$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: xrlGaUED1pgoGm8cW4n0eGnDcUK/fH8xJ8Ir8l1cPy0= Subject key identifier: 82:65:67:3D:C0:74:79:3B:75:A5:13:9D:AA:B5:D0:CA:C1:26:8C:4C Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 09FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 2185 Signing time: Tue 28 Jul 2026 16:40:00 +0000 Manifest this update: Tue 28 Jul 2026 16:40:00 +0000 Manifest next update: Tue 04 Aug 2026 16:40:00 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: CflOCWYBs6Eb6Mh/kLe+lDg32S9Q7dh85qAbriZM5MQ=) 2: 5FBC810E2C6C11F1AFD97E4FB3833773.roa (hash: g2RLVtOivjuUFJpHbhY01dBDwhC9Sd+LiRmcxISqRKU=) 3: EDA7924C4C6A11F18E27EE0BC2833773.roa (hash: 1Bx4zBsmcdQadh2Lc0q70WKfY8U9Q8aKMXPEm63RlMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2557 (0x9fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Jul 28 16:40:00 2026 GMT Not After : Aug 4 16:40:00 2026 GMT Subject: CN=6a68db60-bab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a9:38:58:ef:28:84:0e:bb:a0:af:2b:d1:55: 26:aa:5f:00:fa:b4:86:09:95:80:c2:54:8d:e3:8a: 8a:c9:87:82:a2:2f:af:76:42:3b:77:c6:b7:0e:61: 1f:e6:ca:77:bd:fd:8f:1c:89:41:66:e8:c7:5e:0b: a3:a4:13:d9:11:af:30:5f:ae:2c:b5:5c:77:2f:73: 36:33:a6:8a:e1:ab:ad:18:d7:af:87:f1:ac:48:ff: bd:f0:35:ec:8a:cb:4f:22:a0:fe:9a:c2:4d:1c:a6: 30:df:70:86:e3:ec:91:88:d9:b4:70:40:8c:0f:fb: 71:63:aa:4a:07:8f:0e:9a:30:26:e9:ce:e7:bd:c6: b3:2d:55:e0:07:db:ce:f6:8b:83:fa:4d:3f:da:b3: f0:d0:d4:32:7f:0f:c4:58:d0:29:17:fc:c6:c7:1e: ea:5c:24:d6:99:7b:d5:cc:fb:dd:a9:d5:a9:19:87: 12:2e:b2:2c:3e:6c:15:4d:9a:e4:25:f4:c4:b0:b5: 9a:f4:c4:9c:c7:d3:98:54:19:ed:34:18:bc:1c:59: 26:ae:9f:c8:d8:b0:95:d5:92:1b:b3:da:7a:d3:41: a8:8f:5b:59:22:8b:09:9f:2f:5a:2e:3f:23:8a:b4: e0:fd:8e:f2:27:22:32:7c:89:19:a4:81:12:62:c9: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:65:67:3D:C0:74:79:3B:75:A5:13:9D:AA:B5:D0:CA:C1:26:8C:4C X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:0e:fc:da:aa:ec:93:ce:08:82:fb:58:86:1a:fb:1f:9f:34: 14:4c:02:50:27:8c:72:10:a6:d5:1c:87:34:b7:48:b8:ce:75: 19:52:57:a3:8d:f0:2e:92:45:fb:42:67:0a:21:b8:c5:fd:63: aa:9d:1b:88:85:fd:1a:e1:93:27:cb:42:e9:4c:7f:07:29:9d: ae:48:eb:a4:59:e5:e5:73:17:26:6f:62:e0:fc:f2:38:74:53: af:e0:dc:84:ea:07:21:86:13:a8:e0:34:6c:0a:40:62:7d:13: 9f:43:33:3c:01:bf:c8:55:ba:09:77:f0:17:00:8d:37:cc:11: 3a:81:bc:bd:5e:3c:0c:ec:56:1b:68:ee:8c:c9:d2:2c:5c:bf: 43:c3:b4:2a:60:5d:cc:c2:42:27:7a:01:95:f8:16:1f:e9:e5: f7:f2:a9:11:ed:38:ad:9d:3b:7a:23:67:a6:06:0e:7e:24:48: e7:05:9d:05:33:4a:44:e4:09:52:93:6d:b1:fe:87:50:8e:87: c2:19:b9:3e:4e:5e:e4:f6:d6:ce:9f:76:c7:c0:fe:82:89:c6: e3:29:4e:a8:72:77:a3:cc:38:b3:39:9d:d9:73:15:a9:ee:01: 59:4d:f7:7c:7c:36:f6:16:98:78:b8:9a:b4:5a:d6:de:1f:87: 34:50:3e:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjYwNzI4MTY0MDAwWhcNMjYwODA0MTY0MDAwWjAYMRYwFAYD VQQDEw02YTY4ZGI2MC1iYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76k4WO8ohA67oK8r0VUmql8A+rSGCZWAwlSN44qKyYeCoi+vdkI7d8a3DmEf 5sp3vf2PHIlBZujHXgujpBPZEa8wX64stVx3L3M2M6aK4autGNevh/GsSP+98DXs istPIqD+msJNHKYw33CG4+yRiNm0cECMD/txY6pKB48OmjAm6c7nvcazLVXgB9vO 9ouD+k0/2rPw0NQyfw/EWNApF/zGxx7qXCTWmXvVzPvdqdWpGYcSLrIsPmwVTZrk JfTEsLWa9MScx9OYVBntNBi8HFkmrp/I2LCV1ZIbs9p600Goj1tZIosJny9aLj8j irTg/Y7yJyIyfIkZpIESYsnNiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJlZz3A dHk7daUTnaq10MrBJoxMMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJA782qrsk84IgvtYhhr7H580FEwCUCeMchCm1RyHNLdIuM51GVJXo43wLpJF +0JnCiG4xf1jqp0biIX9GuGTJ8tC6Ux/BymdrkjrpFnl5XMXJm9i4PzyOHRTr+Dc hOoHIYYTqOA0bApAYn0Tn0MzPAG/yFW6CXfwFwCNN8wROoG8vV48DOxWG2jujMnS LFy/Q8O0KmBdzMJCJ3oBlfgWH+nl9/KpEe04rZ07eiNnpgYOfiRI5wWdBTNKROQJ UpNtsf6HUI6Hwhm5Pk5e5PbWzp92x8D+gonG4ylOqHJ3o8w4szmd2XMVqe4BWU33 fHw29haYeLiatFrW3h+HNFA+Wg== -----END CERTIFICATE-----Generated at Wed Jul 29 13:29:25 2026 by rpki-client