$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft File: tkP-swMnQhSPOvnDU5M41VSTcig.mft (raw, json) Hash identifier: KDn6IC+8tklGI5GGh15qAcDPO30ICwgqeV7L3bq36KE= Subject key identifier: 7A:AC:42:D1:8D:35:25:57:E1:0A:3F:41:3A:D5:E0:CC:71:F1:86:EC Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 Certificate issuer: /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft Manifest number: 92 Signing time: Mon 27 Jul 2026 09:34:54 +0000 Manifest this update: Mon 27 Jul 2026 09:34:53 +0000 Manifest next update: Mon 03 Aug 2026 09:34:53 +0000 Files and hashes: 1: tkP-swMnQhSPOvnDU5M41VSTcig.crl (hash: dNpA9+Ntr0AfvTz7Gg4JDDGadq1qw7w9q5fJ7zbD/h4=) 2: 341BBBECA99411F093BBAA15C4F9AE02.roa (hash: PpvqloufX06LkcG9zYWZ5Pcx+1uUm6NtfRlAU1EzgwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Validity Not Before: Jul 27 09:34:53 2026 GMT Not After : Aug 3 09:34:53 2026 GMT Subject: CN=6a67263e-010e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:62:2e:ce:d2:09:f7:db:a2:56:9e:05:0e: 85:e5:95:c0:7d:ba:8e:17:7a:ce:30:1f:ea:42:38: f8:8b:be:6d:23:eb:cf:87:d3:1b:c9:20:58:55:f1: eb:7e:0d:82:2b:3f:b3:67:98:aa:ab:04:b5:df:35: c6:79:93:b7:09:25:25:96:f9:00:b9:2a:ae:0e:a4: d0:3f:24:a4:aa:4a:42:2a:f2:99:49:f0:d6:5c:4a: e6:95:89:80:0a:a9:6e:fa:85:74:e9:9c:1d:a0:27: 73:c3:c1:8a:1c:ec:a5:be:d3:9c:22:34:a5:88:a6: 1b:d9:e7:c0:9f:10:6a:c3:c5:fd:4b:9d:b9:bc:a3: 2e:bb:c1:0d:2a:bd:4e:75:c6:89:a7:17:fb:ad:ee: bb:a1:57:fc:54:63:23:55:55:99:96:1e:23:b5:3d: 83:74:34:26:0f:8a:ad:d9:c0:96:b7:1c:de:01:f8: 2a:fc:1c:04:86:8e:a0:05:41:7b:ad:c0:e6:70:80: 49:42:a6:4a:54:14:47:fd:62:a4:1e:d2:75:18:8a: 76:2b:58:50:e5:61:4e:4f:05:ef:c7:cf:1a:5e:88: 92:ba:dd:d6:89:19:33:89:cd:4d:4b:10:f3:a8:55: 35:a2:5a:68:53:47:3b:b7:c2:72:ef:68:a3:5f:77: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AC:42:D1:8D:35:25:57:E1:0A:3F:41:3A:D5:E0:CC:71:F1:86:EC X509v3 Authority Key Identifier: keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:40:f5:fa:4c:09:98:28:61:c0:50:ba:78:9a:cb:df:bc:1f: 2c:e9:57:af:d2:93:6e:5e:f8:f8:08:cd:91:4c:f9:0c:4d:51: 43:fe:f4:fb:5b:25:23:ff:c8:b0:4c:03:7f:c8:94:8b:60:ca: 5c:3e:a2:3c:32:ca:7b:4e:a7:3a:bf:fb:d9:6a:78:a3:27:93: c0:46:1b:51:37:55:bb:79:be:61:99:96:21:a9:58:7d:7d:3e: 21:e2:52:53:b3:cf:df:db:f1:c6:4a:13:4f:cc:f5:ac:f1:92: 52:be:e8:e4:ae:b3:11:2f:65:bd:27:47:c1:70:99:40:c5:37: 4e:d9:21:60:c8:59:f1:fd:d7:e2:fa:59:cb:65:1b:9c:2f:39: 89:6c:1f:6a:47:32:3e:0f:87:24:f9:03:30:a6:12:00:4d:7b: c9:8c:27:48:7b:75:19:58:c0:31:23:50:44:5a:3c:0e:38:ee: 1a:4d:38:61:6e:6a:6d:76:d9:60:c1:75:59:c8:2d:6c:94:c9: a3:87:5c:2c:02:56:26:3d:8b:bf:2d:d8:2b:72:0c:be:5e:46: 69:c3:2e:ce:c6:87:b7:b2:f6:78:2e:f1:ab:c8:bb:ca:ed:5d: 31:65:db:15:26:35:d6:f5:1d:75:a2:b4:8a:ef:a0:a8:64:ed: 99:0c:b6:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwREUxMTAvBgNVBAUTKEI2NDNGRUIzMDMyNzQyMTQ4RjNBRjlDMzUzOTMzOEQ1 NTQ5MzcyMjgwHhcNMjYwNzI3MDkzNDUzWhcNMjYwODAzMDkzNDUzWjAYMRYwFAYD VQQDEw02YTY3MjYzZS0wMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArr1iLs7SCffbolaeBQ6F5ZXAfbqOF3rOMB/qQjj4i75tI+vPh9MbySBYVfHr fg2CKz+zZ5iqqwS13zXGeZO3CSUllvkAuSquDqTQPySkqkpCKvKZSfDWXErmlYmA Cqlu+oV06ZwdoCdzw8GKHOylvtOcIjSliKYb2efAnxBqw8X9S525vKMuu8ENKr1O dcaJpxf7re67oVf8VGMjVVWZlh4jtT2DdDQmD4qt2cCWtxzeAfgq/BwEho6gBUF7 rcDmcIBJQqZKVBRH/WKkHtJ1GIp2K1hQ5WFOTwXvx88aXoiSut3WiRkzic1NSxDz qFU1olpoU0c7t8Jy72ijX3cekwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqsQtGN NSVX4Qo/QTrV4Mxx8YbsMB8GA1UdIwQYMBaAFLZD/rMDJ0IUjzr5w1OTONVUk3Io MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDBERS80Rjc2OUQ1OEE5 OEYxMUYwQjFGQTUwNjZDNEY5QUUwMi90a1Atc3dNblFoU1BPdm5EVTVNNDFWU1Rj aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RrUC1zd01uUWhTUE92bkRVNU00MVZTVGNpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDBERS80Rjc2OUQ1OEE5OEYxMUYwQjFGQTUwNjZDNEY5QUUwMi90a1Atc3dNblFo U1BPdm5EVTVNNDFWU1RjaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHkD1+kwJmChhwFC6eJrL37wfLOlXr9KTbl74+AjNkUz5DE1RQ/70+1slI//I sEwDf8iUi2DKXD6iPDLKe06nOr/72Wp4oyeTwEYbUTdVu3m+YZmWIalYfX0+IeJS U7PP39vxxkoTT8z1rPGSUr7o5K6zES9lvSdHwXCZQMU3TtkhYMhZ8f3X4vpZy2Ub nC85iWwfakcyPg+HJPkDMKYSAE17yYwnSHt1GVjAMSNQRFo8DjjuGk04YW5qbXbZ YMF1WcgtbJTJo4dcLAJWJj2Lvy3YK3IMvl5GacMuzsaHt7L2eC7xq8i7yu1dMWXb FSY11vUddaK0iu+gqGTtmQy21g== -----END CERTIFICATE-----Generated at Tue Jul 28 22:01:31 2026 by rpki-client