$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft File: TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json) Hash identifier: l1aXiCIpNvolEBUgn3HesrOraUJEh5bn7X2W0GOV2lI= Subject key identifier: 63:71:E6:2E:45:4A:C4:8C:97:1B:DC:FF:2A:99:DF:17:74:66:B8:22 Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 Certificate issuer: /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft Manifest number: 0135 Signing time: Mon 27 Jul 2026 07:31:21 +0000 Manifest this update: Mon 27 Jul 2026 07:31:20 +0000 Manifest next update: Mon 03 Aug 2026 07:31:20 +0000 Files and hashes: 1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: e7XinBbUC/UK+4QSkb3e9vVHnEhbOt8skHm/o2H7U38=) 2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Validity Not Before: Jul 27 07:31:20 2026 GMT Not After : Aug 3 07:31:20 2026 GMT Subject: CN=6a670949-18bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a6:17:2e:52:f9:1b:d1:92:a1:55:7b:57:8f: f1:ee:29:80:12:96:bf:e4:0f:f0:ec:cc:8d:42:97: af:44:14:6d:98:e7:99:6c:86:bd:db:88:4f:2d:c3: 0c:5f:24:88:3a:d7:e9:5a:f7:0f:98:0b:3c:c0:7a: f6:cd:95:a5:3f:bf:ef:84:50:28:1d:67:ac:1f:15: 18:d5:47:79:77:19:d6:63:b2:c8:87:26:44:c2:72: 83:12:11:d6:e7:b1:cc:94:85:02:54:c1:2f:8c:f2: f0:93:1e:55:20:9a:4c:fe:29:2a:98:7c:13:46:7f: 19:a9:3a:9f:7c:a9:20:66:41:7a:e2:83:11:53:e5: 4a:37:f7:5c:29:d5:ce:50:38:38:22:64:5a:de:d1: 5e:58:37:c3:20:18:35:42:f4:92:8d:d6:8f:60:e6: 6d:28:93:69:5e:14:db:5e:54:e6:04:f0:7c:eb:99: 64:60:fb:59:8a:ff:57:4d:0a:d7:6d:87:c1:e4:0d: e6:d6:bc:4e:13:a0:37:01:b8:32:6a:98:35:65:07: 5a:b5:8b:5d:c2:02:16:b3:42:25:f0:6f:d3:46:32: 7d:4c:78:65:b7:63:6e:68:03:97:b7:12:70:86:5e: a9:66:99:69:19:75:61:dd:1e:16:fa:43:8b:49:2b: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:71:E6:2E:45:4A:C4:8C:97:1B:DC:FF:2A:99:DF:17:74:66:B8:22 X509v3 Authority Key Identifier: keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:db:bc:b6:42:3c:6b:a1:38:b9:87:c9:68:2e:8b:96:6e:a0: 17:5b:9f:26:f1:1c:75:0f:a4:8c:19:3e:78:89:f1:27:92:60: 78:e8:c1:5b:c1:bd:3a:99:e0:29:b0:fb:db:e8:df:fb:cd:5d: c7:88:bf:8c:5f:d2:42:2a:7b:c2:6f:bf:58:2b:02:35:07:8d: a3:e3:4a:01:96:3f:2b:f6:4e:86:f8:15:fe:2d:22:e9:d6:36: 8c:5f:60:dd:72:2e:df:69:ce:c6:8c:46:ad:55:bf:83:2d:f1: 51:20:15:86:5d:1a:69:b5:0a:0b:b8:59:ac:35:4b:c7:33:dd: 40:1f:f2:50:c9:cb:b2:44:71:bc:8b:95:ad:56:2c:54:32:7a: 9e:74:12:fd:49:f7:4a:e4:10:c5:ab:8c:3d:fd:03:f2:ac:3e: a9:a4:74:f6:f2:b3:e2:d2:48:86:6b:7c:bb:bb:c1:7a:61:2b: ce:22:76:fc:c3:31:81:1c:78:78:4b:11:02:5d:af:a2:f8:00: 1f:95:f4:b9:50:71:13:b7:83:fb:5a:26:6b:09:6b:57:21:13: 28:62:89:5b:95:ad:1d:a2:bf:f3:ac:c8:0e:1a:03:3d:1b:9a: 2d:47:04:d3:2f:12:35:af:b8:6c:5b:32:37:d0:59:08:f1:5d: 0f:4c:d5:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyMzMxMTAvBgNVBAUTKDRFNzU5QUIyREUyNDU0NjlGODMxMUI5MjczQjU1NTM4 N0U3NTBBOTAwHhcNMjYwNzI3MDczMTIwWhcNMjYwODAzMDczMTIwWjAYMRYwFAYD VQQDEw02YTY3MDk0OS0xOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qYXLlL5G9GSoVV7V4/x7imAEpa/5A/w7MyNQpevRBRtmOeZbIa924hPLcMM XySIOtfpWvcPmAs8wHr2zZWlP7/vhFAoHWesHxUY1Ud5dxnWY7LIhyZEwnKDEhHW 57HMlIUCVMEvjPLwkx5VIJpM/ikqmHwTRn8ZqTqffKkgZkF64oMRU+VKN/dcKdXO UDg4ImRa3tFeWDfDIBg1QvSSjdaPYOZtKJNpXhTbXlTmBPB865lkYPtZiv9XTQrX bYfB5A3m1rxOE6A3Abgyapg1ZQdatYtdwgIWs0Il8G/TRjJ9THhlt2NuaAOXtxJw hl6pZplpGXVh3R4W+kOLSStiPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNx5i5F SsSMlxvc/yqZ3xd0ZrgiMB8GA1UdIwQYMBaAFE51mrLeJFRp+DEbknO1VTh+dQqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjIzMy8wOEYwNTI2MEIz NzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZHbjRNUnVTYzdWVk9INTFD cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuV2FzdDRrVkduNE1SdVNjN1ZWT0g1MUNwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjIzMy8wOEYwNTI2MEIzNzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZH bjRNUnVTYzdWVk9INTFDcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdNu8tkI8a6E4uYfJaC6Llm6gF1ufJvEcdQ+kjBk+eInxJ5JgeOjBW8G9Opng KbD72+jf+81dx4i/jF/SQip7wm+/WCsCNQeNo+NKAZY/K/ZOhvgV/i0i6dY2jF9g 3XIu32nOxoxGrVW/gy3xUSAVhl0aabUKC7hZrDVLxzPdQB/yUMnLskRxvIuVrVYs VDJ6nnQS/Un3SuQQxauMPf0D8qw+qaR09vKz4tJIhmt8u7vBemErziJ2/MMxgRx4 eEsRAl2vovgAH5X0uVBxE7eD+1omawlrVyETKGKJW5WtHaK/86zIDhoDPRuaLUcE 0y8SNa+4bFsyN9BZCPFdD0zV2Q== -----END CERTIFICATE-----Generated at Wed Jul 29 02:09:54 2026 by rpki-client