$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: Y8VFo8vuyupZOLSt6gLMi0HaVc+6luSbsAmN27FrF1E= Subject key identifier: D9:EA:B7:6F:34:BC:7D:BD:7C:08:C6:1D:CD:BB:03:CA:29:F9:1D:06 Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 09FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 2183 Signing time: Sun 26 Jul 2026 16:42:00 +0000 Manifest this update: Sun 26 Jul 2026 16:41:59 +0000 Manifest next update: Sun 02 Aug 2026 16:41:59 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: BYuRSp6WsJ6i3HMbMyqkBIXXl24dCHbWNAMt8a795WA=) 2: 5FBC810E2C6C11F1AFD97E4FB3833773.roa (hash: g2RLVtOivjuUFJpHbhY01dBDwhC9Sd+LiRmcxISqRKU=) 3: EDA7924C4C6A11F18E27EE0BC2833773.roa (hash: 1Bx4zBsmcdQadh2Lc0q70WKfY8U9Q8aKMXPEm63RlMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 16:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2556 (0x9fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Jul 26 16:41:59 2026 GMT Not After : Aug 2 16:41:59 2026 GMT Subject: CN=6a6638d7-8619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:f7:96:6a:19:cc:31:ef:ff:f1:89:68:c7: 14:b0:4d:dc:fd:be:1c:16:a8:51:92:22:c8:3b:4d: 1e:a4:e3:0f:f6:87:d6:4b:ac:5f:27:11:ff:9c:2b: 06:04:a7:dd:2f:08:cf:0a:0a:19:56:a0:34:c6:0b: 5d:03:bb:fb:ed:78:7a:a0:5e:d9:17:38:e3:1f:44: 63:09:44:80:12:d7:b6:41:5a:8d:10:4d:e7:c0:93: 28:25:d9:ec:90:33:8c:48:28:8d:ca:5d:be:4d:b3: 0b:37:6e:43:81:94:7a:f2:e1:d1:7c:b4:e1:c4:7a: b5:c4:1d:fc:ff:6e:6b:36:85:e8:e5:46:8b:7e:2e: 3b:b4:a8:30:e2:d4:b3:45:3c:49:5d:82:39:d7:88: 7b:d0:18:e3:6c:2e:f2:bf:78:cc:f1:64:ae:92:6a: 79:f6:1d:49:1a:41:39:cc:a4:e7:f6:43:8e:22:84: 3c:f7:f8:f7:f7:fa:63:39:e9:42:a6:56:98:1b:6d: 9d:fa:0f:ae:3f:b7:d0:77:bf:83:c4:b0:be:90:77: 74:24:d5:e7:2e:e0:85:ad:3c:b6:65:b6:28:a0:84: 89:0f:ab:30:12:86:21:85:38:6f:00:5f:5b:33:00: 38:2b:98:d5:3d:8f:41:9e:29:09:ed:0e:a4:d2:87: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EA:B7:6F:34:BC:7D:BD:7C:08:C6:1D:CD:BB:03:CA:29:F9:1D:06 X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:34:92:f7:44:08:81:ba:20:91:9a:36:53:e5:04:31:3c:8f: 3c:05:03:d0:a6:51:f9:1b:da:01:a6:79:40:3b:03:81:73:a4: 03:2e:58:53:aa:c2:f2:31:f3:28:7f:fa:03:cc:a7:93:74:57: a4:d8:00:ec:ea:89:99:44:2f:2d:2b:05:d1:7b:b0:2e:00:86: fe:21:4a:13:4d:b8:5c:10:47:6f:9d:3d:ac:50:8a:ab:3e:44: 55:33:0e:9d:c9:02:68:bc:a5:9d:bc:0d:3d:88:01:78:31:da: c1:36:dc:b0:12:88:03:67:0c:c3:bf:ca:4e:9d:71:4a:1a:14: ac:68:17:ab:81:b1:b1:0e:e4:29:5c:c1:fa:cd:61:42:5e:3a: d5:4d:66:93:03:63:7d:f6:43:a4:1d:5b:70:c6:9b:3e:b1:80: 72:d2:64:15:e9:42:e6:ff:fe:41:71:e2:6a:6c:db:c0:60:f7: 3d:f2:0e:4c:e3:65:e9:0a:32:66:ed:a1:13:b9:1d:03:bc:ea: d6:6d:e3:43:d6:17:3d:11:1d:51:c0:df:37:e8:f7:77:f3:6f: 49:b9:21:7f:0a:b8:79:77:ae:1e:2d:1a:eb:49:16:38:5c:a6: 7b:07:99:f5:c7:31:e5:aa:6b:6c:79:73:21:f3:d3:78:90:f6: bd:38:d4:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjYwNzI2MTY0MTU5WhcNMjYwODAyMTY0MTU5WjAYMRYwFAYD VQQDEw02YTY2MzhkNy04NjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4L3lmoZzDHv//GJaMcUsE3c/b4cFqhRkiLIO00epOMP9ofWS6xfJxH/nCsG BKfdLwjPCgoZVqA0xgtdA7v77Xh6oF7ZFzjjH0RjCUSAEte2QVqNEE3nwJMoJdns kDOMSCiNyl2+TbMLN25DgZR68uHRfLThxHq1xB38/25rNoXo5UaLfi47tKgw4tSz RTxJXYI514h70BjjbC7yv3jM8WSukmp59h1JGkE5zKTn9kOOIoQ89/j39/pjOelC plaYG22d+g+uP7fQd7+DxLC+kHd0JNXnLuCFrTy2ZbYooISJD6swEoYhhThvAF9b MwA4K5jVPY9BnikJ7Q6k0odczQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnqt280 vH29fAjGHc27A8op+R0GMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvTSS90QIgbogkZo2U+UEMTyPPAUD0KZR+RvaAaZ5QDsDgXOkAy5YU6rC8jHz KH/6A8ynk3RXpNgA7OqJmUQvLSsF0XuwLgCG/iFKE024XBBHb509rFCKqz5EVTMO nckCaLylnbwNPYgBeDHawTbcsBKIA2cMw7/KTp1xShoUrGgXq4GxsQ7kKVzB+s1h Ql461U1mkwNjffZDpB1bcMabPrGActJkFelC5v/+QXHiamzbwGD3PfIOTONl6Qoy Zu2hE7kdA7zq1m3jQ9YXPREdUcDfN+j3d/NvSbkhfwq4eXeuHi0a60kWOFymeweZ 9ccx5aprbHlzIfPTeJD2vTjUKw== -----END CERTIFICATE-----Generated at Mon Jul 27 20:02:15 2026 by rpki-client