$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: jV3tLVXcvzaQVFadoXwpw4Zpv4DERh+ZlmrHRPRJhvU= Subject key identifier: 4F:83:AD:75:B8:6A:5C:21:0C:B5:A6:A9:A1:45:4C:89:1B:52:A1:F6 Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 0218 Signing time: Tue 21 Jul 2026 04:08:23 +0000 Manifest this update: Tue 21 Jul 2026 04:08:22 +0000 Manifest next update: Tue 28 Jul 2026 04:08:22 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: W1j4/BX6iFv053bxrJiBW30aVF3jcxzNJwDl9KS24R4=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: dLUeKe6QaZ4GPKIE3nlD7SGlABym7P6qS+9RNwN3OQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Jul 21 04:08:22 2026 GMT Not After : Jul 28 04:08:22 2026 GMT Subject: CN=6a5ef0b7-9803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:89:b7:5a:82:87:79:80:a6:fb:e4:b5:2b:4f: 8f:e9:b0:a3:f3:18:1f:66:19:ac:49:e9:01:86:d2: 70:c1:dc:79:33:c7:77:77:4a:e8:c0:16:a6:f6:8f: a5:c9:c0:a4:7d:bd:74:f5:a2:a5:8b:6b:92:ff:0a: 10:22:78:dd:c5:1e:3e:cb:11:36:9a:ed:74:db:38: 57:75:fc:05:c2:51:d0:fd:77:9b:ea:59:f9:2e:ff: c7:d3:a8:a2:9f:ba:2d:08:0d:b2:67:5b:ef:54:cc: 6a:cf:a2:bf:ab:2f:a0:5d:50:44:4a:49:5d:2e:15: ac:63:ec:71:37:ad:b9:72:7d:60:c6:f6:7b:b6:27: 2a:79:2e:06:ca:4c:0a:ee:9a:d1:74:64:cf:15:9b: 65:93:ab:46:31:5b:56:d1:f5:36:e7:10:af:a1:a4: ed:b1:33:2c:d5:48:19:57:1f:43:eb:ad:59:88:84: ed:89:f7:87:1b:a1:55:1a:96:e6:1b:03:9b:de:e0: 01:fa:8e:b3:cf:61:28:ac:09:e9:eb:2a:8c:86:02: 56:ef:0d:bc:15:46:20:71:8a:a4:bb:aa:86:5a:32: 8b:58:ba:fc:bd:b0:63:eb:2f:7d:2d:9d:01:0e:13: 9e:8a:12:6a:e7:5f:5a:e3:0e:2a:83:bb:c4:b8:f2: 28:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:83:AD:75:B8:6A:5C:21:0C:B5:A6:A9:A1:45:4C:89:1B:52:A1:F6 X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:95:03:7b:c5:f3:96:0b:45:11:4a:d2:54:4b:b8:d7:04:7b: 11:35:0a:bb:49:b9:a8:66:bd:d4:5d:74:b1:0a:41:d0:2d:54: 6a:f6:c4:94:21:27:b9:0c:e2:2c:9e:7b:a0:9d:6a:05:81:bd: a8:27:fd:a5:92:b9:68:78:5b:f6:36:81:e0:be:bd:6d:76:de: da:a5:77:1b:66:8c:53:08:ca:d6:7d:cd:bb:66:8c:e9:36:e5: 45:f3:2b:12:37:96:32:6f:e3:a3:7f:3b:f5:71:f9:fc:7c:07: 7f:60:ae:17:86:cd:a0:2e:40:53:03:94:36:c2:c6:9a:df:c5: 0d:01:ce:bf:21:a7:1c:05:a1:e3:2f:5b:8b:6a:3b:d2:b4:c9: 3f:6b:5b:07:b5:21:7c:05:f2:6f:eb:73:c3:32:56:41:c6:c2: c7:0c:ed:5a:48:a0:20:2c:eb:f5:81:40:b5:4d:3b:cd:c4:93: 1a:b5:d4:d9:37:23:c5:01:25:63:ae:7e:b4:19:34:fa:5c:64: 79:e1:68:ac:0f:7c:8b:ae:3e:13:0c:4f:67:c3:e1:9f:70:20: 0c:40:b6:31:9d:0f:e1:e6:68:5d:bf:80:2d:66:43:a8:f8:e8: 59:07:fd:fb:1f:23:fa:68:a4:e8:9d:40:2c:16:1d:11:09:7b: b3:6b:c0:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjYwNzIxMDQwODIyWhcNMjYwNzI4MDQwODIyWjAYMRYwFAYD VQQDEw02YTVlZjBiNy05ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjYm3WoKHeYCm++S1K0+P6bCj8xgfZhmsSekBhtJwwdx5M8d3d0rowBam9o+l ycCkfb109aKli2uS/woQInjdxR4+yxE2mu102zhXdfwFwlHQ/Xeb6ln5Lv/H06ii n7otCA2yZ1vvVMxqz6K/qy+gXVBESkldLhWsY+xxN625cn1gxvZ7ticqeS4GykwK 7prRdGTPFZtlk6tGMVtW0fU25xCvoaTtsTMs1UgZVx9D661ZiITtifeHG6FVGpbm GwOb3uAB+o6zz2EorAnp6yqMhgJW7w28FUYgcYqku6qGWjKLWLr8vbBj6y99LZ0B DhOeihJq519a4w4qg7vEuPIojwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+DrXW4 alwhDLWmqaFFTIkbUqH2MB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXZUDe8XzlgtFEUrSVEu41wR7ETUKu0m5qGa91F10sQpB0C1UavbElCEnuQzi LJ57oJ1qBYG9qCf9pZK5aHhb9jaB4L69bXbe2qV3G2aMUwjK1n3Nu2aM6TblRfMr EjeWMm/jo3879XH5/HwHf2CuF4bNoC5AUwOUNsLGmt/FDQHOvyGnHAWh4y9bi2o7 0rTJP2tbB7UhfAXyb+tzwzJWQcbCxwztWkigICzr9YFAtU07zcSTGrXU2TcjxQEl Y65+tBk0+lxkeeForA98i64+EwxPZ8Phn3AgDEC2MZ0P4eZoXb+ALWZDqPjoWQf9 +x8j+mik6J1ALBYdEQl7s2vACQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:47 2026 by rpki-client