$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: +eBORl/JAbS3A/VG/8s16Jv8EjkH+w14bhsIs4dSQfg= Subject key identifier: D9:55:CE:91:00:B3:33:0C:90:2E:16:32:A3:79:BD:37:A2:17:44:90 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 0152 Signing time: Thu 23 Jul 2026 04:36:08 +0000 Manifest this update: Thu 23 Jul 2026 04:36:08 +0000 Manifest next update: Thu 30 Jul 2026 04:36:08 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: 7uGxTth95bhBVRSESm5Zb7aXcfGN43g2TjVpsaiCMaU=) 2: 1C6D5ED2C51F11F08993E41BC4F9AE02.roa (hash: h9DoWAti9FtevIgArDst4H6dPePV+rhbEHLYlKOnyqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Jul 23 04:36:08 2026 GMT Not After : Jul 30 04:36:08 2026 GMT Subject: CN=6a619a38-3785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:38:44:4a:60:78:ae:17:10:fc:5a:d7:a4: f7:a7:82:c5:68:a4:f3:f0:fa:41:db:f3:8b:e0:a7: cf:64:4f:af:e4:a5:04:98:80:af:c6:d6:3a:52:43: 2a:f5:c1:5f:45:13:be:07:a0:d8:df:ef:2c:f7:60: 00:36:20:60:34:f9:5a:28:eb:f7:e5:7a:58:08:d1: c8:e3:10:8c:af:f6:59:30:02:87:46:07:d8:f9:b6: b2:07:6e:1c:0a:3b:93:e0:d6:1e:de:c4:89:1a:aa: a6:b8:74:2d:0e:ed:6d:06:5e:5d:52:61:cf:db:43: 0a:0b:7e:be:19:74:68:6a:b4:be:59:b2:dc:ef:64: 46:03:9c:55:da:4a:b2:70:f6:1f:d0:bc:3d:a8:ec: d0:2d:08:c9:13:f6:2c:6f:91:5b:6f:84:71:ae:88: 4a:28:c1:34:ba:97:e7:4a:09:28:27:8c:95:1e:34: 5a:10:77:91:5c:dc:43:cb:b1:d3:97:5b:69:f3:e3: 53:22:5c:e2:d5:8f:ba:97:c5:4d:56:2c:cb:79:28: 0d:9b:93:4d:3e:c8:24:f4:eb:09:10:a3:57:b9:67: 06:6f:d5:d5:97:3b:42:bd:ec:47:6e:d5:35:80:e0: cb:5e:09:7a:9e:f4:d7:b1:dc:a1:dc:4a:23:8f:28: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:55:CE:91:00:B3:33:0C:90:2E:16:32:A3:79:BD:37:A2:17:44:90 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:97:40:05:0f:8c:a6:34:fd:00:62:d1:ee:1f:f2:45:6a:8b: af:eb:17:16:b9:b7:c9:70:2b:31:9a:80:12:72:aa:af:17:13: ee:b0:e2:f6:56:02:fd:ac:3b:be:9a:98:40:8e:3e:23:0a:a6: 1a:60:63:1a:2f:a9:05:da:97:5f:3a:12:0a:3d:dc:e3:f9:9d: 3b:09:cf:dc:b8:b0:74:4f:67:cb:d3:15:0b:37:21:d3:cc:69: e2:aa:e7:75:47:5a:cd:30:4e:56:22:7f:72:3a:96:7d:e9:bf: ac:ad:99:7c:30:bc:91:42:18:0e:ef:8f:48:3b:24:3f:ce:ba: 0e:6b:c9:c9:99:57:f6:d4:94:e2:79:09:a0:d4:8a:f9:7d:b9: 77:30:c8:9e:28:df:cd:85:84:1a:44:2f:33:bb:6c:39:34:2d: b9:6c:d7:ef:59:28:ef:fd:30:d6:a6:c8:0a:3d:3c:03:5d:f2: c1:02:4e:18:b0:42:55:9d:f8:32:78:44:eb:61:cd:6d:42:de: 05:47:63:56:b0:d0:9f:13:13:82:4f:be:c4:46:ce:dd:ae:39: cb:4f:d8:05:0c:ee:46:a8:25:ea:e5:62:cc:61:7c:34:9b:29: 61:6b:e6:2a:7d:e2:6a:ef:e3:4a:02:04:18:85:e7:25:d3:ba: 02:5a:49:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjYwNzIzMDQzNjA4WhcNMjYwNzMwMDQzNjA4WjAYMRYwFAYD VQQDEw02YTYxOWEzOC0zNzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+84REpgeK4XEPxa16T3p4LFaKTz8PpB2/OL4KfPZE+v5KUEmICvxtY6UkMq 9cFfRRO+B6DY3+8s92AANiBgNPlaKOv35XpYCNHI4xCMr/ZZMAKHRgfY+bayB24c CjuT4NYe3sSJGqqmuHQtDu1tBl5dUmHP20MKC36+GXRoarS+WbLc72RGA5xV2kqy cPYf0Lw9qOzQLQjJE/Ysb5Fbb4RxrohKKME0upfnSgkoJ4yVHjRaEHeRXNxDy7HT l1tp8+NTIlzi1Y+6l8VNVizLeSgNm5NNPsgk9OsJEKNXuWcGb9XVlztCvexHbtU1 gODLXgl6nvTXsdyh3Eojjyg6BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlVzpEA szMMkC4WMqN5vTeiF0SQMB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqJdABQ+MpjT9AGLR7h/yRWqLr+sXFrm3yXArMZqAEnKqrxcT7rDi9lYC/aw7 vpqYQI4+IwqmGmBjGi+pBdqXXzoSCj3c4/mdOwnP3LiwdE9ny9MVCzch08xp4qrn dUdazTBOViJ/cjqWfem/rK2ZfDC8kUIYDu+PSDskP866DmvJyZlX9tSU4nkJoNSK +X25dzDInijfzYWEGkQvM7tsOTQtuWzX71ko7/0w1qbICj08A13ywQJOGLBCVZ34 MnhE62HNbULeBUdjVrDQnxMTgk++xEbO3a45y0/YBQzuRqgl6uVizGF8NJspYWvm Kn3iau/jSgIEGIXnJdO6AlpJwQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:19:57 2026 by rpki-client