$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: fvMMGRm9WH1Dl2PxTlW3YiraUlBIW6ja3prlK4zst+A= Subject key identifier: FD:BC:99:50:D5:99:07:8C:0C:4A:60:B3:E8:14:8B:8D:21:EE:40:C9 Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: 0285 Signing time: Thu 23 Jul 2026 02:56:34 +0000 Manifest this update: Thu 23 Jul 2026 02:56:33 +0000 Manifest next update: Thu 30 Jul 2026 02:56:33 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: OmLJRUjxrAWGbuptw2zVJptSHdP+nC9719Tvw2dcqkA=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: S3mtiXgsL+/eI/0ypZKkTLQQz8Kl0Q3Gz9IYr9ftMk4=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: eZ7E672T6C2NAQF7FO/EpOxkj6QwEhrMyFrT7Izg/p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: Jul 23 02:56:33 2026 GMT Not After : Jul 30 02:56:33 2026 GMT Subject: CN=6a6182e1-97ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:39:41:0b:dc:3e:04:60:b3:c0:d3:5b:42: fe:ba:3c:06:a1:96:3f:49:b6:26:ae:23:37:36:d9: 43:ef:c9:ae:45:37:07:38:5d:f6:03:51:77:53:af: 42:f4:66:ca:57:66:1d:66:2f:1e:ad:27:42:01:3b: 0e:b4:06:9e:d2:94:b2:7d:d2:89:8d:86:18:c5:d0: f2:48:ae:06:20:ae:1a:2d:4d:21:6c:0e:fc:77:a0: fe:0a:be:f9:9e:17:2a:9c:4e:bb:ee:96:20:10:09: 7e:9f:4c:b7:94:ae:ca:37:64:1a:59:bf:91:ce:f7: d2:98:3b:55:2f:f1:f4:be:5a:2a:6f:91:31:1b:ab: 99:2f:03:fb:e9:c4:b1:04:cc:d8:b3:ef:d8:4d:00: b8:a8:91:ad:e5:a6:f9:75:f9:b4:16:12:02:86:22: 78:7c:6d:bb:27:88:b4:ce:15:10:ff:18:93:63:e7: 62:b3:f0:76:63:bc:af:5e:52:6a:60:7c:52:c7:b3: 7d:89:99:98:b7:d3:a5:a8:39:07:fa:51:a9:e8:32: be:6e:c6:58:d2:0b:6e:2b:c4:6b:30:0f:95:31:10: 32:6f:09:f5:32:55:77:70:9c:11:87:b2:34:6c:4c: dc:b4:72:1b:f7:ec:00:6d:34:b3:45:9f:f5:c0:78: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BC:99:50:D5:99:07:8C:0C:4A:60:B3:E8:14:8B:8D:21:EE:40:C9 X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1f:bc:4c:0b:7d:69:db:9e:28:9c:84:13:63:12:9b:19:13: 92:d7:60:37:bd:15:ce:51:ce:d0:d2:6a:d5:b5:34:f0:5b:b4: 98:08:22:21:31:e5:35:5d:e1:79:2f:52:72:a3:7e:74:36:67: b4:25:57:15:3b:88:b0:30:ab:51:96:c0:e3:44:8c:db:d2:76: 86:d1:d1:8f:52:a8:b6:12:75:f1:e8:6b:f9:39:70:6b:a3:38: 2c:7d:ea:fe:8c:c7:4f:43:b0:04:e8:a5:f2:fc:00:c9:2a:1c: 32:fb:6e:de:ad:20:cc:13:9f:23:8d:dd:89:82:48:97:85:fe: 14:ed:3a:e6:39:48:5c:59:57:f4:25:e9:98:99:50:36:e7:0f: 5d:1a:e9:c9:ef:29:9c:db:bb:2d:9d:8a:e2:c3:dc:d6:96:1b: b9:e2:a8:2d:11:52:8d:3f:46:2b:36:4b:0b:a4:38:7d:9f:38: 61:0c:85:83:87:48:c8:b5:06:ac:c1:c0:36:b4:cb:5c:85:b9: 9c:ef:7e:de:35:dc:bc:03:d1:7b:57:f0:f1:a0:73:b2:0b:8a: 31:43:66:41:2d:98:45:a9:fe:b2:a7:b4:50:52:4f:ad:34:94: aa:91:d5:82:b9:61:26:d1:b8:27:7c:f7:85:32:fb:9d:d1:53: 96:0e:c2:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjYwNzIzMDI1NjMzWhcNMjYwNzMwMDI1NjMzWjAYMRYwFAYD VQQDEw02YTYxODJlMS05N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaA5QQvcPgRgs8DTW0L+ujwGoZY/SbYmriM3NtlD78muRTcHOF32A1F3U69C 9GbKV2YdZi8erSdCATsOtAae0pSyfdKJjYYYxdDySK4GIK4aLU0hbA78d6D+Cr75 nhcqnE677pYgEAl+n0y3lK7KN2QaWb+RzvfSmDtVL/H0vloqb5ExG6uZLwP76cSx BMzYs+/YTQC4qJGt5ab5dfm0FhIChiJ4fG27J4i0zhUQ/xiTY+dis/B2Y7yvXlJq YHxSx7N9iZmYt9OlqDkH+lGp6DK+bsZY0gtuK8RrMA+VMRAybwn1MlV3cJwRh7I0 bEzctHIb9+wAbTSzRZ/1wHhCjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP28mVDV mQeMDEpgs+gUi40h7kDJMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdh+8TAt9adueKJyEE2MSmxkTktdgN70VzlHO0NJq1bU08Fu0mAgiITHlNV3h eS9ScqN+dDZntCVXFTuIsDCrUZbA40SM29J2htHRj1KothJ18ehr+Tlwa6M4LH3q /ozHT0OwBOil8vwAySocMvtu3q0gzBOfI43diYJIl4X+FO065jlIXFlX9CXpmJlQ NucPXRrpye8pnNu7LZ2K4sPc1pYbueKoLRFSjT9GKzZLC6Q4fZ84YQyFg4dIyLUG rMHANrTLXIW5nO9+3jXcvAPRe1fw8aBzsguKMUNmQS2YRan+sqe0UFJPrTSUqpHV grlhJtG4J3z3hTL7ndFTlg7CWg== -----END CERTIFICATE-----Generated at Fri Jul 24 09:31:02 2026 by rpki-client