$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.mft File: tJrkWmTBXfbsnNS96TvAnMyFSqk.mft (raw, json) Hash identifier: 3wdkap1ywqnllqhrtxSEuf32sbm7miy9ihKzOVas96E= Subject key identifier: BC:39:70:67:19:67:D1:D1:35:67:44:32:DF:CD:30:26:22:C6:9B:17 Authority key identifier: B4:9A:E4:5A:64:C1:5D:F6:EC:9C:D4:BD:E9:3B:C0:9C:CC:85:4A:A9 Certificate issuer: /CN=A91D8E54/serialNumber=B49AE45A64C15DF6EC9CD4BDE93BC09CCC854AA9 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJrkWmTBXfbsnNS96TvAnMyFSqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.mft Manifest number: 23 Signing time: Tue 23 Jun 2026 09:08:54 +0000 Manifest this update: Tue 23 Jun 2026 09:08:53 +0000 Manifest next update: Tue 30 Jun 2026 09:08:53 +0000 Files and hashes: 1: tJrkWmTBXfbsnNS96TvAnMyFSqk.crl (hash: wNNBNLIW8ZSthKVJYh4zRThlk2D4IypF12Gx/GMBvLI=) 2: CF9FB88A47A911F18E8066B9A7833773.roa (hash: HF0d2lda9wp6iMYhcSHsyNjUyVPs7Elpjku5OYERxlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.crl rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJrkWmTBXfbsnNS96TvAnMyFSqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 09:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8E54, serialNumber=B49AE45A64C15DF6EC9CD4BDE93BC09CCC854AA9 Validity Not Before: Jun 23 09:08:53 2026 GMT Not After : Jun 30 09:08:53 2026 GMT Subject: CN=6a3a4d26-b0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:1b:4b:cd:31:15:4d:6c:8a:56:22:bd:7f: c6:48:42:81:81:6b:4a:0a:ea:9f:bd:a9:8e:32:6e: 4e:dd:25:36:b8:c6:a2:b9:a9:99:28:f3:5c:53:10: 74:ae:19:a5:f0:be:dd:1c:5b:a1:36:02:11:8f:53: 1d:dd:e1:56:6d:96:c5:b6:ae:f6:15:9d:16:a2:46: 74:f6:59:2e:5a:ac:fa:42:e3:8f:67:f0:55:6a:ff: 89:ee:04:97:d9:89:39:6a:cf:84:dc:29:55:a8:9d: c7:09:84:d2:b3:75:96:95:f0:12:28:81:42:5c:9a: d1:c6:42:55:e2:22:b4:50:cc:de:97:8f:26:7d:bd: e1:da:b4:17:00:aa:d8:11:ac:20:29:b1:6a:b7:80: 88:22:76:f8:19:88:39:ab:5e:97:74:85:29:0d:69: 19:1f:9c:06:e7:03:f7:26:a2:99:f0:47:1a:56:8e: 9f:d7:1d:db:ee:f5:76:f8:73:64:6c:86:94:af:15: 01:23:40:55:34:91:b5:f7:41:79:63:d0:89:ec:2e: a2:6e:42:a5:b4:67:b3:66:6a:fe:93:49:45:00:21: a0:f6:1e:16:cb:e6:58:7e:da:36:55:24:68:0f:d4: 1f:ad:7e:b2:e3:f0:0e:b7:f1:a3:2b:d3:21:32:a2: 22:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:39:70:67:19:67:D1:D1:35:67:44:32:DF:CD:30:26:22:C6:9B:17 X509v3 Authority Key Identifier: keyid:B4:9A:E4:5A:64:C1:5D:F6:EC:9C:D4:BD:E9:3B:C0:9C:CC:85:4A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJrkWmTBXfbsnNS96TvAnMyFSqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:de:23:1e:f5:a5:da:e1:6e:9b:5b:01:5d:b5:55:e0:5b:c4: 0d:0a:95:70:7a:f5:e8:bf:43:b4:e9:d8:a1:63:81:bf:04:5c: f6:cb:6f:0d:78:23:c3:8b:47:ff:5b:53:c3:aa:5a:ea:16:63: d3:61:ba:39:0d:f3:2b:b3:b4:be:0f:94:a2:a1:87:78:05:f4: d8:69:d6:e0:3e:40:f9:03:7c:2f:10:53:6c:2b:e1:5f:e6:d5: f1:eb:fe:6a:2a:e8:14:59:00:0b:9e:17:0d:e8:a1:ca:ec:da: 51:95:25:f9:91:90:7b:71:7b:20:01:19:e1:8c:ea:bc:59:7a: 3f:82:26:b4:27:0c:8d:3e:7b:d7:a2:60:26:c5:7d:71:41:9c: 66:96:61:fe:d1:27:4c:fe:e6:34:18:30:6f:38:09:1c:57:69: 22:5f:f8:f8:4a:6e:cd:76:3e:94:19:29:a8:c8:42:c2:06:b9: 73:c0:d0:0b:3a:e8:1d:ba:fc:bc:cf:28:ec:bd:d6:c9:e8:24: a4:f7:d8:85:4a:fa:28:64:a7:a0:73:d2:eb:ae:0f:4e:3b:0d: 79:35:ac:16:81:2a:7e:24:9f:5d:ac:92:d8:77:c2:88:95:f3: 11:ea:68:a0:77:aa:c8:25:a5:05:98:f9:43:f5:a5:a1:c6:9a: a2:b1:37:1c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEU1NDExMC8GA1UEBRMoQjQ5QUU0NUE2NEMxNURGNkVDOUNENEJERTkzQkMwOUND Qzg1NEFBOTAeFw0yNjA2MjMwOTA4NTNaFw0yNjA2MzAwOTA4NTNaMBgxFjAUBgNV BAMTDTZhM2E0ZDI2LWIwYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCokBtLzTEVTWyKViK9f8ZIQoGBa0oK6p+9qY4ybk7dJTa4xqK5qZko81xTEHSu GaXwvt0cW6E2AhGPUx3d4VZtlsW2rvYVnRaiRnT2WS5arPpC449n8FVq/4nuBJfZ iTlqz4TcKVWonccJhNKzdZaV8BIogUJcmtHGQlXiIrRQzN6XjyZ9veHatBcAqtgR rCApsWq3gIgidvgZiDmrXpd0hSkNaRkfnAbnA/cmopnwRxpWjp/XHdvu9Xb4c2Rs hpSvFQEjQFU0kbX3QXlj0InsLqJuQqW0Z7Nmav6TSUUAIaD2HhbL5lh+2jZVJGgP 1B+tfrLj8A638aMr0yEyoiK/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvDlwZxln 0dE1Z0Qy380wJiLGmxcwHwYDVR0jBBgwFoAUtJrkWmTBXfbsnNS96TvAnMyFSqkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4RTU0L0RBODA1RkIwNDE0 MjExRjE4RjE0NzhCN0M0ODMzNzczL3RKcmtXbVRCWGZic25OUzk2VHZBbk15RlNx ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEpya1dtVEJYZmJzbk5TOTZUdkFuTXlGU3FrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 RTU0L0RBODA1RkIwNDE0MjExRjE4RjE0NzhCN0M0ODMzNzczL3RKcmtXbVRCWGZi c25OUzk2VHZBbk15RlNxay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAS3iMe9aXa4W6bWwFdtVXgW8QNCpVwevXov0O06dihY4G/BFz2y28NeCPDi0f/ W1PDqlrqFmPTYbo5DfMrs7S+D5SioYd4BfTYadbgPkD5A3wvEFNsK+Ff5tXx6/5q KugUWQALnhcN6KHK7NpRlSX5kZB7cXsgARnhjOq8WXo/gia0JwyNPnvXomAmxX1x QZxmlmH+0SdM/uY0GDBvOAkcV2kiX/j4Sm7Ndj6UGSmoyELCBrlzwNALOugduvy8 zyjsvdbJ6CSk99iFSvooZKegc9Lrrg9OOw15NawWgSp+JJ9drJLYd8KIlfMR6mig d6rIJaUFmPlD9aWhxpqisTcc -----END CERTIFICATE-----Generated at Wed Jun 24 01:45:29 2026 by rpki-client