$ rpki-client -vvf rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft File: tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft (raw, json) Hash identifier: AIe/RBfM11qmGNi7GWclfGbjL37WTRZ3GP9g5TYCP2g= Subject key identifier: AA:10:92:86:67:8A:C1:58:F9:BF:74:A3:27:CB:D3:86:D4:FA:C6:37 Authority key identifier: B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6 Certificate issuer: /CN=A91B637A/serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft Manifest number: 33 Signing time: Tue 07 Jul 2026 09:57:17 +0000 Manifest this update: Tue 07 Jul 2026 09:57:17 +0000 Manifest next update: Tue 14 Jul 2026 09:57:17 +0000 Files and hashes: 1: tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl (hash: RAAEFTH35Lm+FPrnUFWF4B0/ntp/3VzlClwoQw/qT/Y=) 2: D0F478D02E7011F1B3CAF1C4A3833773.roa (hash: bM7Q3Goo2yIx6mUK1MyLG8gg5MzYy2/CvHGPwmnvAsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 09:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B637A, serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6 Validity Not Before: Jul 7 09:57:17 2026 GMT Not After : Jul 14 09:57:17 2026 GMT Subject: CN=6a4ccd7d-ad9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:47:73:b2:e3:af:71:3a:bb:f0:1d:94:97: 04:04:66:3c:39:5b:6d:cb:8c:7a:8a:dd:1d:58:8a: a2:2e:89:36:0f:31:ac:8e:7f:9a:85:f3:2a:20:aa: 3b:ed:c8:61:45:7c:2e:60:d5:cb:1c:89:3b:3b:21: bb:dc:8b:1b:4c:bc:b2:2e:2e:33:5e:55:88:e1:69: 47:52:8e:f8:54:9f:52:3d:9d:43:a2:34:bb:90:75: 40:29:9e:6c:78:dc:94:67:66:5b:70:b8:6c:33:d7: 0a:63:26:2f:ad:f9:6e:05:9e:3e:38:e2:9e:d1:ee: da:e0:21:7c:1a:e7:73:26:ff:f0:3c:30:ea:3c:0a: c4:65:3d:84:82:89:09:86:bf:65:3c:f2:2c:57:5c: b4:8c:cb:2b:13:93:e8:a4:5a:9b:f6:5e:44:b4:38: 2e:2a:bd:93:4a:71:7b:9d:ef:ec:bf:2c:39:2e:f4: a0:0b:53:42:bd:21:d1:97:6e:16:74:da:f6:fb:ad: 86:e2:7f:e6:2f:32:08:33:8e:c9:4e:c4:85:71:bf: c3:3f:d2:1e:d3:02:1d:07:7e:ef:26:71:48:d4:da: 85:86:33:ee:45:29:66:27:f0:17:fc:4c:8f:20:d5: ef:e3:ce:bb:56:f6:68:2d:e4:d9:e8:e8:23:1f:3d: 3c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:92:86:67:8A:C1:58:F9:BF:74:A3:27:CB:D3:86:D4:FA:C6:37 X509v3 Authority Key Identifier: keyid:B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a0:9b:79:27:43:2e:35:fa:b9:5b:70:22:2e:ac:4b:9a:1a: 2f:4f:0a:03:9b:83:7b:cd:b0:0d:70:87:c6:0c:4a:c2:1e:70: 81:a5:3f:ad:97:f7:f2:9d:26:65:84:58:09:1d:f2:e7:85:cd: 4a:03:2c:4a:4b:80:f9:5b:3a:ce:fe:ad:c6:25:b1:5b:72:a6: 9b:3e:20:bd:c7:35:78:5c:06:91:b0:da:5c:a8:a2:49:b3:05: d1:9b:97:96:b7:bd:ca:a4:a2:38:6e:59:4e:b5:e9:b3:ae:1f: 80:19:b4:12:c2:ec:d6:09:14:47:ba:1f:57:e3:b2:fc:ad:7a: ae:aa:1b:78:fb:c0:9b:db:d1:fd:e0:47:29:a9:0b:09:12:58: 32:43:99:ff:1b:db:f6:99:db:2b:ed:e4:b0:b9:41:ff:49:44: 35:ff:27:3a:93:c1:35:ea:86:bc:4f:2c:70:44:80:34:a2:41: 7b:6d:fd:04:16:5b:f1:ec:04:3e:fc:15:5c:07:60:c9:9d:17: b0:f2:c1:39:58:48:62:70:91:a0:4b:f0:a5:3d:73:49:5b:72: 34:bb:45:55:a6:b5:d9:77:71:23:58:b5:ea:95:79:a3:c0:20: 1e:39:a9:d1:ae:75:5a:87:c7:a2:22:29:dc:da:cf:be:a3:5d: 0a:bd:a2:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjM3QTExMC8GA1UEBRMoQjVGREFEM0QxOEU3NDYyNENCMzk0MjNGQjUxNENBREJB Njc5MjZFNjAeFw0yNjA3MDcwOTU3MTdaFw0yNjA3MTQwOTU3MTdaMBgxFjAUBgNV BAMTDTZhNGNjZDdkLWFkOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+XEdzsuOvcTq78B2UlwQEZjw5W23LjHqK3R1YiqIuiTYPMayOf5qF8yogqjvt yGFFfC5g1csciTs7IbvcixtMvLIuLjNeVYjhaUdSjvhUn1I9nUOiNLuQdUApnmx4 3JRnZltwuGwz1wpjJi+t+W4Fnj444p7R7trgIXwa53Mm//A8MOo8CsRlPYSCiQmG v2U88ixXXLSMyysTk+ikWpv2XkS0OC4qvZNKcXud7+y/LDku9KALU0K9IdGXbhZ0 2vb7rYbif+YvMggzjslOxIVxv8M/0h7TAh0Hfu8mcUjU2oWGM+5FKWYn8Bf8TI8g 1e/jzrtW9mgt5Nno6CMfPTy9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqhCShmeK wVj5v3SjJ8vThtT6xjcwHwYDVR0jBBgwFoAUtf2tPRjnRiTLOUI/tRTK26Z5JuYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MzdBLzNBQzAzQjU2MkU3 MDExRjE4MUM1REY3M0EzODMzNzczL3RmMnRQUmpuUmlUTE9VSV90UlRLMjZaNUp1 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGYydFBSam5SaVRMT1VJX3RSVEsyNlo1SnVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MzdBLzNBQzAzQjU2MkU3MDExRjE4MUM1REY3M0EzODMzNzczL3RmMnRQUmpuUmlU TE9VSV90UlRLMjZaNUp1WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4oJt5J0MuNfq5W3AiLqxLmhovTwoDm4N7zbANcIfGDErCHnCBpT+tl/fynSZl hFgJHfLnhc1KAyxKS4D5WzrO/q3GJbFbcqabPiC9xzV4XAaRsNpcqKJJswXRm5eW t73KpKI4bllOtemzrh+AGbQSwuzWCRRHuh9X47L8rXquqht4+8Cb29H94EcpqQsJ ElgyQ5n/G9v2mdsr7eSwuUH/SUQ1/yc6k8E16oa8TyxwRIA0okF7bf0EFlvx7AQ+ /BVcB2DJnRew8sE5WEhicJGgS/ClPXNJW3I0u0VVprXZd3EjWLXqlXmjwCAeOanR rnVah8eiIinc2s++o10KvaIE -----END CERTIFICATE-----Generated at Wed Jul 8 21:03:33 2026 by rpki-client