$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: 0O05RuWzcnuIVn+AzQsQENsgYgYFi7EHmqlui5Z0HXk= Subject key identifier: 9E:2C:07:4B:7A:48:2C:BA:52:B7:47:93:AE:88:35:A9:2A:7A:27:47 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 053D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 04FF Signing time: Tue 21 Jul 2026 00:42:37 +0000 Manifest this update: Tue 21 Jul 2026 00:42:36 +0000 Manifest next update: Tue 28 Jul 2026 00:42:36 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: DWsSeVrhy1Mz4qTWfSWoIAyfIWzPp+iZwNr8JWDN+RQ=) 2: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=) 3: AFE4C282750E11F1AD641DF56EA30FBC.roa (hash: 1VaOurL2pMpKT7+o6fq7MiAiKhAra7u+Mj1RfzpWDXk=) 4: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=) 5: A6E8B05401D611F1A42696D7366F56BC.roa (hash: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g=) 6: 8000E572494F11F1BF737F10BE833773.roa (hash: RSiETjjKzvCQ0UxbntfjXpMp1b8caiQTMLYifGRmsgs=) 7: 0FA47F24751811F18B7B702072A30FBC.roa (hash: pV3GPCRI6eTouBuUqNrjOnvugz77VcQii6lWuzsU7aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Jul 21 00:42:36 2026 GMT Not After : Jul 28 00:42:36 2026 GMT Subject: CN=6a5ec07d-15ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:96:f7:27:4a:b5:6b:c7:84:83:36:25:47:11: a1:a5:bc:34:57:cc:78:f8:ad:10:6c:6f:ea:51:22: b3:3f:9e:7f:e1:63:45:02:3e:46:b1:78:63:9c:be: e9:47:a8:98:04:b1:59:0b:51:46:bc:3e:7a:fe:61: 1e:d3:fc:1a:00:01:6c:62:1e:dc:e9:cb:8e:a8:4f: 61:91:b0:03:76:c8:2a:c0:90:16:ff:e9:e9:81:59: a2:bc:eb:a6:0d:5d:ab:2d:3a:37:f5:84:73:39:f8: 25:eb:9b:44:f0:c3:de:1d:c9:58:76:a6:90:8c:36: 80:93:79:d7:06:23:cc:68:e8:5b:60:14:4c:ef:98: 59:96:bb:13:de:df:b6:65:69:1c:84:0c:06:51:02: 56:05:7a:96:b6:4e:9b:00:39:1f:da:fb:75:a1:28: b8:bf:ff:6d:a0:9c:2c:3e:ac:80:b2:d6:35:d3:77: f5:b2:0b:0b:ef:01:82:f9:8d:c0:95:28:98:86:d5: 2e:2c:99:d3:53:78:a1:fd:15:d5:1b:ae:6f:87:a7: e7:0a:a0:88:a0:f7:2a:e2:83:19:72:cc:6d:12:65: 34:0e:39:50:2a:1d:bf:fc:4b:31:ce:a6:aa:d5:d4: fe:98:4b:0d:47:db:de:39:b2:b3:5f:f7:da:d8:41: 86:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2C:07:4B:7A:48:2C:BA:52:B7:47:93:AE:88:35:A9:2A:7A:27:47 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1b:e6:db:a0:9c:7e:a1:53:51:33:8d:4c:0f:9b:cb:51:11: ba:6b:32:83:fd:65:1a:5d:ec:a0:ae:31:c5:55:30:91:1d:5e: 23:b3:d3:b5:2f:eb:2b:a1:21:4d:96:7d:af:b2:b8:51:19:00: b5:65:af:63:dd:f8:d3:a5:3d:ea:f1:69:60:13:06:2b:28:77: e2:da:3e:f2:2c:e0:8e:12:48:c3:8d:f4:0b:5d:66:53:ed:6c: d1:24:ee:99:e0:26:58:c6:e5:97:ee:10:03:89:31:39:42:d3: 02:64:e6:07:62:3f:76:b7:fe:70:3a:b9:5f:1c:bd:c7:3b:68: 88:96:3c:c1:f3:87:20:c4:9f:74:dd:d0:25:67:a6:b4:b3:fb: 90:f8:26:5e:7f:f4:44:07:21:05:d4:82:52:56:a2:ed:f5:d8: af:93:64:59:a7:c0:bd:58:79:f3:b6:cc:dd:90:a2:97:75:42: 37:d5:4c:eb:54:81:85:9f:49:d6:14:0f:d5:52:27:47:ed:e4: 97:f8:09:b3:04:ee:9d:71:4e:8e:24:0e:75:db:7f:9b:70:08: af:4e:e7:86:a7:b9:52:d2:12:a2:1c:eb:87:4f:7d:36:4b:a4: 91:32:a1:3f:0a:6b:a6:a9:e5:ed:e0:49:f4:0e:04:2a:ef:27: 48:1d:ee:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjYwNzIxMDA0MjM2WhcNMjYwNzI4MDA0MjM2WjAYMRYwFAYD VQQDEw02YTVlYzA3ZC0xNWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiJb3J0q1a8eEgzYlRxGhpbw0V8x4+K0QbG/qUSKzP55/4WNFAj5GsXhjnL7p R6iYBLFZC1FGvD56/mEe0/waAAFsYh7c6cuOqE9hkbADdsgqwJAW/+npgVmivOum DV2rLTo39YRzOfgl65tE8MPeHclYdqaQjDaAk3nXBiPMaOhbYBRM75hZlrsT3t+2 ZWkchAwGUQJWBXqWtk6bADkf2vt1oSi4v/9toJwsPqyAstY103f1sgsL7wGC+Y3A lSiYhtUuLJnTU3ih/RXVG65vh6fnCqCIoPcq4oMZcsxtEmU0DjlQKh2//Esxzqaq 1dT+mEsNR9veObKzX/fa2EGG7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4sB0t6 SCy6UrdHk66INakqeidHMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAihvm26CcfqFTUTONTA+by1ERumsyg/1lGl3soK4xxVUwkR1eI7PTtS/rK6Eh TZZ9r7K4URkAtWWvY93406U96vFpYBMGKyh34to+8izgjhJIw430C11mU+1s0STu meAmWMbll+4QA4kxOULTAmTmB2I/drf+cDq5Xxy9xztoiJY8wfOHIMSfdN3QJWem tLP7kPgmXn/0RAchBdSCUlai7fXYr5NkWafAvVh587bM3ZCil3VCN9VM61SBhZ9J 1hQP1VInR+3kl/gJswTunXFOjiQOddt/m3AIr07nhqe5UtISohzrh099NkukkTKh Pwprpqnl7eBJ9A4EKu8nSB3uSw== -----END CERTIFICATE-----Generated at Tue Jul 21 17:41:01 2026 by rpki-client