$ rpki-client -vvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft File: tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json) Hash identifier: RASZII7DtdkARK8yssH7Ui/NkvCTlt+ejU/f22zAdgw= Subject key identifier: 75:08:58:66:44:A8:9D:D7:99:8E:2C:B3:CE:22:16:43:45:7A:14:4F Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6 Certificate issuer: /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6 Certificate serial: 1352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft Manifest number: 1348 Signing time: Tue 12 May 2026 17:00:33 +0000 Manifest this update: Tue 12 May 2026 17:00:33 +0000 Manifest next update: Tue 19 May 2026 17:00:33 +0000 Files and hashes: 1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: XRqjexjOQJ+SbtJEWf5vlJzoGji+LciWLAzy8Ulon6k=) 2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: p96Pk01HnxFF2EIL/xWnzPT9gE4H/ULfnQINm3EmY2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4946 (0x1352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116C7, serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6 Validity Not Before: May 12 17:00:33 2026 GMT Not After : May 19 17:00:33 2026 GMT Subject: CN=6a035cb1-706b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:60:9e:2e:de:65:41:fc:c0:62:75:c3:af: e3:67:84:01:b3:51:48:93:b2:38:67:02:3d:8c:c3: 1f:2a:3a:45:fa:ba:64:d8:fe:f9:b3:1d:43:4d:69: 04:c1:a5:3a:b4:76:4b:4a:a2:fd:5d:af:af:26:d5: 8a:4e:6f:27:73:d6:df:22:ec:aa:ce:35:54:66:e6: 07:ed:f5:1a:1a:e5:26:df:ee:06:51:8e:05:c3:ef: 50:fe:b2:9e:3b:cc:55:fe:e9:78:ea:e9:ea:2e:54: 9c:e9:66:44:bf:5e:26:ad:95:79:b5:6b:39:f4:e8: 9c:29:5e:71:67:d7:d7:0e:51:39:9e:9e:9e:89:f6: 20:00:21:9d:35:70:e1:b1:c8:09:e8:91:72:53:37: 29:92:6b:df:18:f7:3b:a1:6e:7a:65:eb:f1:9f:93: f3:b3:9c:e4:36:12:1b:3f:6d:5b:e7:9a:09:02:99: 23:69:e5:ea:3f:bf:09:83:b4:5b:a3:a5:0c:69:87: aa:89:8c:33:50:0e:af:83:99:39:26:11:c9:b0:da: 00:d4:34:3d:82:da:26:4b:cd:32:91:bb:1b:a3:ab: 61:fc:64:bf:62:86:0a:e9:2e:dd:98:00:64:23:21: e6:ef:4f:98:44:a5:e3:de:74:11:6c:4a:fb:0f:c4: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:08:58:66:44:A8:9D:D7:99:8E:2C:B3:CE:22:16:43:45:7A:14:4F X509v3 Authority Key Identifier: keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:5c:01:30:dc:5e:1e:9c:ca:09:de:ac:df:ac:5c:75:84:99: b0:59:55:7d:78:df:81:46:e8:94:1a:04:5d:3c:da:df:6b:f2: 37:77:db:e4:b8:90:1e:d5:f1:d3:98:3d:87:0e:21:34:8f:14: 28:db:bd:3b:86:f6:b0:c7:5a:a7:21:f3:33:61:5d:81:3e:a6: 86:74:c2:49:0e:a9:3f:60:9d:d6:7a:80:ac:2f:93:5f:86:65: 73:e6:26:3c:f0:bd:41:c6:81:2b:b1:e6:a1:56:e5:04:a9:06: cf:92:8a:4a:39:23:20:cb:ca:e7:50:84:c1:02:0c:67:fa:cf: 9d:d3:b5:17:d4:2d:d0:ad:14:8f:c2:43:ad:4c:d8:f8:a6:e0: 2a:a3:f7:59:d1:4b:0d:d3:a3:f7:9a:85:87:2d:62:72:fe:b1: 14:57:b0:fc:a4:50:a1:77:f4:f2:04:20:93:78:42:55:56:26: 0b:6d:87:4d:78:c9:15:42:34:de:5c:6b:35:58:8a:bf:59:d1: b8:66:fe:89:ad:cd:69:c7:26:74:e7:07:11:2b:59:13:8f:c2: 4d:a7:0c:04:41:51:b3:9e:07:f5:13:5f:8c:a2:c1:f6:8a:db: c0:ef:48:7a:9e:b9:39:ab:c5:b6:55:50:93:5a:25:fa:13:94: a5:78:50:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2QzcxMTAvBgNVBAUTKEI2N0MyNDVFNEIyQkVFQUQyM0MxRjA1REQzMEZGOTA3 N0Q4N0I4RTYwHhcNMjYwNTEyMTcwMDMzWhcNMjYwNTE5MTcwMDMzWjAYMRYwFAYD VQQDEw02YTAzNWNiMS03MDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+Jgni7eZUH8wGJ1w6/jZ4QBs1FIk7I4ZwI9jMMfKjpF+rpk2P75sx1DTWkE waU6tHZLSqL9Xa+vJtWKTm8nc9bfIuyqzjVUZuYH7fUaGuUm3+4GUY4Fw+9Q/rKe O8xV/ul46unqLlSc6WZEv14mrZV5tWs59OicKV5xZ9fXDlE5np6eifYgACGdNXDh scgJ6JFyUzcpkmvfGPc7oW56Zevxn5Pzs5zkNhIbP21b55oJApkjaeXqP78Jg7Rb o6UMaYeqiYwzUA6vg5k5JhHJsNoA1DQ9gtomS80ykbsbo6th/GS/YoYK6S7dmABk IyHm70+YRKXj3nQRbEr7D8TL6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUIWGZE qJ3XmY4ss84iFkNFehRPMB8GA1UdIwQYMBaAFLZ8JF5LK+6tI8HwXdMP+Qd9h7jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZDNy9DODU2RDZDNEM2 QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdxMGp3ZkJkMHdfNUIzMkh1 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rud2tYa3NyN3EwandmQmQwd181QjMySHVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZDNy9DODU2RDZDNEM2QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdx MGp3ZkJkMHdfNUIzMkh1T1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdFwBMNxeHpzKCd6s36xcdYSZsFlVfXjfgUbolBoEXTza32vyN3fb5LiQHtXx 05g9hw4hNI8UKNu9O4b2sMdapyHzM2FdgT6mhnTCSQ6pP2Cd1nqArC+TX4Zlc+Ym PPC9QcaBK7HmoVblBKkGz5KKSjkjIMvK51CEwQIMZ/rPndO1F9Qt0K0Uj8JDrUzY +KbgKqP3WdFLDdOj95qFhy1icv6xFFew/KRQoXf08gQgk3hCVVYmC22HTXjJFUI0 3lxrNViKv1nRuGb+ia3NaccmdOcHEStZE4/CTacMBEFRs54H9RNfjKLB9orbwO9I ep65OavFtlVQk1ol+hOUpXhQGg== -----END CERTIFICATE-----Generated at Wed May 13 14:02:15 2026 by rpki-client