$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: vizBtgz0F1rRookwcA9ZXAuIkNLa4wuF2K+jFJkvYAs= Subject key identifier: B3:65:8E:0D:C8:D4:D2:17:85:FD:39:33:B1:DF:DF:7E:BB:B8:06:D2 Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 04D9 Signing time: Thu 23 Jul 2026 00:36:41 +0000 Manifest this update: Thu 23 Jul 2026 00:36:40 +0000 Manifest next update: Thu 30 Jul 2026 00:36:40 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: p0y/eL4SsQ/vtRwkYB0DnIXZCCAAIWULA5vwtlS3mX0=) 2: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: UZnHMueWtrpb+JywnXsopY8oC5x4rGsb8m2Kk1OPC6Q=) 3: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 9llJReApVBmo5bvUcRrTyqYgxX0J7Rw+SzZuoT8YjSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: Jul 23 00:36:40 2026 GMT Not After : Jul 30 00:36:40 2026 GMT Subject: CN=6a616219-afae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:0c:f7:11:6f:bf:26:db:c2:25:5e:3b:49: b5:12:0e:71:41:a0:99:a6:7c:3f:73:a5:3e:d5:7c: 44:b7:69:7a:97:46:76:55:51:19:0a:16:17:b6:05: 54:15:ec:57:89:b2:3f:a5:cd:79:e0:61:90:e0:e2: 93:ff:97:d0:29:29:4d:d4:58:3a:d6:46:f3:fd:d4: 44:47:a0:4d:66:fc:d4:12:8f:23:ed:b1:4c:6a:ae: 15:7e:5e:08:ad:40:c1:d6:7e:4c:89:02:b3:40:ba: 49:65:6e:7b:fb:33:83:0f:f4:91:99:a4:da:d3:9e: 46:bf:cb:d0:c3:bc:6b:c0:1c:24:6c:35:f9:9e:eb: 6c:70:15:36:80:ad:57:2d:d1:0a:66:73:4f:6e:93: 5b:61:5a:5b:60:97:87:f5:80:99:16:5c:bd:05:23: a4:89:e9:1c:e2:29:ba:97:a3:f6:00:de:fb:bd:a6: d1:d7:33:da:fa:85:f7:57:04:9c:d9:6a:a8:6b:15: 58:f8:70:20:37:77:c1:43:5d:24:b2:95:2c:e4:81: 04:a6:7c:7f:fd:97:48:46:cd:5d:1d:d9:8e:e5:4e: 67:8f:9a:8b:81:06:c3:6d:20:78:42:f7:6b:b5:25: 30:34:c0:30:57:29:8a:f7:98:fe:44:bb:65:66:c6: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:65:8E:0D:C8:D4:D2:17:85:FD:39:33:B1:DF:DF:7E:BB:B8:06:D2 X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:51:f5:86:11:7a:dd:df:d0:1a:ba:73:8a:e8:35:fe:7c:f3: 12:f7:25:d3:fb:8b:4f:2b:fe:4c:b6:2a:c3:3e:91:ef:69:02: 32:74:f0:39:8a:65:36:2d:5c:e2:af:98:73:cf:c3:c5:c6:57: eb:b2:f1:66:63:82:71:0c:06:a1:d5:d4:3f:8c:be:66:ca:2b: 78:c8:ba:f1:76:84:08:e8:61:5c:3b:36:57:36:97:fb:df:ec: ab:57:0c:a5:ac:6e:00:09:ba:bd:2b:fc:cd:2e:44:f1:df:0c: a1:56:0e:24:c9:d2:c7:1a:7a:b6:6b:43:3b:76:9c:77:d7:fd: ff:9f:27:55:54:c8:38:cd:bc:6f:f8:d8:6f:f9:2b:ca:9d:cb: b2:9d:7a:88:82:5d:ab:6a:0f:59:25:f2:46:00:6b:41:68:f5: 1c:87:2a:5d:82:8c:bf:77:43:37:6a:50:6b:7a:50:4d:2d:9d: 80:ec:a8:d8:61:8e:03:09:6f:8d:76:ca:51:5a:13:b1:6f:5a: b4:b0:dd:16:ec:fa:77:c8:2a:13:53:0a:4d:13:e8:0f:97:a5: 5f:7a:23:55:ff:75:0a:65:f3:82:6c:08:97:2f:89:9a:02:22: 01:d1:ba:01:c4:2d:35:81:0d:f1:5a:13:02:06:83:f2:ff:b3: 81:0f:03:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjYwNzIzMDAzNjQwWhcNMjYwNzMwMDAzNjQwWjAYMRYwFAYD VQQDEw02YTYxNjIxOS1hZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvwM9xFvvybbwiVeO0m1Eg5xQaCZpnw/c6U+1XxEt2l6l0Z2VVEZChYXtgVU FexXibI/pc154GGQ4OKT/5fQKSlN1Fg61kbz/dRER6BNZvzUEo8j7bFMaq4Vfl4I rUDB1n5MiQKzQLpJZW57+zODD/SRmaTa055Gv8vQw7xrwBwkbDX5nutscBU2gK1X LdEKZnNPbpNbYVpbYJeH9YCZFly9BSOkiekc4im6l6P2AN77vabR1zPa+oX3VwSc 2WqoaxVY+HAgN3fBQ10kspUs5IEEpnx//ZdIRs1dHdmO5U5nj5qLgQbDbSB4Qvdr tSUwNMAwVymK95j+RLtlZsa42wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNljg3I 1NIXhf05M7Hf3367uAbSMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqlH1hhF63d/QGrpziug1/nzzEvcl0/uLTyv+TLYqwz6R72kCMnTwOYplNi1c 4q+Yc8/DxcZX67LxZmOCcQwGodXUP4y+ZsoreMi68XaECOhhXDs2VzaX+9/sq1cM paxuAAm6vSv8zS5E8d8MoVYOJMnSxxp6tmtDO3acd9f9/58nVVTIOM28b/jYb/kr yp3Lsp16iIJdq2oPWSXyRgBrQWj1HIcqXYKMv3dDN2pQa3pQTS2dgOyo2GGOAwlv jXbKUVoTsW9atLDdFuz6d8gqE1MKTRPoD5elX3ojVf91CmXzgmwIly+JmgIiAdG6 AcQtNYEN8VoTAgaD8v+zgQ8DWQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:05:31 2026 by rpki-client