$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: AWXM5H7AMTdAg95fx66h6nIvum2G7j36KhE8Rpc5HnQ= Subject key identifier: E3:9D:99:04:24:D6:FE:C2:7E:D9:94:73:85:DB:07:82:8D:FE:F7:35 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 0368 Signing time: Wed 25 Mar 2026 00:33:02 +0000 Manifest this update: Wed 25 Mar 2026 00:33:02 +0000 Manifest next update: Wed 01 Apr 2026 00:33:02 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: opQZ81gvMW+1a4ScuaVMlxBcnQCjneDkaLJwPp55ZPY=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: bL7OIrkXDLMggpL9N/pxg/g9qzrZatjb01uzVRx5kqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Mar 25 00:33:02 2026 GMT Not After : Apr 1 00:33:02 2026 GMT Subject: CN=69c32d3e-f9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bd:5e:b1:14:0e:c3:ce:0f:07:b6:6f:49:13: b0:42:c5:8f:16:38:38:f7:b0:9c:bd:e9:e5:87:1d: e6:28:63:d0:c2:dc:32:8e:43:93:71:73:63:b1:a3: a2:1f:d0:d5:07:d5:8e:28:69:c8:da:4e:0c:da:eb: ec:6b:a8:0f:bc:66:25:25:0d:ff:05:22:cf:19:4b: 29:b9:1e:41:d3:65:3e:ec:56:37:84:37:e4:7c:1d: 0b:2b:86:4d:4a:56:37:5e:3b:6a:c1:cc:2f:7d:de: 41:da:63:b4:74:bd:66:d7:b9:62:03:6f:bb:4b:a6: 67:27:70:3e:b6:6a:12:58:cb:ab:2a:44:9c:de:72: 7b:67:47:76:24:b3:41:42:47:5e:92:04:70:95:54: e5:15:d7:e6:5f:4b:aa:cf:ad:34:f3:63:69:f0:7c: 8f:b0:6d:79:7f:df:e8:49:08:14:7e:c7:e8:88:30: 71:f2:7a:94:02:7e:a5:e2:f0:46:16:d0:af:6b:65: 15:ca:c7:4a:99:36:74:7f:d6:ff:63:c6:d2:f9:dc: 26:d0:e7:7b:e4:08:b5:30:66:3d:64:3d:30:3d:78: bb:44:e8:8a:91:97:15:6c:ca:90:21:03:5b:f0:f3: ca:88:4c:c5:46:44:06:3d:59:32:36:96:4d:a1:fc: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9D:99:04:24:D6:FE:C2:7E:D9:94:73:85:DB:07:82:8D:FE:F7:35 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1a:f6:06:97:53:68:e0:6c:25:49:96:f6:95:4a:16:6d:d1: e3:11:e3:be:22:e9:fb:f8:34:64:6b:44:57:f9:a7:a9:f1:f5: 89:a0:1b:70:9a:91:65:85:a1:4b:d1:8f:63:ba:98:23:21:29: ee:a7:1c:d2:6e:f0:53:41:69:3b:9b:50:3c:a5:6d:96:25:fd: fb:c1:ad:12:06:e5:bd:8a:ee:5b:6c:9c:10:ff:2f:26:c3:21: fc:a3:ba:bd:80:be:48:a7:dd:b7:7d:a5:63:e2:ea:34:4f:8b: b4:87:36:79:2c:54:73:29:76:99:f7:71:18:45:bb:b3:b9:2e: 95:a6:55:cc:2d:48:09:76:ea:f6:3b:75:09:24:18:db:32:28: 49:8f:64:a9:a5:f6:55:f3:44:05:1c:a2:e3:09:35:c2:dd:76: d1:fb:23:30:09:a6:cb:b8:2d:4f:1a:d5:a4:00:4d:8d:bb:2a: 93:e9:fe:c7:8b:b1:70:19:2c:63:20:95:df:2c:e2:82:64:e6: a1:38:15:43:d9:0f:bd:2f:3a:5e:97:97:46:2e:05:2c:50:cd: 92:9c:e0:09:58:1c:f4:f1:dc:c1:19:a4:1f:4f:a3:3f:00:92: 37:aa:31:68:da:6f:73:bc:8a:f5:05:10:82:cb:ef:07:75:cb: 66:4e:c9:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjYwMzI1MDAzMzAyWhcNMjYwNDAxMDAzMzAyWjAYMRYwFAYD VQQDEw02OWMzMmQzZS1mOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA371esRQOw84PB7ZvSROwQsWPFjg497Ccvenlhx3mKGPQwtwyjkOTcXNjsaOi H9DVB9WOKGnI2k4M2uvsa6gPvGYlJQ3/BSLPGUspuR5B02U+7FY3hDfkfB0LK4ZN SlY3Xjtqwcwvfd5B2mO0dL1m17liA2+7S6ZnJ3A+tmoSWMurKkSc3nJ7Z0d2JLNB QkdekgRwlVTlFdfmX0uqz60082Np8HyPsG15f9/oSQgUfsfoiDBx8nqUAn6l4vBG FtCva2UVysdKmTZ0f9b/Y8bS+dwm0Od75Ai1MGY9ZD0wPXi7ROiKkZcVbMqQIQNb 8PPKiEzFRkQGPVkyNpZNofwyeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOdmQQk 1v7CftmUc4XbB4KN/vc1MB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABhr2BpdTaOBsJUmW9pVKFm3R4xHjviLp+/g0ZGtEV/mnqfH1iaAbcJqRZYWh S9GPY7qYIyEp7qcc0m7wU0FpO5tQPKVtliX9+8GtEgblvYruW2ycEP8vJsMh/KO6 vYC+SKfdt32lY+LqNE+LtIc2eSxUcyl2mfdxGEW7s7kulaZVzC1ICXbq9jt1CSQY 2zIoSY9kqaX2VfNEBRyi4wk1wt120fsjMAmmy7gtTxrVpABNjbsqk+n+x4uxcBks YyCV3yzigmTmoTgVQ9kPvS86XpeXRi4FLFDNkpzgCVgc9PHcwRmkH0+jPwCSN6ox aNpvc7yK9QUQgsvvB3XLZk7Jog== -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:48 2026 by rpki-client