$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: YqFd0O31/TEH/JEePMYj7yyUQeUwYT2h129vqUfd/Nw= Subject key identifier: 66:94:0B:A0:00:BE:E3:ED:CE:D8:6A:2F:9D:81:27:E1:35:34:2B:75 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 07A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 0783 Signing time: Wed 20 May 2026 21:38:14 +0000 Manifest this update: Wed 20 May 2026 21:38:14 +0000 Manifest next update: Wed 27 May 2026 21:38:14 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: hngQYniGYcdph5eY9NT8GT//ftWrtcKviwrBku8PoFw=) 2: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=) 3: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1955 (0x7a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: May 20 21:38:14 2026 GMT Not After : May 27 21:38:14 2026 GMT Subject: CN=6a0e29c6-e3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:68:24:56:b6:38:51:f4:a7:fa:2c:0b:6d: d7:60:10:d9:e7:d5:b0:c2:10:7e:a9:bf:b6:99:6e: 16:ac:d3:49:cb:d9:f3:5f:00:71:5a:87:89:c9:62: ea:e4:1d:ac:de:d3:d3:8c:56:53:d7:3d:7e:ea:6e: de:af:25:1b:56:14:d3:03:64:64:09:fe:4b:01:9d: 94:74:4e:a1:a3:bb:a3:66:0d:f0:af:c3:97:09:82: ef:6b:7f:a2:be:21:0a:2b:a7:65:56:50:10:1b:1f: 5b:3e:13:15:c5:41:fd:92:9d:0c:6b:ad:04:68:90: 1b:40:6e:1f:bf:da:19:87:1a:d5:59:34:33:7c:c8: c1:bf:a5:e9:a3:bf:74:e7:ff:17:1c:10:8e:21:72: 1c:0e:be:87:27:70:7c:5e:bd:79:b8:7c:70:5c:92: 1a:06:92:21:6b:96:f0:98:18:bb:f5:30:da:ee:30: 59:5c:5b:43:ed:da:28:0b:02:c5:96:a4:05:89:7a: 83:c2:dc:65:4e:33:e2:14:9a:d7:3a:df:02:40:4d: f8:fd:96:29:72:34:fd:5c:6a:03:9e:a9:bf:5d:1c: 8e:72:a9:5b:ba:34:66:79:07:0e:6a:be:f3:00:a3: 23:19:30:fb:6b:66:2c:fd:6b:1b:ef:6c:d1:b8:ee: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:94:0B:A0:00:BE:E3:ED:CE:D8:6A:2F:9D:81:27:E1:35:34:2B:75 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5a:da:bc:36:1a:e7:9a:fd:45:ef:89:ff:73:8c:12:00:42: 4f:32:dd:48:3f:42:dc:8f:14:0e:bc:0c:3c:dd:9e:fa:69:63: 49:49:bd:c3:82:ba:66:61:a1:e7:90:5f:fd:77:17:db:7a:a5: 5c:64:b0:4e:da:bd:fd:1a:6f:70:6a:b4:1e:5f:67:d9:9d:b0: 62:45:99:37:8c:c2:27:80:66:bd:73:ae:95:1d:ec:5b:42:a4: 12:27:0a:1d:74:db:51:42:a4:80:24:36:e3:c9:be:e7:a0:3f: 3a:af:c6:6a:12:54:a0:37:43:0a:10:7b:77:ea:49:36:3a:2f: 5a:b8:3c:8a:1b:77:ac:be:4c:df:80:8a:4c:f8:c5:4d:7a:33: a9:65:bc:77:d5:bd:75:f2:d6:99:77:e9:98:4c:b2:95:56:98: 6b:97:66:25:0b:46:72:41:0d:93:bd:a6:92:ed:39:ae:fa:1f: 77:d8:f2:0a:c4:ba:15:05:11:9f:fa:63:6e:54:b6:79:ac:aa: d7:42:72:91:c0:8a:0d:98:0d:5e:de:58:5d:fe:22:4d:28:14: 9b:9b:27:a6:5c:a5:6d:50:e9:33:2f:65:6f:f5:d5:d9:a1:95: 7e:fa:27:7a:55:77:4a:d2:cf:de:23:81:a3:ce:4e:91:1d:2c: f7:1a:71:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjYwNTIwMjEzODE0WhcNMjYwNTI3MjEzODE0WjAYMRYwFAYD VQQDEw02YTBlMjljNi1lM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ARoJFa2OFH0p/osC23XYBDZ59WwwhB+qb+2mW4WrNNJy9nzXwBxWoeJyWLq 5B2s3tPTjFZT1z1+6m7eryUbVhTTA2RkCf5LAZ2UdE6ho7ujZg3wr8OXCYLva3+i viEKK6dlVlAQGx9bPhMVxUH9kp0Ma60EaJAbQG4fv9oZhxrVWTQzfMjBv6Xpo790 5/8XHBCOIXIcDr6HJ3B8Xr15uHxwXJIaBpIha5bwmBi79TDa7jBZXFtD7dooCwLF lqQFiXqDwtxlTjPiFJrXOt8CQE34/ZYpcjT9XGoDnqm/XRyOcqlbujRmeQcOar7z AKMjGTD7a2Ys/Wsb72zRuO4GKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaUC6AA vuPtzthqL52BJ+E1NCt1MB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoVravDYa55r9Re+J/3OMEgBCTzLdSD9C3I8UDrwMPN2e+mljSUm9w4K6ZmGh 55Bf/XcX23qlXGSwTtq9/RpvcGq0Hl9n2Z2wYkWZN4zCJ4BmvXOulR3sW0KkEicK HXTbUUKkgCQ248m+56A/Oq/GahJUoDdDChB7d+pJNjovWrg8iht3rL5M34CKTPjF TXozqWW8d9W9dfLWmXfpmEyylVaYa5dmJQtGckENk72mku05rvofd9jyCsS6FQUR n/pjblS2eayq10JykcCKDZgNXt5YXf4iTSgUm5snplylbVDpMy9lb/XV2aGVfvon elV3StLP3iOBo85OkR0s9xpxaA== -----END CERTIFICATE-----Generated at Thu May 21 11:14:51 2026 by rpki-client