$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft File: 0TPfZxvFk0ayGhHuzAit0MCiCQo.mft (raw, json) Hash identifier: THYx/JIxFBQlpKLUVmVQonnVwPBtleEDU7LeqTf+ISQ= Subject key identifier: E0:D4:50:84:DE:CB:6D:A3:0F:FD:49:34:AB:71:3B:36:F5:CB:DD:24 Authority key identifier: D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A Certificate issuer: /CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A Certificate serial: 0875 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft Manifest number: 0875 Signing time: Mon 22 Jun 2026 20:44:01 +0000 Manifest this update: Mon 22 Jun 2026 20:44:00 +0000 Manifest next update: Mon 29 Jun 2026 20:44:00 +0000 Files and hashes: 1: 0TPfZxvFk0ayGhHuzAit0MCiCQo.crl (hash: XgfxeCA/WXMaiZ/OmqMlz0kLtpI9j3D6Vw8Oot5sIcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8276, serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A Validity Not Before: Jun 22 20:44:00 2026 GMT Not After : Jun 29 20:44:00 2026 GMT Subject: CN=6a399e90-07e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:78:5e:e5:ec:31:d6:9e:6b:0d:ee:35:ca:54: a9:10:e8:17:01:05:43:a8:55:14:59:6a:0c:b0:c0: 9b:ee:30:f0:23:a3:72:f6:20:3b:80:e6:53:55:f4: c1:14:30:a9:d0:00:49:3c:ce:16:cf:fb:68:7a:5b: b9:90:50:76:96:8a:ec:df:da:7e:6a:24:84:72:1f: ad:e8:8f:83:0a:b5:4e:3e:b6:55:f6:a1:6c:f2:6d: 35:8f:19:bb:18:43:ac:45:5b:9a:6d:e4:d7:05:24: 55:76:1c:41:ef:9f:52:4d:a3:f9:f2:40:82:3a:37: 24:04:57:1c:90:64:56:1e:92:ee:f9:39:b9:32:5c: 6d:9e:bc:fd:11:65:33:cf:68:5a:10:2e:52:ce:61: 88:1d:44:38:30:55:6a:d0:e8:df:51:20:36:45:f7: 14:12:cc:7b:f9:cb:cb:f9:96:cf:f0:55:d1:db:06: 87:2d:56:09:17:79:c5:69:71:44:4c:7c:19:e1:17: e4:c7:a3:fc:80:f3:0f:ce:13:b2:cd:d1:81:cf:79: 7a:de:2d:0e:bf:1a:05:44:84:63:b7:9b:82:72:fc: ec:98:a8:79:57:51:67:90:eb:6b:28:03:d9:cc:f0: c3:d2:d5:2a:b7:5e:c1:51:1e:fd:ff:f4:fd:bd:01: 07:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D4:50:84:DE:CB:6D:A3:0F:FD:49:34:AB:71:3B:36:F5:CB:DD:24 X509v3 Authority Key Identifier: keyid:D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:5a:f1:83:1c:8c:62:e9:6a:20:7b:36:45:23:83:4c:df:f7: 32:71:ef:5b:d8:a2:c4:52:39:9c:ba:ca:6c:07:4a:a5:2b:20: 4e:db:66:eb:fe:d3:08:b1:c7:f9:34:cb:4f:d1:83:cf:af:5f: 8f:81:3d:db:0c:68:22:f2:9d:a2:84:b2:80:09:2a:30:8a:8e: eb:7f:e0:7b:74:9d:76:9a:7e:df:36:97:30:48:88:13:8d:b9: 1a:ad:0a:54:d2:a5:ea:bb:5b:3b:85:2b:49:b9:aa:09:5d:47: 29:64:d8:65:3b:bf:d0:5a:a9:66:2a:e4:e2:a1:b2:9d:2b:14: 9f:5a:e6:f0:c4:c7:c0:13:ff:12:30:44:36:a7:ab:b2:fc:58: 9e:77:92:f0:58:08:1d:3a:89:b0:27:47:3b:10:6c:ec:97:13: c1:16:33:13:9f:8b:ba:fe:34:a2:96:90:ad:df:ea:e2:10:0f: b4:6f:7e:19:ad:82:99:1b:cf:17:64:d9:71:d4:4f:21:25:e5: 10:99:83:2f:86:c9:d0:3b:9f:c0:05:20:bc:94:d3:b2:93:56: 14:71:29:4a:a1:be:36:39:7b:d2:f1:a3:e4:a3:5c:0d:2d:fd: 90:13:b6:06:09:2f:6a:83:3f:50:61:c3:3d:fa:e5:fc:51:37: 61:b0:0a:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNzYxMTAvBgNVBAUTKEQxMzNERjY3MUJDNTkzNDZCMjFBMTFFRUNDMDhBREQw QzBBMjA5MEEwHhcNMjYwNjIyMjA0NDAwWhcNMjYwNjI5MjA0NDAwWjAYMRYwFAYD VQQDEw02YTM5OWU5MC0wN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXhe5ewx1p5rDe41ylSpEOgXAQVDqFUUWWoMsMCb7jDwI6Ny9iA7gOZTVfTB FDCp0ABJPM4Wz/toelu5kFB2lors39p+aiSEch+t6I+DCrVOPrZV9qFs8m01jxm7 GEOsRVuabeTXBSRVdhxB759STaP58kCCOjckBFcckGRWHpLu+Tm5Mlxtnrz9EWUz z2haEC5SzmGIHUQ4MFVq0OjfUSA2RfcUEsx7+cvL+ZbP8FXR2waHLVYJF3nFaXFE THwZ4Rfkx6P8gPMPzhOyzdGBz3l63i0OvxoFRIRjt5uCcvzsmKh5V1FnkOtrKAPZ zPDD0tUqt17BUR79//T9vQEHzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODUUITe y22jD/1JNKtxOzb1y90kMB8GA1UdIwQYMBaAFNEz32cbxZNGshoR7swIrdDAogkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI3Ni84MTM4NzkzRUZF RjgxMUVBOUQ2NTJBNzRDNEY5QUUwMi8wVFBmWnh2RmswYXlHaEh1ekFpdDBNQ2lD UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBUUGZaeHZGazBheUdoSHV6QWl0ME1DaUNRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI3Ni84MTM4NzkzRUZFRjgxMUVBOUQ2NTJBNzRDNEY5QUUwMi8wVFBmWnh2Rmsw YXlHaEh1ekFpdDBNQ2lDUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaFrxgxyMYulqIHs2RSODTN/3MnHvW9iixFI5nLrKbAdKpSsgTttm6/7TCLHH +TTLT9GDz69fj4E92wxoIvKdooSygAkqMIqO63/ge3Sddpp+3zaXMEiIE425Gq0K VNKl6rtbO4UrSbmqCV1HKWTYZTu/0FqpZirk4qGynSsUn1rm8MTHwBP/EjBENqer svxYnneS8FgIHTqJsCdHOxBs7JcTwRYzE5+Luv40opaQrd/q4hAPtG9+Ga2CmRvP F2TZcdRPISXlEJmDL4bJ0DufwAUgvJTTspNWFHEpSqG+Njl70vGj5KNcDS39kBO2 BgkvaoM/UGHDPfrl/FE3YbAKuw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:18:05 2026 by rpki-client