$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: RsGJccv4/T2jMKv5gkAOvN9NSnFMIPICZONiv5NWnoE= Subject key identifier: 8E:35:DC:58:CB:6E:35:49:F7:19:53:E0:50:03:FA:3B:87:1C:C8:71 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 0410 Signing time: Mon 27 Jul 2026 01:26:16 +0000 Manifest this update: Mon 27 Jul 2026 01:26:16 +0000 Manifest next update: Mon 03 Aug 2026 01:26:16 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: fRYtkiOmQCm3eE+OMqNavv19nR1hAZbM6GmE160HNb0=) 2: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=) 3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=) 4: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Jul 27 01:26:16 2026 GMT Not After : Aug 3 01:26:16 2026 GMT Subject: CN=6a66b3b8-ac86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:5c:fe:93:49:ce:82:db:6c:7d:4f:63:87: 32:14:c7:2e:ad:bc:6a:8b:ab:53:20:b1:b0:90:2c: d7:68:c8:bc:1d:12:56:47:77:27:75:8b:e9:b1:66: d2:ae:89:94:5b:6d:0f:59:dd:58:cf:41:04:45:ea: f8:c2:50:4e:88:4e:98:9a:f1:1b:0e:c9:aa:7f:13: 59:b0:af:cf:3d:a5:0a:5a:b1:49:67:4e:e8:ad:b5: c5:13:25:ca:ca:bf:96:b8:c8:d1:03:35:2c:11:df: 5f:a4:62:79:9c:8d:a0:3b:27:6d:24:c8:66:d9:94: 93:d0:b1:ec:4a:6f:d0:7b:f4:31:d0:60:da:b2:97: 7b:82:ac:05:42:e7:d2:56:44:ff:fb:20:1a:fe:be: 6a:3f:0e:98:54:0b:50:5b:93:44:d2:a8:26:9b:fe: 91:17:cf:38:cd:97:2f:23:77:d1:e1:26:7c:d8:62: df:1f:94:80:29:51:04:e0:66:17:83:03:9a:17:83: 4e:ae:7e:31:4a:32:2c:9b:8a:ce:af:e7:80:a3:f5: ab:cb:4c:a1:05:30:c5:81:f3:e9:c6:05:a2:66:3d: e7:d4:81:6c:09:fe:82:f5:72:3d:8f:bd:6e:ee:35: 66:47:6e:b7:75:b4:f5:67:aa:8f:c9:29:ba:a6:6a: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:35:DC:58:CB:6E:35:49:F7:19:53:E0:50:03:FA:3B:87:1C:C8:71 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:70:6d:96:50:a2:c5:39:e1:9a:b7:a8:7d:49:02:bf:ba:0a: 3b:2b:c1:90:20:fd:63:aa:82:5e:93:3c:0f:4f:57:ca:bd:c3: 8a:1f:54:4c:8f:31:94:a5:3f:17:fd:ac:fb:81:52:83:47:c6: 9f:19:ab:1b:23:a9:8e:01:0c:3b:27:29:b3:11:a0:7e:01:9e: e4:1d:31:ae:a7:e5:14:8f:e8:3e:c8:1f:19:7c:47:02:ef:d6: 6f:18:78:41:f5:61:9b:78:be:1f:35:bf:87:1a:f2:e7:44:dd: 4b:6b:69:c1:e4:d4:06:24:6a:a3:fe:87:ba:e3:fe:15:50:e1: 30:1c:6a:49:34:45:ed:65:24:b6:9a:2e:64:a5:c0:c9:ae:b7: b0:03:8d:05:09:43:79:23:b9:72:ff:91:48:2f:a8:45:39:ff: 1b:a9:2a:d2:4a:b7:5a:18:8e:6d:e6:78:cd:ca:ac:80:f0:56: 47:6c:a9:dd:5f:16:85:b7:ea:6b:7d:86:00:f0:5d:f3:ce:a8: db:ea:3e:ec:99:09:7f:4d:b9:29:56:97:2c:ea:d1:f7:82:f4: 35:4e:4e:17:b9:df:1e:be:7c:3f:97:62:b0:f2:93:88:ee:ef: 1c:69:6d:4c:ed:4d:b9:2b:8a:22:ee:42:7d:bb:3f:ca:9f:d0: 3b:3a:8e:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYwNzI3MDEyNjE2WhcNMjYwODAzMDEyNjE2WjAYMRYwFAYD VQQDEw02YTY2YjNiOC1hYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNRc/pNJzoLbbH1PY4cyFMcurbxqi6tTILGwkCzXaMi8HRJWR3cndYvpsWbS romUW20PWd1Yz0EERer4wlBOiE6YmvEbDsmqfxNZsK/PPaUKWrFJZ07orbXFEyXK yr+WuMjRAzUsEd9fpGJ5nI2gOydtJMhm2ZST0LHsSm/Qe/Qx0GDaspd7gqwFQufS VkT/+yAa/r5qPw6YVAtQW5NE0qgmm/6RF884zZcvI3fR4SZ82GLfH5SAKVEE4GYX gwOaF4NOrn4xSjIsm4rOr+eAo/Wry0yhBTDFgfPpxgWiZj3n1IFsCf6C9XI9j71u 7jVmR263dbT1Z6qPySm6pmqy6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI413FjL bjVJ9xlT4FAD+juHHMhxMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKnBtllCixTnhmreofUkCv7oKOyvBkCD9Y6qCXpM8D09Xyr3Dih9UTI8xlKU/ F/2s+4FSg0fGnxmrGyOpjgEMOycpsxGgfgGe5B0xrqflFI/oPsgfGXxHAu/Wbxh4 QfVhm3i+HzW/hxry50TdS2tpweTUBiRqo/6HuuP+FVDhMBxqSTRF7WUktpouZKXA ya63sAONBQlDeSO5cv+RSC+oRTn/G6kq0kq3WhiObeZ4zcqsgPBWR2yp3V8Whbfq a32GAPBd886o2+o+7JkJf025KVaXLOrR94L0NU5OF7nfHr58P5disPKTiO7vHGlt TO1NuSuKIu5Cfbs/yp/QOzqOaQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:59:13 2026 by rpki-client