$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: /CRWiGUYdMNJ/9fgbKTQ4dS2gBXyka8be5SFtBWytVE= Subject key identifier: 73:5D:9D:81:B3:7D:F9:1E:F0:DF:AD:DA:89:55:60:EA:2A:67:A0:D4 Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 0399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 0392 Signing time: Sun 21 Jun 2026 00:45:28 +0000 Manifest this update: Sun 21 Jun 2026 00:45:27 +0000 Manifest next update: Sun 28 Jun 2026 00:45:27 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: FHOemxpvPR+p7y1ExQ/ozRTIEa/0aj1va7cJ2oXc9Ss=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: mBL1TBP+Msd9AlCfomB44CtyYjx9JeXY/drpx8eClaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Jun 2026 00:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 921 (0x399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Jun 21 00:45:27 2026 GMT Not After : Jun 28 00:45:27 2026 GMT Subject: CN=6a373428-53d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:70:8d:99:b1:e0:ca:67:b0:b8:52:12:4e: c1:84:fb:a1:91:0a:4f:fe:85:b0:60:18:ff:25:1d: 18:33:b8:31:66:50:44:51:10:00:ef:a9:19:f2:a0: 89:ac:48:be:69:09:a1:8f:79:6a:69:e8:0c:89:23: 6a:95:00:ab:ef:a8:7c:2a:0a:29:f7:bb:ac:81:0c: 05:90:f5:e5:d3:59:3f:7f:a1:c8:ee:db:77:75:e2: 50:4e:88:62:bf:89:62:a8:4a:6d:ea:53:0f:30:03: 9d:ac:7a:a5:d2:d2:c9:c1:d9:cb:d0:71:13:69:c2: a2:ea:66:86:31:5f:88:17:28:2a:1d:e6:27:18:79: 35:dc:83:fd:12:2c:69:74:50:5b:51:73:56:d2:de: 61:78:67:61:79:58:56:66:7d:1d:6f:59:28:37:9b: 90:eb:66:2d:49:76:40:90:d2:59:a7:ee:cd:8a:d8: af:8e:61:9b:72:e4:04:bb:4f:56:27:23:ce:89:2f: 48:c1:fb:ac:d3:3b:d0:69:16:14:56:c0:ae:88:98: 9f:e0:69:01:b1:4c:27:6b:bf:1c:54:61:2b:b6:75: 64:c1:6f:c7:13:b4:90:0a:74:43:43:f7:a6:f0:f1: 88:7d:6a:ca:90:6a:bc:d6:b4:a3:80:3c:d5:cb:f5: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5D:9D:81:B3:7D:F9:1E:F0:DF:AD:DA:89:55:60:EA:2A:67:A0:D4 X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:7e:32:d1:02:66:e5:a3:31:ec:9d:3c:94:da:4f:c8:f3:ff: 41:e4:4c:02:63:be:dd:de:97:35:8a:f5:32:4e:82:54:d1:61: b6:d2:ec:ee:a0:eb:58:f2:c7:7e:81:74:31:da:5b:ae:4d:6d: 99:89:aa:17:10:8d:0c:2c:d6:72:77:6f:47:c6:9c:33:9c:53: cf:78:28:b3:9b:e5:ce:1a:78:09:98:2d:ae:36:79:06:19:5e: cb:88:17:15:69:c8:b7:b2:b5:0d:60:74:eb:e1:92:b9:f2:bc: f7:b4:34:11:1e:b5:75:15:51:e4:31:4f:28:b0:71:8e:d9:5d: ba:ec:da:dd:3c:23:17:b5:11:77:32:db:f7:fb:db:79:e1:1e: ec:e5:44:ec:4c:76:de:f4:d5:58:8d:d0:dc:e2:10:7f:8b:01: 67:ab:f8:04:a4:ce:55:d0:70:34:ad:44:96:b6:2a:f6:4d:54: 04:f9:33:5b:c6:88:f1:57:c8:94:bb:1b:a0:66:2e:f7:e2:16: e1:51:10:31:0c:7f:f6:cf:81:bb:16:d0:dd:7d:4a:80:be:c0: c9:c5:0c:35:96:d1:75:87:ef:c0:58:13:29:2e:92:bf:55:ce: 01:ab:0e:7a:50:d1:d9:4d:9d:ad:57:e8:ed:a7:df:62:ba:37: 93:fc:7b:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjYwNjIxMDA0NTI3WhcNMjYwNjI4MDA0NTI3WjAYMRYwFAYD VQQDEw02YTM3MzQyOC01M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyJwjZmx4MpnsLhSEk7BhPuhkQpP/oWwYBj/JR0YM7gxZlBEURAA76kZ8qCJ rEi+aQmhj3lqaegMiSNqlQCr76h8Kgop97usgQwFkPXl01k/f6HI7tt3deJQTohi v4liqEpt6lMPMAOdrHql0tLJwdnL0HETacKi6maGMV+IFygqHeYnGHk13IP9Eixp dFBbUXNW0t5heGdheVhWZn0db1koN5uQ62YtSXZAkNJZp+7NitivjmGbcuQEu09W JyPOiS9Iwfus0zvQaRYUVsCuiJif4GkBsUwna78cVGErtnVkwW/HE7SQCnRDQ/em 8PGIfWrKkGq81rSjgDzVy/WbpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHNdnYGz ffke8N+t2olVYOoqZ6DUMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2X4y0QJm5aMx7J08lNpPyPP/QeRMAmO+3d6XNYr1Mk6CVNFhttLs7qDrWPLH foF0Mdpbrk1tmYmqFxCNDCzWcndvR8acM5xTz3gos5vlzhp4CZgtrjZ5Bhley4gX FWnIt7K1DWB06+GSufK897Q0ER61dRVR5DFPKLBxjtlduuza3TwjF7URdzLb9/vb eeEe7OVE7Ex23vTVWI3Q3OIQf4sBZ6v4BKTOVdBwNK1ElrYq9k1UBPkzW8aI8VfI lLsboGYu9+IW4VEQMQx/9s+BuxbQ3X1KgL7AycUMNZbRdYfvwFgTKS6Sv1XOAasO elDR2U2drVfo7affYro3k/x78w== -----END CERTIFICATE-----Generated at Sun Jun 21 17:03:07 2026 by rpki-client