$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: 5IsN1SZ7znqO9xzLeGLwrwclMtP5CLbdVNjQO/0H17Q= Subject key identifier: BD:23:BC:E3:C6:6E:04:77:7A:80:CE:DD:14:2C:57:88:94:35:A2:26 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0D32 Signing time: Sun 26 Jul 2026 18:24:11 +0000 Manifest this update: Sun 26 Jul 2026 18:24:10 +0000 Manifest next update: Sun 02 Aug 2026 18:24:10 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: f7p2zKsVIpRSHVwkqpBZBQ9AqEnuK4Na2HYIE9g3ayA=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Ly2jaqIQpLzfIwVzzl5fxhA7G1SP7FLWnaonBYKroN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: Jul 26 18:24:10 2026 GMT Not After : Aug 2 18:24:10 2026 GMT Subject: CN=6a6650ca-ea8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:2b:e5:4e:28:8f:c4:a1:c5:f5:eb:fb:4c: 17:9d:cf:85:2e:7e:c1:65:35:6b:cb:bd:13:a7:fe: 22:21:e5:e4:36:24:48:29:6f:39:a6:5d:76:93:7b: 06:39:31:38:b1:d1:2e:27:da:36:ca:0d:d5:3d:eb: 16:15:11:79:39:d0:f1:70:c0:a7:46:e0:ba:1d:90: b4:e3:c7:fd:3c:c8:ec:12:af:f8:c4:fc:72:e1:9c: 19:2e:bf:2a:e3:fa:da:97:a0:05:fb:12:77:89:ec: bf:91:86:46:6a:1e:1f:fc:d1:16:e9:2e:c7:48:18: 6d:2c:a9:0c:7d:ce:9b:83:26:da:5d:b3:86:7d:68: 07:ba:bf:8d:d1:30:e4:20:44:e2:46:b5:1b:6f:de: 8a:b7:72:f5:61:2a:ab:73:3f:6f:f5:36:13:24:2a: a2:22:20:94:61:e1:bb:a3:14:21:e3:ae:8e:83:3f: 79:96:62:0c:a0:90:27:4f:82:71:47:23:b8:9a:72: cc:65:45:20:7d:64:77:1c:ca:80:87:ee:89:0a:3a: 0c:08:af:1a:34:9d:be:78:04:b8:ab:08:52:1d:ea: a8:46:9a:98:cb:58:b9:5f:96:ba:d3:3f:53:e0:e7: 87:fd:6c:fe:04:ab:25:c5:77:75:5f:ea:4b:9f:df: 43:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:23:BC:E3:C6:6E:04:77:7A:80:CE:DD:14:2C:57:88:94:35:A2:26 X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:94:88:8c:12:43:7e:9d:89:d7:be:c0:e6:5a:1e:99:fe:60: 6c:1d:42:3c:9a:85:49:39:78:41:55:98:78:0d:e4:a3:c3:5c: db:3f:cc:20:3a:c0:b8:eb:3b:36:0a:25:d6:f9:a8:7b:ae:88: c7:12:c7:fb:06:6d:48:77:8d:30:79:38:07:3f:72:a8:02:89: 5a:91:30:00:2d:f1:a9:b5:b5:8d:58:a2:e5:87:ae:2b:d9:a0: 86:3b:a8:c8:5b:18:81:63:12:36:a5:ad:73:da:de:41:da:db: 9e:29:fb:3d:0d:3e:22:74:c8:ac:2a:d7:65:5d:b9:6e:5f:9d: 4f:52:59:84:33:cd:bd:62:7d:61:f4:a9:6f:9e:bd:52:26:3f: f6:ae:f7:c8:c1:a7:42:6c:d4:fe:af:7c:b2:56:1c:7c:34:1c: 37:f5:65:fe:3e:08:d0:91:7b:35:23:55:89:4a:44:8f:b2:fb: a9:31:6d:f6:2b:f8:76:69:d3:34:71:62:5d:f4:54:05:de:c5: 94:e0:e1:af:08:e5:a7:c1:46:b7:6d:43:a3:fd:3e:f7:c5:27: 2a:1c:bd:3c:77:b3:38:34:99:87:b3:19:bf:c5:0b:55:e5:1d: fb:99:54:1d:66:84:85:41:de:a4:ac:ff:0b:42:57:45:51:40: 22:f3:eb:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjYwNzI2MTgyNDEwWhcNMjYwODAyMTgyNDEwWjAYMRYwFAYD VQQDEw02YTY2NTBjYS1lYThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt70r5U4oj8ShxfXr+0wXnc+FLn7BZTVry70Tp/4iIeXkNiRIKW85pl12k3sG OTE4sdEuJ9o2yg3VPesWFRF5OdDxcMCnRuC6HZC048f9PMjsEq/4xPxy4ZwZLr8q 4/ral6AF+xJ3iey/kYZGah4f/NEW6S7HSBhtLKkMfc6bgybaXbOGfWgHur+N0TDk IETiRrUbb96Kt3L1YSqrcz9v9TYTJCqiIiCUYeG7oxQh466Ogz95lmIMoJAnT4Jx RyO4mnLMZUUgfWR3HMqAh+6JCjoMCK8aNJ2+eAS4qwhSHeqoRpqYy1i5X5a60z9T 4OeH/Wz+BKslxXd1X+pLn99DUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0jvOPG bgR3eoDO3RQsV4iUNaImMB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFZSIjBJDfp2J177A5loemf5gbB1CPJqFSTl4QVWYeA3ko8Nc2z/MIDrAuOs7 Ngol1vmoe66IxxLH+wZtSHeNMHk4Bz9yqAKJWpEwAC3xqbW1jVii5YeuK9mghjuo yFsYgWMSNqWtc9reQdrbnin7PQ0+InTIrCrXZV25bl+dT1JZhDPNvWJ9YfSpb569 UiY/9q73yMGnQmzU/q98slYcfDQcN/Vl/j4I0JF7NSNViUpEj7L7qTFt9iv4dmnT NHFiXfRUBd7FlODhrwjlp8FGt21Do/0+98UnKhy9PHezODSZh7MZv8ULVeUd+5lU HWaEhUHepKz/C0JXRVFAIvPrrA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:39:22 2026 by rpki-client