$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: j0HyYCvwWz8Me+aUUy3fvfwsG34P6hT5iDC6kkIo4bs= Subject key identifier: 65:76:52:8A:9D:0B:0A:C7:EF:35:B7:77:23:D9:EA:BB:4B:90:B9:D4 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 0143 Signing time: Thu 23 Jul 2026 07:05:24 +0000 Manifest this update: Thu 23 Jul 2026 07:05:23 +0000 Manifest next update: Thu 30 Jul 2026 07:05:23 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: GCdrPIhps7EWz7CVXfriGDPsmDWvUxxn8jF+2n+V5vI=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: iXPPbRwODBTS92FzdfuvK5J3jl/IZyMATy+kQwe/++Q=) 3: 12B6D40E37C511F19788E36ABE833773.roa (hash: f5bzM7j+pO8fCnEBI50cYrv56JA2HlZHuSFXp1GJx88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Jul 23 07:05:23 2026 GMT Not After : Jul 30 07:05:23 2026 GMT Subject: CN=6a61bd33-47b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:72:83:c9:2c:ee:52:d8:4a:5b:1a:17:47: e6:37:bc:11:f0:c2:e3:ab:f9:41:c9:e9:dd:fc:a0: e1:8c:07:d3:eb:86:e2:89:d0:9d:24:62:c9:f7:af: d7:a2:b4:bf:8a:d0:e2:37:ad:5f:8e:42:6c:64:07: 9c:b8:7a:16:55:80:2c:45:fe:56:ce:5f:27:c0:b8: 42:29:7c:60:2c:45:29:dc:cc:f4:cf:fc:63:2f:d6: d1:74:88:53:16:9a:2d:e2:25:5a:be:e3:d9:d2:9a: e8:3c:4c:2d:7c:e2:82:23:cd:ac:35:11:f7:cb:23: 6c:0b:e0:39:a8:f9:3d:58:59:b0:eb:ea:ac:6d:87: 04:f7:21:99:f1:cc:8c:bf:0d:79:52:be:45:f5:1d: 8c:07:50:b3:a5:c6:65:a0:49:ef:f7:e8:a7:b4:9e: 57:ac:bf:46:de:ad:3a:3c:4b:27:4e:8a:37:c6:73: 44:69:8e:7d:45:39:ce:1a:82:99:a1:69:98:1a:34: 1d:94:e8:cb:70:50:2f:f5:fc:d3:07:d5:40:fc:cd: b0:54:6a:75:3f:c7:3d:04:91:9d:45:24:79:89:77: df:99:98:df:ee:f5:55:75:14:56:a2:41:da:7d:0c: 4d:14:70:b1:23:df:4a:53:6f:b5:8f:86:83:36:dd: da:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:76:52:8A:9D:0B:0A:C7:EF:35:B7:77:23:D9:EA:BB:4B:90:B9:D4 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:98:0d:fc:d9:24:46:02:ad:f9:bd:69:9c:15:80:29:ee:9e: 4e:9a:78:43:f8:1a:45:74:2f:01:14:7c:ab:e6:be:49:ac:7c: 3b:62:c0:3f:97:ef:52:b7:70:80:16:20:32:3b:54:d5:eb:39: e9:8b:d5:9e:9b:48:f5:52:72:09:6b:25:5b:d6:cf:a7:9e:bb: 46:b1:ea:b6:e0:fa:5c:11:09:25:f2:36:36:fc:b5:53:29:a8: c7:12:b3:46:dc:e2:a2:07:c0:7c:df:38:be:99:81:8d:d7:f2: 91:6e:c2:16:30:fd:75:c0:77:fa:55:f7:e7:71:b0:5e:fd:38: 07:1c:51:45:ad:a0:c9:94:73:0b:4a:d1:8f:54:6e:32:b6:b4: 0b:4a:34:8d:40:5a:8a:e0:03:dc:4e:07:29:8f:bb:00:e7:5e: 21:7e:a6:31:28:a3:db:33:aa:de:55:ca:23:98:a2:ce:bb:ba: 14:24:9e:91:8d:3b:3d:f0:2d:fc:74:37:1b:e2:e6:56:a1:d4: 79:a8:6e:97:d1:9b:58:02:43:7e:e4:35:4e:c4:17:6b:d6:f6: 42:cf:8b:f0:98:f2:2c:75:13:11:c6:79:50:9f:d7:91:89:6c: fb:1f:c9:ba:75:81:ee:87:18:e3:36:eb:ad:6e:ed:7d:eb:86: 8c:a5:72:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjYwNzIzMDcwNTIzWhcNMjYwNzMwMDcwNTIzWjAYMRYwFAYD VQQDEw02YTYxYmQzMy00N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiuByg8ks7lLYSlsaF0fmN7wR8MLjq/lByend/KDhjAfT64biidCdJGLJ96/X orS/itDiN61fjkJsZAecuHoWVYAsRf5Wzl8nwLhCKXxgLEUp3Mz0z/xjL9bRdIhT Fpot4iVavuPZ0proPEwtfOKCI82sNRH3yyNsC+A5qPk9WFmw6+qsbYcE9yGZ8cyM vw15Ur5F9R2MB1CzpcZloEnv9+intJ5XrL9G3q06PEsnToo3xnNEaY59RTnOGoKZ oWmYGjQdlOjLcFAv9fzTB9VA/M2wVGp1P8c9BJGdRSR5iXffmZjf7vVVdRRWokHa fQxNFHCxI99KU2+1j4aDNt3aBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGV2Uoqd CwrH7zW3dyPZ6rtLkLnUMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOZgN/NkkRgKt+b1pnBWAKe6eTpp4Q/gaRXQvARR8q+a+Sax8O2LAP5fvUrdw gBYgMjtU1es56YvVnptI9VJyCWslW9bPp567RrHqtuD6XBEJJfI2Nvy1UymoxxKz RtziogfAfN84vpmBjdfykW7CFjD9dcB3+lX353GwXv04BxxRRa2gyZRzC0rRj1Ru Mra0C0o0jUBaiuAD3E4HKY+7AOdeIX6mMSij2zOq3lXKI5iizru6FCSekY07PfAt /HQ3G+LmVqHUeahul9GbWAJDfuQ1TsQXa9b2Qs+L8JjyLHUTEcZ5UJ/XkYls+x/J unWB7ocY4zbrrW7tfeuGjKVySw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:58:00 2026 by rpki-client