$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: 59Gak8H4ygLxjuPLO9M6QH8ikVAGO9OncHUH3Ir0W8c= Subject key identifier: 64:DF:42:FF:B5:DA:42:9F:1F:1E:18:39:D8:B0:B0:29:8D:F1:4A:85 Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: 01F7 Signing time: Thu 23 Jul 2026 04:44:55 +0000 Manifest this update: Thu 23 Jul 2026 04:44:55 +0000 Manifest next update: Thu 30 Jul 2026 04:44:55 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: GbEQ+vowaWGsGlfL0MKyx7llMnAT3qdFcbNG0uxgSI8=) 2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: /qNeMoHq2aNx85z5DTHQgQr12JfNKIytF+LLvQVIEvI=) 3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: aRfQZJBeIUXkRnVBff5AI2UFIz3GN5zYE0o7KWSnJVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: Jul 23 04:44:55 2026 GMT Not After : Jul 30 04:44:55 2026 GMT Subject: CN=6a619c47-1e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:2f:f1:4a:97:0e:e7:ca:67:f4:42:a9:30: e7:0d:a3:05:20:5d:51:ef:5f:9b:fd:04:6e:d4:25: 34:a2:1c:b2:03:d6:36:96:95:ba:82:cc:58:71:79: 54:7b:80:6a:66:1f:f9:af:63:8d:86:23:ee:53:d7: ea:8b:95:8f:37:bd:3d:7a:fb:98:50:af:47:e5:7f: 17:24:88:28:9c:8c:73:5a:1c:62:ba:93:ec:e7:d3: bf:ce:8f:da:7d:82:34:b9:7b:88:aa:77:85:e7:dc: e3:80:e0:c2:4f:fc:28:bc:af:54:e7:e3:cc:40:54: 42:77:20:a6:ef:18:4e:a6:4d:2d:9a:be:c1:34:06: 94:0c:32:86:7b:52:dd:68:40:8d:cf:71:dc:31:b9: 8e:34:f9:34:ed:10:05:28:59:a1:6b:37:00:cd:08: c4:41:1e:1a:b0:02:a3:58:a6:4a:34:41:e8:4d:eb: 81:22:03:b1:d8:72:d7:1e:20:5d:98:7e:a2:78:6b: 23:c0:6b:57:c3:dc:be:39:87:03:20:d2:5d:a5:7c: e9:e7:52:1b:b0:ef:16:75:ab:25:c6:a5:11:83:e6: 3e:60:60:81:04:63:75:9c:f2:b0:a4:e7:64:a8:97: 20:ac:0e:4c:a9:57:6c:a5:15:47:bd:25:01:da:d5: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DF:42:FF:B5:DA:42:9F:1F:1E:18:39:D8:B0:B0:29:8D:F1:4A:85 X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f0:92:3d:5f:f5:ef:6a:de:95:30:40:03:87:9a:56:23:54: 13:a6:87:04:cc:df:6e:d8:ae:40:53:66:d0:ac:27:ea:33:f7: e0:f8:90:7a:2d:6b:e1:81:10:1f:98:7d:1d:e6:c8:14:c9:eb: 50:e8:76:57:03:37:e8:3c:0b:35:3f:b5:e0:7e:1b:51:3c:bd: 42:73:22:1e:91:18:25:67:ff:81:92:2c:d3:6a:c4:f1:34:72: f0:95:0f:6d:e4:b1:49:28:da:32:35:9c:73:7e:fd:04:2a:cc: 8c:43:ba:74:ca:e7:28:90:a8:87:b3:4f:e9:d5:82:b4:63:b5: c3:22:24:b3:2d:71:21:dc:f9:ea:f9:c8:e7:db:c0:f5:8e:a2: f9:d5:6c:9a:43:40:67:1f:b7:44:08:48:a3:12:fc:c7:a4:47: 3a:1f:ac:d2:17:72:fe:a2:65:22:18:eb:34:01:32:65:1e:68: 82:d0:be:47:1d:f0:7d:d3:ef:ce:55:bc:66:18:de:27:52:85: a8:49:fe:dd:2a:96:ac:db:e6:7f:11:a3:7f:80:78:be:3a:c4: e5:fc:3d:5b:ba:f7:0b:ce:08:fd:a2:76:38:43:76:f1:c3:37: cc:d2:b0:ca:17:bd:42:04:7a:f1:45:ff:9e:96:1b:37:4e:33: dd:d4:42:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1 NTIwNUM4RjYwHhcNMjYwNzIzMDQ0NDU1WhcNMjYwNzMwMDQ0NDU1WjAYMRYwFAYD VQQDEw02YTYxOWM0Ny0xZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXMv8UqXDufKZ/RCqTDnDaMFIF1R71+b/QRu1CU0ohyyA9Y2lpW6gsxYcXlU e4BqZh/5r2ONhiPuU9fqi5WPN709evuYUK9H5X8XJIgonIxzWhxiupPs59O/zo/a fYI0uXuIqneF59zjgODCT/wovK9U5+PMQFRCdyCm7xhOpk0tmr7BNAaUDDKGe1Ld aECNz3HcMbmONPk07RAFKFmhazcAzQjEQR4asAKjWKZKNEHoTeuBIgOx2HLXHiBd mH6ieGsjwGtXw9y+OYcDINJdpXzp51IbsO8WdaslxqURg+Y+YGCBBGN1nPKwpOdk qJcgrA5MqVdspRVHvSUB2tXGIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTfQv+1 2kKfHx4YOdiwsCmN8UqFMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3 bXhicGwxQUc0U0pWSUZ5UFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXvCSPV/172relTBAA4eaViNUE6aHBMzfbtiuQFNm0Kwn6jP34PiQei1r4YEQ H5h9HebIFMnrUOh2VwM36DwLNT+14H4bUTy9QnMiHpEYJWf/gZIs02rE8TRy8JUP beSxSSjaMjWcc379BCrMjEO6dMrnKJCoh7NP6dWCtGO1wyIksy1xIdz56vnI59vA 9Y6i+dVsmkNAZx+3RAhIoxL8x6RHOh+s0hdy/qJlIhjrNAEyZR5ogtC+Rx3wfdPv zlW8ZhjeJ1KFqEn+3SqWrNvmfxGjf4B4vjrE5fw9W7r3C84I/aJ2OEN28cM3zNKw yhe9QgR68UX/npYbN04z3dRCDg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:20:25 2026 by rpki-client