$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: yasyL91MFTi1RuqTspjQz6hIl8hw2ep0iYBcrlO8k9I= Subject key identifier: 3A:51:08:16:C7:88:6A:46:38:CF:C7:0B:FA:8E:A9:4E:69:76:1C:B2 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0CDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0CBC Signing time: Tue 28 Jul 2026 18:45:10 +0000 Manifest this update: Tue 28 Jul 2026 18:45:10 +0000 Manifest next update: Tue 04 Aug 2026 18:45:10 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: MnKqa2O7dF9w1nehBCRgODjkgaFAp5CTX3PLzPM+ULk=) 2: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nEmNA11Dyl7nTFmnZC9S6fy/8rzvC71ench9nRz81iE=) 3: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: J2Vubqi8ic0NqlP+qdXl9htU+adGeTvh1ITR3W4ptX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Jul 28 18:45:10 2026 GMT Not After : Aug 4 18:45:10 2026 GMT Subject: CN=6a68f8b6-bc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:60:2b:5c:19:a1:95:46:39:a3:62:09:e6: 2c:26:19:8e:1c:81:93:6d:0f:62:64:dd:3a:cc:70: ee:6e:29:9f:cd:c7:29:1b:b9:b2:7a:13:52:70:70: d1:f7:7c:fd:b5:fe:03:11:d5:0a:bb:6a:c4:1c:9f: 31:30:2e:0a:85:c4:2a:83:22:e0:4c:b3:d0:80:5d: ec:98:27:8b:1f:24:91:36:8d:46:8e:79:4e:9a:25: cb:64:94:ec:21:40:1c:4b:88:a5:a4:df:09:cd:b9: 66:9d:e9:61:60:82:5b:42:33:76:aa:a4:e4:0c:c3: 91:1b:06:1f:35:50:c2:52:35:d6:4d:e8:a0:ed:2f: 0c:2b:45:7c:05:66:3b:0f:4c:32:35:93:b3:2b:95: 5b:3d:3b:5b:c0:c6:5d:48:70:2f:d5:57:91:3c:dc: 17:c4:f2:5c:2f:dc:e0:20:0b:d2:ec:ad:9b:a8:ff: 3d:11:8d:11:21:66:11:30:e1:29:91:37:4b:b2:5d: 96:4b:b2:6b:25:29:88:8b:d3:db:27:8b:62:da:87: 91:63:48:4c:09:bd:76:2b:e6:fb:71:38:a8:44:64: f7:df:f5:91:05:d4:5f:e1:0f:55:db:63:cd:51:bc: ed:5d:ff:3f:08:d0:8d:58:03:e7:da:4b:34:01:e5: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:51:08:16:C7:88:6A:46:38:CF:C7:0B:FA:8E:A9:4E:69:76:1C:B2 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:bd:82:2e:aa:d8:26:93:1f:20:fd:9c:40:df:45:ae:8a:36: 60:7d:3e:fb:08:52:b4:c1:79:2c:36:7f:8d:96:ad:98:06:bd: e8:e1:25:72:78:44:43:80:d4:8a:98:40:0d:c2:1b:c1:27:30: bf:61:0d:a3:94:e5:30:a4:e0:2d:3e:dd:15:11:fe:23:11:d9: 32:65:0e:16:d4:43:80:64:9a:6a:5d:8f:bd:30:57:a1:c1:93: a8:be:a8:8e:d2:b9:74:7d:4b:67:5c:65:4c:0e:42:e3:8b:ce: 3f:5a:8b:46:c7:c0:18:17:c4:81:4e:4e:dd:df:a1:9d:b9:7d: f7:92:b4:1c:88:27:11:19:ac:09:e6:eb:46:ff:0e:b4:3b:94: 12:4a:fc:36:e9:27:36:0b:0c:d2:91:81:6a:f9:85:8e:cd:28: 69:29:a0:3a:5e:b7:ce:76:6c:71:40:dd:85:71:43:b7:3e:20: 5e:20:9c:45:57:7c:7f:a3:e4:e8:01:79:3c:c9:3b:61:3b:ad: ae:82:27:15:b9:17:ec:d4:27:6d:ea:e3:5c:90:f7:5f:f5:c2: 18:e9:a0:e0:de:0a:a9:bf:2e:a7:af:68:77:e6:26:2f:5c:0f: 13:fb:88:8f:a2:66:e5:a6:3e:1e:a6:cf:f5:2a:2d:3e:0e:85: 32:b5:9f:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjYwNzI4MTg0NTEwWhcNMjYwODA0MTg0NTEwWjAYMRYwFAYD VQQDEw02YTY4ZjhiNi1iYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTZgK1wZoZVGOaNiCeYsJhmOHIGTbQ9iZN06zHDubimfzccpG7myehNScHDR 93z9tf4DEdUKu2rEHJ8xMC4KhcQqgyLgTLPQgF3smCeLHySRNo1GjnlOmiXLZJTs IUAcS4ilpN8JzblmnelhYIJbQjN2qqTkDMORGwYfNVDCUjXWTeig7S8MK0V8BWY7 D0wyNZOzK5VbPTtbwMZdSHAv1VeRPNwXxPJcL9zgIAvS7K2bqP89EY0RIWYRMOEp kTdLsl2WS7JrJSmIi9PbJ4ti2oeRY0hMCb12K+b7cTioRGT33/WRBdRf4Q9V22PN UbztXf8/CNCNWAPn2ks0AeUv0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpRCBbH iGpGOM/HC/qOqU5pdhyyMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjL2CLqrYJpMfIP2cQN9Froo2YH0++whStMF5LDZ/jZatmAa96OElcnhEQ4DU iphADcIbwScwv2ENo5TlMKTgLT7dFRH+IxHZMmUOFtRDgGSaal2PvTBXocGTqL6o jtK5dH1LZ1xlTA5C44vOP1qLRsfAGBfEgU5O3d+hnbl995K0HIgnERmsCebrRv8O tDuUEkr8NuknNgsM0pGBavmFjs0oaSmgOl63znZscUDdhXFDtz4gXiCcRVd8f6Pk 6AF5PMk7YTutroInFbkX7NQnberjXJD3X/XCGOmg4N4Kqb8up69od+YmL1wPE/uI j6Jm5aY+HqbP9SotPg6FMrWfNg== -----END CERTIFICATE-----Generated at Wed Jul 29 10:38:27 2026 by rpki-client