$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: lo5QaP6PF/G7roSVVFa3A6IzxmtLDeje9DbwwwVRVYs= Subject key identifier: C5:85:15:C6:95:F3:36:41:09:4D:BD:BD:F6:E3:17:6C:45:BA:08:58 Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0D5A Signing time: Wed 22 Jul 2026 18:22:34 +0000 Manifest this update: Wed 22 Jul 2026 18:22:33 +0000 Manifest next update: Wed 29 Jul 2026 18:22:33 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: b9sTYby4z80bNQfoR62fExlXyqxh2SLd1I6bPdmewO0=) 2: 4F383CB6FF6B11F0AD4BC885576F56BC.roa (hash: WGJtveG7MyCaKyrbykvOBWfbJGid2bolS7+yA+NkoTg=) 3: F824C588FF7A11F0B218EB915B6F56BC.roa (hash: vyzv0f1THJyglSIA32Cmr/3tLhp6nkKIDvP00vthIq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Jul 22 18:22:33 2026 GMT Not After : Jul 29 18:22:33 2026 GMT Subject: CN=6a610a69-b1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:4a:0c:af:f6:fa:82:ac:85:fa:45:a0:39: 59:cd:d4:ac:a3:39:1d:02:40:68:50:7e:60:2d:77: 1f:1c:42:24:e1:5d:7d:1e:6d:1a:a4:89:68:63:fd: 3a:6d:75:ab:64:d2:ce:b1:22:27:de:67:f8:0b:02: 39:64:1f:08:f7:6e:b1:26:3f:f4:0e:de:00:4a:4c: 7e:6e:0a:85:30:53:72:d5:4b:59:c5:29:13:79:5e: 6d:99:35:9e:94:55:42:25:77:67:33:8e:7c:a4:3f: 7b:98:0e:ca:6e:a0:37:55:53:2d:4d:f1:42:4e:55: c4:5d:4d:3f:96:f8:10:7f:e8:0a:7d:ef:57:1f:e5: 3e:f1:15:7b:9b:ba:27:37:9a:cd:17:24:52:35:34: e6:7d:a0:02:e6:e0:27:a2:31:54:fa:42:c9:61:72: c5:c9:d6:f9:7a:7f:ec:bb:b3:ea:76:1f:dd:fe:b0: 9e:c2:2b:81:e3:eb:20:d9:8d:c6:57:f8:ba:1d:d6: 37:1f:87:9e:5d:79:a2:bd:88:48:f6:a7:06:50:b3: 9e:66:50:19:3a:8d:af:9a:7f:e1:29:9b:8a:bd:6b: 3d:c2:9a:8a:77:e9:10:65:d6:a8:28:3a:e6:13:86: b0:5a:86:74:3e:0f:a2:e6:fb:6b:7e:6d:9e:4e:ae: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:85:15:C6:95:F3:36:41:09:4D:BD:BD:F6:E3:17:6C:45:BA:08:58 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:06:13:6e:01:9f:fd:3d:a6:11:59:e6:01:03:82:87:14:a1: 88:92:41:c1:fb:c3:f3:03:5a:6f:17:09:12:d1:b5:be:46:8a: 21:c0:a3:ea:b5:ed:b2:56:7f:13:47:d7:1f:57:25:b7:bb:1f: 41:aa:f9:fa:dd:ad:16:71:cc:2c:a7:a6:6a:73:31:9c:36:5c: 7f:a7:cc:05:8f:87:98:a2:04:9d:a9:32:ae:2e:d1:12:ed:3a: ac:29:ad:e5:59:a9:d1:8b:e5:85:fd:10:b8:08:b2:26:8e:4b: 6f:47:9e:b6:4c:14:4b:53:f1:68:96:fe:26:5b:cc:9e:b4:c4: 82:24:12:0c:1c:04:62:f1:e8:6a:ec:b2:33:a1:a9:92:9c:39: 8a:ae:31:5a:1a:d4:00:f2:7e:7a:0e:67:6f:31:f2:fe:48:6b: c4:fd:81:cd:62:42:68:f6:3c:de:7a:a2:85:c6:5b:14:85:df: d9:60:ab:9e:a4:94:22:4b:fe:62:5c:a5:ae:66:68:99:b0:2e: a0:7e:47:0b:f5:4d:7f:9c:a0:b5:a4:f6:6d:09:bf:10:0a:4d: 8f:18:31:dc:c5:66:8e:b2:4a:35:81:1f:d2:da:42:c7:e4:58: 53:7c:8f:cc:02:19:e1:50:b6:dc:63:9a:9d:4c:4b:ce:47:6e: 55:5c:9a:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjYwNzIyMTgyMjMzWhcNMjYwNzI5MTgyMjMzWjAYMRYwFAYD VQQDEw02YTYxMGE2OS1iMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7dKDK/2+oKshfpFoDlZzdSsozkdAkBoUH5gLXcfHEIk4V19Hm0apIloY/06 bXWrZNLOsSIn3mf4CwI5ZB8I926xJj/0Dt4ASkx+bgqFMFNy1UtZxSkTeV5tmTWe lFVCJXdnM458pD97mA7KbqA3VVMtTfFCTlXEXU0/lvgQf+gKfe9XH+U+8RV7m7on N5rNFyRSNTTmfaAC5uAnojFU+kLJYXLFydb5en/su7Pqdh/d/rCewiuB4+sg2Y3G V/i6HdY3H4eeXXmivYhI9qcGULOeZlAZOo2vmn/hKZuKvWs9wpqKd+kQZdaoKDrm E4awWoZ0Pg+i5vtrfm2eTq4V7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWFFcaV 8zZBCU29vfbjF2xFughYMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQgYTbgGf/T2mEVnmAQOChxShiJJBwfvD8wNabxcJEtG1vkaKIcCj6rXtslZ/ E0fXH1clt7sfQar5+t2tFnHMLKemanMxnDZcf6fMBY+HmKIEnakyri7REu06rCmt 5Vmp0Yvlhf0QuAiyJo5Lb0eetkwUS1PxaJb+JlvMnrTEgiQSDBwEYvHoauyyM6Gp kpw5iq4xWhrUAPJ+eg5nbzHy/khrxP2BzWJCaPY83nqihcZbFIXf2WCrnqSUIkv+ YlylrmZombAuoH5HC/VNf5ygtaT2bQm/EApNjxgx3MVmjrJKNYEf0tpCx+RYU3yP zAIZ4VC23GOanUxLzkduVVyaNQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:57:19 2026 by rpki-client