$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft File: tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json) Hash identifier: 9FTkB6lce8y5mDooBJDThSo/GdWReBkXD3pkXt+bRAk= Subject key identifier: 77:2D:E0:6A:C7:99:86:DA:79:6C:BE:FE:47:2F:91:52:CC:58:B9:A5 Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft Manifest number: 021C Signing time: Thu 21 May 2026 02:58:15 +0000 Manifest this update: Thu 21 May 2026 02:58:14 +0000 Manifest next update: Thu 28 May 2026 02:58:14 +0000 Files and hashes: 1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: S904tNaG7LI+sqcjyteN4RQGL3Xbq5Flfj8vV0o8z4A=) 2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: pWAjmQn5SbEE6PdoMznAj34dV0v6ZXCFUuJiYeyqVgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Validity Not Before: May 21 02:58:14 2026 GMT Not After : May 28 02:58:14 2026 GMT Subject: CN=6a0e74c6-c824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:9d:cb:4f:e2:8f:3d:7d:03:26:1b:8c:51: c8:28:38:4f:ca:c3:37:f6:c0:75:46:57:8e:fb:66: 75:71:4a:c1:42:64:da:f3:ed:d1:b1:8e:6d:96:d3: e2:2f:e4:19:52:d8:38:2d:83:fa:f0:e5:59:cb:01: d6:bd:e1:fa:97:17:2f:21:2f:dc:af:e2:62:43:9e: 5c:1b:fd:6b:c8:e1:ae:92:37:d7:62:72:a5:3c:47: 18:94:04:4f:18:e1:b8:93:9d:25:c2:82:1a:03:55: 74:fa:f7:81:f8:6f:54:1b:25:3f:da:a4:cf:4f:8e: ac:d6:47:0f:d5:68:63:39:c9:9f:92:20:2a:d6:6f: 88:fa:90:70:c3:b2:22:d9:93:d0:9a:36:a1:53:68: 88:b8:9b:6e:db:ca:39:27:47:ed:ac:36:45:9e:6d: be:bc:49:fe:ca:a3:5f:4f:2d:da:2a:ce:f6:cb:b7: 1d:31:0f:a3:ab:14:aa:05:f6:1d:30:99:bf:02:92: 10:e6:77:b1:bd:3e:07:53:3d:5e:f2:2c:b6:c7:82: 77:d1:45:70:02:96:0a:63:63:97:fe:e8:ee:34:2b: 8e:ae:eb:4e:4b:bb:1b:43:2b:f2:8e:9b:52:2d:21: 05:ef:27:f4:54:2a:aa:9e:2a:2f:d6:af:b4:e6:8e: 5e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:E0:6A:C7:99:86:DA:79:6C:BE:FE:47:2F:91:52:CC:58:B9:A5 X509v3 Authority Key Identifier: keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:24:b8:9a:9d:7f:75:33:8f:ae:b7:b7:14:cb:35:07:35:d2: 28:b4:bc:3c:7a:d4:55:08:1a:69:5a:5c:20:df:0d:d3:32:ac: 9c:29:5d:f8:c0:a7:a5:9b:90:fd:2d:28:dd:2c:2c:3f:b0:7d: b0:16:f1:45:3a:1f:99:df:f3:82:7e:7f:db:5f:97:f1:ff:2b: 5c:e5:95:d7:10:43:1e:b8:82:5d:48:cd:1d:04:f9:a1:27:36: f9:9c:70:3a:69:ea:5f:73:b1:a5:86:9e:f6:f1:43:a4:51:13: 2d:c7:65:73:6a:2e:71:f4:f0:d7:3a:8f:56:17:6b:9b:b8:d9: 98:69:d4:11:f1:08:5f:85:62:59:36:9b:ef:a0:cd:94:7e:09: b0:08:38:8d:d7:82:2a:e9:d3:6c:f8:5f:f7:68:df:20:22:c1: 93:d5:52:fe:a5:c6:2e:f7:e1:63:d6:6d:c4:72:9a:8b:e3:5c: 57:aa:76:3c:b6:70:d3:1f:59:49:9f:45:ea:8e:1b:5f:b0:96: 74:6d:d4:bc:ea:81:22:f3:2f:35:0a:df:c3:b9:3c:f6:35:2d: a3:a6:4e:7b:f3:32:7a:97:6a:8b:59:a8:55:0c:c4:a5:63:b9: d6:0d:04:04:0f:b3:95:79:52:52:5c:c7:a4:70:83:3d:7f:5c: af:35:97:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB MkFDNkM4OUMwHhcNMjYwNTIxMDI1ODE0WhcNMjYwNTI4MDI1ODE0WjAYMRYwFAYD VQQDEw02YTBlNzRjNi1jODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweKdy0/ijz19AyYbjFHIKDhPysM39sB1RleO+2Z1cUrBQmTa8+3RsY5tltPi L+QZUtg4LYP68OVZywHWveH6lxcvIS/cr+JiQ55cG/1ryOGukjfXYnKlPEcYlARP GOG4k50lwoIaA1V0+veB+G9UGyU/2qTPT46s1kcP1WhjOcmfkiAq1m+I+pBww7Ii 2ZPQmjahU2iIuJtu28o5J0ftrDZFnm2+vEn+yqNfTy3aKs72y7cdMQ+jqxSqBfYd MJm/ApIQ5nexvT4HUz1e8iy2x4J30UVwApYKY2OX/ujuNCuOrutOS7sbQyvyjptS LSEF7yf0VCqqniov1q+05o5ecQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHct4GrH mYbaeWy+/kcvkVLMWLmlMB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNEMi80MkMxRDhGODJDODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhp d1hYQkNCR2gwNHFpckd5SncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAACS4mp1/dTOPrre3FMs1BzXSKLS8PHrUVQgaaVpcIN8N0zKsnCld+MCnpZuQ /S0o3SwsP7B9sBbxRTofmd/zgn5/21+X8f8rXOWV1xBDHriCXUjNHQT5oSc2+Zxw OmnqX3OxpYae9vFDpFETLcdlc2oucfTw1zqPVhdrm7jZmGnUEfEIX4ViWTab76DN lH4JsAg4jdeCKunTbPhf92jfICLBk9VS/qXGLvfhY9ZtxHKai+NcV6p2PLZw0x9Z SZ9F6o4bX7CWdG3UvOqBIvMvNQrfw7k89jUto6ZOe/Myepdqi1moVQzEpWO51g0E BA+zlXlSUlzHpHCDPX9crzWXJA== -----END CERTIFICATE-----Generated at Thu May 21 11:59:08 2026 by rpki-client