$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft File: tkP-swMnQhSPOvnDU5M41VSTcig.mft (raw, json) Hash identifier: Ggj3OvSaTt02jf8CQDahdC2raJ5m5U2O0pFAk/GJ5qw= Subject key identifier: DA:B1:36:34:91:2D:22:08:E6:0C:02:39:B8:D7:39:AD:55:FA:44:99 Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 Certificate issuer: /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft Manifest number: 6C Signing time: Mon 11 May 2026 08:00:25 +0000 Manifest this update: Mon 11 May 2026 08:00:25 +0000 Manifest next update: Mon 18 May 2026 08:00:25 +0000 Files and hashes: 1: tkP-swMnQhSPOvnDU5M41VSTcig.crl (hash: ysPfbJ2vfGgdD4a1LNgeC+Fe/0blJfZ3X1mvoc96NrE=) 2: 341BBBECA99411F093BBAA15C4F9AE02.roa (hash: PpvqloufX06LkcG9zYWZ5Pcx+1uUm6NtfRlAU1EzgwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Validity Not Before: May 11 08:00:25 2026 GMT Not After : May 18 08:00:25 2026 GMT Subject: CN=6a018c99-02c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:77:00:f6:31:85:e8:42:a3:d0:af:cd:d8: 82:58:7d:2f:7a:90:ce:b6:90:d2:64:32:f5:61:e8: 9b:e0:59:0f:9a:15:6a:aa:bb:89:8b:67:dd:6d:84: 65:b0:e4:3d:b4:da:b9:a7:51:64:7d:f0:f6:b0:27: b2:ef:31:11:56:b0:3f:92:51:bd:37:4c:48:9d:52: 0d:d6:49:37:ae:10:02:53:1c:2d:4e:9e:f3:df:b4: 36:11:7c:00:b3:64:6d:aa:90:9a:48:0d:29:89:3c: 79:c2:b1:ab:c2:bb:2c:48:60:71:5f:37:af:92:47: 61:5f:37:b7:1f:88:36:c4:2d:c8:0f:88:f0:23:79: e3:83:dc:04:52:c9:80:4b:03:48:ca:29:cf:8b:d4: eb:e3:f4:1d:c5:90:3e:ef:d4:55:c0:d8:d3:5b:e6: 09:15:a0:fb:6b:8d:14:b5:6c:f8:cf:87:4d:25:05: eb:e5:cc:a8:03:31:4f:b9:12:16:57:49:77:51:d8: 31:ab:65:af:8e:35:1d:a5:3d:62:27:35:6c:a6:ef: 7c:9f:d3:4c:61:ad:78:b0:ed:99:0e:8e:a8:19:04: 8d:bd:dd:ad:8f:cc:3e:e8:9f:71:25:d8:84:b2:79: ec:c5:fa:fe:25:11:8f:49:db:ff:29:7d:0e:25:22: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B1:36:34:91:2D:22:08:E6:0C:02:39:B8:D7:39:AD:55:FA:44:99 X509v3 Authority Key Identifier: keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:cb:f8:87:9c:fd:73:cf:fc:3b:ad:0c:50:79:9c:ad:47:58: fe:d6:55:56:3c:1b:fe:15:ef:47:28:90:62:c3:3e:aa:cd:8c: c6:4a:6c:04:77:3b:8d:ae:79:6b:1c:51:01:23:bf:11:89:5f: 41:18:fd:a9:30:e0:e1:1f:62:e3:85:49:55:d8:09:fb:db:d2: dd:2a:a0:f7:2c:55:71:6c:9d:73:a8:58:99:87:2e:57:0b:d9: a3:06:72:c8:84:64:07:a5:73:1f:38:56:d4:a4:32:ec:88:00: aa:ed:ab:bf:08:a5:a0:9d:84:c5:b2:db:0d:32:7d:e2:96:77: bf:40:67:28:06:a5:1f:9d:37:de:bd:d1:2d:6b:50:5a:ac:e2: b0:c4:3c:00:80:c6:f6:d2:42:dc:08:0a:85:15:72:2f:12:cc: ab:d2:64:bc:1a:5a:40:31:29:88:74:a6:1a:6c:b9:09:16:80: 3c:e6:1c:c4:d7:be:b9:fe:e4:9b:6d:a0:83:a7:48:f7:a3:0a: f7:d5:53:69:88:7f:6f:8b:82:af:a6:cd:85:b5:a7:fc:f0:cf: f6:a7:6a:dd:6f:bf:76:1a:2f:c4:e8:a3:02:37:60:a8:57:5b: f4:5d:f7:96:ab:6e:7f:e9:56:d6:54:52:a1:59:12:97:19:47: 9d:70:18:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQjY0M0ZFQjMwMzI3NDIxNDhGM0FGOUMzNTM5MzM4RDU1 NDkzNzIyODAeFw0yNjA1MTEwODAwMjVaFw0yNjA1MTgwODAwMjVaMBgxFjAUBgNV BAMTDTZhMDE4Yzk5LTAyYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbNHcA9jGF6EKj0K/N2IJYfS96kM62kNJkMvVh6JvgWQ+aFWqqu4mLZ91thGWw 5D202rmnUWR98PawJ7LvMRFWsD+SUb03TEidUg3WSTeuEAJTHC1OnvPftDYRfACz ZG2qkJpIDSmJPHnCsavCuyxIYHFfN6+SR2FfN7cfiDbELcgPiPAjeeOD3ARSyYBL A0jKKc+L1Ovj9B3FkD7v1FXA2NNb5gkVoPtrjRS1bPjPh00lBevlzKgDMU+5EhZX SXdR2DGrZa+ONR2lPWInNWym73yf00xhrXiw7ZkOjqgZBI293a2PzD7on3El2ISy eezF+v4lEY9J2/8pfQ4lInBvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2rE2NJEt IgjmDAI5uNc5rVX6RJkwHwYDVR0jBBgwFoAUtkP+swMnQhSPOvnDU5M41VSTcigw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzRGNzY5RDU4QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL3RrUC1zd01uUWhTUE92bkRVNU00MVZTVGNp Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdGtQLXN3TW5RaFNQT3ZuRFU1TTQxVlNUY2lnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzRGNzY5RDU4QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL3RrUC1zd01uUWhT UE92bkRVNU00MVZTVGNpZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCjy/iHnP1zz/w7rQxQeZytR1j+1lVWPBv+Fe9HKJBiwz6qzYzGSmwEdzuNrnlr HFEBI78RiV9BGP2pMODhH2LjhUlV2An729LdKqD3LFVxbJ1zqFiZhy5XC9mjBnLI hGQHpXMfOFbUpDLsiACq7au/CKWgnYTFstsNMn3ilne/QGcoBqUfnTfevdEta1Ba rOKwxDwAgMb20kLcCAqFFXIvEsyr0mS8GlpAMSmIdKYabLkJFoA85hzE1765/uSb baCDp0j3owr31VNpiH9vi4Kvps2Ftaf88M/2p2rdb792Gi/E6KMCN2CoV1v0XfeW q25/6VbWVFKhWRKXGUedcBjg -----END CERTIFICATE-----Generated at Wed May 13 05:29:06 2026 by rpki-client