$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: uKB2VckFiK/i2hYlgVgLC5tAtHwKAChzkCy/+MAN6yI= Subject key identifier: D2:63:7C:2C:9F:8C:02:2F:42:96:74:3B:93:15:FE:8E:BC:9B:95:FC Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0DF1 Signing time: Mon 20 Jul 2026 20:44:36 +0000 Manifest this update: Mon 20 Jul 2026 20:44:35 +0000 Manifest next update: Mon 27 Jul 2026 20:44:35 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: lIZO7bLFHS2GLjL9uCbz5TGg7KQbQk3DDNvyk/PBT7I=) 2: A1B8D10EF5C511EF83B21246C4F9AE02.roa (hash: V07yp4azfzM5YFQd3DFJvRMzAViuDBC6g0jJfgu6wvI=) 3: 8E4BBF50F5C511EF89110646C4F9AE02.roa (hash: 1qbYu5KRZI3rxH4kzvhF/miC5oW7IXAqReX/2/VUDaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 20:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Jul 20 20:44:35 2026 GMT Not After : Jul 27 20:44:35 2026 GMT Subject: CN=6a5e88b4-7654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:f7:3d:35:ce:46:08:38:f9:50:6b:5b:55: c7:b4:14:e9:69:5c:42:7e:96:df:01:e3:d7:f6:05: 64:e9:e9:c6:d9:c9:b0:0e:bb:9e:17:d3:fe:22:48: 22:84:c3:a9:96:64:5c:ac:f7:61:c5:c5:28:47:31: ad:5a:04:cf:f0:92:d0:f0:5b:be:f9:46:8d:df:1b: 71:41:ad:95:04:e0:97:3d:05:7e:b8:c1:61:5c:ef: e8:f9:da:76:54:58:1f:49:ea:10:d5:a0:b4:d6:ea: 5a:80:7c:b0:b8:a6:59:b0:41:35:4b:c7:bc:a6:6f: a1:82:ed:bf:f8:1f:36:e3:3e:d5:3e:60:b7:26:3f: 32:4e:bf:71:02:c8:f3:88:ef:f2:54:62:93:75:16: ac:cb:d7:4e:9b:b7:b6:24:c0:99:1e:4e:55:be:c9: 09:51:16:c7:98:01:07:6b:ad:b6:ee:ad:45:74:d9: 8e:c8:a6:fa:3d:03:bc:7a:78:2f:29:da:bf:c7:bb: 37:7e:05:3b:09:f2:89:93:da:ed:62:c8:a5:56:52: de:54:58:e4:74:42:f1:49:35:19:72:89:a1:55:23: c0:9e:ec:ad:eb:16:a6:70:72:ed:c1:a2:36:a1:2b: 86:40:a3:d8:8d:f2:49:7d:74:80:c5:b2:2b:58:32: 29:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:63:7C:2C:9F:8C:02:2F:42:96:74:3B:93:15:FE:8E:BC:9B:95:FC X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d7:10:fc:ef:8d:b5:4d:be:37:0e:f5:14:ca:60:93:87:10: aa:d7:17:37:b3:30:e1:66:3f:93:ec:50:38:eb:4a:07:a3:22: fa:c1:c8:e1:61:12:c2:0f:f4:99:e8:2e:61:6c:4e:17:fd:c5: d6:07:15:a5:4a:43:6e:01:d8:a7:04:ab:c6:00:eb:15:72:df: 03:1a:b2:5f:0e:74:b4:1f:2e:6e:34:61:92:cd:5f:19:19:18: 2a:38:88:0f:92:d1:7f:2a:e3:38:df:fa:6b:c8:c4:60:7b:12: 67:21:7b:14:f5:91:32:b5:6f:f5:c3:26:77:9a:d3:2e:2f:f6: 23:61:31:62:0a:ab:69:97:62:02:ef:45:ee:59:a9:36:75:5c: f1:db:13:d6:4c:f2:69:d0:81:a3:79:d2:bd:11:fe:9a:07:e8: 27:3c:5d:61:7e:72:f8:1e:e6:80:de:8c:32:dc:7a:b1:3c:56: 84:75:76:3e:bd:15:e3:6f:78:49:28:50:cd:12:3f:f9:1a:ab: e9:11:81:2d:81:23:11:14:05:59:48:63:54:d3:76:c4:5d:93: 80:22:d7:c7:ad:ff:96:12:2d:22:ae:2f:08:56:2f:2c:e6:19: b0:26:7a:e8:23:ff:86:f3:b6:82:d7:9e:7f:be:69:2b:18:dd: 16:06:b7:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjYwNzIwMjA0NDM1WhcNMjYwNzI3MjA0NDM1WjAYMRYwFAYD VQQDEw02YTVlODhiNC03NjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dv3PTXORgg4+VBrW1XHtBTpaVxCfpbfAePX9gVk6enG2cmwDrueF9P+Ikgi hMOplmRcrPdhxcUoRzGtWgTP8JLQ8Fu++UaN3xtxQa2VBOCXPQV+uMFhXO/o+dp2 VFgfSeoQ1aC01upagHywuKZZsEE1S8e8pm+hgu2/+B824z7VPmC3Jj8yTr9xAsjz iO/yVGKTdRasy9dOm7e2JMCZHk5VvskJURbHmAEHa6227q1FdNmOyKb6PQO8engv Kdq/x7s3fgU7CfKJk9rtYsilVlLeVFjkdELxSTUZcomhVSPAnuyt6xamcHLtwaI2 oSuGQKPYjfJJfXSAxbIrWDIp+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJjfCyf jAIvQpZ0O5MV/o68m5X8MB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJtcQ/O+NtU2+Nw71FMpgk4cQqtcXN7Mw4WY/k+xQOOtKB6Mi+sHI4WESwg/0 meguYWxOF/3F1gcVpUpDbgHYpwSrxgDrFXLfAxqyXw50tB8ubjRhks1fGRkYKjiI D5LRfyrjON/6a8jEYHsSZyF7FPWRMrVv9cMmd5rTLi/2I2ExYgqraZdiAu9F7lmp NnVc8dsT1kzyadCBo3nSvRH+mgfoJzxdYX5y+B7mgN6MMtx6sTxWhHV2Pr0V4294 SShQzRI/+Rqr6RGBLYEjERQFWUhjVNN2xF2TgCLXx63/lhItIq4vCFYvLOYZsCZ6 6CP/hvO2gteef75pKxjdFga3jw== -----END CERTIFICATE-----Generated at Tue Jul 21 23:30:59 2026 by rpki-client