$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json) Hash identifier: cIyE7vTVTzSeligFqFwUrJBvhM2wwbvVESwiUIkYTsc= Subject key identifier: EF:D8:CB:30:E7:3C:11:36:C5:D9:53:D6:16:ED:4C:AA:5C:78:98:AA Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft Manifest number: 01CA Signing time: Thu 23 Jul 2026 05:11:53 +0000 Manifest this update: Thu 23 Jul 2026 05:11:52 +0000 Manifest next update: Thu 30 Jul 2026 05:11:52 +0000 Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: aT2WJEbrlzwFoBWBNepsbpQ5aYBVjNCnfhrug2LTVdM=) 2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: t9meS5jTgEh1LObut4xRNwxjugAoz6PyYRM3KILH8EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Validity Not Before: Jul 23 05:11:52 2026 GMT Not After : Jul 30 05:11:52 2026 GMT Subject: CN=6a61a298-67ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:66:ae:3c:ef:93:19:69:84:be:49:07:4b: 8d:ad:f4:0e:ac:33:85:f1:72:4a:d2:50:7e:fa:be: c6:bb:06:fa:75:89:dc:fc:b2:48:bd:12:57:f1:2c: 8a:30:6f:1d:89:a5:06:60:d7:2c:2e:c7:05:c8:0c: f9:e4:93:90:d9:5c:c0:5c:db:61:66:44:41:59:71: 5f:00:11:65:6e:1a:be:50:64:4a:f2:af:68:bf:3c: a5:c9:00:65:bc:73:21:01:b1:b7:34:ad:93:0c:a4: 33:39:97:ac:78:d6:35:0a:39:e4:e7:c4:dc:07:69: 69:ea:9d:d5:7b:89:28:7a:ab:b0:39:29:b2:01:86: d2:2b:33:9f:06:e5:d9:bc:3d:ce:06:0a:a7:24:84: e8:b5:f6:52:b8:57:86:69:5a:ba:17:71:c0:b6:f7: 2b:0a:db:49:d4:37:83:77:56:23:5c:7b:80:66:0e: 79:46:67:6f:27:2c:52:6d:75:2e:f3:29:ef:47:8e: fd:21:cf:6c:e1:ff:19:78:ae:db:ef:76:bb:dd:06: 73:7b:62:95:49:cf:f4:71:6d:eb:65:76:7a:c6:88: 7e:11:fc:99:0d:cc:fc:da:ce:58:b6:3d:b8:09:3c: 3b:d3:54:d7:aa:4f:da:b7:b4:08:da:2d:41:bb:30: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D8:CB:30:E7:3C:11:36:C5:D9:53:D6:16:ED:4C:AA:5C:78:98:AA X509v3 Authority Key Identifier: keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8d:77:b0:d3:30:5d:41:1e:92:81:8a:fa:58:f6:fa:29:a8: e1:f5:00:3d:e1:eb:cb:c3:e4:f2:eb:bd:94:6e:e8:84:f1:4c: 85:c0:b8:01:74:36:26:bd:e3:bf:40:20:9c:6f:a2:1d:6c:24: 40:1a:bc:8f:ea:3f:fd:c6:25:14:4d:09:1a:33:36:e6:bd:a8: 39:7a:63:dc:ce:a5:f5:ed:94:cf:dc:cb:10:f7:82:fc:1d:14: 3c:95:d5:a6:28:0a:40:cc:56:01:25:96:5e:96:2c:7a:68:be: ea:2e:61:b3:ea:c2:c9:0c:fb:35:11:35:62:0a:1f:6f:59:e0: 83:be:fe:d0:93:10:80:c0:a6:36:04:e9:db:90:d0:88:19:63: 90:8e:ae:b6:19:08:7b:d7:96:d5:30:05:05:b2:11:63:d7:47: de:07:61:f0:40:e5:47:ac:d5:a1:31:e0:a6:14:08:56:29:f7: d9:9f:99:62:18:92:9b:f0:a5:20:be:90:eb:58:a0:4a:e6:2f: 3e:be:8d:af:0d:67:74:85:3c:dc:e0:31:19:13:b7:05:fa:2e: 5e:3c:a0:a7:2b:78:12:3a:37:d0:d6:06:87:17:1f:74:80:95: b9:c5:ef:41:a9:73:f3:c3:91:a2:c4:41:c3:77:4b:fa:f3:c8: 27:dc:f4:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx RjQwMTU4RTUwHhcNMjYwNzIzMDUxMTUyWhcNMjYwNzMwMDUxMTUyWjAYMRYwFAYD VQQDEw02YTYxYTI5OC02N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCVmrjzvkxlphL5JB0uNrfQOrDOF8XJK0lB++r7Guwb6dYnc/LJIvRJX8SyK MG8diaUGYNcsLscFyAz55JOQ2VzAXNthZkRBWXFfABFlbhq+UGRK8q9ovzylyQBl vHMhAbG3NK2TDKQzOZeseNY1Cjnk58TcB2lp6p3Ve4koequwOSmyAYbSKzOfBuXZ vD3OBgqnJITotfZSuFeGaVq6F3HAtvcrCttJ1DeDd1YjXHuAZg55RmdvJyxSbXUu 8ynvR479Ic9s4f8ZeK7b73a73QZze2KVSc/0cW3rZXZ6xoh+EfyZDcz82s5Ytj24 CTw701TXqk/at7QI2i1BuzCvVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/YyzDn PBE2xdlT1hbtTKpceJiqMB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS85ODcyNkQ2RUQxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlw OXgybUNyT1NEZ29mUUJXT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS413sNMwXUEekoGK+lj2+imo4fUAPeHry8Pk8uu9lG7ohPFMhcC4AXQ2Jr3j v0AgnG+iHWwkQBq8j+o//cYlFE0JGjM25r2oOXpj3M6l9e2Uz9zLEPeC/B0UPJXV pigKQMxWASWWXpYsemi+6i5hs+rCyQz7NRE1Ygofb1ngg77+0JMQgMCmNgTp25DQ iBljkI6uthkIe9eW1TAFBbIRY9dH3gdh8EDlR6zVoTHgphQIVin32Z+ZYhiSm/Cl IL6Q61igSuYvPr6Nrw1ndIU83OAxGRO3BfouXjygpyt4Ejo30NYGhxcfdICVucXv Qalz88ORosRBw3dL+vPIJ9z0Yg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:13:53 2026 by rpki-client