$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: i4d+ymxgM40dSJU0RzxxgYtBLkdaugmHDTZCEozxUAk= Subject key identifier: 19:1A:98:29:FE:73:19:7F:6A:21:C4:EF:EA:FA:BD:BB:C8:F7:38:1F Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 088C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 0884 Signing time: Tue 12 May 2026 20:38:54 +0000 Manifest this update: Tue 12 May 2026 20:38:54 +0000 Manifest next update: Tue 19 May 2026 20:38:54 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: t1+NdRoPSKrvpXpMQiO40hBJt30KR5xrX67y/rdtiO8=) 2: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: O/7YA16zUHlRs4EqhBTZvR5d/9Wf8oxzD6m86xewXDU=) 3: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: olzU9jiah+vCL2TYo6oua28ch8EeQcQTF/v3T6cuGv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2188 (0x88c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: May 12 20:38:54 2026 GMT Not After : May 19 20:38:54 2026 GMT Subject: CN=6a038fde-b0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:1c:ac:30:08:0e:11:fb:55:bb:2c:b0:af: b7:41:a9:f6:5c:11:c8:1c:22:f7:04:ce:95:02:23: c2:6f:d1:99:e6:92:8c:69:f0:ff:ae:60:c8:ab:82: bc:93:5b:12:8b:54:9e:9b:db:ec:3f:7c:58:07:c7: f8:61:77:07:12:bd:76:a8:24:d6:d4:03:4a:1b:53: 41:b4:df:9e:45:2f:76:eb:e6:34:89:12:e9:da:c4: 9f:43:fd:8d:6d:c8:48:4b:34:1c:1a:7c:61:e3:c0: f2:ac:ab:bf:9e:dc:cb:fb:c0:25:30:40:16:89:c7: 71:89:82:52:5c:e1:f0:09:a0:75:b6:1c:93:c9:a4: 77:b6:f5:12:87:e9:0b:57:4d:3e:00:d2:5e:11:45: 71:c8:69:d5:bb:c6:35:df:a3:7e:74:9d:7b:d0:94: e0:76:d4:81:c2:7a:33:fe:8c:83:6c:b3:42:db:47: 6d:9f:43:48:1c:d2:2a:3b:6c:7d:db:3a:41:67:27: 94:59:bf:6d:1d:a1:ac:1b:d8:83:d3:ee:ba:64:b7: 08:30:a5:4b:f4:12:21:06:29:ab:e0:90:3e:cf:0c: a8:3a:e4:79:9b:95:c6:27:c9:a3:6e:5e:13:1c:7d: 9e:c3:d9:02:57:f6:a0:d2:b3:60:b4:0f:af:09:36: 0e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1A:98:29:FE:73:19:7F:6A:21:C4:EF:EA:FA:BD:BB:C8:F7:38:1F X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c8:74:f9:a6:1c:91:05:34:9f:46:d1:93:83:f1:78:78:e1: 1e:41:18:99:e7:21:b7:f6:5e:75:c2:4d:de:d1:1f:31:5a:58: 45:fc:63:59:22:1d:df:75:5c:32:5a:b9:e7:1a:b9:f5:12:44: 0d:87:5b:10:88:5d:74:db:9a:8c:0e:9a:8f:7f:6e:27:94:75: cf:49:46:0f:25:1a:8c:31:a3:f5:6e:43:dc:04:45:f5:62:87: dd:10:c6:e4:66:b2:5f:19:90:6e:ab:44:4b:5a:f0:08:0f:4f: 63:94:42:c9:d5:5d:ab:32:72:b8:a9:89:d8:46:9a:c0:bc:fe: fb:16:70:5d:65:cd:42:d2:aa:2b:65:fb:97:00:21:d3:72:c4: ac:16:a5:64:b3:21:b9:a6:d5:ac:72:27:96:59:82:b7:55:27: 96:18:88:4c:68:dd:42:0f:7e:0f:89:29:2f:d9:b4:ed:89:28: 35:ab:d0:44:4d:38:8a:e3:66:38:2f:41:2d:37:fd:13:94:66: 18:22:11:ae:3b:bd:60:e0:25:d8:cc:6a:59:66:b9:36:75:d7: 7e:40:aa:85:c8:2d:8d:c5:13:84:a5:08:be:5c:f6:14:1c:b8: 3b:97:50:e5:20:bf:59:44:4f:a4:37:b5:e2:8b:32:fd:45:a3: 72:23:dc:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjYwNTEyMjAzODU0WhcNMjYwNTE5MjAzODU0WjAYMRYwFAYD VQQDEw02YTAzOGZkZS1iMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPkcrDAIDhH7VbsssK+3Qan2XBHIHCL3BM6VAiPCb9GZ5pKMafD/rmDIq4K8 k1sSi1Sem9vsP3xYB8f4YXcHEr12qCTW1ANKG1NBtN+eRS926+Y0iRLp2sSfQ/2N bchISzQcGnxh48DyrKu/ntzL+8AlMEAWicdxiYJSXOHwCaB1thyTyaR3tvUSh+kL V00+ANJeEUVxyGnVu8Y136N+dJ170JTgdtSBwnoz/oyDbLNC20dtn0NIHNIqO2x9 2zpBZyeUWb9tHaGsG9iD0+66ZLcIMKVL9BIhBimr4JA+zwyoOuR5m5XGJ8mjbl4T HH2ew9kCV/ag0rNgtA+vCTYO8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkamCn+ cxl/aiHE7+r6vbvI9zgfMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADch0+aYckQU0n0bRk4PxeHjhHkEYmecht/ZedcJN3tEfMVpYRfxjWSId33Vc Mlq55xq59RJEDYdbEIhddNuajA6aj39uJ5R1z0lGDyUajDGj9W5D3ARF9WKH3RDG 5GayXxmQbqtES1rwCA9PY5RCydVdqzJyuKmJ2EaawLz++xZwXWXNQtKqK2X7lwAh 03LErBalZLMhuabVrHInllmCt1UnlhiITGjdQg9+D4kpL9m07YkoNavQRE04iuNm OC9BLTf9E5RmGCIRrju9YOAl2MxqWWa5NnXXfkCqhcgtjcUThKUIvlz2FBy4O5dQ 5SC/WURPpDe14osy/UWjciPcjw== -----END CERTIFICATE-----Generated at Wed May 13 09:00:45 2026 by rpki-client