$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: z++rN1HH8ed1br0Kx1f162qmtsByeO7PjoGTT+fqAPI= Subject key identifier: C5:E8:C6:A3:68:3E:05:54:0C:08:D6:4F:F5:75:ED:B9:1F:1C:D2:74 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 0116 Signing time: Wed 25 Mar 2026 03:14:15 +0000 Manifest this update: Wed 25 Mar 2026 03:14:15 +0000 Manifest next update: Wed 01 Apr 2026 03:14:15 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: jebCVi/BPMuh6jD2X1vALxsT1IoMJHAJcsc90pAhPoI=) 2: 1C6D5ED2C51F11F08993E41BC4F9AE02.roa (hash: h9DoWAti9FtevIgArDst4H6dPePV+rhbEHLYlKOnyqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Mar 25 03:14:15 2026 GMT Not After : Apr 1 03:14:15 2026 GMT Subject: CN=69c35307-412d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:75:af:21:fb:6d:ab:b8:db:b9:73:df:cb:df: 0c:8a:8d:cb:ce:19:6a:72:93:0c:77:d9:10:79:5f: 77:f0:fe:e9:2a:49:82:5c:23:97:0a:de:28:b5:ff: 7b:9f:88:2d:82:ca:1a:93:24:d8:69:4a:3e:31:64: c9:72:17:07:25:81:64:42:15:07:78:0a:c6:ab:6e: f8:ce:5d:03:1e:20:c5:e2:74:8b:29:1b:b8:80:a2: ed:40:ff:e5:47:ba:93:db:83:44:a1:c6:a3:92:e3: 4d:c7:62:a7:05:c4:d5:93:d7:08:f9:4c:13:52:d1: d5:a3:ff:e9:2d:d5:1a:4c:df:23:ba:63:0d:8b:05: 2f:46:5e:bd:42:07:1a:4b:db:ac:b5:29:6c:ef:39: 1d:58:7f:07:5c:50:10:a9:06:0d:53:c9:36:12:16: cd:e4:10:45:9d:ef:a5:49:49:64:ab:11:48:19:f1: f9:42:1c:49:0c:28:25:b9:f9:9e:3d:68:96:cc:a4: 9c:21:ef:6b:28:c3:f0:79:22:81:84:f8:10:aa:3b: 05:04:55:b1:a7:dc:1b:36:e7:20:1c:07:49:3d:7a: 0c:fe:94:20:81:89:3a:56:58:57:a9:39:89:ad:83: 9e:47:ba:1a:c6:bc:73:32:40:6a:d1:84:3d:85:f2: 12:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E8:C6:A3:68:3E:05:54:0C:08:D6:4F:F5:75:ED:B9:1F:1C:D2:74 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:09:b3:40:04:04:dc:fc:93:69:d3:c0:eb:22:cf:46:da:07: 87:00:67:58:5a:9e:56:d4:56:29:03:ed:f5:25:94:71:0f:3a: f0:7e:11:df:48:35:85:7e:9d:3c:5d:54:12:ce:35:45:07:9a: 62:55:7f:35:3b:cc:44:22:0f:59:99:50:1a:76:fa:8c:2b:a4: e7:d1:98:5f:04:2f:61:ee:b0:13:1e:e7:b7:44:f5:55:a2:a8: a5:93:85:d8:19:75:29:3d:6c:39:91:ac:13:63:95:07:09:09: 2c:44:7b:ef:89:86:1b:e2:69:f9:af:03:28:47:b6:7c:1e:7b: 3c:11:7f:88:81:96:ce:8e:87:af:0c:92:2d:a0:3b:14:c7:cc: 9d:4b:da:47:d8:a9:72:b5:e6:e8:0c:9e:aa:21:0c:1e:f9:58: 06:40:e0:3e:55:9f:ca:ed:fb:94:91:27:a2:34:03:3a:c8:94: 71:5c:55:45:b2:4b:be:81:74:ee:43:6b:68:2a:11:a2:02:57: 35:6a:3a:e6:3c:37:8c:37:34:d0:8f:2a:a3:85:66:fa:dd:4b: 07:11:52:03:31:1c:11:42:88:15:55:a4:39:70:bc:74:3e:44: 6a:7e:e0:02:5d:be:a9:8f:f1:8d:2c:e4:21:01:f2:47:a8:49: e0:78:46:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjYwMzI1MDMxNDE1WhcNMjYwNDAxMDMxNDE1WjAYMRYwFAYD VQQDEw02OWMzNTMwNy00MTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nWvIfttq7jbuXPfy98Mio3LzhlqcpMMd9kQeV938P7pKkmCXCOXCt4otf97 n4gtgsoakyTYaUo+MWTJchcHJYFkQhUHeArGq274zl0DHiDF4nSLKRu4gKLtQP/l R7qT24NEocajkuNNx2KnBcTVk9cI+UwTUtHVo//pLdUaTN8jumMNiwUvRl69Qgca S9ustSls7zkdWH8HXFAQqQYNU8k2EhbN5BBFne+lSUlkqxFIGfH5QhxJDCglufme PWiWzKScIe9rKMPweSKBhPgQqjsFBFWxp9wbNucgHAdJPXoM/pQggYk6VlhXqTmJ rYOeR7oaxrxzMkBq0YQ9hfISDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXoxqNo PgVUDAjWT/V17bkfHNJ0MB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOAmzQAQE3PyTadPA6yLPRtoHhwBnWFqeVtRWKQPt9SWUcQ868H4R30g1hX6d PF1UEs41RQeaYlV/NTvMRCIPWZlQGnb6jCuk59GYXwQvYe6wEx7nt0T1VaKopZOF 2Bl1KT1sOZGsE2OVBwkJLER774mGG+Jp+a8DKEe2fB57PBF/iIGWzo6HrwySLaA7 FMfMnUvaR9ipcrXm6AyeqiEMHvlYBkDgPlWfyu37lJEnojQDOsiUcVxVRbJLvoF0 7kNraCoRogJXNWo65jw3jDc00I8qo4Vm+t1LBxFSAzEcEUKIFVWkOXC8dD5Ean7g Al2+qY/xjSzkIQHyR6hJ4HhG0g== -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:57 2026 by rpki-client