$ rpki-client -vvf rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft File: TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft (raw, json) Hash identifier: Il0NvSwkVL3QV4WiyQcaU7XVmT4IIkt2YODbHrq+3Ks= Subject key identifier: C2:45:CC:57:20:B4:95:DE:D8:2B:71:B5:2B:49:FE:F5:7A:C8:36:8F Authority key identifier: 4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8 Certificate issuer: /CN=A9129FB7/serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft Manifest number: 15 Signing time: Mon 27 Jul 2026 11:25:07 +0000 Manifest this update: Mon 27 Jul 2026 11:25:06 +0000 Manifest next update: Mon 03 Aug 2026 11:25:06 +0000 Files and hashes: 1: TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl (hash: TYhFZi9v7UL/UdstmNSoa14eFG52/wKndXy25T4dHNk=) 2: C524767269FD11F1BAFBB65F6847A888.roa (hash: ygqljUs8p8UwgEQzC1Y+C3YKpEUTVGsqmNq6WUEwm9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129FB7, serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8 Validity Not Before: Jul 27 11:25:06 2026 GMT Not After : Aug 3 11:25:06 2026 GMT Subject: CN=6a674012-7ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:c7:92:1a:ca:34:df:88:63:36:d3:ba:39: 27:91:42:d5:ad:70:4f:74:d0:d2:b7:44:62:dd:81: 4b:af:7e:d3:1e:07:67:ad:05:cf:90:96:32:9d:d2: 94:7e:b1:38:67:67:63:e9:9f:2d:09:5a:61:6f:73: 1c:0c:29:a7:b6:64:46:d6:71:24:6d:1a:b5:35:0b: 56:c0:b7:8a:8a:86:14:c2:d8:fd:a3:08:47:f0:fc: 13:9c:3b:59:50:0c:c6:90:d7:66:a0:3b:16:fc:7d: 09:40:47:61:36:c7:e8:ac:6e:47:0d:89:1b:6d:c8: 47:c9:da:96:18:88:7b:84:52:ee:b5:48:59:1a:c2: 9c:c2:bc:22:07:df:8d:6d:21:7d:08:f8:88:6d:1f: 2f:c0:42:68:6e:5f:c4:2b:10:b4:13:e0:48:93:03: dc:31:1f:25:52:21:a4:85:e0:03:ea:15:f1:10:ee: 9d:a4:88:df:10:49:8e:b2:61:fc:5b:d9:f2:6c:99: 43:b6:d8:c0:43:e4:f5:58:de:d1:30:c6:a7:ae:f5: 3e:50:97:06:4a:d3:5a:56:bb:2f:bf:7c:00:ee:61: c2:ce:d4:b9:a9:3d:8e:0d:cf:81:da:43:da:49:00: 88:18:3f:6b:55:f3:22:f8:4d:94:cd:55:55:d3:bb: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:45:CC:57:20:B4:95:DE:D8:2B:71:B5:2B:49:FE:F5:7A:C8:36:8F X509v3 Authority Key Identifier: keyid:4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:60:b3:f1:4c:f2:14:6c:34:95:70:32:4a:89:ec:dc:b7:81: 1e:14:f3:c3:6f:f4:91:54:36:7a:be:17:1c:2d:73:0b:36:2f: 5f:5d:9a:11:89:0f:34:f9:ac:8d:63:86:ab:e9:6e:f9:5b:fa: 16:9e:e4:c3:34:b6:18:04:d5:18:7e:c2:80:c9:18:44:12:4a: 7e:d9:15:fe:83:ff:1b:e1:50:f3:b1:b2:e9:03:ab:d3:78:b4: cd:03:80:b3:46:1b:17:3c:2f:c7:dc:de:14:a9:6d:cf:58:49: 75:3f:f0:67:fe:dd:bc:96:c1:3d:5f:04:e6:2a:dd:6d:a0:37: a6:4c:9e:bc:44:c7:89:d8:e3:2d:fa:3d:29:3f:b3:d6:5a:20: b5:0e:9c:ab:cf:f1:2a:d1:15:a6:fc:b0:1c:98:b4:d6:89:1a: cd:93:88:27:2b:6d:e4:8e:99:7a:79:f1:f6:1c:35:e1:c7:42: 90:10:60:d7:b4:e2:ba:8c:f0:93:a0:00:01:76:79:f1:ff:b8: 57:42:e6:e2:de:0d:98:e6:80:99:f1:b5:5d:19:37:26:9f:ab: 88:c7:8d:c0:9a:4b:53:b4:47:68:66:d4:14:f4:63:be:8f:e5: 6e:b7:34:72:03:b4:da:da:4f:59:15:41:02:23:86:be:8f:98: f5:d1:d0:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OUZCNzExMC8GA1UEBRMoNEM2MjUzMTBFODNDNDBENzMyRERCMDM4NDc4NTg3NjNE NDhCREREODAeFw0yNjA3MjcxMTI1MDZaFw0yNjA4MDMxMTI1MDZaMBgxFjAUBgNV BAMTDTZhNjc0MDEyLTdjY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9NMeSGso034hjNtO6OSeRQtWtcE900NK3RGLdgUuvftMeB2etBc+QljKd0pR+ sThnZ2Ppny0JWmFvcxwMKae2ZEbWcSRtGrU1C1bAt4qKhhTC2P2jCEfw/BOcO1lQ DMaQ12agOxb8fQlAR2E2x+isbkcNiRttyEfJ2pYYiHuEUu61SFkawpzCvCIH341t IX0I+IhtHy/AQmhuX8QrELQT4EiTA9wxHyVSIaSF4APqFfEQ7p2kiN8QSY6yYfxb 2fJsmUO22MBD5PVY3tEwxqeu9T5QlwZK01pWuy+/fADuYcLO1LmpPY4Nz4HaQ9pJ AIgYP2tV8yL4TZTNVVXTu/dfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwkXMVyC0 ld7YK3G1K0n+9XrINo8wHwYDVR0jBBgwFoAUTGJTEOg8QNcy3bA4R4WHY9SL3dgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5RkI3LzU0MTBEQzVDNjlG QjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4UU5jeTNiQTRSNFdIWTlTTDNk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEdKVEVPZzhRTmN5M2JBNFI0V0hZOVNMM2RnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 RkI3LzU0MTBEQzVDNjlGQjExRjE4MTNGMTJCRDY3NDdBODg4L1RHSlRFT2c4UU5j eTNiQTRSNFdIWTlTTDNkZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAVYLPxTPIUbDSVcDJKiezct4EeFPPDb/SRVDZ6vhccLXMLNi9fXZoRiQ80+ayN Y4ar6W75W/oWnuTDNLYYBNUYfsKAyRhEEkp+2RX+g/8b4VDzsbLpA6vTeLTNA4Cz RhsXPC/H3N4UqW3PWEl1P/Bn/t28lsE9XwTmKt1toDemTJ68RMeJ2OMt+j0pP7PW WiC1Dpyrz/Eq0RWm/LAcmLTWiRrNk4gnK23kjpl6efH2HDXhx0KQEGDXtOK6jPCT oAABdnnx/7hXQubi3g2Y5oCZ8bVdGTcmn6uIx43AmktTtEdoZtQU9GO+j+VutzRy A7Ta2k9ZFUECI4a+j5j10dAH -----END CERTIFICATE-----Generated at Tue Jul 28 15:41:02 2026 by rpki-client