$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: MrQLK3geEb0BGzI85p6h/bRqsUnmjqj6hV5fMpTfIf4= Subject key identifier: ED:E3:DE:FB:4C:CA:A8:23:B6:66:BD:F2:C6:56:97:ED:4D:0C:F4:2B Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: C5 Signing time: Mon 27 Jul 2026 09:10:05 +0000 Manifest this update: Mon 27 Jul 2026 09:10:04 +0000 Manifest next update: Mon 03 Aug 2026 09:10:04 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: pxZiFxxEcYg1D74II32DukngLrtjaeCvdS1viSJX6hw=) 2: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (hash: UYmzmNOhHVux9yZEz47QdQpPwQPcVltUv0OFhaHMSfI=) 3: E13B045ACAD611F0AB7FEE55C4F9AE02.roa (hash: HUQd5AJYGdLE7NKYHx8Lq6oK6+YpU4Q/zvBoPbc+PIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Jul 27 09:10:04 2026 GMT Not After : Aug 3 09:10:04 2026 GMT Subject: CN=6a67206d-8660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:92:98:aa:9e:24:6e:9e:8b:f9:55:a9:ea: 9d:ed:51:ca:28:de:45:2d:ce:54:6b:e8:46:98:1d: d6:28:ba:61:01:ac:c5:1a:ee:ee:08:1e:63:17:3f: 1c:84:b9:3c:8e:b4:30:f8:db:81:e8:d8:d8:a2:f2: 00:15:23:12:62:1d:99:3c:b6:e6:5e:03:4f:67:b4: 1e:73:98:95:81:6e:d2:f6:1b:a4:b0:a5:ef:02:ec: 96:5e:ee:30:c1:25:2e:84:c7:aa:cf:1a:21:b8:76: 1d:d4:62:2b:7d:3b:cf:4d:e5:2d:8c:c7:07:00:9b: 8a:9c:13:29:75:fc:15:0e:59:1f:cb:ff:37:e3:8d: c6:7e:c1:ba:eb:44:17:7a:4b:1e:9a:f8:7a:c0:04: 84:d7:6a:c0:5e:72:b9:02:0c:34:19:c3:70:34:55: 70:83:8e:42:fe:bf:f1:39:b5:ec:e4:86:7b:77:19: 03:ef:ca:2c:2b:09:15:13:01:d7:03:2c:8a:18:b4: 62:4d:8b:ce:ef:37:e0:63:da:5a:59:6c:9a:3c:db: c4:cd:7e:bb:a7:d8:70:3e:e5:8a:40:9c:cb:e9:be: 42:dc:11:d3:b8:88:dc:38:ae:9f:2b:98:4a:3d:84: c0:7e:b0:07:1d:d6:60:6f:07:1c:cb:0a:38:0b:c7: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E3:DE:FB:4C:CA:A8:23:B6:66:BD:F2:C6:56:97:ED:4D:0C:F4:2B X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:32:32:de:fa:5b:45:8d:01:87:ce:ed:83:77:7f:e2:4e:fd: 44:86:cc:c3:2e:24:70:df:01:e0:30:81:b0:0d:d6:f7:4a:75: 4e:fe:93:48:9d:46:d6:e1:db:78:84:cd:bf:e1:6e:4e:c2:38: 3e:82:0e:15:89:24:3f:43:a5:53:35:45:3b:08:74:54:a7:0e: 5e:fd:26:f5:95:0a:2d:46:49:33:ec:ca:21:cc:6c:9a:5a:5d: f6:e0:e5:36:81:0d:6c:af:38:9d:2a:83:8f:02:40:bb:45:a3: fb:2b:a8:52:6a:53:46:82:1b:77:60:ee:a3:73:39:69:20:75: d7:85:5d:85:c0:32:05:56:f9:ab:ab:42:60:e4:9a:de:39:0e: 9d:b0:34:9d:73:46:01:20:b6:34:bf:f5:f4:78:5b:8f:e5:14: e6:06:b9:55:46:65:b2:06:cb:1c:5d:cb:12:67:ba:57:33:85: 21:a3:a5:c3:24:9c:49:92:9e:49:5a:ae:48:75:40:1b:97:a3: f9:1f:6f:79:3c:ac:5f:d2:2c:fa:04:49:22:ef:13:10:b4:17: 50:f7:49:93:eb:c6:af:9b:91:9f:c3:38:61:2b:0a:bd:0d:9d: 4a:cc:3d:47:5c:cd:e8:54:bd:1b:e6:74:7d:81:be:33:29:7f: bf:29:87:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5QjUxMTAvBgNVBAUTKEI1MkFFMTgzNkM2MTE5M0RFQThCQTVCRTlENzFCOENC QjM0MzAzOTgwHhcNMjYwNzI3MDkxMDA0WhcNMjYwODAzMDkxMDA0WjAYMRYwFAYD VQQDEw02YTY3MjA2ZC04NjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8ySmKqeJG6ei/lVqeqd7VHKKN5FLc5Ua+hGmB3WKLphAazFGu7uCB5jFz8c hLk8jrQw+NuB6NjYovIAFSMSYh2ZPLbmXgNPZ7Qec5iVgW7S9huksKXvAuyWXu4w wSUuhMeqzxohuHYd1GIrfTvPTeUtjMcHAJuKnBMpdfwVDlkfy/83443GfsG660QX eksemvh6wASE12rAXnK5Agw0GcNwNFVwg45C/r/xObXs5IZ7dxkD78osKwkVEwHX AyyKGLRiTYvO7zfgY9paWWyaPNvEzX67p9hwPuWKQJzL6b5C3BHTuIjcOK6fK5hK PYTAfrAHHdZgbwccywo4C8duNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3j3vtM yqgjtma98sZWl+1NDPQrMB8GA1UdIwQYMBaAFLUq4YNsYRk96oulvp1xuMuzQwOY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTlCNS9CMjI2NkZEMjZE RTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdUM3FpNlctblhHNHk3TkRB NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTlCNS9CMjI2NkZEMjZERTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdU M3FpNlctblhHNHk3TkRBNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcTIy3vpbRY0Bh87tg3d/4k79RIbMwy4kcN8B4DCBsA3W90p1Tv6TSJ1G1uHb eITNv+FuTsI4PoIOFYkkP0OlUzVFOwh0VKcOXv0m9ZUKLUZJM+zKIcxsmlpd9uDl NoENbK84nSqDjwJAu0Wj+yuoUmpTRoIbd2Duo3M5aSB114VdhcAyBVb5q6tCYOSa 3jkOnbA0nXNGASC2NL/19Hhbj+UU5ga5VUZlsgbLHF3LEme6VzOFIaOlwyScSZKe SVquSHVAG5ej+R9veTysX9Is+gRJIu8TELQXUPdJk+vGr5uRn8M4YSsKvQ2dSsw9 R1zN6FS9G+Z0fYG+Myl/vymH0A== -----END CERTIFICATE-----Generated at Mon Jul 27 22:57:47 2026 by rpki-client