$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft File: TI8rREM6tGSnFK2NOajxbkxQCnw.mft (raw, json) Hash identifier: ICtdLDUhfAB+NHu4U6N1DOA74LcHnbenkOvYnzXhgo8= Subject key identifier: 01:58:68:1B:FD:EE:DC:65:7A:DE:16:E3:51:E5:E2:5E:7D:4D:9A:96 Authority key identifier: 4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C Certificate issuer: /CN=A9116297/serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft Manifest number: 47 Signing time: Wed 25 Mar 2026 07:35:15 +0000 Manifest this update: Wed 25 Mar 2026 07:35:14 +0000 Manifest next update: Wed 01 Apr 2026 07:35:14 +0000 Files and hashes: 1: TI8rREM6tGSnFK2NOajxbkxQCnw.crl (hash: bJe0zxnpHz06k10DvIZh66uhlTtM0HPMXSwHq+6ma9M=) 2: FE68D63A156B11F1B9AA1492393D8C67.roa (hash: mtMWlsAIdr5mwCsmbmpFSLhMEDfGKHPUCmKxgSWYGI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116297, serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Validity Not Before: Mar 25 07:35:14 2026 GMT Not After : Apr 1 07:35:14 2026 GMT Subject: CN=69c39033-7b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:08:6e:c4:2a:64:18:50:20:9e:03:21:16: 5e:eb:b8:d1:b6:78:ba:07:d7:91:a6:c6:e6:77:8d: 15:89:59:ba:d8:ae:78:c3:71:4b:a2:3c:7a:be:48: 31:3f:89:5a:46:df:3d:c6:54:ea:50:e5:ab:ef:89: e5:12:5a:75:3e:36:fa:23:5b:37:9e:06:4d:fc:d8: 78:49:d1:51:90:9f:c7:fc:a5:a1:75:76:d6:d6:2b: 5b:a1:f4:36:42:6c:37:c0:78:06:d0:0b:b5:92:e8: 53:3b:89:4a:50:08:48:10:9d:14:e1:74:e8:5e:27: 5c:d7:e3:9c:5e:42:86:b4:2e:84:e4:6b:cf:ba:4f: ae:a2:5a:e7:68:29:88:cb:be:5e:08:94:52:0d:3c: c4:7e:69:37:bc:9f:23:e2:d2:c3:f2:27:cc:03:17: 37:4e:ab:80:bb:05:56:58:11:6a:06:ba:bb:fb:da: 2f:b3:fb:cf:39:34:cf:f6:ef:d7:d3:f1:4c:d5:c7: e1:f1:aa:c6:b5:3f:af:87:01:29:13:be:9e:42:b5: f1:c7:73:f3:f4:8b:5b:6f:d5:85:ae:d1:9c:aa:38: 73:96:48:89:f6:57:53:19:6e:b8:51:93:cb:a6:f1: fa:1a:15:e7:86:d3:96:57:c2:0e:fc:24:72:91:c8: b4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:58:68:1B:FD:EE:DC:65:7A:DE:16:E3:51:E5:E2:5E:7D:4D:9A:96 X509v3 Authority Key Identifier: keyid:4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1f:5c:4a:7f:34:08:8c:8c:21:9d:0c:b1:98:6b:88:72:e8: cc:de:82:49:74:7f:7a:75:cd:14:f0:db:4b:bc:e9:9e:d6:9d: 2c:27:b0:b9:97:e3:02:69:ad:df:9a:17:53:aa:c9:04:79:ea: c1:14:ee:84:e5:c0:22:35:2c:71:e5:74:f6:9d:7b:32:34:c7: 96:7b:96:b4:14:a8:ae:6c:0f:bd:e2:4f:35:f5:2c:54:44:f4: 51:83:1a:cd:94:ee:84:b9:e8:87:89:6b:80:33:2b:5a:29:ae: e3:da:c5:44:33:73:68:1b:de:a8:4b:92:ad:da:b1:61:f6:9a: 17:a8:ff:e1:b8:25:5e:df:c5:88:1e:9e:bf:8a:c5:74:fc:47: 5b:fc:e8:0d:17:5d:c6:80:d3:f3:86:b5:8f:06:15:46:a3:4b: d6:a0:75:17:c3:eb:99:d1:5e:90:be:9a:57:ed:5f:bd:ed:30: b1:91:a5:11:94:8d:b1:8e:f5:97:1e:33:be:5f:32:b1:3b:47: ad:74:c1:e8:74:9d:b8:49:ed:e7:ac:f5:fe:3e:3e:24:fb:69: 68:33:f0:82:49:33:fd:55:91:6a:9d:1d:50:0e:5d:d5:f3:bd: 29:41:6c:cb:f2:26:f7:2f:45:9b:6e:2d:c9:e9:92:cb:48:88: 83:e0:58:c8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjI5NzExMC8GA1UEBRMoNEM4RjJCNDQ0MzNBQjQ2NEE3MTRBRDhEMzlBOEYxNkU0 QzUwMEE3QzAeFw0yNjAzMjUwNzM1MTRaFw0yNjA0MDEwNzM1MTRaMBgxFjAUBgNV BAMTDTY5YzM5MDMzLTdiODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqnghuxCpkGFAgngMhFl7ruNG2eLoH15GmxuZ3jRWJWbrYrnjDcUuiPHq+SDE/ iVpG3z3GVOpQ5avvieUSWnU+NvojWzeeBk382HhJ0VGQn8f8paF1dtbWK1uh9DZC bDfAeAbQC7WS6FM7iUpQCEgQnRThdOheJ1zX45xeQoa0LoTka8+6T66iWudoKYjL vl4IlFINPMR+aTe8nyPi0sPyJ8wDFzdOq4C7BVZYEWoGurv72i+z+885NM/279fT 8UzVx+Hxqsa1P6+HASkTvp5CtfHHc/P0i1tv1YWu0ZyqOHOWSIn2V1MZbrhRk8um 8foaFeeG05ZXwg78JHKRyLQ9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAVhoG/3u 3GV63hbjUeXiXn1NmpYwHwYDVR0jBBgwFoAUTI8rREM6tGSnFK2NOajxbkxQCnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2Mjk3LzZBNThBRDhFQzVD QjExRjA4NUE5QkM1OEM0RjlBRTAyL1RJOHJSRU02dEdTbkZLMk5PYWp4Ymt4UUNu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEk4clJFTTZ0R1NuRksyTk9hanhia3hRQ253LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 Mjk3LzZBNThBRDhFQzVDQjExRjA4NUE5QkM1OEM0RjlBRTAyL1RJOHJSRU02dEdT bkZLMk5PYWp4Ymt4UUNudy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8H1xKfzQIjIwhnQyxmGuIcujM3oJJdH96dc0U8NtLvOme1p0sJ7C5l+MCaa3f mhdTqskEeerBFO6E5cAiNSxx5XT2nXsyNMeWe5a0FKiubA+94k819SxURPRRgxrN lO6EueiHiWuAMytaKa7j2sVEM3NoG96oS5Kt2rFh9poXqP/huCVe38WIHp6/isV0 /Edb/OgNF13GgNPzhrWPBhVGo0vWoHUXw+uZ0V6QvppX7V+97TCxkaURlI2xjvWX HjO+XzKxO0etdMHodJ24Se3nrPX+Pj4k+2loM/CCSTP9VZFqnR1QDl3V870pQWzL 8ib3L0Wbbi3J6ZLLSIiD4FjI -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:05 2026 by rpki-client