$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft File: Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft (raw, json) Hash identifier: PKrnZKuimEILDuh9rgD5dZXBoJgwAFgj4JM95BRZaxM= Subject key identifier: 0B:8E:48:73:C1:D0:64:36:EF:F3:9E:21:57:3C:5F:5F:F7:A3:D8:63 Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98 Certificate issuer: /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft Manifest number: D1 Signing time: Mon 27 Jul 2026 08:52:47 +0000 Manifest this update: Mon 27 Jul 2026 08:52:47 +0000 Manifest next update: Mon 03 Aug 2026 08:52:47 +0000 Files and hashes: 1: Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl (hash: do4gwdMNye8uX6L0z47rHuJjzQpuM+7x2IDYQAPy1Fw=) 2: 8FD5A938522911F0AECD911AC4F9AE02.roa (hash: 9yyOlJOhdq5a9n8HjUs77Doecig0wOxCg0TdaMSwGMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098 Validity Not Before: Jul 27 08:52:47 2026 GMT Not After : Aug 3 08:52:47 2026 GMT Subject: CN=6a671c5f-2d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ca:5a:3a:69:40:8c:a1:03:ae:38:5d:cf:ec: c9:75:57:b0:67:df:d6:6a:49:4b:9a:ef:fd:83:be: 63:45:ad:8d:6e:ae:d2:18:45:da:7e:fc:a4:84:18: 65:1f:b0:24:aa:a9:e1:91:6f:36:95:6d:b0:8d:d9: 2a:0a:cc:d4:5b:a7:eb:ac:25:f4:17:c7:2f:94:f3: ef:06:2c:8c:15:81:22:76:e6:f2:1c:ef:c3:f9:18: 5e:ae:70:d6:99:88:ca:eb:23:e7:2f:77:60:1f:36: 49:73:48:fb:f0:0f:db:a7:6e:93:48:35:71:2c:a1: 3b:ee:43:d2:49:54:f8:72:f7:b3:96:26:07:a2:08: 54:00:3d:64:7c:25:4a:3c:7c:1a:bf:43:0a:1c:14: ac:cd:d9:76:bb:40:5a:e6:aa:cc:1d:cb:3c:00:b1: e2:f8:b3:98:59:19:09:ef:58:71:c6:1f:5b:07:04: 78:1a:c8:4f:ba:de:55:50:65:c5:f5:2b:bc:76:60: 42:8d:c0:6a:90:36:23:b8:a7:15:ae:90:17:eb:07: 4a:d0:67:d6:d7:46:bd:50:f4:9f:75:41:d9:65:2b: f0:5f:97:d6:e4:64:c5:36:07:76:59:e8:6a:79:70: 35:e1:21:9c:0f:16:3c:ad:92:bb:14:84:4e:7c:10: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:48:73:C1:D0:64:36:EF:F3:9E:21:57:3C:5F:5F:F7:A3:D8:63 X509v3 Authority Key Identifier: keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cf:ce:06:7e:b6:aa:4a:07:d1:e3:aa:00:13:d3:b6:29:42: 43:20:d4:65:e3:f9:8c:03:c0:bd:d5:cd:19:77:75:3d:7f:be: ac:87:40:09:d5:3d:15:8d:4f:4a:4b:93:96:ca:31:d5:08:9b: 46:40:2e:bc:09:f9:0f:d7:49:19:d7:82:16:40:35:bf:7b:12: db:f2:f5:aa:ca:7a:c8:cf:32:7b:65:a6:91:96:5f:4a:07:74: 00:eb:09:5e:17:bb:ae:89:4a:70:9a:21:c8:19:e0:c2:f2:09: 43:29:ea:8d:a4:63:00:8d:ba:78:8b:bd:b2:57:64:b0:21:55: 6e:ad:a9:e0:ec:63:28:ec:5f:99:26:e2:80:b8:45:17:41:09: d5:8c:cf:82:54:44:d9:83:28:d8:61:b3:27:3b:fc:75:5d:2d: 46:e4:db:6d:62:a5:3a:6a:c1:a0:7f:27:a9:da:9d:12:16:73: c0:8c:52:dd:0e:e4:db:0d:e1:ba:66:ca:b5:b3:35:3f:e4:4e: 9a:b7:7c:e8:29:cd:0d:34:b8:78:2d:e4:ee:b7:63:68:79:7e: b5:a4:2d:f9:66:df:98:15:9c:53:cc:ae:70:27:dd:2e:e3:a0: e4:94:81:27:81:5f:b2:09:7e:c0:1f:85:0d:0c:10:35:9c:4e: a6:62:5b:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDQ0UxMTAvBgNVBAUTKDRFN0ZFQTcxQTQ0N0E2QTE2MTc5QzI2OTdFQkVFNTU1 MTk5REIwOTgwHhcNMjYwNzI3MDg1MjQ3WhcNMjYwODAzMDg1MjQ3WjAYMRYwFAYD VQQDEw02YTY3MWM1Zi0yZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cpaOmlAjKEDrjhdz+zJdVewZ9/WaklLmu/9g75jRa2Nbq7SGEXafvykhBhl H7AkqqnhkW82lW2wjdkqCszUW6frrCX0F8cvlPPvBiyMFYEidubyHO/D+RhernDW mYjK6yPnL3dgHzZJc0j78A/bp26TSDVxLKE77kPSSVT4cvezliYHoghUAD1kfCVK PHwav0MKHBSszdl2u0Ba5qrMHcs8ALHi+LOYWRkJ71hxxh9bBwR4GshPut5VUGXF 9Su8dmBCjcBqkDYjuKcVrpAX6wdK0GfW10a9UPSfdUHZZSvwX5fW5GTFNgd2Wehq eXA14SGcDxY8rZK7FIROfBB82wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAuOSHPB 0GQ27/OeIVc8X1/3o9hjMB8GA1UdIwQYMBaAFE5/6nGkR6ahYXnCaX6+5VUZnbCY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OENDRS84QjIxOTA5QzRG RUUxMUYwODAzNzk0ODJDNEY5QUUwMi9Ubl9xY2FSSHBxRmhlY0pwZnI3bFZSbWRz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuX3FjYVJIcHFGaGVjSnBmcjdsVlJtZHNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OENDRS84QjIxOTA5QzRGRUUxMUYwODAzNzk0ODJDNEY5QUUwMi9Ubl9xY2FSSHBx RmhlY0pwZnI3bFZSbWRzSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALM/OBn62qkoH0eOqABPTtilCQyDUZeP5jAPAvdXNGXd1PX++rIdACdU9FY1P SkuTlsox1QibRkAuvAn5D9dJGdeCFkA1v3sS2/L1qsp6yM8ye2WmkZZfSgd0AOsJ Xhe7rolKcJohyBngwvIJQynqjaRjAI26eIu9sldksCFVbq2p4OxjKOxfmSbigLhF F0EJ1YzPglRE2YMo2GGzJzv8dV0tRuTbbWKlOmrBoH8nqdqdEhZzwIxS3Q7k2w3h umbKtbM1P+ROmrd86CnNDTS4eC3k7rdjaHl+taQt+WbfmBWcU8yucCfdLuOg5JSB J4Ffsgl+wB+FDQwQNZxOpmJbsg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:57:46 2026 by rpki-client