$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: UcHi6oMfieqaxpfslTQiWRQ2mZu+ckgM210eQnn11V8= Subject key identifier: 39:BA:2B:B7:0A:FA:D0:87:75:E9:1A:E5:86:1A:F1:7F:F1:5B:87:35 Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 04C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 04B9 Signing time: Wed 20 May 2026 23:58:04 +0000 Manifest this update: Wed 20 May 2026 23:58:03 +0000 Manifest next update: Wed 27 May 2026 23:58:03 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: FLS36pNaAG4bNEKzxUFSy75vWfYOBsMrQXSFwVa3b0A=) 2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 9llJReApVBmo5bvUcRrTyqYgxX0J7Rw+SzZuoT8YjSw=) 3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: UZnHMueWtrpb+JywnXsopY8oC5x4rGsb8m2Kk1OPC6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1223 (0x4c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: May 20 23:58:03 2026 GMT Not After : May 27 23:58:03 2026 GMT Subject: CN=6a0e4a8c-e7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:13:7e:6d:02:3c:f4:cd:73:d5:d7:80:f6: 9d:d2:ca:ae:37:3b:2d:ba:fe:a7:9e:8b:d1:b5:df: 24:a0:ec:1a:dc:77:ed:10:6b:33:ab:67:e2:8a:aa: 45:99:18:08:3a:c7:ec:0e:83:63:36:d2:55:cc:6d: 14:ca:21:69:7b:60:0b:8c:db:ca:78:7b:0c:02:53: 68:51:36:a3:3f:e0:29:04:e0:b0:f7:5e:94:18:41: 4a:56:48:78:df:22:73:f0:04:de:6c:f5:28:69:a3: 7b:1c:55:15:24:98:11:74:ee:63:e2:3c:c9:36:e1: 8a:7d:92:87:43:5a:cd:b1:c7:1c:a2:d7:5b:c1:f3: 16:da:86:98:9f:f1:8a:a8:d2:ef:63:30:d3:12:f5: ec:dd:4b:5d:03:40:b9:ca:ee:83:11:0c:7d:07:d3: 36:c8:b7:35:d1:bf:3c:38:ea:70:f3:db:69:f1:2f: 29:56:db:a4:9c:4d:2d:ad:71:5b:28:af:60:58:5f: f2:fe:7a:b2:8a:82:d5:db:5c:22:84:7f:c8:54:41: df:e5:55:5f:ef:f1:9b:cb:41:a6:34:a6:f6:b2:8e: 9c:95:91:c3:a3:9e:e0:d8:a9:3b:bf:e6:10:02:ae: 61:ef:ef:1f:c9:71:bf:ac:1d:3e:cc:07:ca:c7:d7: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BA:2B:B7:0A:FA:D0:87:75:E9:1A:E5:86:1A:F1:7F:F1:5B:87:35 X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:be:a5:1a:e5:0d:2a:09:c7:e1:fc:14:c7:3e:9a:4f:41:83: 04:cb:93:72:68:52:46:01:58:40:d7:b8:e2:2f:fb:89:6e:77: ab:a9:24:ca:59:92:fd:41:9c:1c:49:0a:b0:12:1f:ff:36:76: 52:a4:fd:f4:2f:42:bf:9a:9b:c9:a0:fb:a0:41:71:3e:bb:b3: 3c:9b:cc:38:23:28:24:62:5d:17:c2:fb:4e:3e:13:5f:ae:c9: f0:dd:b9:e7:e6:03:03:c4:ea:a3:f9:8e:5d:b2:77:2f:83:59: cc:67:70:dc:a8:df:d7:e3:94:36:12:33:7c:9a:e9:58:13:fa: 20:18:05:b7:32:4f:97:16:4a:a0:fe:d7:4f:80:a8:50:55:36: 96:49:ad:76:f4:f9:aa:d2:46:dd:f9:ac:9c:d9:a7:28:85:dd: 37:e2:aa:57:b8:30:9b:53:9d:34:b3:fe:da:56:1c:66:26:15: 78:a6:68:9a:87:b7:a4:82:d0:a9:47:16:c2:5d:6e:05:46:8d: d6:98:21:17:0c:8a:4f:a5:98:35:01:a3:5c:b4:e7:32:35:92: 23:21:25:19:67:75:dc:cd:0c:fe:81:fc:36:e7:f6:6e:7f:ea: 09:f2:37:a8:28:a8:70:fd:e6:7b:64:34:93:fd:0b:a9:fa:d9: 0b:e7:21:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjYwNTIwMjM1ODAzWhcNMjYwNTI3MjM1ODAzWjAYMRYwFAYD VQQDEw02YTBlNGE4Yy1lN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZETfm0CPPTNc9XXgPad0squNzstuv6nnovRtd8koOwa3HftEGszq2fiiqpF mRgIOsfsDoNjNtJVzG0UyiFpe2ALjNvKeHsMAlNoUTajP+ApBOCw916UGEFKVkh4 3yJz8ATebPUoaaN7HFUVJJgRdO5j4jzJNuGKfZKHQ1rNscccotdbwfMW2oaYn/GK qNLvYzDTEvXs3UtdA0C5yu6DEQx9B9M2yLc10b88OOpw89tp8S8pVtuknE0trXFb KK9gWF/y/nqyioLV21wihH/IVEHf5VVf7/Gby0GmNKb2so6clZHDo57g2Kk7v+YQ Aq5h7+8fyXG/rB0+zAfKx9ddJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDm6K7cK +tCHdeka5YYa8X/xW4c1MB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWL6lGuUNKgnH4fwUxz6aT0GDBMuTcmhSRgFYQNe44i/7iW53q6kkylmS/UGc HEkKsBIf/zZ2UqT99C9Cv5qbyaD7oEFxPruzPJvMOCMoJGJdF8L7Tj4TX67J8N25 5+YDA8Tqo/mOXbJ3L4NZzGdw3Kjf1+OUNhIzfJrpWBP6IBgFtzJPlxZKoP7XT4Co UFU2lkmtdvT5qtJG3fmsnNmnKIXdN+KqV7gwm1OdNLP+2lYcZiYVeKZomoe3pILQ qUcWwl1uBUaN1pghFwyKT6WYNQGjXLTnMjWSIyElGWd13M0M/oH8Nuf2bn/qCfI3 qCiocP3me2Q0k/0LqfrZC+chfQ== -----END CERTIFICATE-----Generated at Thu May 21 09:39:20 2026 by rpki-client