$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json) Hash identifier: QOxSVQ8pRZo1dVDOlaYB5ZeZ4waBV/vK5cxP8ERBPhY= Subject key identifier: DE:05:43:05:24:AE:12:E3:02:83:0A:75:E8:37:B9:F4:0D:CD:7A:E7 Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Certificate serial: 07F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft Manifest number: 07E4 Signing time: Tue 24 Mar 2026 21:01:20 +0000 Manifest this update: Tue 24 Mar 2026 21:01:19 +0000 Manifest next update: Tue 31 Mar 2026 21:01:19 +0000 Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: R1EC8MT3kIufeegI38NI+xML0MUUVNH5D6eBZcM6xrc=) 2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: fw5/QJjCTBWxtMG/FipH4dmnUQpkZIfnjR5R3n7X6UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Validity Not Before: Mar 24 21:01:19 2026 GMT Not After : Mar 31 21:01:19 2026 GMT Subject: CN=69c2fba0-cc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:d1:4a:f8:57:37:c3:ab:f5:c5:1d:e2:4c: c0:1e:9c:13:45:6b:57:2f:43:a5:f4:6f:77:e5:e4: 5f:c4:11:0c:75:9b:0a:13:77:55:ca:0c:e8:54:c3: 36:74:b5:ae:d9:92:62:58:79:45:cf:8e:47:b1:82: ff:a8:df:eb:b6:61:3a:12:01:8f:4b:b7:09:dc:9c: 7d:61:73:13:d9:e8:50:89:7e:06:2a:c5:05:13:ea: b8:31:a6:e4:4a:6f:ec:45:9f:e1:6c:b0:9c:6e:f7: de:ff:c9:d2:2c:b7:34:73:85:b8:e5:17:d9:af:ed: ad:17:58:de:65:8f:04:59:cf:9d:e4:59:55:81:82: b0:dd:4c:e3:36:71:5e:6b:51:50:4f:d9:c2:5d:ad: b6:e7:d2:5d:4e:da:93:5a:02:56:41:66:3d:48:31: 0a:e3:7e:38:1d:24:0f:8c:b7:93:71:71:8e:15:6f: b6:8a:0c:d3:60:29:17:9e:e9:2e:fd:c8:dc:f9:8b: 30:ed:7e:40:86:4b:9c:26:c8:63:a5:54:f0:6b:10: eb:fa:71:bf:de:75:7d:a7:02:c4:5e:c3:31:66:28: d3:1a:9a:9c:ed:f7:ec:a1:df:a1:e7:23:36:b5:16: 55:3f:c9:e5:c1:9d:91:73:5f:e4:07:d2:77:c4:94: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:05:43:05:24:AE:12:E3:02:83:0A:75:E8:37:B9:F4:0D:CD:7A:E7 X509v3 Authority Key Identifier: keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:35:e2:b2:14:60:b7:a0:12:44:6d:a5:d2:e0:31:4f:f8:91: 59:b2:45:74:1a:92:95:f7:89:93:6c:61:3b:c1:40:23:a2:6f: 8a:fd:61:21:36:39:05:75:1f:dd:1c:9d:8f:1a:91:d8:c7:4d: cb:8e:a2:0e:a2:6c:76:42:60:ad:81:fe:50:67:24:ff:ee:1b: 55:62:d2:7a:06:78:f3:59:ba:e9:63:33:62:7e:ce:27:b9:68: 4e:7d:e9:c6:fc:73:f3:dd:68:15:c2:51:88:47:c8:f3:25:ba: 6f:29:c7:bb:44:c3:39:47:d8:e2:27:26:ee:09:d2:59:1c:ab: 52:8e:e5:52:e1:3a:d1:bc:fc:4c:b5:34:8c:cd:77:dc:af:53: 8f:20:02:c3:90:ad:54:df:29:2d:45:09:0d:b5:8b:da:b0:5f: 5a:44:5f:9d:b1:29:a7:ab:5c:1f:bb:bb:e4:10:fe:79:34:f0: cf:34:2b:ff:0d:06:ee:3b:73:42:cb:10:d9:7b:42:42:5c:f7: 8a:47:86:1d:ae:62:02:69:e2:32:56:be:68:a4:1a:f0:bc:5e: d9:a1:6a:c2:ad:06:db:89:29:55:1d:e5:9f:4b:98:25:27:ab: d1:48:4a:24:a2:d3:74:ea:0f:fa:bd:b0:ec:1b:5d:b3:d2:7b: 72:6f:7b:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx QTZGQ0QyRkQwHhcNMjYwMzI0MjEwMTE5WhcNMjYwMzMxMjEwMTE5WjAYMRYwFAYD VQQDEw02OWMyZmJhMC1jYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZHRSvhXN8Or9cUd4kzAHpwTRWtXL0Ol9G935eRfxBEMdZsKE3dVygzoVMM2 dLWu2ZJiWHlFz45HsYL/qN/rtmE6EgGPS7cJ3Jx9YXMT2ehQiX4GKsUFE+q4Mabk Sm/sRZ/hbLCcbvfe/8nSLLc0c4W45RfZr+2tF1jeZY8EWc+d5FlVgYKw3UzjNnFe a1FQT9nCXa2259JdTtqTWgJWQWY9SDEK4344HSQPjLeTcXGOFW+2igzTYCkXnuku /cjc+Ysw7X5AhkucJshjpVTwaxDr+nG/3nV9pwLEXsMxZijTGpqc7ffsod+h5yM2 tRZVP8nlwZ2Rc1/kB9J3xJRArQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4FQwUk rhLjAoMKdeg3ufQNzXrnMB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5 NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw RUtyM2xHQ3B2TElhYjgwdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXjXishRgt6ASRG2l0uAxT/iRWbJFdBqSlfeJk2xhO8FAI6Jviv1hITY5BXUf 3RydjxqR2MdNy46iDqJsdkJgrYH+UGck/+4bVWLSegZ481m66WMzYn7OJ7loTn3p xvxz891oFcJRiEfI8yW6bynHu0TDOUfY4icm7gnSWRyrUo7lUuE60bz8TLU0jM13 3K9TjyACw5CtVN8pLUUJDbWL2rBfWkRfnbEpp6tcH7u75BD+eTTwzzQr/w0G7jtz QssQ2XtCQlz3ikeGHa5iAmniMla+aKQa8Lxe2aFqwq0G24kpVR3ln0uYJSer0UhK JKLTdOoP+r2w7Btds9J7cm97dw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:52 2026 by rpki-client