$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json) Hash identifier: q9MV0v40CSgJJLcLYLnLZ8PuHjGMK00CFb0bNPvOqPo= Subject key identifier: 43:04:44:1F:A2:4B:37:17:53:6C:5E:9A:A7:59:D5:1C:A7:67:32:12 Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft Manifest number: 0CCD Signing time: Tue 24 Mar 2026 18:14:26 +0000 Manifest this update: Tue 24 Mar 2026 18:14:25 +0000 Manifest next update: Tue 31 Mar 2026 18:14:25 +0000 Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: pzb1s6EvC+nYS2Hjw40YwIBJhh0B0j5vTAqYM15ax7E=) 2: C3401DEC16E811F1A339CAE0373D8C67.roa (hash: ROOiUYbkwm49mBaap+JHM0Ho6xM9mX2L6Moyq/i9y+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: Mar 24 18:14:25 2026 GMT Not After : Mar 31 18:14:25 2026 GMT Subject: CN=69c2d481-4de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:a3:a4:ab:9d:6d:da:b4:95:0e:da:e4:a0: b0:91:5d:75:9f:03:87:7e:72:92:31:2e:25:4f:34: 0b:9a:1b:82:d3:19:7e:1f:51:6f:9c:a8:bc:2c:50: 98:12:3d:34:07:74:9e:7c:43:38:ae:90:04:f7:16: 93:c5:41:44:d6:76:93:6c:ef:b3:65:bf:1a:99:30: a0:e7:9a:94:01:a7:fb:f6:d3:3a:47:1b:d9:8a:b8: 56:fa:43:53:c3:6b:fa:df:54:d0:81:63:33:04:36: 67:02:1d:32:f9:a7:34:98:a5:85:3e:f9:a1:61:3e: d0:99:b6:e3:e8:08:e3:04:99:88:89:14:e7:0e:87: e5:6e:6f:48:08:d2:dc:9f:36:92:cb:7a:22:f5:fa: 65:28:89:94:ff:0a:0b:9d:54:d9:7d:74:af:f1:73: aa:38:f5:c1:b8:84:6b:2c:f1:0e:c2:11:77:09:8c: bd:e5:87:a1:7c:d6:bb:db:5c:3c:37:fb:41:71:f5: 11:c9:f5:2f:bb:61:78:f0:08:67:70:2b:05:dc:04: a5:df:e9:5b:39:3c:45:5a:f2:98:4d:8c:e1:12:51: 02:61:5c:62:f8:b3:58:4f:11:62:54:66:ff:77:ec: aa:2f:24:29:07:7d:57:0e:72:48:f2:ad:b1:19:b8: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:04:44:1F:A2:4B:37:17:53:6C:5E:9A:A7:59:D5:1C:A7:67:32:12 X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:41:07:96:b6:28:e3:71:d2:35:9e:45:33:d9:d6:ae:65:3c: 11:c1:9a:84:bb:1b:95:44:97:86:2d:8a:e8:27:aa:37:c2:98: 26:1f:bf:6e:c0:10:36:9f:ae:46:52:73:7e:13:d8:ab:ce:00: 6c:39:9c:15:08:36:8a:7c:99:63:41:c8:1a:76:58:78:47:4b: 18:fe:6f:34:a3:a7:80:ee:96:30:2e:9f:81:5c:f1:db:75:f2: 48:88:8d:1d:3d:7d:8d:a6:44:2c:2a:9e:6a:5a:5d:32:35:2b: a5:ae:39:e7:bc:f6:fd:55:51:55:b3:c5:21:cd:e1:b8:9a:f9: a4:db:4f:57:8d:0e:e0:32:52:de:26:41:1f:92:36:a9:3b:f5: 30:ba:d2:d0:12:85:3f:8c:77:00:86:c4:75:bb:17:e4:75:32: ba:29:6c:21:01:c8:7c:f9:e7:fc:79:19:28:05:7c:17:90:4d: 86:7a:70:8e:50:a3:ee:16:6d:89:ec:bb:77:f7:dc:bc:1b:b2: 7e:9c:f0:a7:d4:9b:98:df:94:1b:53:e7:ab:cb:3a:4b:cc:cd: 3e:1a:45:2b:e7:3d:8b:b2:f9:09:9c:f3:0b:4d:e5:46:cf:88: 25:fe:0a:54:e7:02:d9:78:a4:52:fa:ae:3f:a2:77:ab:24:11: 9c:b4:56:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjYwMzI0MTgxNDI1WhcNMjYwMzMxMTgxNDI1WjAYMRYwFAYD VQQDEw02OWMyZDQ4MS00ZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCWjpKudbdq0lQ7a5KCwkV11nwOHfnKSMS4lTzQLmhuC0xl+H1FvnKi8LFCY Ej00B3SefEM4rpAE9xaTxUFE1naTbO+zZb8amTCg55qUAaf79tM6RxvZirhW+kNT w2v631TQgWMzBDZnAh0y+ac0mKWFPvmhYT7Qmbbj6AjjBJmIiRTnDoflbm9ICNLc nzaSy3oi9fplKImU/woLnVTZfXSv8XOqOPXBuIRrLPEOwhF3CYy95YehfNa721w8 N/tBcfURyfUvu2F48AhncCsF3ASl3+lbOTxFWvKYTYzhElECYVxi+LNYTxFiVGb/ d+yqLyQpB31XDnJI8q2xGbihPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMERB+i SzcXU2xemqdZ1RynZzISMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S SlNBSGhpbDdrMmxfanlTSzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0UEHlrYo43HSNZ5FM9nWrmU8EcGahLsblUSXhi2K6CeqN8KYJh+/bsAQNp+u RlJzfhPYq84AbDmcFQg2inyZY0HIGnZYeEdLGP5vNKOngO6WMC6fgVzx23XySIiN HT19jaZELCqealpdMjUrpa4557z2/VVRVbPFIc3huJr5pNtPV40O4DJS3iZBH5I2 qTv1MLrS0BKFP4x3AIbEdbsX5HUyuilsIQHIfPnn/HkZKAV8F5BNhnpwjlCj7hZt iey7d/fcvBuyfpzwp9SbmN+UG1Pnq8s6S8zNPhpFK+c9i7L5CZzzC03lRs+IJf4K VOcC2XikUvquP6J3qyQRnLRWXA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:01:22 2026 by rpki-client