$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: c25dtVnnt8UEVxV3/oYpx52CXhJ0cac7sZfs/EhOOb0= Subject key identifier: 9E:AA:80:2E:26:82:47:88:FB:FE:FF:A7:2A:05:DA:AC:F8:F6:17:EA Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0DF3 Signing time: Wed 22 Jul 2026 20:44:12 +0000 Manifest this update: Wed 22 Jul 2026 20:44:11 +0000 Manifest next update: Wed 29 Jul 2026 20:44:11 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: Jdsr9o8FuWuy3wVQU5ZVkitmtdSNI8UsSnVE/kCaz6s=) 2: A1B8D10EF5C511EF83B21246C4F9AE02.roa (hash: V07yp4azfzM5YFQd3DFJvRMzAViuDBC6g0jJfgu6wvI=) 3: 8E4BBF50F5C511EF89110646C4F9AE02.roa (hash: 1qbYu5KRZI3rxH4kzvhF/miC5oW7IXAqReX/2/VUDaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Jul 22 20:44:11 2026 GMT Not After : Jul 29 20:44:11 2026 GMT Subject: CN=6a612b9c-bbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:30:a3:0b:bf:b8:a3:9a:69:d3:f2:22:04: 93:fe:6c:f3:19:b6:ae:c3:73:fa:f5:76:24:96:19: 11:f7:8f:fc:49:ba:75:91:8a:e2:ef:82:db:20:b4: d3:0e:c7:45:bd:94:dc:af:d0:f7:a0:ab:90:78:72: b1:10:62:c9:1d:b8:fe:95:05:31:7d:d6:be:31:62: 0a:1f:59:76:5f:e3:8e:30:41:47:27:ba:92:7a:a0: 47:b7:9c:da:f2:25:3a:e5:a3:b5:76:27:4a:60:93: aa:36:c1:f2:f9:36:c7:e3:e6:a8:84:46:cf:59:f5: fa:2a:4e:33:fb:40:da:84:2d:a8:c0:63:cd:41:34: 5d:76:ca:54:c5:00:ea:ba:43:e4:72:5e:6f:32:ad: b4:bc:fe:e1:07:69:d1:3a:21:d3:9c:88:5c:0e:29: 6c:f6:64:2e:89:3c:b0:f4:4b:43:43:5b:c4:91:e4: e0:2a:ed:08:8b:69:7a:ed:2f:bf:b3:44:66:b9:ac: eb:b6:04:0b:0e:4e:dc:7c:fc:ca:b4:54:c1:35:ca: 82:9c:95:17:50:c4:4a:85:bf:bf:ef:78:81:82:a8: a3:1d:c5:6e:8a:46:11:47:a7:c6:8a:8c:56:c6:87: 28:b2:93:08:0d:57:49:e3:b2:d4:48:b8:64:51:16: 63:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AA:80:2E:26:82:47:88:FB:FE:FF:A7:2A:05:DA:AC:F8:F6:17:EA X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6b:0e:78:77:2f:f4:0e:b7:6e:b9:fc:18:4c:2b:03:3e:c4: 18:d3:b7:c1:d5:bd:e4:a7:0a:20:66:e5:2c:df:6f:55:38:44: 2c:07:90:1c:6d:8f:1f:fd:bf:58:33:61:2e:0a:32:e6:64:e3: a8:23:45:2b:75:7b:26:28:ef:b2:ea:89:79:ba:04:35:05:e1: 6e:21:49:7c:ee:1a:09:d7:1e:e7:49:6e:11:12:be:39:71:6a: 64:dc:b4:d1:cf:0f:1a:75:f7:17:45:fd:51:98:af:5c:12:50: 8e:57:55:0b:91:6c:76:8b:14:38:5f:37:9f:68:65:f3:09:f7: 10:9c:85:22:37:c6:55:4d:b7:db:af:92:b0:47:81:dd:47:ee: b8:6c:e7:91:bd:45:c5:c9:bc:64:01:23:77:6b:18:ac:a7:c1: 87:a7:df:60:33:8c:18:f4:99:a1:c3:cc:a4:56:6d:0d:4f:ec: bf:59:85:3c:bb:24:ad:24:76:db:09:dc:8f:2e:70:45:99:5f: 7d:8d:f0:58:26:63:22:e9:26:18:21:d9:92:fd:14:15:da:f3: d3:d9:93:56:67:30:e3:c1:21:cb:14:f8:a1:a8:0a:d9:fb:ba: 3e:37:60:54:4d:dd:01:c2:1b:01:d4:ce:ab:f1:d4:6f:c1:2e: cd:5a:83:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjYwNzIyMjA0NDExWhcNMjYwNzI5MjA0NDExWjAYMRYwFAYD VQQDEw02YTYxMmI5Yy1iYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmacwowu/uKOaadPyIgST/mzzGbauw3P69XYklhkR94/8Sbp1kYri74LbILTT DsdFvZTcr9D3oKuQeHKxEGLJHbj+lQUxfda+MWIKH1l2X+OOMEFHJ7qSeqBHt5za 8iU65aO1didKYJOqNsHy+TbH4+aohEbPWfX6Kk4z+0DahC2owGPNQTRddspUxQDq ukPkcl5vMq20vP7hB2nROiHTnIhcDils9mQuiTyw9EtDQ1vEkeTgKu0Ii2l67S+/ s0RmuazrtgQLDk7cfPzKtFTBNcqCnJUXUMRKhb+/73iBgqijHcVuikYRR6fGioxW xocospMIDVdJ47LUSLhkURZjbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6qgC4m gkeI+/7/pyoF2qz49hfqMB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdGsOeHcv9A63brn8GEwrAz7EGNO3wdW95KcKIGblLN9vVThELAeQHG2PH/2/ WDNhLgoy5mTjqCNFK3V7JijvsuqJeboENQXhbiFJfO4aCdce50luERK+OXFqZNy0 0c8PGnX3F0X9UZivXBJQjldVC5FsdosUOF83n2hl8wn3EJyFIjfGVU2326+SsEeB 3UfuuGznkb1Fxcm8ZAEjd2sYrKfBh6ffYDOMGPSZocPMpFZtDU/sv1mFPLskrSR2 2wncjy5wRZlffY3wWCZjIukmGCHZkv0UFdrz09mTVmcw48EhyxT4oagK2fu6Pjdg VE3dAcIbAdTOq/HUb8EuzVqDZw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:06:02 2026 by rpki-client