$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft File: TsOvwYXRL5hOdelqRL-yme8J6kM.mft (raw, json) Hash identifier: yF/THR3lytBIuIIDvKjS4yuSW3WGZdVLxVk0Zi/RdHM= Subject key identifier: BB:DC:27:9F:AE:1C:E3:DA:39:16:2F:12:DF:75:F0:06:D8:D5:02:AF Authority key identifier: 4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43 Certificate issuer: /CN=A91FE40B/serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft Manifest number: 0F Signing time: Wed 22 Jul 2026 18:26:30 +0000 Manifest this update: Wed 22 Jul 2026 18:26:29 +0000 Manifest next update: Wed 29 Jul 2026 18:26:29 +0000 Files and hashes: 1: TsOvwYXRL5hOdelqRL-yme8J6kM.crl (hash: GBbdqebllG2GxiGBQSZ1zJEsaNLso4ZHgfukAp3T0bk=) 2: A409C5D2746611F187F6609D76A30FBC.roa (hash: b9Kx8HZq0zMs0AyS6Dbt8bMXNKwWP5zX6/W0xwn9etY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43 Validity Not Before: Jul 22 18:26:29 2026 GMT Not After : Jul 29 18:26:29 2026 GMT Subject: CN=6a610b55-aca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:7e:22:54:93:b0:b2:e4:d7:da:50:90:d3: 48:b3:38:64:d8:11:1c:3d:1e:9d:29:31:5b:f7:1c: df:27:ba:ac:c4:bf:b5:0d:09:4d:94:b3:42:22:47: 9c:b0:e6:85:33:89:15:77:cf:a2:b2:87:c5:ef:03: 5a:4a:d1:5f:4b:57:05:94:3a:18:52:a6:53:41:ca: 06:f9:ed:10:e7:09:f4:cc:8e:05:d1:46:b1:c3:96: 6a:a2:c9:b4:90:a8:c3:4c:eb:f5:de:2b:91:f0:dd: 2e:04:9b:24:6c:8b:94:d9:87:92:5d:26:12:ee:f7: f9:b4:c3:dd:ef:d5:29:0a:0d:19:1e:c7:0d:cc:da: 58:11:37:cc:08:24:07:3d:78:93:d6:45:47:df:fb: 5b:14:55:42:39:39:d8:d2:3c:4f:64:80:76:6e:01: b2:b1:3d:c1:2d:28:28:63:2a:f4:0f:21:16:be:fe: 72:47:24:50:1e:1d:bd:b5:ce:6b:be:67:05:f6:ed: a1:20:c2:ba:e6:1e:66:5b:bb:ef:b5:56:7b:75:55: 30:2a:3e:b7:5a:60:94:67:f0:21:60:ab:fa:73:e6: 3e:63:32:7e:6e:0a:a6:67:fd:e3:85:a7:0f:2f:33: 86:0d:ea:ff:a2:b7:da:41:d1:a2:f2:f5:ad:93:7d: b2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DC:27:9F:AE:1C:E3:DA:39:16:2F:12:DF:75:F0:06:D8:D5:02:AF X509v3 Authority Key Identifier: keyid:4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d4:0e:da:45:64:ef:8d:cf:6b:55:3c:53:90:de:98:50:6a: 1b:33:1b:ee:1b:11:85:d2:d9:ad:8f:b9:fc:72:cb:0f:e9:14: de:3c:25:4e:06:be:2a:d0:72:41:83:4b:8c:db:8e:0f:49:0f: 8f:8e:9c:33:ef:52:07:f6:e4:26:96:ef:d1:f4:02:b9:54:c3: b1:a6:43:75:f8:41:a8:87:58:d6:1e:ef:b7:00:69:e9:7a:2d: e8:26:8f:36:48:e1:d6:43:5c:08:01:f0:ed:80:d8:19:76:61: 0e:ad:af:45:cb:4e:d7:5c:18:ab:ef:9a:67:ae:0c:d7:e0:12: 91:d9:18:db:f5:57:ac:0c:27:5f:68:0a:2f:12:ed:a5:26:3e: f7:bb:93:9a:f4:e4:9b:3c:cc:e1:e0:55:a5:47:95:dc:ce:0b: 24:39:67:27:2c:c7:fc:7a:82:b3:f8:d5:7c:71:ef:e8:44:89: 00:71:d1:52:41:e5:5e:b3:b5:63:5f:79:dd:0e:07:38:ae:dc: 87:34:9e:98:62:57:41:d7:51:89:c6:4a:0b:0c:95:73:1f:f3: 93:07:97:d9:27:d5:b6:eb:a3:91:64:89:b4:71:4b:df:06:57: d8:3a:16:77:96:bd:e3:a7:2c:c9:59:f6:85:2e:da:16:c5:84: 9a:91:14:d9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTQwQjExMC8GA1UEBRMoNEVDM0FGQzE4NUQxMkY5ODRFNzVFOTZBNDRCRkIyOTlF RjA5RUE0MzAeFw0yNjA3MjIxODI2MjlaFw0yNjA3MjkxODI2MjlaMBgxFjAUBgNV BAMTDTZhNjEwYjU1LWFjYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWQX4iVJOwsuTX2lCQ00izOGTYERw9Hp0pMVv3HN8nuqzEv7UNCU2Us0IiR5yw 5oUziRV3z6Kyh8XvA1pK0V9LVwWUOhhSplNBygb57RDnCfTMjgXRRrHDlmqiybSQ qMNM6/XeK5Hw3S4EmyRsi5TZh5JdJhLu9/m0w93v1SkKDRkexw3M2lgRN8wIJAc9 eJPWRUff+1sUVUI5OdjSPE9kgHZuAbKxPcEtKChjKvQPIRa+/nJHJFAeHb21zmu+ ZwX27aEgwrrmHmZbu++1Vnt1VTAqPrdaYJRn8CFgq/pz5j5jMn5uCqZn/eOFpw8v M4YN6v+it9pB0aLy9a2TfbIjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUu9wnn64c 49o5Fi8S33XwBtjVAq8wHwYDVR0jBBgwFoAUTsOvwYXRL5hOdelqRL+yme8J6kMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNDBCLzVDN0UxNzI4NzQz ODExRjE5RTYyNzFDNDY1QTMwRkJDL1RzT3Z3WVhSTDVoT2RlbHFSTC15bWU4SjZr TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVHNPdndZWFJMNWhPZGVscVJMLXltZThKNmtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF NDBCLzVDN0UxNzI4NzQzODExRjE5RTYyNzFDNDY1QTMwRkJDL1RzT3Z3WVhSTDVo T2RlbHFSTC15bWU4SjZrTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAe1A7aRWTvjc9rVTxTkN6YUGobMxvuGxGF0tmtj7n8cssP6RTePCVOBr4q0HJB g0uM244PSQ+Pjpwz71IH9uQmlu/R9AK5VMOxpkN1+EGoh1jWHu+3AGnpei3oJo82 SOHWQ1wIAfDtgNgZdmEOra9Fy07XXBir75pnrgzX4BKR2Rjb9VesDCdfaAovEu2l Jj73u5Oa9OSbPMzh4FWlR5XczgskOWcnLMf8eoKz+NV8ce/oRIkAcdFSQeVes7Vj X3ndDgc4rtyHNJ6YYldB11GJxkoLDJVzH/OTB5fZJ9W266ORZIm0cUvfBlfYOhZ3 lr3jpyzJWfaFLtoWxYSakRTZ -----END CERTIFICATE-----Generated at Fri Jul 24 14:03:28 2026 by rpki-client