$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: 8vRpriCyjt8pH5cVL8n7kuli9YrUTqbUcu8OYa/lrvY= Subject key identifier: DB:9D:BA:89:EA:20:41:1F:3B:DA:B3:67:61:2B:A2:70:E2:7B:75:58 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0CE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0CC7 Signing time: Tue 18 Aug 2026 18:48:53 +0000 Manifest this update: Tue 18 Aug 2026 18:48:52 +0000 Manifest next update: Tue 25 Aug 2026 18:48:52 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: qYzOCO69B8ir9hhBibTRt9KDc/ghqWhN7GWPV/H9qKQ=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nEmNA11Dyl7nTFmnZC9S6fy/8rzvC71ench9nRz81iE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: J2Vubqi8ic0NqlP+qdXl9htU+adGeTvh1ITR3W4ptX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Aug 18 18:48:52 2026 GMT Not After : Aug 25 18:48:52 2026 GMT Subject: CN=6a84a915-ca0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:c3:c8:31:f0:c8:71:4f:9b:74:6c:a6:a4: 35:e9:70:6e:2a:3b:50:11:c1:b3:79:99:4e:0b:ab: ae:21:43:f7:4c:c8:a9:7c:04:92:d6:e1:20:0f:09: 52:80:da:94:af:81:8f:88:79:a4:5c:65:53:a5:50: 54:9b:5d:21:76:c4:cb:3c:83:04:eb:05:34:70:53: a7:f1:7e:59:05:50:83:da:db:29:b3:e0:c9:6a:38: aa:02:80:1d:86:76:9a:8d:97:65:7f:99:6e:78:73: d7:ba:54:37:a2:0e:56:b1:e5:ec:45:18:c6:8f:41: 34:9b:f8:88:86:fa:6d:41:32:f2:0d:bc:96:e6:94: f4:c5:60:ad:98:d4:4c:07:22:ff:73:fa:9a:2f:81: 9d:08:d3:b7:74:c8:5d:b1:9b:68:db:7f:b7:f7:cd: 27:99:d0:6d:fa:cf:70:e3:14:dd:9d:ca:c9:9d:b1: ad:39:87:cc:54:de:d3:f1:a4:58:fc:b7:88:62:97: c3:0b:f6:fe:bc:04:49:9b:32:6b:4e:46:9b:3e:b5: ce:a8:56:51:32:f3:85:56:18:88:a0:2a:f9:bb:f0: d5:4e:55:9e:55:41:93:fa:a3:1d:45:aa:9f:90:44: ae:02:5e:b2:a1:2c:05:44:81:60:26:51:c4:d0:13: d9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9D:BA:89:EA:20:41:1F:3B:DA:B3:67:61:2B:A2:70:E2:7B:75:58 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:6b:d4:c9:6a:00:3f:f0:10:31:f5:97:c8:9e:a5:9d:2e:17: f9:62:20:60:98:bf:f6:65:6e:f1:23:2a:cf:79:ff:74:a1:6b: 18:61:03:df:95:7f:4c:c9:d6:ed:9e:05:28:64:cc:26:e2:4e: 35:7b:38:ef:30:50:f9:72:ad:83:b7:df:83:34:16:d5:cc:97: d9:2e:1c:df:a9:bd:71:ca:f7:82:7a:3d:6c:df:79:9e:01:9a: 89:e3:a0:73:87:51:86:ca:48:d4:7b:36:c2:a1:28:ed:f7:92: a6:d9:63:10:33:a8:1e:f1:0c:f4:1e:3a:d6:9f:64:74:b3:3b: d0:72:bc:f4:ef:90:10:a6:ca:58:67:be:80:4d:e9:d8:b8:6e: 58:89:6f:c0:42:5c:f2:11:0f:49:d3:fd:50:d0:a7:db:fa:d0: 57:88:a4:09:5f:20:c3:fa:b0:e3:85:a3:e3:d1:b3:d4:eb:d1: 89:1b:d2:8d:73:2a:a5:7e:a0:63:cf:26:ec:c8:5f:29:90:04: 07:d7:a8:b3:86:0a:55:72:8f:f3:ca:90:40:a0:f4:0c:8c:cb: d5:6a:c9:84:a0:cc:db:72:b7:18:eb:97:d2:f1:c0:c0:d2:8d: a2:ee:fb:b0:11:15:f6:9b:ba:c9:7e:66:f5:fa:1a:6b:bb:a4: 7b:15:b7:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjYwODE4MTg0ODUyWhcNMjYwODI1MTg0ODUyWjAYMRYwFAYD VQQDEw02YTg0YTkxNS1jYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9DDyDHwyHFPm3RspqQ16XBuKjtQEcGzeZlOC6uuIUP3TMipfASS1uEgDwlS gNqUr4GPiHmkXGVTpVBUm10hdsTLPIME6wU0cFOn8X5ZBVCD2tsps+DJajiqAoAd hnaajZdlf5lueHPXulQ3og5WseXsRRjGj0E0m/iIhvptQTLyDbyW5pT0xWCtmNRM ByL/c/qaL4GdCNO3dMhdsZto23+3980nmdBt+s9w4xTdncrJnbGtOYfMVN7T8aRY /LeIYpfDC/b+vARJmzJrTkabPrXOqFZRMvOFVhiIoCr5u/DVTlWeVUGT+qMdRaqf kESuAl6yoSwFRIFgJlHE0BPZTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuduonq IEEfO9qzZ2EronDie3VYMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ2vUyWoAP/AQMfWXyJ6lnS4X+WIgYJi/9mVu8SMqz3n/dKFrGGED35V/TMnW 7Z4FKGTMJuJONXs47zBQ+XKtg7ffgzQW1cyX2S4c36m9ccr3gno9bN95ngGaieOg c4dRhspI1Hs2wqEo7feSptljEDOoHvEM9B461p9kdLM70HK89O+QEKbKWGe+gE3p 2LhuWIlvwEJc8hEPSdP9UNCn2/rQV4ikCV8gw/qw44Wj49Gz1OvRiRvSjXMqpX6g Y88m7MhfKZAEB9eos4YKVXKP88qQQKD0DIzL1WrJhKDM23K3GOuX0vHAwNKNou77 sBEV9pu6yX5m9foaa7ukexW3og== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:10 2026 by rpki-client