$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: BIQ8MAqEHTPQTmD/2eoQMFAtsn8+nuwTKWqU89PnNfw= Subject key identifier: C3:6C:44:98:FC:7A:9E:B6:11:92:1F:10:85:69:48:E4:98:3C:A5:5C Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 086B Signing time: Tue 24 Mar 2026 20:23:49 +0000 Manifest this update: Tue 24 Mar 2026 20:23:48 +0000 Manifest next update: Tue 31 Mar 2026 20:23:48 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: 4N7hbm++I3Gm319MNOcYnIMklbjBSRNyGep//O/JL5k=) 2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: olzU9jiah+vCL2TYo6oua28ch8EeQcQTF/v3T6cuGv0=) 3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: O/7YA16zUHlRs4EqhBTZvR5d/9Wf8oxzD6m86xewXDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Mar 24 20:23:48 2026 GMT Not After : Mar 31 20:23:48 2026 GMT Subject: CN=69c2f2d4-8a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:82:06:a5:f2:4e:04:44:81:03:6a:9a:76: e7:71:a5:74:e6:b4:c5:fe:fb:81:e9:55:fe:93:65: b6:e5:bc:d0:3b:18:77:e9:1c:db:2b:9d:30:a5:af: d5:94:32:09:06:43:71:cd:24:fa:13:4c:a6:b9:cb: 6e:3b:d0:19:bd:4c:97:75:7d:13:b2:05:76:69:cb: bb:f2:b7:49:3d:e3:82:09:37:a1:24:d1:7b:5e:f2: 9e:fc:c0:08:f5:11:4a:5f:93:bb:76:9c:42:1d:b4: fe:4b:13:52:ce:dc:1f:0b:18:05:21:bc:1c:a8:ea: 4b:d7:0d:ab:55:9d:7c:c4:20:52:72:2b:a8:7a:e9: e3:e7:3c:ae:2b:63:7d:6c:e8:ba:1a:22:e8:f1:a6: 71:fa:b1:a7:0b:b6:ed:1c:75:cb:27:e9:34:34:8d: cb:22:43:3f:b6:e0:2b:1d:d5:fb:83:68:b8:f9:31: 5c:64:f7:50:b9:ea:47:d8:10:94:06:7a:f8:3a:d5: d4:0d:8f:18:ef:5d:b7:64:3f:3a:2c:b4:d7:58:47: 63:64:00:8b:d3:91:c2:28:8d:52:aa:77:20:e1:82: 9a:51:42:e5:6d:33:65:e2:36:64:a9:5a:92:fb:4f: 41:2a:01:0d:af:97:f1:17:14:71:5a:7f:1f:d2:01: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6C:44:98:FC:7A:9E:B6:11:92:1F:10:85:69:48:E4:98:3C:A5:5C X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:50:7a:22:4b:f8:d2:ae:06:6a:5f:6f:74:2a:97:95:09:53: 7b:d7:11:a4:b5:1c:73:00:9e:b5:7e:c8:4d:79:e2:53:a0:30: 8e:22:33:ef:08:d9:62:26:6e:64:28:9d:35:c2:65:31:33:82: db:b9:f8:60:e3:46:1a:52:cc:a8:11:87:ba:6e:49:26:44:16: 5d:1d:ad:d3:dd:bd:1a:d3:5f:f2:33:4b:bb:89:b6:bd:07:95: 95:10:f1:c4:fd:aa:a2:00:4a:a6:7b:f1:f1:22:f7:ae:8b:6a: d6:49:33:78:83:19:f5:69:95:6e:14:1d:03:7d:6e:d8:30:be: 97:00:73:a2:ed:72:31:0b:4f:0e:76:9b:0e:e5:ed:7f:bc:11: ae:94:df:9b:df:29:6b:49:b9:ad:92:b7:f5:b0:80:37:cc:d6: 39:c9:47:18:4b:dc:4c:79:57:cb:b7:6c:f9:dd:6c:52:ec:4c: 4e:11:f1:48:f9:07:bb:06:0f:e2:91:99:90:38:a5:a1:74:fc: 6f:64:b8:0c:a3:c9:b8:6c:3e:3f:08:83:b1:5a:78:f3:e8:82: 4c:37:48:1c:73:19:5d:36:f4:8b:29:46:20:77:24:1b:c9:2e: e0:af:68:63:db:b0:d6:db:5c:70:7e:bd:d7:70:b4:ed:2c:d1: 09:6a:91:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjYwMzI0MjAyMzQ4WhcNMjYwMzMxMjAyMzQ4WjAYMRYwFAYD VQQDEw02OWMyZjJkNC04YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg5OCBqXyTgREgQNqmnbncaV05rTF/vuB6VX+k2W25bzQOxh36RzbK50wpa/V lDIJBkNxzST6E0ymuctuO9AZvUyXdX0TsgV2acu78rdJPeOCCTehJNF7XvKe/MAI 9RFKX5O7dpxCHbT+SxNSztwfCxgFIbwcqOpL1w2rVZ18xCBSciuoeunj5zyuK2N9 bOi6GiLo8aZx+rGnC7btHHXLJ+k0NI3LIkM/tuArHdX7g2i4+TFcZPdQuepH2BCU Bnr4OtXUDY8Y7123ZD86LLTXWEdjZACL05HCKI1Sqncg4YKaUULlbTNl4jZkqVqS +09BKgENr5fxFxRxWn8f0gG66wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNsRJj8 ep62EZIfEIVpSOSYPKVcMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACFB6Ikv40q4Gal9vdCqXlQlTe9cRpLUccwCetX7ITXniU6AwjiIz7wjZYiZu ZCidNcJlMTOC27n4YONGGlLMqBGHum5JJkQWXR2t0929GtNf8jNLu4m2vQeVlRDx xP2qogBKpnvx8SL3rotq1kkzeIMZ9WmVbhQdA31u2DC+lwBzou1yMQtPDnabDuXt f7wRrpTfm98pa0m5rZK39bCAN8zWOclHGEvcTHlXy7ds+d1sUuxMThHxSPkHuwYP 4pGZkDiloXT8b2S4DKPJuGw+PwiDsVp48+iCTDdIHHMZXTb0iylGIHckG8ku4K9o Y9uw1ttccH6913C07SzRCWqR6A== -----END CERTIFICATE-----Generated at Thu Mar 26 10:03:31 2026 by rpki-client