$ rpki-client -vvf rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft File: TonyDOHR4q7I1gVlBTEwvWB9W_0.mft (raw, json) Hash identifier: Ts6NOCawMzWj2jQKlNsUoATeIDvBoBhp5zISbQFPCx8= Subject key identifier: C2:53:81:5A:CC:7E:F6:26:E7:C8:A6:21:AA:14:61:3D:02:73:FD:B2 Authority key identifier: 4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD Certificate issuer: /CN=A912465F/serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft Manifest number: 58 Signing time: Tue 21 Jul 2026 10:05:32 +0000 Manifest this update: Tue 21 Jul 2026 10:05:31 +0000 Manifest next update: Tue 28 Jul 2026 10:05:31 +0000 Files and hashes: 1: TonyDOHR4q7I1gVlBTEwvWB9W_0.crl (hash: g+delE5fpd6Py/QZ2AhOOLFmbfxSd/uC3ACXg7IuOzA=) 2: 78CCC796100411F190DA552F0F3D8C67.roa (hash: 9ijSIQLwt2Gy2XEyUcUffnJwapZcaQTrQntZZWP4Uss=) 3: A885DC48100411F1A3563A300F3D8C67.roa (hash: tF3ywN7eYQwZg7AMUnYYT38GsrrKw6HcmRM3Hqi+nbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912465F, serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD Validity Not Before: Jul 21 10:05:31 2026 GMT Not After : Jul 28 10:05:31 2026 GMT Subject: CN=6a5f446c-0859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:4b:4d:87:e1:1c:9f:ac:a8:bc:4f:bd:6d: 90:56:11:eb:a9:42:c2:20:0a:fc:ba:9d:3d:2b:4f: e2:06:67:ff:30:75:d2:a6:2a:21:90:a9:45:3e:b3: 23:dc:49:10:d6:60:9c:c2:71:cc:33:a4:d9:04:4c: f8:33:69:05:6c:94:b8:e5:56:89:da:c0:a9:64:e5: 64:e4:96:15:b1:65:7e:75:94:54:5e:f3:5a:e9:93: 88:66:ad:d4:4c:28:46:8e:52:0b:d2:9d:1f:ef:60: 50:58:44:69:5a:62:c0:0a:84:9e:30:bf:a2:20:e6: 07:be:e5:47:57:01:99:ac:50:70:5d:b8:2f:ff:79: fc:bf:df:36:dd:e0:50:7b:7b:e3:3a:52:ff:e5:fd: 10:54:14:ee:08:07:f2:d0:a0:62:54:8b:23:f1:a6: 7a:83:48:a7:2d:a8:61:f3:23:30:58:40:ab:d1:fe: 30:52:7c:bb:81:a7:90:b4:99:16:a4:27:3c:9d:55: c3:7b:cd:3a:6a:bb:a7:2c:22:a4:7e:81:f5:c4:52: a0:be:ac:65:f3:ab:c8:19:e8:9e:87:15:87:3a:fa: a8:cf:ae:6e:c8:bc:52:d0:4e:1f:fb:b9:83:e7:82: 07:1c:73:9d:dc:6e:7a:00:1e:ee:a2:db:4d:3c:e5: fa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:53:81:5A:CC:7E:F6:26:E7:C8:A6:21:AA:14:61:3D:02:73:FD:B2 X509v3 Authority Key Identifier: keyid:4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:6a:3b:d4:a2:d8:2d:9f:86:e9:39:ba:15:f0:78:c5:e3:e2: 34:7f:de:e0:73:40:bd:05:6f:a8:c6:54:10:a4:a9:79:c3:48: 09:26:4f:0c:40:44:04:91:c6:2d:f4:d5:82:34:da:c4:eb:08: 32:da:a6:cf:7f:f8:30:be:02:75:2c:b7:3c:36:35:ad:32:80: c8:2a:70:1e:94:9d:39:7b:d5:9c:0d:5a:cc:33:67:12:13:65: af:02:c2:af:80:ab:c4:f3:8c:a2:5c:ee:61:5d:3e:16:2c:49: 09:c3:ff:61:14:77:ad:15:46:59:f6:70:08:57:e8:75:27:a1: 58:e3:47:ac:05:a8:0b:a3:ef:a3:f2:fe:03:88:a9:a5:cc:62: 91:27:72:8f:9a:1e:ec:5e:d3:c3:0a:c0:ff:e4:29:ba:32:72: 70:84:a8:62:67:7b:2d:ea:39:0d:09:62:86:6c:42:e2:32:7f: 17:34:d3:3c:c6:a6:5d:d2:2a:b7:a5:ac:ab:ce:44:c9:ba:a3: 85:fd:08:a9:b1:d8:d8:73:ba:d5:7b:a9:9e:fc:b9:70:ac:e6: d0:53:00:5b:e3:81:50:8b:0e:4f:a7:c4:81:37:6f:0a:6f:41: ba:9c:a9:80:61:89:1f:6a:21:4f:ee:bd:2c:a5:c7:d4:f4:5e: 7f:0c:4d:0c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDY1RjExMC8GA1UEBRMoNEU4OUYyMENFMUQxRTJBRUM4RDYwNTY1MDUzMTMwQkQ2 MDdENUJGRDAeFw0yNjA3MjExMDA1MzFaFw0yNjA3MjgxMDA1MzFaMBgxFjAUBgNV BAMTDTZhNWY0NDZjLTA4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJfktNh+Ecn6yovE+9bZBWEeupQsIgCvy6nT0rT+IGZ/8wddKmKiGQqUU+syPc SRDWYJzCccwzpNkETPgzaQVslLjlVonawKlk5WTklhWxZX51lFRe81rpk4hmrdRM KEaOUgvSnR/vYFBYRGlaYsAKhJ4wv6Ig5ge+5UdXAZmsUHBduC//efy/3zbd4FB7 e+M6Uv/l/RBUFO4IB/LQoGJUiyPxpnqDSKctqGHzIzBYQKvR/jBSfLuBp5C0mRak JzydVcN7zTpqu6csIqR+gfXEUqC+rGXzq8gZ6J6HFYc6+qjPrm7IvFLQTh/7uYPn ggccc53cbnoAHu6i20085fopAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwlOBWsx+ 9ibnyKYhqhRhPQJz/bIwHwYDVR0jBBgwFoAUTonyDOHR4q7I1gVlBTEwvWB9W/0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0NjVGLzcwMkMzNEM2MDY0 NzExRjFCNEJBRkJDNTJEM0Q4QzY3L1RvbnlET0hSNHE3STFnVmxCVEV3dldCOVdf MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvVG9ueURPSFI0cTdJMWdWbEJURXd2V0I5V18wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 NjVGLzcwMkMzNEM2MDY0NzExRjFCNEJBRkJDNTJEM0Q4QzY3L1RvbnlET0hSNHE3 STFnVmxCVEV3dldCOVdfMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3ajvUotgtn4bpOboV8HjF4+I0f97gc0C9BW+oxlQQpKl5w0gJJk8MQEQEkcYt 9NWCNNrE6wgy2qbPf/gwvgJ1LLc8NjWtMoDIKnAelJ05e9WcDVrMM2cSE2WvAsKv gKvE84yiXO5hXT4WLEkJw/9hFHetFUZZ9nAIV+h1J6FY40esBagLo++j8v4DiKml zGKRJ3KPmh7sXtPDCsD/5Cm6MnJwhKhiZ3st6jkNCWKGbELiMn8XNNM8xqZd0iq3 payrzkTJuqOF/QipsdjYc7rVe6me/LlwrObQUwBb44FQiw5Pp8SBN28Kb0G6nKmA YYkfaiFP7r0spcfU9F5/DE0M -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:49 2026 by rpki-client