$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: g1wpSubE+dZFuYnqkGRut9ugTekj2J1DT/5q5qx25AU= Subject key identifier: 38:0C:62:D3:02:4B:A8:67:05:B1:A6:0C:C0:90:50:C9:DB:70:25:36 Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0AF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0AEA Signing time: Sun 26 Jul 2026 19:49:32 +0000 Manifest this update: Sun 26 Jul 2026 19:49:32 +0000 Manifest next update: Sun 02 Aug 2026 19:49:32 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: nbcfOTVf/CuIK9IYz84IApj7Yhnr7eqd42hJRGNcdes=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: he3UjPhAzljyPyijMVHrJVOO3ZJsIkaVva/wVZG1Ao0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2805 (0xaf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Jul 26 19:49:32 2026 GMT Not After : Aug 2 19:49:32 2026 GMT Subject: CN=6a6664cc-c464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:e9:69:75:ad:03:23:e2:6c:22:a0:65:93: 66:01:da:7d:21:50:22:d6:2a:a7:ca:69:bb:f9:03: b0:15:59:69:b4:fc:6d:3f:68:cd:a1:09:02:a0:02: fd:11:6f:ce:b9:c6:a9:7d:63:fe:96:d2:f8:f9:64: b9:cc:98:a2:87:9c:f8:e6:98:d0:01:0e:6d:b9:a3: c1:19:23:fe:49:a0:d1:f6:f0:aa:d5:1b:b9:d1:be: 56:9c:af:63:b9:8d:a7:f0:34:a2:dc:0d:b6:d6:9d: 1c:81:1f:2d:6f:6c:e4:b0:3b:e0:d0:79:ef:ed:a4: 7b:7a:a4:3a:32:5b:c1:4f:e0:16:39:f7:5a:4b:6a: e3:be:08:43:a3:63:b0:5f:dc:1c:1c:73:49:50:81: ea:c8:b6:f7:e9:b0:55:be:b0:90:53:5d:ac:b8:d3: 97:3c:96:1c:87:b8:62:a7:3a:6e:c4:9e:8b:59:8a: 31:45:85:e5:f7:a0:ec:df:1f:da:f3:e6:09:6c:d5: a7:42:03:f3:f5:48:38:15:ae:60:43:db:50:2c:0f: bf:66:16:9b:25:93:a6:46:9a:8a:c4:ba:13:ba:91: 13:78:95:33:2d:62:07:10:6d:ae:2f:de:dd:46:b2: 0c:05:b6:b1:73:99:da:57:dc:2d:13:2e:48:18:e2: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0C:62:D3:02:4B:A8:67:05:B1:A6:0C:C0:90:50:C9:DB:70:25:36 X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:60:a8:42:f8:81:66:90:47:99:d4:21:7d:a4:e8:b7:f7:dd: a2:b8:a2:45:95:25:5b:3f:3e:43:a1:4e:dc:b2:92:39:74:11: 08:30:37:3b:81:f7:d8:84:e9:80:13:33:05:15:8f:03:47:1b: c6:6c:36:fc:96:a7:95:c9:10:cf:1a:e5:83:84:31:6c:1d:27: 5d:29:f0:9d:ec:ec:0b:4d:8c:25:f0:12:94:dc:4a:6e:65:d4: 7c:1b:c2:6e:8e:7f:1d:ec:83:b3:92:22:aa:f2:b2:44:4f:82: c6:3e:fa:f1:d0:9d:45:15:b4:d0:1b:7c:3e:b4:de:45:1e:0a: ba:b0:b9:fe:d8:11:7a:3a:b0:c7:44:de:e8:8a:60:e9:dc:a0: ae:f3:52:6d:7e:f4:71:7f:0e:72:28:16:8f:32:59:65:54:fa: b9:3a:18:17:2b:01:b4:14:1d:f2:00:57:c2:13:6b:f3:2e:bf: c6:28:f5:a0:40:17:32:fa:74:06:50:6b:a0:52:95:5d:f5:7b: 66:3f:08:83:8b:63:75:92:6f:c8:58:92:1b:77:7f:65:d4:e8: ec:50:9a:c5:f7:b6:18:b7:0c:71:25:41:54:94:a2:db:b1:a7: 00:05:e9:91:9c:58:45:9d:cf:9b:00:59:f5:90:8a:27:7d:fe: f5:1b:65:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjYwNzI2MTk0OTMyWhcNMjYwODAyMTk0OTMyWjAYMRYwFAYD VQQDEw02YTY2NjRjYy1jNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyHpaXWtAyPibCKgZZNmAdp9IVAi1iqnymm7+QOwFVlptPxtP2jNoQkCoAL9 EW/OucapfWP+ltL4+WS5zJiih5z45pjQAQ5tuaPBGSP+SaDR9vCq1Ru50b5WnK9j uY2n8DSi3A221p0cgR8tb2zksDvg0Hnv7aR7eqQ6MlvBT+AWOfdaS2rjvghDo2Ow X9wcHHNJUIHqyLb36bBVvrCQU12suNOXPJYch7hipzpuxJ6LWYoxRYXl96Ds3x/a 8+YJbNWnQgPz9Ug4Fa5gQ9tQLA+/ZhabJZOmRpqKxLoTupETeJUzLWIHEG2uL97d RrIMBbaxc5naV9wtEy5IGOJmBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDgMYtMC S6hnBbGmDMCQUMnbcCU2MB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWCoQviBZpBHmdQhfaTot/fdoriiRZUlWz8+Q6FO3LKSOXQRCDA3O4H32ITp gBMzBRWPA0cbxmw2/JanlckQzxrlg4QxbB0nXSnwnezsC02MJfASlNxKbmXUfBvC bo5/HeyDs5IiqvKyRE+Cxj768dCdRRW00Bt8PrTeRR4KurC5/tgRejqwx0Te6Ipg 6dygrvNSbX70cX8OcigWjzJZZVT6uToYFysBtBQd8gBXwhNr8y6/xij1oEAXMvp0 BlBroFKVXfV7Zj8Ig4tjdZJvyFiSG3d/ZdTo7FCaxfe2GLcMcSVBVJSi27GnAAXp kZxYRZ3PmwBZ9ZCKJ33+9RtlLQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:25 2026 by rpki-client