$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: J0RQc+J2rkL9PZILCxj+ACEa2HYuYVDdPIcIN58mass= Subject key identifier: 67:30:BC:A8:CF:DA:C6:DE:15:6C:01:33:B5:F0:AE:7C:B7:E8:8D:3F Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0D6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0D41 Signing time: Fri 12 Jun 2026 18:08:42 +0000 Manifest this update: Fri 12 Jun 2026 18:08:41 +0000 Manifest next update: Fri 19 Jun 2026 18:08:41 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: /Ov6n3f0XvWtM0n1vN+GrMta9esTjUSDu/OG/z1Kr6w=) 2: F824C588FF7A11F0B218EB915B6F56BC.roa (hash: vyzv0f1THJyglSIA32Cmr/3tLhp6nkKIDvP00vthIq0=) 3: 4F383CB6FF6B11F0AD4BC885576F56BC.roa (hash: wwbAK8oiejrRqztY01yoKfr0EpZtJpfxnGCsmORuPJk=) 4: 4C8BB01CF0A511F0AE903042706F56BC.roa (hash: O4BcOq2hKD3I3RD3vTsJAeBqf6AIzX76ZzjjaHK+ElU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3436 (0xd6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Jun 12 18:08:41 2026 GMT Not After : Jun 19 18:08:41 2026 GMT Subject: CN=6a2c4b29-2b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:85:c5:05:aa:4f:9d:af:c7:3e:9f:81:7e: e0:11:9e:60:bc:45:be:f8:94:37:74:27:29:db:a4: 64:1e:fc:a3:11:9e:9f:0d:93:59:37:bd:6e:c9:23: e9:d1:3f:68:85:fa:c1:e2:54:0f:cb:6a:83:6c:c7: 9d:7f:45:e4:9a:d5:64:bf:fb:4e:a5:d0:66:b7:06: 76:f5:71:bd:39:c1:09:21:50:61:70:58:d6:8f:a8: d1:33:8d:dd:12:b5:08:3a:4b:63:2e:e7:c9:43:9b: 7d:8f:f2:2b:a0:15:69:a1:d3:9e:72:42:3c:fa:d1: ca:b1:bf:7a:e4:a4:e6:d3:89:37:75:65:f8:65:7f: 71:3a:75:46:0c:02:6d:b9:11:3a:4c:7c:22:99:78: 43:30:b6:ef:b5:14:cf:bf:e2:1b:07:d4:ab:d4:df: 11:df:60:d5:d2:1b:1f:bc:46:9f:fd:fc:e1:e9:e8: e5:f4:b3:89:6a:80:b3:10:b4:21:2e:42:e8:e8:7b: 13:f7:67:0f:cc:37:b4:f4:5b:88:1c:d9:56:09:ca: f9:3c:b0:49:27:5d:6d:0f:e8:e1:ad:fe:be:40:c8: bf:57:72:82:3f:75:9f:e2:be:e3:0f:cf:5d:31:2d: a5:23:73:a9:fb:7a:87:f5:e5:71:0d:69:e9:87:7e: 9d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:30:BC:A8:CF:DA:C6:DE:15:6C:01:33:B5:F0:AE:7C:B7:E8:8D:3F X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e9:60:d6:0a:17:50:4d:95:8c:6b:7a:ed:6f:9b:e4:e4:37: 6a:d7:64:10:e3:74:ae:45:c4:13:6b:a1:b7:af:69:05:12:38: f7:ee:b5:2a:6f:3a:b4:f3:37:9b:4a:63:44:58:e4:e6:20:8a: 8d:9e:46:cf:18:e9:54:61:c5:8b:c5:85:28:bc:4a:42:70:c3: 73:15:06:62:d0:bd:54:4f:d9:86:7e:f4:5e:3f:3c:86:f2:b6: fc:84:7b:34:c4:97:1b:8d:65:a3:9f:65:22:bb:d2:dd:a5:60: 2b:eb:5b:eb:53:98:eb:f7:3d:34:70:59:06:6c:50:14:7d:a6: 64:97:0e:9f:e6:e5:65:fd:e3:8e:2e:2c:f4:c8:a9:69:1d:59: f5:88:70:f7:20:dc:3c:82:ac:98:d3:e7:74:c0:00:88:5b:6e: 5b:b2:1a:24:ff:43:3d:13:7f:75:18:ea:49:61:43:2b:5b:4a: 9b:58:84:f4:f0:4b:28:dd:33:87:0d:fa:25:bc:fe:01:c2:8d: 99:b0:08:9a:c4:e1:87:3c:95:2d:a7:3d:6f:6a:f1:c4:8c:a2: 36:e9:1a:5c:d7:5a:b9:59:c2:5a:ff:b1:ef:d5:58:b5:79:ab: 1e:73:c6:bb:b8:7a:31:52:c4:72:86:83:d5:7a:87:10:70:bc: ad:14:5a:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjYwNjEyMTgwODQxWhcNMjYwNjE5MTgwODQxWjAYMRYwFAYD VQQDEw02YTJjNGIyOS0yYjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzA6FxQWqT52vxz6fgX7gEZ5gvEW++JQ3dCcp26RkHvyjEZ6fDZNZN71uySPp 0T9ohfrB4lQPy2qDbMedf0XkmtVkv/tOpdBmtwZ29XG9OcEJIVBhcFjWj6jRM43d ErUIOktjLufJQ5t9j/IroBVpodOeckI8+tHKsb965KTm04k3dWX4ZX9xOnVGDAJt uRE6THwimXhDMLbvtRTPv+IbB9Sr1N8R32DV0hsfvEaf/fzh6ejl9LOJaoCzELQh LkLo6HsT92cPzDe09FuIHNlWCcr5PLBJJ11tD+jhrf6+QMi/V3KCP3Wf4r7jD89d MS2lI3Op+3qH9eVxDWnph36dQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcwvKjP 2sbeFWwBM7Xwrny36I0/MB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP+lg1goXUE2VjGt67W+b5OQ3atdkEON0rkXEE2uht69pBRI49+61Km86tPM3 m0pjRFjk5iCKjZ5GzxjpVGHFi8WFKLxKQnDDcxUGYtC9VE/Zhn70Xj88hvK2/IR7 NMSXG41lo59lIrvS3aVgK+tb61OY6/c9NHBZBmxQFH2mZJcOn+blZf3jji4s9Mip aR1Z9Yhw9yDcPIKsmNPndMAAiFtuW7IaJP9DPRN/dRjqSWFDK1tKm1iE9PBLKN0z hw36Jbz+AcKNmbAImsThhzyVLac9b2rxxIyiNukaXNdauVnCWv+x79VYtXmrHnPG u7h6MVLEcoaD1XqHEHC8rRRalw== -----END CERTIFICATE-----Generated at Sat Jun 13 23:37:35 2026 by rpki-client