$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft File: TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json) Hash identifier: xSh6EdeDkZrQhe5h/9XCT/DctaoLUNtAqpWcE5D4tlE= Subject key identifier: 18:F4:CB:F1:92:D2:C8:16:3A:92:CA:88:B5:E7:EA:4C:F3:A5:D5:FD Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Certificate serial: 12D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft Manifest number: 12A2 Signing time: Tue 24 Mar 2026 16:58:58 +0000 Manifest this update: Tue 24 Mar 2026 16:58:57 +0000 Manifest next update: Tue 31 Mar 2026 16:58:57 +0000 Files and hashes: 1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: qvh/sAN0bP5A1pRi746WNeOmwJek136YMU+RLiWqAFA=) 2: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: fUnieuKGRfhpE+Lz8PCCLJf7auq8OeVHTUwkbpXOHlE=) 3: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: nGmrk75hjjNspdHTnqN5pAy+8NliHl9wTZrwy/pzAmc=) 4: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: sP6w/LId+6M+COp8Ti1I1MShOWfiHqnxXasWzw0bwpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4822 (0x12d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Validity Not Before: Mar 24 16:58:57 2026 GMT Not After : Mar 31 16:58:57 2026 GMT Subject: CN=69c2c2d2-3530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:74:52:13:95:9a:5a:37:07:85:f8:78:67:25: 70:76:70:9b:1f:6a:a6:11:32:5d:5c:9b:9f:4b:f4: fa:06:4f:0d:39:2d:92:37:d9:f4:13:72:5b:4b:68: 11:f5:e8:32:fd:4e:03:0b:85:df:94:23:c9:55:17: d9:fe:4b:1a:b6:35:1f:ba:00:64:dd:ab:05:88:90: e7:f8:68:60:c5:c3:fb:69:65:ab:2d:e2:18:ed:31: 08:eb:d8:a1:bf:fa:e9:4c:16:77:c8:58:a3:5a:8a: 5d:76:ef:a3:ee:8c:c1:8e:11:c2:1c:65:f3:27:76: d7:29:ef:da:c3:57:46:ce:34:44:7d:d7:c2:47:76: 2b:75:bb:2b:96:f2:ba:bf:53:b2:45:20:21:e9:0b: e1:20:57:e5:82:42:92:1e:d5:40:fd:bd:d7:eb:d2: 41:87:46:a0:1b:5b:76:fc:11:b7:cb:f6:29:43:a5: 92:57:c7:cc:6d:13:24:5c:ad:a9:45:3e:d1:d4:ba: 8c:82:5c:b1:d0:c2:fe:e8:00:4e:5c:80:fa:85:eb: af:d5:c5:1f:84:53:55:5f:74:db:c2:68:22:91:f9: a7:82:d9:52:5d:19:0f:58:ef:b9:ca:ca:77:b6:65: 07:43:39:1d:51:0c:2b:a5:34:af:b9:bb:59:35:bd: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F4:CB:F1:92:D2:C8:16:3A:92:CA:88:B5:E7:EA:4C:F3:A5:D5:FD X509v3 Authority Key Identifier: keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:69:c6:f4:57:a0:db:98:3e:a7:ee:ed:3a:36:8e:3d:d4:28: ab:d6:48:f2:0c:05:19:5a:72:e3:e9:a5:14:dd:57:c6:66:64: e6:f2:8a:02:e7:59:87:d1:44:fa:68:91:54:64:c7:ba:8a:f3: 20:de:fa:84:95:00:62:a2:41:83:ff:94:2b:b0:49:9b:2c:3d: c0:51:a4:03:6c:d2:77:f7:9c:df:2b:c1:78:19:32:4e:1a:8c: 43:60:62:bb:d1:2a:b0:35:49:1b:64:52:3b:21:46:e3:84:b9: 93:d1:14:eb:f2:72:93:af:77:b8:01:07:c2:a1:8a:6b:2d:e7: 33:6f:60:99:07:33:c0:8d:fb:d6:2b:26:9f:94:9a:a6:1d:51: 83:33:55:98:89:ab:5e:00:9a:24:fa:c6:d4:d0:4a:2f:b5:bf: bc:f0:64:9a:e6:97:72:d5:4a:b5:74:2c:28:b8:63:7f:c2:05: b4:08:15:69:7a:c8:58:4a:22:ae:ea:0a:41:65:c4:46:90:a4: 30:47:16:32:db:fe:17:e8:51:bb:cc:74:23:c9:14:19:a2:4c: e2:ad:62:5e:a3:28:a3:78:4b:c8:bf:d0:38:ba:33:0d:4e:eb: 74:b4:e2:22:bb:34:37:97:f9:89:90:27:00:df:3a:cc:0b:01: cb:30:b0:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB NzNDQjQ4MTIwHhcNMjYwMzI0MTY1ODU3WhcNMjYwMzMxMTY1ODU3WjAYMRYwFAYD VQQDEw02OWMyYzJkMi0zNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+XRSE5WaWjcHhfh4ZyVwdnCbH2qmETJdXJufS/T6Bk8NOS2SN9n0E3JbS2gR 9egy/U4DC4XflCPJVRfZ/ksatjUfugBk3asFiJDn+GhgxcP7aWWrLeIY7TEI69ih v/rpTBZ3yFijWopddu+j7ozBjhHCHGXzJ3bXKe/aw1dGzjREfdfCR3YrdbsrlvK6 v1OyRSAh6QvhIFflgkKSHtVA/b3X69JBh0agG1t2/BG3y/YpQ6WSV8fMbRMkXK2p RT7R1LqMglyx0ML+6ABOXID6heuv1cUfhFNVX3TbwmgikfmngtlSXRkPWO+5ysp3 tmUHQzkdUQwrpTSvubtZNb0yWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBj0y/GS 0sgWOpLKiLXn6kzzpdX9MB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5 QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QThBNC83OTBFNjEwQ0U5QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJs YVYwM3AteTQzTE9uUExTQkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxWnG9Feg25g+p+7tOjaOPdQoq9ZI8gwFGVpy4+mlFN1XxmZk5vKKAudZh9FE +miRVGTHuorzIN76hJUAYqJBg/+UK7BJmyw9wFGkA2zSd/ec3yvBeBkyThqMQ2Bi u9EqsDVJG2RSOyFG44S5k9EU6/Jyk693uAEHwqGKay3nM29gmQczwI371ismn5Sa ph1RgzNVmImrXgCaJPrG1NBKL7W/vPBkmuaXctVKtXQsKLhjf8IFtAgVaXrIWEoi ruoKQWXERpCkMEcWMtv+F+hRu8x0I8kUGaJM4q1iXqMoo3hLyL/QOLozDU7rdLTi Irs0N5f5iZAnAN86zAsByzCwWw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:16 2026 by rpki-client