$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft File: tU-K0c7KwTb8r0eS6_0A5o6h02g.mft (raw, json) Hash identifier: fBZS3grl+hD4yySBWwy3ZsDW043ztXKmqFCK3Gw7X5A= Subject key identifier: 33:E2:32:8E:97:B8:DC:7B:39:F2:C8:48:B3:0F:1B:4F:2B:CF:C9:36 Authority key identifier: B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68 Certificate issuer: /CN=A91B7DCB/serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft Manifest number: E8 Signing time: Mon 27 Jul 2026 08:33:47 +0000 Manifest this update: Mon 27 Jul 2026 08:33:46 +0000 Manifest next update: Mon 03 Aug 2026 08:33:46 +0000 Files and hashes: 1: tU-K0c7KwTb8r0eS6_0A5o6h02g.crl (hash: T0jwF9DqywEEz6p1M1d0DpHdx2QvmfTDDkoHrxKeaSo=) 2: D470A60E294511F0B1412377C4F9AE02.roa (hash: GSkbxwT7s713aepzAHb1asdunZV2hHHIcFkvDpvvdJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368 Validity Not Before: Jul 27 08:33:46 2026 GMT Not After : Aug 3 08:33:46 2026 GMT Subject: CN=6a6717eb-7bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:a8:74:81:ce:6c:a2:8f:59:35:d0:4f:1a: 5d:53:b9:d6:21:96:4a:dd:0d:8f:85:08:ed:3c:08: 19:39:b5:fa:71:3f:29:e1:df:9d:05:bb:e0:8f:3d: 66:0a:55:92:69:18:8c:ce:2d:ca:12:fe:34:35:0b: 32:02:cf:29:ca:ac:12:01:cb:0c:73:a6:10:c8:33: 1e:77:9e:0f:86:61:11:3b:19:0a:be:bc:ad:03:c3: d8:b8:d8:69:ea:04:69:8b:55:f7:bb:99:bc:d9:ff: 0c:b2:c8:7c:7a:42:af:7e:aa:31:fa:4e:fd:c5:4f: 7c:13:be:39:13:e7:4b:71:5d:4a:d8:a9:02:8e:ed: 0c:f2:25:e7:b0:51:ab:4a:14:94:04:51:bd:87:a1: 15:83:67:22:22:99:0e:dd:22:71:f1:19:9c:5c:e4: b7:6a:e6:ee:14:49:4e:0e:76:93:48:53:60:4e:61: 9a:33:7f:54:43:75:bd:69:2a:86:13:83:8e:53:ca: 5e:46:52:78:81:e0:f2:cd:71:30:1b:56:12:cd:f9: f1:13:65:79:95:c0:c8:63:1f:6f:44:a8:b2:de:7d: a6:87:79:38:62:de:44:58:82:b0:c7:4b:5a:a6:d7: c3:da:f7:e4:08:db:ef:60:5c:0f:aa:2c:29:7d:6e: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E2:32:8E:97:B8:DC:7B:39:F2:C8:48:B3:0F:1B:4F:2B:CF:C9:36 X509v3 Authority Key Identifier: keyid:B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c5:61:f5:df:9b:39:b6:9b:5f:26:7a:90:e5:b6:47:a0:e6: ac:da:16:81:ec:50:1c:6d:39:91:51:45:b9:cf:8f:8f:7d:2b: 85:37:0c:39:b3:89:7d:c4:05:41:cf:e2:93:92:01:9e:e3:07: 07:2d:44:60:59:31:88:eb:1b:e1:35:23:41:3c:d9:d2:b6:d8: a6:d1:88:6a:65:01:8b:5e:fe:8d:2f:cc:52:66:d2:84:b6:c6: 80:1a:61:80:f3:3d:db:2a:a4:98:5f:ef:92:93:34:1c:ae:a5: 8a:52:c3:24:72:75:94:ca:d2:ac:93:b2:ae:7f:b8:87:4c:16: ca:03:45:c3:f7:91:d4:5f:33:af:3d:0d:17:a1:9a:3c:e6:7c: 7a:7f:af:7e:f8:de:98:f6:99:3f:0d:79:7e:ba:f0:4f:c7:0a: 9d:b9:42:e5:fc:fd:15:f3:96:b9:66:b2:85:d2:e5:d1:27:6e: 5e:b4:ab:0d:95:db:2e:91:cd:d8:7e:bc:b1:b8:c8:1d:5f:66: b5:83:68:a5:2f:00:9d:c7:6e:f6:57:f8:c4:1b:ac:32:d3:41: 8f:37:a3:3d:c4:75:08:cd:7a:ed:76:1b:b8:a3:b5:81:22:d3: 6e:df:9d:d1:94:4e:3f:43:51:91:b0:6e:18:54:45:f6:7a:54: 3b:3a:60:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEQ0IxMTAvBgNVBAUTKEI1NEY4QUQxQ0VDQUMxMzZGQ0FGNDc5MkVCRkQwMEU2 OEVBMUQzNjgwHhcNMjYwNzI3MDgzMzQ2WhcNMjYwODAzMDgzMzQ2WjAYMRYwFAYD VQQDEw02YTY3MTdlYi03YmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTuodIHObKKPWTXQTxpdU7nWIZZK3Q2PhQjtPAgZObX6cT8p4d+dBbvgjz1m ClWSaRiMzi3KEv40NQsyAs8pyqwSAcsMc6YQyDMed54PhmEROxkKvrytA8PYuNhp 6gRpi1X3u5m82f8Mssh8ekKvfqox+k79xU98E745E+dLcV1K2KkCju0M8iXnsFGr ShSUBFG9h6EVg2ciIpkO3SJx8RmcXOS3aubuFElODnaTSFNgTmGaM39UQ3W9aSqG E4OOU8peRlJ4geDyzXEwG1YSzfnxE2V5lcDIYx9vRKiy3n2mh3k4Yt5EWIKwx0ta ptfD2vfkCNvvYFwPqiwpfW6jXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPiMo6X uNx7OfLISLMPG08rz8k2MB8GA1UdIwQYMBaAFLVPitHOysE2/K9Hkuv9AOaOodNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0RDQi9GODNBQzQ5NDI5 NDQxMUYwQUUxQUJDNzRDNEY5QUUwMi90VS1LMGM3S3dUYjhyMGVTNl8wQTVvNmgw MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RVLUswYzdLd1RiOHIwZVM2XzBBNW82aDAyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0RDQi9GODNBQzQ5NDI5NDQxMUYwQUUxQUJDNzRDNEY5QUUwMi90VS1LMGM3S3dU YjhyMGVTNl8wQTVvNmgwMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF8Vh9d+bObabXyZ6kOW2R6DmrNoWgexQHG05kVFFuc+Pj30rhTcMObOJfcQF Qc/ik5IBnuMHBy1EYFkxiOsb4TUjQTzZ0rbYptGIamUBi17+jS/MUmbShLbGgBph gPM92yqkmF/vkpM0HK6lilLDJHJ1lMrSrJOyrn+4h0wWygNFw/eR1F8zrz0NF6Ga POZ8en+vfvjemPaZPw15frrwT8cKnblC5fz9FfOWuWayhdLl0SduXrSrDZXbLpHN 2H68sbjIHV9mtYNopS8Ancdu9lf4xBusMtNBjzejPcR1CM167XYbuKO1gSLTbt+d 0ZROP0NRkbBuGFRF9npUOzpgvA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:00:24 2026 by rpki-client