$ rpki-client -vvf rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft File: TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft (raw, json) Hash identifier: OuOnbuWIalF+ZtQmwMhUpJrirL4I/8yfl8n6nDooSEI= Subject key identifier: EF:28:B2:06:BF:CB:13:74:1E:CA:71:7B:31:72:D8:06:DE:CF:73:E4 Authority key identifier: 4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8 Certificate issuer: /CN=A9129FB7/serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft Manifest number: 13 Signing time: Thu 23 Jul 2026 11:07:54 +0000 Manifest this update: Thu 23 Jul 2026 11:07:54 +0000 Manifest next update: Thu 30 Jul 2026 11:07:54 +0000 Files and hashes: 1: TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl (hash: 20UOWAb7pGBtnTuAt+FUL1x5aP/p6VQdMzqUP5aQkUg=) 2: C524767269FD11F1BAFBB65F6847A888.roa (hash: ygqljUs8p8UwgEQzC1Y+C3YKpEUTVGsqmNq6WUEwm9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129FB7, serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8 Validity Not Before: Jul 23 11:07:54 2026 GMT Not After : Jul 30 11:07:54 2026 GMT Subject: CN=6a61f60a-dbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2a:e6:7d:8d:21:56:57:06:f2:40:7c:22:85: 9e:42:91:28:b5:0d:79:72:f4:b8:fe:dc:09:7d:89: 28:57:32:b4:cb:0f:ce:ea:a7:31:e0:f5:37:30:e0: 88:45:1d:63:ab:aa:3a:7d:17:9a:c8:4d:43:97:d7: 1b:25:50:a7:43:83:0d:ca:86:81:e0:07:ea:cc:91: 9e:1a:c2:cd:1a:b0:fb:f0:28:4e:1a:a0:2b:88:da: 44:b0:9f:a9:dd:2c:87:c3:c0:8c:12:a1:4a:98:31: ba:95:51:a5:35:6d:e5:02:17:ce:e7:32:49:bc:03: b4:1c:13:f7:6a:87:eb:91:d9:d0:f9:92:33:72:b7: 42:89:8c:97:93:a5:45:6f:2a:9e:84:9f:51:d4:56: d6:2e:b2:6d:b7:fb:c2:2a:4d:d9:1c:e8:f6:3e:f1: 07:91:03:c8:5f:9d:11:72:cd:75:28:4a:ec:4d:4c: b1:64:61:c3:82:97:54:38:95:14:3c:cd:84:9e:bc: 1f:f5:74:a0:3a:18:9e:a3:20:bd:26:9a:69:62:20: 59:a9:00:58:12:eb:fd:0e:aa:3f:b3:b4:d7:b5:16: 70:52:b6:5f:38:5d:21:a2:f9:fc:0e:5f:14:fd:32: 42:5c:8b:5f:e7:ee:85:b8:c5:91:b4:6b:15:0d:b9: 43:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:28:B2:06:BF:CB:13:74:1E:CA:71:7B:31:72:D8:06:DE:CF:73:E4 X509v3 Authority Key Identifier: keyid:4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cb:57:dd:e1:32:15:02:05:ef:96:dd:0a:bc:b0:98:16:55: b1:75:8b:5d:8b:5d:85:42:05:54:4a:59:fd:b0:79:a0:eb:95: f9:6a:70:a8:7b:ec:7b:30:1d:fa:83:a0:70:2e:be:e0:a8:92: 27:48:22:e5:9f:c2:39:8f:5c:9a:0e:af:e6:6c:02:b8:8b:19: f9:71:09:30:01:23:8a:44:7b:78:1a:0b:e5:d4:1b:ed:44:40: 27:ec:b7:59:34:6f:e4:0a:93:10:3f:36:67:8c:18:a5:e0:52: aa:57:06:ce:a1:5a:75:47:36:6c:b2:19:96:50:21:b3:95:c4: 7f:43:8c:bc:94:02:fc:95:3e:1e:0e:2f:a3:b0:25:09:5c:e2: 48:02:32:fe:c9:62:17:84:38:52:9e:e6:e3:96:65:7f:a4:0f: 00:69:ca:23:c0:39:10:58:1a:e3:de:db:61:2f:8a:94:d6:81: 0d:9b:2b:85:0c:04:92:2e:1a:be:ba:b2:3c:9d:22:d0:28:6e: 46:2c:5f:c2:24:68:02:42:9f:58:ba:ab:9c:8b:42:63:e5:ec: c7:fe:1d:29:ad:f7:2d:2a:23:22:3b:a0:79:99:4b:b8:40:18: 51:7c:a5:fc:8b:91:f1:c4:a6:8a:e3:b1:35:2a:9b:5b:d4:34: 83:f8:11:f1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OUZCNzExMC8GA1UEBRMoNEM2MjUzMTBFODNDNDBENzMyRERCMDM4NDc4NTg3NjNE NDhCREREODAeFw0yNjA3MjMxMTA3NTRaFw0yNjA3MzAxMTA3NTRaMBgxFjAUBgNV BAMTDTZhNjFmNjBhLWRiZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRKuZ9jSFWVwbyQHwihZ5CkSi1DXly9Lj+3Al9iShXMrTLD87qpzHg9Tcw4IhF HWOrqjp9F5rITUOX1xslUKdDgw3KhoHgB+rMkZ4aws0asPvwKE4aoCuI2kSwn6nd LIfDwIwSoUqYMbqVUaU1beUCF87nMkm8A7QcE/dqh+uR2dD5kjNyt0KJjJeTpUVv Kp6En1HUVtYusm23+8IqTdkc6PY+8QeRA8hfnRFyzXUoSuxNTLFkYcOCl1Q4lRQ8 zYSevB/1dKA6GJ6jIL0mmmliIFmpAFgS6/0Oqj+ztNe1FnBStl84XSGi+fwOXxT9 MkJci1/n7oW4xZG0axUNuUMDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7yiyBr/L E3QeynF7MXLYBt7Pc+QwHwYDVR0jBBgwFoAUTGJTEOg8QNcy3bA4R4WHY9SL3dgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5RkI3LzU0MTBEQzVDNjlG QjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4UU5jeTNiQTRSNFdIWTlTTDNk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEdKVEVPZzhRTmN5M2JBNFI0V0hZOVNMM2RnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 RkI3LzU0MTBEQzVDNjlGQjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4UU5j eTNiQTRSNFdIWTlTTDNkZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAey1fd4TIVAgXvlt0KvLCYFlWxdYtdi12FQgVUSln9sHmg65X5anCoe+x7MB36 g6BwLr7gqJInSCLln8I5j1yaDq/mbAK4ixn5cQkwASOKRHt4Ggvl1BvtREAn7LdZ NG/kCpMQPzZnjBil4FKqVwbOoVp1RzZsshmWUCGzlcR/Q4y8lAL8lT4eDi+jsCUJ XOJIAjL+yWIXhDhSnubjlmV/pA8AacojwDkQWBrj3tthL4qU1oENmyuFDASSLhq+ urI8nSLQKG5GLF/CJGgCQp9Yuquci0Jj5ezH/h0prfctKiMiO6B5mUu4QBhRfKX8 i5HxxKaK47E1Kptb1DSD+BHx -----END CERTIFICATE-----Generated at Thu Jul 23 21:34:08 2026 by rpki-client