$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: 3E3EI83T04zEuKX4mR5clxC4U5yEv53gb+6gEMISX1w= Subject key identifier: CA:96:49:BC:82:44:D8:45:81:1A:F1:E7:68:D9:FE:97:2A:75:B1:26 Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 1322 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 1318 Signing time: Tue 24 Mar 2026 16:55:15 +0000 Manifest this update: Tue 24 Mar 2026 16:55:15 +0000 Manifest next update: Tue 31 Mar 2026 16:55:15 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: O06vvlNNhzySlqsUXbpvh8CafkUlBWQ50NGmTs6uOtM=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: 9goWELW0trcqEqqFWMwPmGOCRkrjj1+FxG/eq2UNrIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4898 (0x1322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Validity Not Before: Mar 24 16:55:15 2026 GMT Not After : Mar 31 16:55:15 2026 GMT Subject: CN=69c2c1f3-56d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:1b:3d:bc:02:03:3b:c4:87:10:c0:02:05: c1:5f:f7:95:e8:06:8b:99:4e:ed:30:26:33:fa:c7: 7b:74:ff:e2:0b:41:c7:ba:88:5e:a6:84:0e:fc:c9: df:29:a0:61:a5:01:98:ec:9a:70:82:b1:3d:67:a0: 8c:0f:89:f6:06:92:50:8e:78:92:06:b1:8d:a0:2d: 6a:23:e1:9e:5e:ec:76:75:5e:ec:5b:7c:42:dd:8d: 4d:41:f1:7e:79:90:1d:06:27:5e:c8:f0:e4:3a:83: f4:f2:01:c6:ed:ae:63:d3:38:61:91:34:53:3d:e2: 4a:c3:43:be:ec:08:00:62:b3:9a:f2:32:7b:39:a0: aa:64:3d:12:72:c7:b6:6b:e8:d5:01:11:72:5e:bd: d3:95:9b:16:51:cc:e9:22:d0:15:39:7f:5f:7d:e9: 32:f0:fa:71:57:80:76:28:39:e7:0b:e1:62:be:81: a4:75:b2:15:3d:33:e2:0a:82:a4:71:8e:d1:1c:a2: 1d:52:04:06:96:cd:a4:4b:ce:3e:94:a2:1a:a3:c4: 58:a4:6b:50:9a:e8:88:04:88:a9:35:58:28:1d:84: 76:7e:bf:ea:8b:c5:57:4e:d7:1f:ed:56:72:a2:23: c3:a7:6e:df:c7:38:80:20:a9:05:b5:6e:b1:3e:d2: ae:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:96:49:BC:82:44:D8:45:81:1A:F1:E7:68:D9:FE:97:2A:75:B1:26 X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ef:d2:bc:9f:f8:c1:e0:dc:b3:ca:00:8a:31:d4:49:d5:70: 2b:12:05:8f:82:23:f8:13:e5:f4:84:00:39:c2:3f:94:fb:99: b9:dc:ac:66:03:80:7d:7b:a4:43:1b:7e:87:df:28:73:fa:15: be:6a:17:02:83:ca:1c:67:41:b5:a6:f4:a2:4d:30:e8:b9:c4: a7:69:d7:01:5e:11:84:e8:f8:0c:aa:4b:2a:76:01:82:cb:e0: d4:27:4a:6c:03:0c:24:d1:db:01:ec:7d:29:3a:e0:1b:68:03: e8:87:90:56:ba:5c:31:be:93:86:82:e3:d0:78:9c:16:b4:4a: 83:07:bc:eb:a4:48:ff:31:52:89:e6:1c:31:1e:2c:a8:37:e9: 12:2a:2b:51:89:ba:10:2c:ba:74:5d:f3:f1:e7:1a:b2:d0:65: 9b:a1:55:d9:ed:69:d0:6e:48:31:22:a0:b0:aa:ff:a2:29:21: 91:1c:9a:17:43:2a:38:78:8d:2c:be:4d:e9:6a:1e:bc:b3:65: 28:97:75:82:5f:44:a2:77:79:c2:41:03:d5:27:b7:ea:eb:9b: ca:d7:61:f1:4a:05:9f:67:a9:93:66:48:67:f6:0a:a0:dc:23: 66:cc:a3:80:2a:92:05:66:4c:c0:ce:01:bb:3f:60:00:6f:d3: 33:30:e4:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjYwMzI0MTY1NTE1WhcNMjYwMzMxMTY1NTE1WjAYMRYwFAYD VQQDEw02OWMyYzFmMy01NmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDQbPbwCAzvEhxDAAgXBX/eV6AaLmU7tMCYz+sd7dP/iC0HHuohepoQO/Mnf KaBhpQGY7JpwgrE9Z6CMD4n2BpJQjniSBrGNoC1qI+GeXux2dV7sW3xC3Y1NQfF+ eZAdBideyPDkOoP08gHG7a5j0zhhkTRTPeJKw0O+7AgAYrOa8jJ7OaCqZD0Scse2 a+jVARFyXr3TlZsWUczpItAVOX9ffeky8PpxV4B2KDnnC+FivoGkdbIVPTPiCoKk cY7RHKIdUgQGls2kS84+lKIao8RYpGtQmuiIBIipNVgoHYR2fr/qi8VXTtcf7VZy oiPDp27fxziAIKkFtW6xPtKurwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqWSbyC RNhFgRrx52jZ/pcqdbEmMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAle/SvJ/4weDcs8oAijHUSdVwKxIFj4Ij+BPl9IQAOcI/lPuZudysZgOAfXuk Qxt+h98oc/oVvmoXAoPKHGdBtab0ok0w6LnEp2nXAV4RhOj4DKpLKnYBgsvg1CdK bAMMJNHbAex9KTrgG2gD6IeQVrpcMb6ThoLj0HicFrRKgwe866RI/zFSieYcMR4s qDfpEiorUYm6ECy6dF3z8ecastBlm6FV2e1p0G5IMSKgsKr/oikhkRyaF0MqOHiN LL5N6WoevLNlKJd1gl9Eond5wkED1Se36uubytdh8UoFn2epk2ZIZ/YKoNwjZsyj gCqSBWZMwM4Buz9gAG/TMzDkoQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:47:23 2026 by rpki-client