$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: EzJ54bCe8pF4v4D78CVCZm+Vc9ngVR7bbnC7QN87du8= Subject key identifier: EF:AE:65:E2:DE:49:B5:7B:E4:6B:C6:F1:47:85:3B:D7:47:16:BD:91 Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: 01A3 Signing time: Wed 25 Mar 2026 03:28:21 +0000 Manifest this update: Wed 25 Mar 2026 03:28:21 +0000 Manifest next update: Wed 01 Apr 2026 03:28:21 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: TCi+JlHpVrmIRbeNKzmJNBZ0y48U38aZhouglxSa6is=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: jidjPqjhwiib65keCcPhREH4tf4UiXEekkUxxTfAB2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: Mar 25 03:28:21 2026 GMT Not After : Apr 1 03:28:21 2026 GMT Subject: CN=69c35655-b82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:92:f8:41:33:95:1d:48:d6:8c:15:4d:f4: 5c:e7:9b:fa:f3:46:cd:5c:ba:b0:3d:26:1b:a7:6a: d8:ed:57:22:5f:2b:62:e3:a2:2d:0a:a0:db:97:e0: d5:22:31:f2:18:4a:ce:20:7e:73:8a:4c:c1:03:07: 4f:15:f1:3c:be:46:68:31:fe:c7:7d:cf:82:0d:49: 30:4d:a1:5c:9d:0e:84:c6:b8:85:78:ed:44:0e:0b: da:3f:4f:18:53:35:a7:aa:6e:a4:a0:34:b3:48:90: 0f:95:d8:dc:7a:e1:30:88:8f:25:85:35:b0:83:fe: 48:6e:1c:ef:05:94:30:f4:00:96:fe:d1:4e:32:6f: 4c:25:c5:86:c1:6d:23:53:16:3e:28:45:05:88:83: cc:1b:58:00:36:60:e0:a8:9c:82:cc:b9:c9:0b:b9: 53:88:83:ac:e5:d9:f8:8b:32:64:e5:e1:44:f2:eb: 4b:cb:db:e2:cc:cf:c8:b7:bb:9f:35:40:43:93:aa: 4a:df:0a:84:29:84:4b:57:84:66:f7:76:5c:de:bd: 23:9e:0f:7c:01:38:d8:35:70:b3:da:ad:68:be:bb: 41:b3:05:07:d7:53:64:ea:8a:e5:22:4a:5d:c7:89: 6c:33:b9:4f:6e:68:d2:d8:7b:e3:aa:ac:c7:e1:76: 09:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AE:65:E2:DE:49:B5:7B:E4:6B:C6:F1:47:85:3B:D7:47:16:BD:91 X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:76:2b:48:00:ab:8f:61:18:82:1d:a8:26:7b:57:e3:90:83: ad:16:6d:f3:e4:3d:59:79:c8:fd:18:c1:c7:77:23:c3:88:dd: 13:6c:c0:65:d5:ee:d5:5f:10:da:d0:23:7e:99:85:52:3c:89: 1b:8a:e4:16:65:fe:b5:c6:53:4e:6f:f6:4b:be:86:83:67:b9: 49:34:66:8c:21:61:ac:1c:78:ba:97:24:9f:90:73:b3:f9:bb: f2:e0:5c:16:e1:76:3f:5d:db:4f:29:0d:46:14:e2:35:ee:f5: ec:9e:cf:35:85:01:64:5a:da:77:a4:be:50:1e:1d:d3:29:52: 95:06:2e:a9:f3:6f:66:a8:de:9e:36:20:a2:d5:93:e5:31:21: b0:d0:85:5b:a4:d9:b2:4d:ff:9c:de:e2:d3:9d:89:51:4a:a9: 6e:24:6b:55:58:fb:41:e1:7d:fe:32:ad:eb:da:95:b7:a6:15: 75:22:2f:b9:ff:fa:01:1b:94:15:44:2a:74:ab:1f:c1:e0:71: c4:f9:c4:7f:6a:0e:f9:21:d2:2f:cf:d0:60:7f:fd:34:55:fb: 28:73:12:f7:09:ab:93:87:a0:8a:f0:c3:92:f7:dd:61:25:4b: c3:76:54:5a:d9:32:99:9e:5d:ac:c0:7b:6e:6e:cb:f6:d8:42: 02:48:93:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjYwMzI1MDMyODIxWhcNMjYwNDAxMDMyODIxWjAYMRYwFAYD VQQDEw02OWMzNTY1NS1iODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAktSS+EEzlR1I1owVTfRc55v680bNXLqwPSYbp2rY7VciXyti46ItCqDbl+DV IjHyGErOIH5zikzBAwdPFfE8vkZoMf7Hfc+CDUkwTaFcnQ6ExriFeO1EDgvaP08Y UzWnqm6koDSzSJAPldjceuEwiI8lhTWwg/5IbhzvBZQw9ACW/tFOMm9MJcWGwW0j UxY+KEUFiIPMG1gANmDgqJyCzLnJC7lTiIOs5dn4izJk5eFE8utLy9vizM/It7uf NUBDk6pK3wqEKYRLV4Rm93Zc3r0jng98ATjYNXCz2q1ovrtBswUH11Nk6orlIkpd x4lsM7lPbmjS2HvjqqzH4XYJjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+uZeLe SbV75GvG8UeFO9dHFr2RMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKHYrSACrj2EYgh2oJntX45CDrRZt8+Q9WXnI/RjBx3cjw4jdE2zAZdXu1V8Q 2tAjfpmFUjyJG4rkFmX+tcZTTm/2S76Gg2e5STRmjCFhrBx4upckn5Bzs/m78uBc FuF2P13bTykNRhTiNe717J7PNYUBZFrad6S+UB4d0ylSlQYuqfNvZqjenjYgotWT 5TEhsNCFW6TZsk3/nN7i052JUUqpbiRrVVj7QeF9/jKt69qVt6YVdSIvuf/6ARuU FUQqdKsfweBxxPnEf2oO+SHSL8/QYH/9NFX7KHMS9wmrk4egivDDkvfdYSVLw3ZU WtkymZ5drMB7bm7L9thCAkiTng== -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:13 2026 by rpki-client