$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: 4BK8MoWh4s2jXfY/LOjVPrVn8LnLtMFeGr8MISC07q8= Subject key identifier: 1C:86:51:0A:41:E1:68:5D:48:23:01:30:F7:DA:AE:B3:77:35:BB:A8 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 07C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 07A3 Signing time: Wed 22 Jul 2026 22:07:24 +0000 Manifest this update: Wed 22 Jul 2026 22:07:23 +0000 Manifest next update: Wed 29 Jul 2026 22:07:23 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: XkpJaL3/S1+Ee2pPG92he10cne572Q4ENDDd+pnJyOs=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Jul 22 22:07:23 2026 GMT Not After : Jul 29 22:07:23 2026 GMT Subject: CN=6a613f1c-225d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a4:a2:e1:aa:d5:b6:09:4c:f8:23:b7:59:24: 64:eb:ed:3c:66:24:03:08:ff:a9:fc:06:de:ae:27: 89:a7:b9:d9:fe:83:74:0c:f3:72:30:d2:dc:89:a3: e2:8a:7c:0a:51:1b:22:5d:d3:6d:04:4e:83:6c:d7: 1e:72:4c:0b:80:d0:f7:fd:12:17:4e:f7:19:2d:bb: ae:3f:53:33:23:14:13:3c:f8:37:5b:d5:9e:00:12: dc:a7:4c:5f:2d:82:41:52:d5:05:b9:8a:40:62:4e: e1:a5:f2:f4:07:6a:9d:fb:fa:ec:cb:22:7a:9f:90: f9:05:84:18:f1:ab:3a:9d:d9:db:bf:c1:7d:84:25: 7a:ea:dc:92:94:d6:e1:44:68:9a:62:56:a5:a8:52: 55:59:a7:05:f4:67:34:2d:0e:a0:cb:e9:6f:e4:eb: 39:6a:3f:4c:1c:db:93:e4:9f:36:67:ba:20:21:ab: ce:f3:4b:12:2d:02:f4:7d:c0:44:a1:ce:1b:68:2c: 00:ed:57:c1:66:60:4f:84:4c:55:2b:df:42:0e:77: 6e:84:48:f0:95:62:aa:66:3f:ff:fe:ea:b0:4a:c5: 28:ab:7e:ff:83:b1:ba:d5:7b:16:30:75:c8:ca:dc: 1a:79:91:fa:21:c1:ff:bb:d7:6c:95:a3:d7:93:35: 33:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:86:51:0A:41:E1:68:5D:48:23:01:30:F7:DA:AE:B3:77:35:BB:A8 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:70:76:1d:a4:a1:0f:1c:99:ae:01:e1:13:79:ac:11:8b:81: 39:e5:d0:f2:08:d3:48:e6:a1:5d:5b:62:d8:0a:63:50:3d:b5: e0:13:6b:d6:40:00:fd:28:f4:d4:f4:78:64:47:14:bd:41:31: cc:c9:0b:31:f8:52:6b:69:c3:eb:65:7b:54:91:1c:03:a6:14: 12:1c:55:7a:6c:a9:b5:37:65:8a:21:a7:49:ed:51:a4:cf:90: 62:cc:ff:45:5a:87:87:65:9f:5a:a1:f3:e0:a5:ed:c8:e5:e1: fa:99:e2:ea:79:f8:2b:70:aa:67:e7:d4:14:0a:74:c5:76:b4: ce:42:87:22:8a:a9:d1:96:3d:71:23:ed:fc:80:58:ea:da:65: db:52:67:a0:15:41:11:2b:2f:b2:db:8c:07:15:1b:84:b1:b0: c6:d8:fd:31:24:fa:a6:2c:22:83:79:06:af:eb:26:ad:85:a6: d5:da:95:b3:4d:23:a8:a2:ed:d7:ed:57:5b:d1:d7:5a:ab:22: b9:5e:e9:7c:64:f6:9e:aa:93:ec:3e:81:23:9d:e9:96:a5:1b: df:77:67:34:1f:eb:6e:6e:da:01:16:a8:58:ad:77:26:83:d7: 2f:ff:bc:81:60:65:4c:85:e5:97:04:bc:93:17:4d:a5:1e:ff: 8b:3d:cd:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjYwNzIyMjIwNzIzWhcNMjYwNzI5MjIwNzIzWjAYMRYwFAYD VQQDEw02YTYxM2YxYy0yMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KSi4arVtglM+CO3WSRk6+08ZiQDCP+p/AberieJp7nZ/oN0DPNyMNLciaPi inwKURsiXdNtBE6DbNceckwLgND3/RIXTvcZLbuuP1MzIxQTPPg3W9WeABLcp0xf LYJBUtUFuYpAYk7hpfL0B2qd+/rsyyJ6n5D5BYQY8as6ndnbv8F9hCV66tySlNbh RGiaYlalqFJVWacF9Gc0LQ6gy+lv5Os5aj9MHNuT5J82Z7ogIavO80sSLQL0fcBE oc4baCwA7VfBZmBPhExVK99CDnduhEjwlWKqZj///uqwSsUoq37/g7G61XsWMHXI ytwaeZH6IcH/u9dslaPXkzUzLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByGUQpB 4WhdSCMBMPfarrN3NbuoMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARnB2HaShDxyZrgHhE3msEYuBOeXQ8gjTSOahXVti2ApjUD214BNr1kAA/Sj0 1PR4ZEcUvUExzMkLMfhSa2nD62V7VJEcA6YUEhxVemyptTdliiGnSe1RpM+QYsz/ RVqHh2WfWqHz4KXtyOXh+pni6nn4K3CqZ+fUFAp0xXa0zkKHIoqp0ZY9cSPt/IBY 6tpl21JnoBVBESsvstuMBxUbhLGwxtj9MST6piwig3kGr+smrYWm1dqVs00jqKLt 1+1XW9HXWqsiuV7pfGT2nqqT7D6BI53plqUb33dnNB/rbm7aARaoWK13JoPXL/+8 gWBlTIXllwS8kxdNpR7/iz3NAA== -----END CERTIFICATE-----Generated at Fri Jul 24 04:32:14 2026 by rpki-client