$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft File: tljvayeSnHt_X7Jsue5qQSzoXdQ.mft (raw, json) Hash identifier: wBE5613vMWoCZQyaod7yVlAJi20IBmop6ENBmW7Zgh0= Subject key identifier: 4F:C3:E2:AE:2F:F8:D5:C3:18:E2:ED:39:AE:B2:EF:EF:08:31:5D:76 Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 Certificate issuer: /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft Manifest number: 0836 Signing time: Tue 24 Mar 2026 20:41:52 +0000 Manifest this update: Tue 24 Mar 2026 20:41:51 +0000 Manifest next update: Tue 31 Mar 2026 20:41:51 +0000 Files and hashes: 1: tljvayeSnHt_X7Jsue5qQSzoXdQ.crl (hash: 4yMMEsfl9Tyj6cVY2w+Uv3AuoVy3xtDWsKFbIqnsNgQ=) 2: EFC0CAB2F81111EEB4681B75C4F9AE02.roa (hash: BTeoFCLWLpJ86fj7WEbev+ObD3ksVZlkHRSpsEYdtlo=) 3: 0886DE60D4D311ECBE99375AC4F9AE02.roa (hash: Q+M0wOPGgg1Hskurs4am6L9I8fPJGpOHtrzr/zGhOeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072, serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4 Validity Not Before: Mar 24 20:41:51 2026 GMT Not After : Mar 31 20:41:51 2026 GMT Subject: CN=69c2f710-187e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:97:92:27:f6:27:a4:ae:d6:c5:01:71:91: 51:48:dd:79:4a:ec:32:84:fd:4a:a1:b6:1a:3d:30: 6c:6c:93:65:b6:d0:1a:06:41:41:32:d3:81:6a:4b: 95:90:5a:cf:87:cf:31:17:ad:c2:e5:83:a5:b6:a1: 40:ce:2d:49:ef:0e:ac:81:44:f7:2e:4f:91:cc:4d: 50:cb:f4:ba:68:94:c1:f5:5d:31:a5:4b:0b:ca:87: 63:af:f2:2b:66:17:21:fc:29:c3:29:47:1f:cd:62: 91:70:c3:f7:45:74:8c:9d:0c:f9:a9:29:a6:34:7b: 5e:97:4c:99:cc:ca:6c:66:fb:fb:04:1c:56:7e:22: 0d:f0:b0:c1:50:c6:5e:d7:59:51:fe:1b:5a:7b:d8: 42:5e:19:b7:07:81:fa:38:8f:45:d1:c6:d9:bd:b8: 7a:b1:39:9b:6b:86:70:b1:f6:3e:59:66:59:0b:65: 46:ea:82:19:fd:84:e8:bd:b4:c9:63:e9:0a:46:51: ba:2f:fc:59:9d:e1:1e:30:f8:30:b6:6b:07:8f:30: 13:fe:59:d0:5b:7c:0e:63:8b:27:42:63:29:30:28: 35:ee:f2:8f:d8:62:29:bc:1b:b4:14:51:27:33:75: 7e:f0:c6:27:6a:c6:d9:be:d1:03:d6:f7:30:02:7e: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C3:E2:AE:2F:F8:D5:C3:18:E2:ED:39:AE:B2:EF:EF:08:31:5D:76 X509v3 Authority Key Identifier: keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:60:d5:e9:df:10:e6:60:72:c6:06:f6:52:1a:a7:cd:ab:2e: 9b:b5:dd:9a:50:a9:58:7e:4e:1e:a9:ca:26:37:76:a7:c0:5f: f3:56:4c:d0:33:54:53:1c:33:6a:85:5e:77:b7:37:d4:8d:da: a6:8f:37:af:46:e2:05:b4:62:5c:ab:ed:17:06:4b:30:65:59: e3:1f:99:49:15:e4:50:4d:47:47:90:a5:51:88:90:da:c5:ea: 1e:68:26:c7:fd:14:7a:f9:69:75:d1:12:87:3c:90:aa:37:b7: 5d:3f:8b:64:ce:ce:19:ed:8b:1f:dd:62:ef:af:19:82:a3:98: 44:a7:99:72:01:e2:d7:f2:b1:f4:03:7c:78:42:f3:49:17:06: 4b:e1:e0:08:ae:e0:c5:6e:0c:ce:75:0f:87:de:de:a2:de:a9: 3f:5f:0f:15:f4:a1:dd:ae:e3:1e:93:89:91:fa:92:72:9a:d1: 76:d6:d8:ea:e5:10:22:b4:42:25:c2:d0:f6:f0:e7:8c:dd:90: f5:91:91:b9:61:fe:1a:b0:bf:38:a1:10:e5:4a:8e:7b:bc:db: df:c8:9e:8c:6a:40:29:dd:67:dc:17:c7:ed:6c:90:65:de:8f: 4c:7e:1c:23:0a:41:e2:77:67:26:8d:a3:e1:42:60:c3:d5:8f: 9b:b1:f7:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEI2NThFRjZCMjc5MjlDN0I3RjVGQjI2Q0I5RUU2QTQx MkNFODVERDQwHhcNMjYwMzI0MjA0MTUxWhcNMjYwMzMxMjA0MTUxWjAYMRYwFAYD VQQDEw02OWMyZjcxMC0xODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYWXkif2J6Su1sUBcZFRSN15SuwyhP1KobYaPTBsbJNlttAaBkFBMtOBakuV kFrPh88xF63C5YOltqFAzi1J7w6sgUT3Lk+RzE1Qy/S6aJTB9V0xpUsLyodjr/Ir Zhch/CnDKUcfzWKRcMP3RXSMnQz5qSmmNHtel0yZzMpsZvv7BBxWfiIN8LDBUMZe 11lR/htae9hCXhm3B4H6OI9F0cbZvbh6sTmba4ZwsfY+WWZZC2VG6oIZ/YTovbTJ Y+kKRlG6L/xZneEeMPgwtmsHjzAT/lnQW3wOY4snQmMpMCg17vKP2GIpvBu0FFEn M3V+8MYnasbZvtED1vcwAn4KPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/D4q4v +NXDGOLtOa6y7+8IMV12MB8GA1UdIwQYMBaAFLZY72snkpx7f1+ybLnuakEs6F3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wNjlBMDZFNjBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25IdF9YN0pzdWU1cVFTem9Y ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RsanZheWVTbkh0X1g3SnN1ZTVxUVN6b1hkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA3Mi8wNjlBMDZFNjBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25I dF9YN0pzdWU1cVFTem9YZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADGDV6d8Q5mByxgb2Uhqnzasum7XdmlCpWH5OHqnKJjd2p8Bf81ZM0DNUUxwz aoVed7c31I3apo83r0biBbRiXKvtFwZLMGVZ4x+ZSRXkUE1HR5ClUYiQ2sXqHmgm x/0UevlpddEShzyQqje3XT+LZM7OGe2LH91i768ZgqOYRKeZcgHi1/Kx9AN8eELz SRcGS+HgCK7gxW4MznUPh97eot6pP18PFfSh3a7jHpOJkfqScprRdtbY6uUQIrRC JcLQ9vDnjN2Q9ZGRuWH+GrC/OKEQ5UqOe7zb38iejGpAKd1n3BfH7WyQZd6PTH4c IwpB4ndnJo2j4UJgw9WPm7H3qA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:54 2026 by rpki-client