$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft File: tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json) Hash identifier: nUwl03PFQMzyxH0R+h/oNlAiOXBCDTYUXIpV+KaxNCE= Subject key identifier: 51:76:69:5A:92:7C:5A:9A:06:0E:32:80:EB:72:A7:89:88:5B:16:6F Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft Manifest number: 0221 Signing time: Tue 24 Mar 2026 18:32:19 +0000 Manifest this update: Tue 24 Mar 2026 18:32:19 +0000 Manifest next update: Tue 31 Mar 2026 18:32:19 +0000 Files and hashes: 1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: E/ecNskc4PXcfWGlxYepUzs1E1n0XlQ7n82RKPtezbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Validity Not Before: Mar 24 18:32:19 2026 GMT Not After : Mar 31 18:32:19 2026 GMT Subject: CN=69c2d8b3-542a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ae:ef:3f:47:d6:7b:31:5a:95:31:d4:a8:bc: 9b:3c:88:c5:d7:fd:4b:c7:bb:44:0c:e4:8c:d4:57: 5e:c1:27:44:3a:c2:f4:1a:18:75:12:24:14:b3:ee: d9:a8:c0:68:36:a5:68:8e:33:d3:44:54:d7:cf:cb: ff:ce:ec:9c:a7:39:b8:5f:d7:ed:fd:db:e4:a3:f5: f3:75:00:bb:f7:7a:9c:63:53:d2:07:9f:2a:0d:0b: 62:28:a5:51:de:7b:dc:f1:5a:3c:33:15:0c:de:75: 3d:4f:f9:ad:72:ab:60:bc:6e:2c:35:fd:73:96:25: 70:92:9f:e8:38:64:aa:43:d4:45:be:d2:38:78:97: 48:cf:92:88:4c:8e:9e:78:f3:31:f6:2b:47:17:89: 75:e7:10:74:ee:6c:4b:e5:e4:b6:2c:12:f8:e1:51: 79:9d:43:89:37:58:2b:8d:dd:1c:73:b1:c6:d1:fc: 98:21:23:46:3a:9a:c2:6b:81:dc:d7:46:7a:11:cf: d1:bf:a0:94:fb:d4:5e:7f:00:0d:02:f1:00:8e:1b: f5:08:f9:7f:0c:db:3b:fa:2f:6d:0f:1a:14:4a:d8: bf:8d:2e:48:b6:0e:51:81:99:9f:2a:58:d7:6b:f9: ba:36:3b:a9:c5:ff:99:4a:c6:73:f8:95:ce:c7:5d: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:76:69:5A:92:7C:5A:9A:06:0E:32:80:EB:72:A7:89:88:5B:16:6F X509v3 Authority Key Identifier: keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:81:c5:96:30:29:6c:b0:13:59:59:de:91:40:2e:6c:fd:f0: 64:7e:a3:33:07:a4:7a:3f:17:bd:9a:f4:12:fb:69:e9:a0:72: 7b:da:67:36:b3:de:b4:e4:98:80:93:0e:0a:65:89:f1:28:50: 9b:24:ad:ac:fc:d2:24:b6:66:75:84:b7:83:87:e4:20:61:95: 50:72:c7:d3:af:d6:ef:4a:15:68:d9:51:5a:a8:27:e7:6b:fc: 14:ac:c0:93:6d:e8:79:f7:d9:4d:09:29:0b:33:bb:05:63:f4: 4a:8a:10:59:88:1f:99:70:7f:37:f9:da:b5:7d:d3:6b:63:93: 0d:1b:41:97:a0:dd:6c:89:a1:f8:e2:45:db:76:aa:a8:57:f3: 38:12:bc:9c:70:cf:37:e6:73:5a:36:2e:a7:50:aa:9c:a0:d7: 3f:62:5a:79:51:b1:92:7b:5f:d4:66:85:a8:46:46:a9:49:25: 73:66:19:d7:3a:c0:ef:3a:22:ca:a0:3c:a6:56:12:be:78:85: b5:eb:c3:10:cb:ad:50:8d:9e:9e:3e:d5:49:b4:72:a1:67:b5: 1b:d7:0d:19:77:eb:23:a7:92:3d:3e:a8:db:af:a4:da:21:f4: 9b:bb:86:bf:1c:d5:93:2a:94:9e:d2:0b:57:65:2c:d5:8c:28: 8a:33:9b:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKEI0ODNEQTA1RjgxMDhGQUQ1NkI5NjdBREFERDI1MUM2 Qzk2OUMyNTIwHhcNMjYwMzI0MTgzMjE5WhcNMjYwMzMxMTgzMjE5WjAYMRYwFAYD VQQDEw02OWMyZDhiMy01NDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo67vP0fWezFalTHUqLybPIjF1/1Lx7tEDOSM1FdewSdEOsL0Ghh1EiQUs+7Z qMBoNqVojjPTRFTXz8v/zuycpzm4X9ft/dvko/XzdQC793qcY1PSB58qDQtiKKVR 3nvc8Vo8MxUM3nU9T/mtcqtgvG4sNf1zliVwkp/oOGSqQ9RFvtI4eJdIz5KITI6e ePMx9itHF4l15xB07mxL5eS2LBL44VF5nUOJN1grjd0cc7HG0fyYISNGOprCa4Hc 10Z6Ec/Rv6CU+9RefwANAvEAjhv1CPl/DNs7+i9tDxoUSti/jS5Itg5RgZmfKljX a/m6Njupxf+ZSsZz+JXOx13kPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFF2aVqS fFqaBg4ygOtyp4mIWxZvMB8GA1UdIwQYMBaAFLSD2gX4EI+tVrlnra3SUcbJacJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9CRjBBMUU5QUYw QjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2MVd1V2V0cmRKUnhzbHB3 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJUGFCZmdRajYxV3VXZXRyZEpSeHNscHdsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9CRjBBMUU5QUYwQjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2 MVd1V2V0cmRKUnhzbHB3bEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV4HFljApbLATWVnekUAubP3wZH6jMwekej8XvZr0Evtp6aBye9pnNrPetOSY gJMOCmWJ8ShQmyStrPzSJLZmdYS3g4fkIGGVUHLH06/W70oVaNlRWqgn52v8FKzA k23oeffZTQkpCzO7BWP0SooQWYgfmXB/N/natX3Ta2OTDRtBl6DdbImh+OJF23aq qFfzOBK8nHDPN+ZzWjYup1CqnKDXP2JaeVGxkntf1GaFqEZGqUklc2YZ1zrA7zoi yqA8plYSvniFtevDEMutUI2enj7VSbRyoWe1G9cNGXfrI6eSPT6o26+k2iH0m7uG vxzVkyqUntILV2Us1YwoijObEA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:12 2026 by rpki-client