$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: ciSU4C6IuFf4OHyC9DpWLBY1s9UHhRb3a7yKvyTU/WM= Subject key identifier: 88:A0:CA:F7:99:BC:9D:4B:DF:0C:67:D0:8B:BE:BE:D6:8E:1E:7D:18 Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0D95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0D68 Signing time: Tue 18 Aug 2026 18:22:01 +0000 Manifest this update: Tue 18 Aug 2026 18:22:00 +0000 Manifest next update: Tue 25 Aug 2026 18:22:00 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: 4NImMLd/Cya9L+T8cIJ+uWCThlZCsy4korjnIZGc4Y0=) 2: F824C588FF7A11F0B218EB915B6F56BC.roa (hash: vyzv0f1THJyglSIA32Cmr/3tLhp6nkKIDvP00vthIq0=) 3: 4F383CB6FF6B11F0AD4BC885576F56BC.roa (hash: WGJtveG7MyCaKyrbykvOBWfbJGid2bolS7+yA+NkoTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3477 (0xd95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Aug 18 18:22:00 2026 GMT Not After : Aug 25 18:22:00 2026 GMT Subject: CN=6a84a2c9-3383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:f5:94:f4:c6:50:1c:6d:fa:8a:73:f0:f4: 9f:c7:b2:4f:5c:e9:99:ad:fa:28:e3:65:be:d7:6b: ae:b0:e0:e7:2f:16:2d:12:8a:48:58:b2:e4:db:80: da:ac:f6:ca:8e:38:29:60:02:75:9c:52:ad:17:04: ed:7a:d6:75:ed:d5:b8:18:8e:ca:5f:15:74:dc:2d: 67:c5:d8:5a:36:b3:35:f4:1a:2d:65:72:a6:25:d3: e8:0d:7d:30:50:6e:72:c5:23:2e:2b:dd:b5:10:bf: 84:2a:a0:c6:34:a3:a4:de:00:ef:97:30:73:c9:61: d7:6f:8f:a7:c7:eb:54:5a:08:c9:e6:84:eb:41:f5: 2d:f0:08:90:85:c0:d2:38:e2:8c:47:57:3b:d3:45: 7f:cb:fc:f9:0f:72:db:8c:b8:bb:64:95:39:32:e8: 29:12:cb:a3:82:47:c9:80:37:4f:99:f0:7e:d5:c9: ac:30:20:66:bc:07:8a:6d:ac:e2:8b:60:5c:67:8d: 7f:43:8c:0b:cc:dc:97:72:e2:32:25:ac:0d:1c:f3: 67:d9:3a:34:4c:e3:e1:28:ea:86:3c:ac:0b:65:bc: e1:70:1b:fd:43:ae:fd:c9:e1:bb:82:30:c6:9b:52: ca:c2:61:ae:60:09:38:47:20:6a:78:9c:95:5f:b7: d8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A0:CA:F7:99:BC:9D:4B:DF:0C:67:D0:8B:BE:BE:D6:8E:1E:7D:18 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:62:50:19:29:82:74:89:38:30:9f:c0:b3:e1:a1:82:af:2b: 8e:56:00:8c:ee:90:00:05:f5:7e:08:2c:1e:e4:13:f4:93:04: 83:3c:51:74:e1:dd:d4:78:53:b7:16:a1:71:78:b7:5e:be:87: a7:5a:e7:e9:62:aa:7a:1b:e9:07:de:19:9e:e0:ce:c0:c3:01: 25:dc:6c:7a:30:1c:28:fc:57:22:ff:77:15:c9:da:b8:b5:7f: df:6d:73:67:df:87:df:2a:82:85:64:50:b2:b1:56:6f:9a:bd: 66:38:bd:b7:1c:3c:ef:7d:87:a9:02:c0:64:19:50:b3:89:44: 4d:c0:ee:7f:ac:9f:dc:f6:fa:46:84:7c:2a:b2:c3:a0:93:78: c6:17:1b:3a:0b:a2:8c:6c:2f:00:95:67:a1:78:65:1b:70:64: 9d:b9:c0:fc:36:d1:65:34:e4:d7:ac:83:87:8e:1e:44:31:eb: 61:cf:c7:96:33:0a:6c:cf:63:11:6d:23:f5:19:87:3d:d6:2b: ce:95:99:11:63:70:9f:24:a8:92:36:7d:64:ae:7d:79:02:f3: 9f:04:9a:cd:ef:80:55:42:e0:01:f0:44:6d:ba:e5:94:70:41: a5:88:24:fa:2d:c8:34:f0:a3:c8:0e:12:47:ec:22:d6:24:c8: 13:38:bd:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjYwODE4MTgyMjAwWhcNMjYwODI1MTgyMjAwWjAYMRYwFAYD VQQDEw02YTg0YTJjOS0zMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLn1lPTGUBxt+opz8PSfx7JPXOmZrfoo42W+12uusODnLxYtEopIWLLk24Da rPbKjjgpYAJ1nFKtFwTtetZ17dW4GI7KXxV03C1nxdhaNrM19BotZXKmJdPoDX0w UG5yxSMuK921EL+EKqDGNKOk3gDvlzBzyWHXb4+nx+tUWgjJ5oTrQfUt8AiQhcDS OOKMR1c700V/y/z5D3LbjLi7ZJU5MugpEsujgkfJgDdPmfB+1cmsMCBmvAeKbazi i2BcZ41/Q4wLzNyXcuIyJawNHPNn2To0TOPhKOqGPKwLZbzhcBv9Q679yeG7gjDG m1LKwmGuYAk4RyBqeJyVX7fYuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIigyveZ vJ1L3wxn0Iu+vtaOHn0YMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKWJQGSmCdIk4MJ/As+Ghgq8rjlYAjO6QAAX1fggsHuQT9JMEgzxRdOHd1HhT txahcXi3Xr6Hp1rn6WKqehvpB94ZnuDOwMMBJdxsejAcKPxXIv93FcnauLV/321z Z9+H3yqChWRQsrFWb5q9Zji9txw8732HqQLAZBlQs4lETcDuf6yf3Pb6RoR8KrLD oJN4xhcbOguijGwvAJVnoXhlG3BknbnA/DbRZTTk16yDh44eRDHrYc/HljMKbM9j EW0j9RmHPdYrzpWZEWNwnySokjZ9ZK59eQLznwSaze+AVULgAfBEbbrllHBBpYgk +i3INPCjyA4SR+wi1iTIEzi9Gg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:43 2026 by rpki-client