$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft File: TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json) Hash identifier: Yaz0z+23+IYh1CRWYA9r0ZhvS8JDOu0LZyPR0NrH4eg= Subject key identifier: C2:3B:60:37:96:27:31:39:4F:79:F3:42:3F:97:F5:98:C8:03:E6:67 Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 Certificate issuer: /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft Manifest number: 011F Signing time: Sat 13 Jun 2026 05:48:49 +0000 Manifest this update: Sat 13 Jun 2026 05:48:48 +0000 Manifest next update: Sat 20 Jun 2026 05:48:48 +0000 Files and hashes: 1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: BaeR+iR3hMgzk1HC3yG1dHxz08YHCY0BPK7QEcd+8LY=) 2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 05:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Validity Not Before: Jun 13 05:48:48 2026 GMT Not After : Jun 20 05:48:48 2026 GMT Subject: CN=6a2cef41-d26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:f7:cd:4c:01:9a:67:a3:74:e1:6e:98:63: 21:62:f1:a5:cd:96:be:9b:e2:75:37:87:4f:c9:f1: e3:8d:47:71:fc:4a:0c:4d:3f:d6:90:e9:b2:c7:6a: a2:c8:ba:64:d7:5f:d5:de:b2:31:cd:9c:af:ec:b4: de:27:b5:5e:94:6e:87:9b:67:c4:55:6e:fa:37:46: 69:d5:7d:6f:12:ff:4a:de:70:cd:c0:1c:59:44:c2: 18:1b:d8:ea:82:65:73:29:05:57:4f:3c:0d:3f:1f: 93:98:d1:e6:7f:99:e7:d7:0b:0d:5b:d6:0d:f9:c9: ef:36:a1:4f:94:a3:b6:04:35:a6:c7:85:4b:83:0f: 1d:2a:8e:d5:b2:6d:1d:4e:7c:21:f7:d6:54:57:06: f8:43:c1:74:f3:8f:83:31:46:9a:75:0c:cd:8f:71: c2:e5:f2:cf:fd:d1:94:a4:c2:58:b7:de:b0:6f:4c: 1b:2d:b1:58:f9:03:78:1b:ce:6c:a3:00:63:cb:f3: 0d:15:62:e9:5b:24:ec:3f:21:2e:02:3c:f7:a1:5b: 28:7d:f2:a9:cc:14:d9:6d:1d:1b:b7:b9:d1:c5:bf: 6d:42:c6:6f:7f:5f:9f:a3:88:42:42:f2:67:1a:47: f5:97:cc:8e:af:0b:01:bc:91:7a:e0:fb:7b:ff:ee: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3B:60:37:96:27:31:39:4F:79:F3:42:3F:97:F5:98:C8:03:E6:67 X509v3 Authority Key Identifier: keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:54:37:af:18:c5:9a:bc:5c:ac:83:50:94:56:19:97:a9:60: fc:5f:b3:46:b6:39:77:7e:83:d0:51:93:f2:a0:7e:9e:05:1d: 94:04:e1:f5:5a:d1:37:33:64:35:dc:e7:c1:45:e3:56:4c:5d: 11:fe:04:d6:e4:ea:01:94:45:55:03:95:5f:b1:b6:85:41:a5: d9:53:2a:03:8d:c6:c8:65:0b:a4:3d:49:e8:f4:40:4c:1e:a1: a8:98:78:41:46:b5:ea:19:92:3b:c2:0e:4d:d2:ff:72:ba:03: b5:55:af:6b:ea:7a:33:74:0f:ca:6d:aa:3f:3f:61:54:12:c0: 4e:c6:6b:2b:ef:f0:20:93:58:68:9b:96:aa:2f:d2:3f:87:fa: 52:26:16:17:b2:12:af:41:af:f5:89:38:58:ea:a8:78:a0:6d: e1:55:c2:91:f0:ff:fd:4f:ab:e1:28:86:0f:93:f1:09:82:95: 52:d4:27:b8:ea:62:7c:8d:db:15:ed:98:7f:d2:60:48:8c:93: ae:00:74:5a:9b:a9:5d:2d:3f:19:7d:76:c7:96:ea:fd:5f:0c: f7:fe:ae:05:3c:68:17:8a:e8:66:ac:ae:30:32:cd:d6:32:23: 2c:8f:e9:b8:41:77:09:04:c8:b7:df:4f:1a:f4:99:ce:a6:b6: e8:14:13:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyMzMxMTAvBgNVBAUTKDRFNzU5QUIyREUyNDU0NjlGODMxMUI5MjczQjU1NTM4 N0U3NTBBOTAwHhcNMjYwNjEzMDU0ODQ4WhcNMjYwNjIwMDU0ODQ4WjAYMRYwFAYD VQQDEw02YTJjZWY0MS1kMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOL3zUwBmmejdOFumGMhYvGlzZa+m+J1N4dPyfHjjUdx/EoMTT/WkOmyx2qi yLpk11/V3rIxzZyv7LTeJ7VelG6Hm2fEVW76N0Zp1X1vEv9K3nDNwBxZRMIYG9jq gmVzKQVXTzwNPx+TmNHmf5nn1wsNW9YN+cnvNqFPlKO2BDWmx4VLgw8dKo7Vsm0d Tnwh99ZUVwb4Q8F084+DMUaadQzNj3HC5fLP/dGUpMJYt96wb0wbLbFY+QN4G85s owBjy/MNFWLpWyTsPyEuAjz3oVsoffKpzBTZbR0bt7nRxb9tQsZvf1+fo4hCQvJn Gkf1l8yOrwsBvJF64Pt7/+73UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMI7YDeW JzE5T3nzQj+X9ZjIA+ZnMB8GA1UdIwQYMBaAFE51mrLeJFRp+DEbknO1VTh+dQqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjIzMy8wOEYwNTI2MEIz NzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZHbjRNUnVTYzdWVk9INTFD cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuV2FzdDRrVkduNE1SdVNjN1ZWT0g1MUNwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjIzMy8wOEYwNTI2MEIzNzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZH bjRNUnVTYzdWVk9INTFDcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkVQ3rxjFmrxcrINQlFYZl6lg/F+zRrY5d36D0FGT8qB+ngUdlATh9VrRNzNk NdznwUXjVkxdEf4E1uTqAZRFVQOVX7G2hUGl2VMqA43GyGULpD1J6PRATB6hqJh4 QUa16hmSO8IOTdL/croDtVWva+p6M3QPym2qPz9hVBLATsZrK+/wIJNYaJuWqi/S P4f6UiYWF7ISr0Gv9Yk4WOqoeKBt4VXCkfD//U+r4SiGD5PxCYKVUtQnuOpifI3b Fe2Yf9JgSIyTrgB0WpupXS0/GX12x5bq/V8M9/6uBTxoF4roZqyuMDLN1jIjLI/p uEF3CQTIt99PGvSZzqa26BQTeQ== -----END CERTIFICATE-----Generated at Sat Jun 13 21:29:21 2026 by rpki-client