$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json) Hash identifier: qGiOEwfeI7K6EAMABHYLiZ5dHveRzOmrTJJ61SSlwpw= Subject key identifier: 50:1A:74:F7:C7:85:5F:F4:50:4B:D2:04:18:4A:73:FA:C2:14:CF:92 Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Certificate serial: 0EF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft Manifest number: 0EE5 Signing time: Wed 22 Jul 2026 17:49:36 +0000 Manifest this update: Wed 22 Jul 2026 17:49:35 +0000 Manifest next update: Wed 29 Jul 2026 17:49:35 +0000 Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: ZRT+4DEqDG1uSC1+6/DqNDf+DbtmIDzHjYKzSfo+758=) 2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: al3fqRaFbz5Gytb2uWt5SUlVpJ/tTLDhToYHkT3GYkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3832 (0xef8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Validity Not Before: Jul 22 17:49:35 2026 GMT Not After : Jul 29 17:49:35 2026 GMT Subject: CN=6a6102b0-d87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3a:b3:95:da:05:b8:0c:9f:01:78:11:01:bb: 33:c7:18:7a:eb:0c:2b:4a:cc:90:74:fe:ba:fe:7c: 4b:18:46:b3:97:a3:9c:cc:7c:73:35:d7:3e:b1:a3: 6b:2d:6a:a1:7f:2a:c2:8f:1c:c7:d5:00:6d:35:0c: 67:41:97:d7:14:12:46:c8:ce:7b:19:88:ad:47:03: cc:74:04:09:e7:57:74:86:1a:e2:bd:6b:9b:1f:c8: 3a:bd:c0:5f:a2:fa:00:ad:47:4a:d8:7b:9b:d2:6b: 93:04:d5:b1:23:ab:8e:a1:58:f7:53:bd:6c:db:24: e0:c9:0c:79:22:07:26:60:be:9b:9c:ff:10:1e:bc: 70:91:f1:5d:c6:1f:94:7b:80:60:6d:88:21:49:8a: ff:13:75:cc:0d:32:c0:89:7b:69:fc:ab:0b:89:29: cb:c8:89:34:59:9a:ae:7d:95:3e:d7:78:11:13:e0: 3b:03:e4:11:48:45:fe:ae:48:6d:64:01:72:b0:75: 22:b6:cc:af:33:8f:7f:26:92:83:9c:28:48:9d:d9: e6:fe:ac:93:2e:ad:34:e8:ba:a9:a8:ad:87:59:b8: 9e:26:bb:bf:13:7e:83:3c:bf:27:13:eb:84:58:eb: 53:1a:12:2e:8e:1a:b2:38:16:33:a1:cf:e6:75:6c: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1A:74:F7:C7:85:5F:F4:50:4B:D2:04:18:4A:73:FA:C2:14:CF:92 X509v3 Authority Key Identifier: keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:9c:22:07:b9:4c:3f:f6:4d:96:b6:a0:3a:12:87:96:df:d5: 95:53:1a:f0:1c:38:86:5e:9c:75:4d:86:fa:5f:42:c8:e7:4f: bf:48:af:e9:3a:8e:59:d7:67:1b:e1:ff:5c:42:75:5a:a0:32: 54:37:16:04:d6:cf:8e:bb:b5:93:48:14:b2:e7:57:38:f4:79: fc:fe:1e:3e:e0:34:9f:4f:58:ae:77:c1:70:84:dd:9c:d9:db: e6:7f:0a:e9:78:d1:62:b2:4f:fb:f1:10:20:51:a9:aa:61:25: 42:8d:f6:61:0d:bf:50:19:61:89:2a:55:ca:ac:25:45:47:80: 76:20:92:e1:13:af:4f:df:f1:d7:eb:f5:30:bb:80:01:53:8e: 57:bc:3b:a2:f0:6e:b7:8a:80:65:85:52:ec:cd:59:9d:7b:d2: 3d:5d:55:5a:a7:26:40:c1:a8:52:44:02:13:4f:49:02:74:a6: 9a:db:eb:d6:15:1a:69:b7:f3:48:53:a8:cf:85:27:81:15:09: a9:7b:43:bb:20:98:97:16:97:bb:c5:bf:4b:26:94:54:d2:85: a8:06:bd:9e:c9:67:0e:16:ea:6b:53:53:3e:99:dc:58:0f:6b: ee:de:a7:9e:88:70:7a:91:6c:d9:41:f8:2a:5c:e6:9e:89:ec: 02:c9:86:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3QzkxMTAvBgNVBAUTKDRGMzE1RUVGNUFDQjJFREE3QTM3MjlFNzlFMTM1OTkw QzAxRTcwNzQwHhcNMjYwNzIyMTc0OTM1WhcNMjYwNzI5MTc0OTM1WjAYMRYwFAYD VQQDEw02YTYxMDJiMC1kODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjqzldoFuAyfAXgRAbszxxh66wwrSsyQdP66/nxLGEazl6OczHxzNdc+saNr LWqhfyrCjxzH1QBtNQxnQZfXFBJGyM57GYitRwPMdAQJ51d0hhrivWubH8g6vcBf ovoArUdK2Hub0muTBNWxI6uOoVj3U71s2yTgyQx5IgcmYL6bnP8QHrxwkfFdxh+U e4BgbYghSYr/E3XMDTLAiXtp/KsLiSnLyIk0WZqufZU+13gRE+A7A+QRSEX+rkht ZAFysHUitsyvM49/JpKDnChIndnm/qyTLq006LqpqK2HWbieJru/E36DPL8nE+uE WOtTGhIujhqyOBYzoc/mdWwe7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAadPfH hV/0UEvSBBhKc/rCFM+SMB8GA1UdIwQYMBaAFE8xXu9ayy7aejcp554TWZDAHnB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdDOS9DMzU5RTc1RUFD MTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0cDZOeW5ubmhOWmtNQWVj SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6RmU3MXJMTHRwNk55bm5uaE5aa01BZWNIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTdDOS9DMzU5RTc1RUFDMTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0 cDZOeW5ubmhOWmtNQWVjSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACZwiB7lMP/ZNlragOhKHlt/VlVMa8Bw4hl6cdU2G+l9CyOdPv0iv6TqOWddn G+H/XEJ1WqAyVDcWBNbPjru1k0gUsudXOPR5/P4ePuA0n09YrnfBcITdnNnb5n8K 6XjRYrJP+/EQIFGpqmElQo32YQ2/UBlhiSpVyqwlRUeAdiCS4ROvT9/x1+v1MLuA AVOOV7w7ovBut4qAZYVS7M1ZnXvSPV1VWqcmQMGoUkQCE09JAnSmmtvr1hUaabfz SFOoz4UngRUJqXtDuyCYlxaXu8W/SyaUVNKFqAa9nslnDhbqa1NTPpncWA9r7t6n nohwepFs2UH4KlzmnonsAsmGcg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:15:05 2026 by rpki-client