$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: XiWhpEi9dLTGXA2t3sOQqjKRIS/OYZ5rLBO3PUNv+28= Subject key identifier: 87:52:FD:48:D6:1F:0F:B5:0A:AC:29:BE:27:C5:CC:BF:11:56:D1:FD Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 0166 Signing time: Thu 23 Jul 2026 06:50:05 +0000 Manifest this update: Thu 23 Jul 2026 06:50:04 +0000 Manifest next update: Thu 30 Jul 2026 06:50:04 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: 0xlf2Nj0U9oZWzvcTiNjvl7HOH/UC+ek0fDnoeMJeo0=) 2: 2D6E98583F0511F1B91814A8C9833773.roa (hash: cvsxFrKYwzXfmPTCt/kaQm7QbHYPT/Bov3jLYon6Aw4=) 3: 1E17772C282A11F18C2E09ECC4833773.roa (hash: oLpFDhJAkBM0IvUW0GrLcFvZpoWVqor11OTJu0OVZZ0=) 4: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: rnduJ2NpU+LIFZlZ+rkpxldWRpJwaPya7QDINOEsPrs=) 5: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: D4NRCko3MZFYJkLZPgAkzijOJifErlno5imf5X3ylHY=) 6: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: eKzsF8gwTHd0fONSYl3Z08RvmhJ05i8QkQx5Tz+KBCU=) 7: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: GzfRPUDBbDs4K4+434Sr5sRN49sS17wbw5wNG+NNvFM=) 8: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: vEc2jHNpgXkle7usC6cdkDSSfCMVfaEYA5yavxzJttQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Jul 23 06:50:04 2026 GMT Not After : Jul 30 06:50:04 2026 GMT Subject: CN=6a61b99d-0e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:2e:49:da:bf:56:a7:05:73:16:2b:4f:59: 16:2e:e7:38:44:9d:d0:16:02:06:6b:70:62:7b:ca: 0b:1d:7b:32:fe:b9:4d:80:2d:f9:3b:ec:2b:69:0a: 50:45:ea:df:88:88:fb:a2:30:26:31:0c:43:5c:7c: 23:24:46:3a:15:14:d2:2f:98:d7:ed:78:19:c4:d5: ca:fd:06:c8:2a:73:82:5e:4c:54:44:7c:47:00:2d: ea:bb:7a:e0:55:1b:60:0e:1e:7c:73:07:24:64:e3: be:2a:c8:86:72:36:8a:32:32:3d:51:50:1d:fc:e6: d9:fc:10:83:2b:9b:f4:d9:74:14:e8:fb:9c:57:20: e2:1c:69:79:79:3a:e7:ec:a8:68:1d:3d:7a:40:3c: 64:01:95:25:a9:7f:df:5e:3d:2b:35:b7:b2:6f:73: 07:40:0b:8a:c8:da:2d:a5:ee:42:5d:81:6e:f8:94: 70:3d:fd:5a:c5:f9:0f:b1:1f:20:5b:6e:e8:74:e2: d9:c7:8c:53:2a:fb:1f:44:1b:0c:76:a8:db:82:57: 19:6d:68:05:d8:61:35:36:c6:cb:5e:ac:95:50:c7: 5a:ef:77:38:f7:97:78:60:f2:92:9a:48:94:fe:f4: 32:ec:93:ab:b9:63:af:a6:e1:15:3f:40:3d:88:2d: ba:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:52:FD:48:D6:1F:0F:B5:0A:AC:29:BE:27:C5:CC:BF:11:56:D1:FD X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d8:07:0e:26:84:32:d5:4a:ec:d4:e5:87:b9:4e:46:30:e1: de:3e:ff:23:2c:11:7e:bc:c0:f8:a5:88:32:66:cc:2a:af:66: b1:dc:55:11:f1:be:ed:b6:b3:ea:a9:11:d5:ed:11:0b:d7:3f: 83:2e:b8:bb:da:c3:ca:75:10:f8:3d:7a:da:29:cd:3a:14:a2: 31:ff:bf:e5:87:99:8e:71:66:9a:6b:43:1a:73:5b:fc:b8:60: 97:52:1b:30:22:f2:8f:a6:7d:d2:ee:4d:ff:85:2c:74:41:cf: 2e:6f:96:6c:5b:24:72:7e:d0:a2:f2:a8:61:33:7c:9f:c6:ad: 94:75:ef:5a:8c:6e:3f:37:b6:8a:c1:d0:ee:1c:64:f5:1e:78: 28:a9:43:c7:44:3a:67:19:bb:15:63:01:5c:dc:13:f5:23:7a: db:5c:cb:f1:4c:9d:2a:f8:4b:e7:b9:53:3c:c6:16:0d:97:e6: bd:f3:a8:cc:46:aa:0b:b0:b7:e7:5f:9e:d1:b6:81:7b:33:02: f2:ac:5c:84:e3:6a:fd:71:0f:2a:ab:b9:17:83:54:7b:e0:8b: 1f:5e:d7:0b:cf:ab:3e:bd:92:24:c1:ef:f4:07:83:2f:4c:62: e3:de:58:81:8b:97:ee:17:99:3f:ee:12:37:34:5f:47:c8:c6: fa:7c:42:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjYwNzIzMDY1MDA0WhcNMjYwNzMwMDY1MDA0WjAYMRYwFAYD VQQDEw02YTYxYjk5ZC0wZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDAuSdq/VqcFcxYrT1kWLuc4RJ3QFgIGa3Bie8oLHXsy/rlNgC35O+wraQpQ RerfiIj7ojAmMQxDXHwjJEY6FRTSL5jX7XgZxNXK/QbIKnOCXkxURHxHAC3qu3rg VRtgDh58cwckZOO+KsiGcjaKMjI9UVAd/ObZ/BCDK5v02XQU6PucVyDiHGl5eTrn 7KhoHT16QDxkAZUlqX/fXj0rNbeyb3MHQAuKyNotpe5CXYFu+JRwPf1axfkPsR8g W27odOLZx4xTKvsfRBsMdqjbglcZbWgF2GE1NsbLXqyVUMda73c495d4YPKSmkiU /vQy7JOruWOvpuEVP0A9iC26lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdS/UjW Hw+1CqwpvifFzL8RVtH9MB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANtgHDiaEMtVK7NTlh7lORjDh3j7/IywRfrzA+KWIMmbMKq9msdxVEfG+7baz 6qkR1e0RC9c/gy64u9rDynUQ+D162inNOhSiMf+/5YeZjnFmmmtDGnNb/Lhgl1Ib MCLyj6Z90u5N/4UsdEHPLm+WbFskcn7QovKoYTN8n8atlHXvWoxuPze2isHQ7hxk 9R54KKlDx0Q6Zxm7FWMBXNwT9SN621zL8UydKvhL57lTPMYWDZfmvfOozEaqC7C3 51+e0baBezMC8qxchONq/XEPKqu5F4NUe+CLH17XC8+rPr2SJMHv9AeDL0xi495Y gYuX7heZP+4SNzRfR8jG+nxCVw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:41:22 2026 by rpki-client