$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: nBIVp5D/BLhVOFQ4r8cpzbGCu96EHnKr+56Bhin6AU0= Subject key identifier: B6:FA:FA:1B:B1:97:56:B5:42:29:57:B7:C2:4C:DE:0E:67:CB:AC:C7 Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 28C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 28A5 Signing time: Mon 22 Jun 2026 15:34:28 +0000 Manifest this update: Mon 22 Jun 2026 15:34:27 +0000 Manifest next update: Mon 29 Jun 2026 15:34:27 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: 0mcmOfVzFfdXHo6qVx1HJQ7gS3hac+UQ80P9Mt7ptos=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: UmJO0KSnCSvHXcJ5e26UAgnZ2y1lkvWGmHME2yVB9kg=) 3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: LsrfohQQqBt1OXduUHyIG+bruizijWoUQfCjHYmeZgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 15:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10434 (0x28c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Jun 22 15:34:27 2026 GMT Not After : Jun 29 15:34:27 2026 GMT Subject: CN=6a395604-517a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:a7:af:a5:06:95:8e:d2:3b:cb:2f:cd:26: 59:e5:77:4c:e6:31:7a:07:2f:67:02:e9:3a:ca:e7: 4d:e8:ab:3e:d3:44:61:16:14:0d:39:06:39:04:ef: 13:0b:71:70:7f:5f:03:1b:5c:17:e9:a5:68:dd:d4: c7:53:33:4f:3d:41:26:df:4a:61:84:0f:86:32:e1: 27:e0:8b:16:84:6d:e6:3a:4f:85:aa:78:db:46:fd: 20:2a:ab:cf:a1:5b:7a:8e:59:bf:d3:5e:59:8c:74: 21:73:4b:52:69:63:7f:70:09:e4:bb:41:a2:70:b2: cd:e5:cc:2e:4c:f5:86:95:b2:4f:a5:47:11:2c:46: 6c:45:7d:43:41:1a:a6:1a:1f:62:c9:1f:cb:2a:fd: 1e:5e:7a:94:3c:88:b8:2a:59:10:9a:d6:f0:c7:e0: 86:9a:54:72:cf:bf:de:c0:9c:ad:5e:92:b2:68:15: 2b:48:0f:e9:5c:1a:61:f6:3b:f9:fc:8e:cf:03:bd: db:72:32:d5:ab:33:cd:59:b5:15:d4:64:58:ba:1c: e8:ad:af:77:b1:ba:4f:fe:c3:7b:f5:1c:ed:02:52: d1:cd:89:a3:e2:c5:5f:d6:39:bb:58:b0:af:1a:1c: 8d:5b:d0:1c:28:9f:c2:3b:da:0b:70:71:d2:f3:2f: 55:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FA:FA:1B:B1:97:56:B5:42:29:57:B7:C2:4C:DE:0E:67:CB:AC:C7 X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:77:c9:6c:1e:6b:cc:dc:29:d5:58:16:a0:0c:46:9d:ae:9a: 78:26:c3:c3:73:9f:2b:23:90:11:f9:49:c3:7e:e7:b1:3e:df: b1:70:38:d8:67:4a:c2:86:f2:67:db:74:e3:eb:b6:6f:f4:4b: 67:79:0e:f6:26:f6:89:1c:6e:f9:28:d1:6e:90:c9:06:f2:2e: b3:a8:19:10:53:22:68:63:9a:5b:95:13:e8:09:09:03:6e:c2: af:ad:7e:54:3e:f5:b5:5d:0b:8c:01:d8:3f:5d:0e:d2:d4:0a: 57:d5:10:8c:65:6f:90:c7:98:eb:51:8c:cd:ff:47:5d:da:c9: a8:ec:aa:50:e2:6d:37:86:57:98:b1:cf:91:d7:f0:dc:8f:5d: ec:7d:c2:30:db:19:f7:7d:7f:c7:27:66:c0:a4:2b:78:2f:56: 46:bd:ad:7d:84:00:18:92:3e:2a:1d:98:9b:eb:42:17:0a:24: 61:e6:87:f0:a9:fb:3d:79:7a:84:68:dd:ec:6d:b7:c6:32:50: cb:17:b5:72:8f:b2:58:0f:d3:cf:a8:48:4e:e4:8f:b2:8f:c3: 29:6f:e0:8b:23:43:1b:eb:38:12:0b:d3:76:ed:8d:17:5e:32: 65:fe:f4:ee:47:d1:a7:1e:8f:ad:68:8b:f3:7d:b4:5a:6f:ee: cb:04:7e:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjYwNjIyMTUzNDI3WhcNMjYwNjI5MTUzNDI3WjAYMRYwFAYD VQQDEw02YTM5NTYwNC01MTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtM2nr6UGlY7SO8svzSZZ5XdM5jF6By9nAuk6yudN6Ks+00RhFhQNOQY5BO8T C3Fwf18DG1wX6aVo3dTHUzNPPUEm30phhA+GMuEn4IsWhG3mOk+FqnjbRv0gKqvP oVt6jlm/015ZjHQhc0tSaWN/cAnku0GicLLN5cwuTPWGlbJPpUcRLEZsRX1DQRqm Gh9iyR/LKv0eXnqUPIi4KlkQmtbwx+CGmlRyz7/ewJytXpKyaBUrSA/pXBph9jv5 /I7PA73bcjLVqzPNWbUV1GRYuhzora93sbpP/sN79RztAlLRzYmj4sVf1jm7WLCv GhyNW9AcKJ/CO9oLcHHS8y9VLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLb6+hux l1a1QilXt8JM3g5ny6zHMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAnfJbB5rzNwp1VgWoAxGna6aeCbDw3OfKyOQEflJw37nsT7fsXA42GdKwoby Z9t04+u2b/RLZ3kO9ib2iRxu+SjRbpDJBvIus6gZEFMiaGOaW5UT6AkJA27Cr61+ VD71tV0LjAHYP10O0tQKV9UQjGVvkMeY61GMzf9HXdrJqOyqUOJtN4ZXmLHPkdfw 3I9d7H3CMNsZ931/xydmwKQreC9WRr2tfYQAGJI+Kh2Ym+tCFwokYeaH8Kn7PXl6 hGjd7G23xjJQyxe1co+yWA/Tz6hITuSPso/DKW/giyNDG+s4EgvTdu2NF14yZf70 7kfRpx6PrWiL8320Wm/uywR+FQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:30:00 2026 by rpki-client