$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft File: tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft (raw, json) Hash identifier: COZcCc48PS+uG50g/R//IhtoohZelPRMcIxgDUhy6Xs= Subject key identifier: 1D:B9:46:4D:F1:75:2B:FF:DA:4A:F4:D8:51:B2:96:45:7D:0A:A0:6C Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft Manifest number: 01E3 Signing time: Thu 23 Jul 2026 04:53:27 +0000 Manifest this update: Thu 23 Jul 2026 04:53:26 +0000 Manifest next update: Thu 30 Jul 2026 04:53:26 +0000 Files and hashes: 1: tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl (hash: U31hKFiOUVkkucniAqFFeORi76qGcxrtz/bW1jisdsE=) 2: 79E25D40601211F1AD9319218A47A888.roa (hash: q30SnaEDLTLFEYzr3C7O98SoFArm/k9dGLI4gYwGx7A=) 3: ACC45B54619411F19AF0775A8347A888.roa (hash: JuZvLZgp7cBMbz5SArZAcdTlGbnZq2/Za1QddcsY5rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Validity Not Before: Jul 23 04:53:26 2026 GMT Not After : Jul 30 04:53:26 2026 GMT Subject: CN=6a619e46-421f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:d3:26:08:48:52:a4:33:96:ac:8e:2d:c5: f7:2e:44:cb:f3:c6:9e:ee:86:7d:5f:08:96:ad:a1: 63:86:c3:36:eb:9e:13:35:bd:17:95:30:90:c9:7c: f1:1a:ff:6e:00:43:20:bd:e2:bc:16:ff:eb:ff:9e: 8c:18:48:f7:35:b7:dc:33:13:e8:81:6a:e8:1e:a2: 01:b4:ec:c0:7d:46:10:6e:64:1c:02:2d:4e:83:96: 2d:2f:c2:41:b8:37:39:43:54:5a:36:83:f3:85:92: 6b:2f:28:fc:74:8e:37:c4:44:93:37:83:db:d2:fd: 8a:3a:1f:1c:51:f8:e7:0e:68:14:f6:e3:3e:d3:2e: 9a:ad:68:d7:cf:fc:78:5c:0b:cc:b3:1a:c7:02:d7: c8:1d:10:96:d2:ab:be:f0:af:94:42:74:3c:1b:3c: 54:75:99:05:7c:7c:ba:82:05:de:05:96:46:e1:ac: 4d:3f:4d:6b:36:ab:2b:c7:1f:78:1e:8c:0e:9a:1c: e5:1d:ef:c1:10:67:bd:4d:60:dd:ee:c3:59:93:39: a2:7b:31:e6:69:b8:20:d9:d4:ec:f2:24:39:40:da: cc:99:5b:5a:29:4e:ef:8b:b4:02:82:a8:01:6a:48: 3c:f4:f7:26:2b:eb:5f:5d:c1:f5:40:a9:01:f5:55: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B9:46:4D:F1:75:2B:FF:DA:4A:F4:D8:51:B2:96:45:7D:0A:A0:6C X509v3 Authority Key Identifier: keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:60:34:13:41:6d:5d:10:84:1b:6f:23:4e:5f:49:ff:4c:05: d1:07:a4:ce:88:74:c5:c0:b6:d2:32:3f:b3:59:a5:95:2a:93: ba:70:d9:1e:94:be:3d:8b:d0:85:be:28:2c:bd:c6:1f:0d:bb: 71:cc:64:c2:e8:da:a2:80:64:ff:be:0b:69:6e:20:fa:29:a3: 34:7b:08:21:65:e3:51:60:a0:00:4e:8a:97:fe:1f:63:27:3e: a9:fa:98:18:99:d2:1c:3f:e7:07:6d:31:72:10:c2:be:92:76: 50:74:c9:7a:ad:da:54:7e:ef:5a:5f:99:91:9d:9b:03:3f:e3: e8:2b:ae:7f:cf:ec:4a:22:82:d9:2b:48:8c:98:91:d3:91:06: 0a:66:2c:06:9b:f0:ff:c9:ba:f7:ff:6d:91:53:14:9c:9d:51: 85:de:da:57:36:7e:9e:9b:2f:34:25:47:f8:38:5f:97:21:5b: 3d:04:f8:08:54:48:90:59:a3:5e:dd:dc:2f:78:84:11:42:2c: 51:da:b3:33:2a:61:02:61:08:44:0b:6f:54:98:27:9d:0f:e7: 5a:93:c6:eb:97:57:51:fa:51:aa:90:2c:1b:73:32:0a:b5:fb: ff:c9:7e:b9:a8:89:81:08:28:0a:3d:c2:3f:25:14:4a:f0:dd: 1f:a3:5e:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKEI0ODY1RTNCRTlDNTY5RDJCOTNGMkMzNTFDQUIyNEQx NTA2QUFDMEQwHhcNMjYwNzIzMDQ1MzI2WhcNMjYwNzMwMDQ1MzI2WjAYMRYwFAYD VQQDEw02YTYxOWU0Ni00MjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPHTJghIUqQzlqyOLcX3LkTL88ae7oZ9XwiWraFjhsM2654TNb0XlTCQyXzx Gv9uAEMgveK8Fv/r/56MGEj3NbfcMxPogWroHqIBtOzAfUYQbmQcAi1Og5YtL8JB uDc5Q1RaNoPzhZJrLyj8dI43xESTN4Pb0v2KOh8cUfjnDmgU9uM+0y6arWjXz/x4 XAvMsxrHAtfIHRCW0qu+8K+UQnQ8GzxUdZkFfHy6ggXeBZZG4axNP01rNqsrxx94 HowOmhzlHe/BEGe9TWDd7sNZkzmiezHmabgg2dTs8iQ5QNrMmVtaKU7vi7QCgqgB akg89PcmK+tfXcH1QKkB9VWzjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB25Rk3x dSv/2kr02FGylkV9CqBsMB8GA1UdIwQYMBaAFLSGXjvpxWnSuT8sNRyrJNFQaqwN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zNTcwREYyRUIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFkSzVQeXcxSEtzazBWQnFy QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJWmVPLW5GYWRLNVB5dzFIS3NrMFZCcXJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zNTcwREYyRUIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFk SzVQeXcxSEtzazBWQnFyQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHWA0E0FtXRCEG28jTl9J/0wF0Qekzoh0xcC20jI/s1mllSqTunDZHpS+PYvQ hb4oLL3GHw27ccxkwujaooBk/74LaW4g+imjNHsIIWXjUWCgAE6Kl/4fYyc+qfqY GJnSHD/nB20xchDCvpJ2UHTJeq3aVH7vWl+ZkZ2bAz/j6Cuuf8/sSiKC2StIjJiR 05EGCmYsBpvw/8m69/9tkVMUnJ1Rhd7aVzZ+npsvNCVH+DhflyFbPQT4CFRIkFmj Xt3cL3iEEUIsUdqzMyphAmEIRAtvVJgnnQ/nWpPG65dXUfpRqpAsG3MyCrX7/8l+ uaiJgQgoCj3CPyUUSvDdH6NemQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:04:14 2026 by rpki-client