHCWm+jSLUiYkfwW5npJYFrJiobn6pD3SgbZbKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 20:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2571 (0xa0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Validity Not Before: Jul 20 20:17:08 2026 GMT Not After : Jul 27 20:17:08 2026 GMT Subject: CN=6a5e8245-4504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:41:1d:1b:7f:8a:64:3a:66:45:c1:bd:3b: 07:c3:23:71:8f:84:93:a2:5c:0c:36:f5:6a:0a:45: bb:e8:cd:d4:9b:37:01:b1:7d:55:77:a8:fd:c0:2a: bb:83:f5:80:d6:42:1a:1b:f6:eb:71:59:f1:d3:4b: 19:8a:e2:84:59:b4:79:f9:0d:5b:4a:12:40:11:9d: 7b:5a:2f:29:ad:fd:05:0b:14:c6:94:5f:90:d3:d6: e5:22:ea:b9:23:ca:f5:67:e2:10:df:94:08:7c:9b: 2a:01:ef:6f:6c:85:93:78:5b:24:fc:b5:68:d6:eb: 83:fe:ca:a8:aa:18:c7:f5:25:54:16:d0:b4:53:8e: 17:b3:63:65:9b:e2:bb:c5:11:60:3e:ce:0f:9a:d2: b0:aa:8d:9d:4e:fc:d9:e7:6c:52:44:f5:6c:9c:e3: 66:68:0b:01:43:8d:b9:f1:6e:99:f9:54:8e:e8:37: 02:99:29:43:ef:6e:5f:cd:a3:cb:2e:6b:e9:68:f1: 72:1a:3f:2f:37:9f:df:3c:7f:6c:a4:ce:11:77:a9: 67:c4:24:28:d6:98:d6:9e:68:0e:3a:17:fa:b7:5f: 70:6d:66:fe:03:50:ff:d2:bb:b5:52:22:76:f9:cd: 3a:b5:e1:1c:48:85:45:cf:82:41:4a:e0:95:30:4a: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4D:72:34:0F:37:57:2B:BC:46:01:57:20:FB:D5:9E:16:EF:46:D3 X509v3 Authority Key Identifier: keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:39:a0:d6:6b:00:85:db:75:90:69:9b:cf:59:cd:5f:98:dd: ec:78:b0:b4:91:64:63:6f:00:36:4a:5d:b6:05:2c:49:91:f3: ca:69:3e:0c:2b:8d:d2:91:28:39:2c:f8:75:97:06:8e:88:4d: 96:8e:74:60:a8:24:bd:45:59:56:bd:d4:57:7c:97:71:39:d6: 68:30:9d:22:f0:7d:68:05:af:db:61:de:97:a2:6c:d0:7e:d5: 3b:9b:e2:da:f3:90:cb:37:46:d4:26:da:a4:ea:bc:7d:c6:bb: fe:f3:d2:b9:28:9e:9e:0d:91:38:50:ef:2f:17:7f:e9:15:f2: 73:a5:36:9d:9e:f7:86:82:76:90:49:2e:1a:b0:f5:dd:96:54: 0a:20:43:48:b8:e1:3f:3c:aa:fe:e5:a2:7a:de:94:02:a3:c9: a5:a7:68:ea:ea:60:ce:1f:6b:6b:df:c1:a8:e5:87:0b:70:99: 84:4a:60:f3:d3:d9:af:f3:41:cd:8c:fe:8b:9c:90:ea:81:06: 2f:c9:44:b7:19:19:f9:b4:fb:9b:e2:93:27:03:65:b9:45:33: 6f:ba:8b:fa:24:68:65:a9:16:88:fc:58:8c:cb:ed:8e:47:ed: 02:ce:93:60:b4:97:53:89:c4:21:09:bd:f4:9a:99:70:8b:55: 06:f9:d7:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2 REQzQ0I2QzgwHhcNMjYwNzIwMjAxNzA4WhcNMjYwNzI3MjAxNzA4WjAYMRYwFAYD VQQDEw02YTVlODI0NS00NTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo21BHRt/imQ6ZkXBvTsHwyNxj4STolwMNvVqCkW76M3UmzcBsX1Vd6j9wCq7 g/WA1kIaG/brcVnx00sZiuKEWbR5+Q1bShJAEZ17Wi8prf0FCxTGlF+Q09blIuq5 I8r1Z+IQ35QIfJsqAe9vbIWTeFsk/LVo1uuD/sqoqhjH9SVUFtC0U44Xs2Nlm+K7 xRFgPs4PmtKwqo2dTvzZ52xSRPVsnONmaAsBQ4258W6Z+VSO6DcCmSlD725fzaPL LmvpaPFyGj8vN5/fPH9spM4Rd6lnxCQo1pjWnmgOOhf6t19wbWb+A1D/0ru1UiJ2 +c06teEcSIVFz4JBSuCVMEpRcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdNcjQP N1crvEYBVyD71Z4W70bTMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3 RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0 c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1OC9CMzg5MzA0RUE3RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVK Qjgwb2lMNTB1SnB0MDh0c2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmTmg1msAhdt1kGmbz1nNX5jd7HiwtJFkY28ANkpdtgUsSZHzymk+DCuN0pEo OSz4dZcGjohNlo50YKgkvUVZVr3UV3yXcTnWaDCdIvB9aAWv22Hel6Js0H7VO5vi 2vOQyzdG1CbapOq8fca7/vPSuSieng2ROFDvLxd/6RXyc6U2nZ73hoJ2kEkuGrD1 3ZZUCiBDSLjhPzyq/uWiet6UAqPJpado6upgzh9ra9/BqOWHC3CZhEpg89PZr/NB zYz+i5yQ6oEGL8lEtxkZ+bT7m+KTJwNluUUzb7qL+iRoZakWiPxYjMvtjkftAs6T YLSXU4nEIQm99JqZcItVBvnXqQ== -----END CERTIFICATE-----Generated at Tue Jul 21 12:53:17 2026 by rpki-client