$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: 1dKC3egic68hit5SaSlVREoerefdRRRTVVmwzDC46w4= Subject key identifier: F9:D1:31:96:D6:44:82:2C:96:E1:FB:49:B8:06:7F:D4:D5:C3:52:B3 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 0786 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 0766 Signing time: Tue 24 Mar 2026 21:24:27 +0000 Manifest this update: Tue 24 Mar 2026 21:24:26 +0000 Manifest next update: Tue 31 Mar 2026 21:24:26 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: 2QzhLfw9Jg94TcbycXLqXBPGAmjAwL3TBnLTB38Z690=) 2: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=) 4: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Mar 24 21:24:26 2026 GMT Not After : Mar 31 21:24:26 2026 GMT Subject: CN=69c3010a-8850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:14:cf:34:75:73:28:48:e3:7b:44:e6:62:33: be:eb:b1:a1:96:e7:a9:d6:9c:8e:b3:16:ef:7e:d2: ba:8b:e9:e6:dc:2c:21:2b:ea:48:e9:2a:ee:56:70: 18:51:d9:7e:15:14:07:35:e9:bf:c4:9e:7e:5b:02: ee:1f:f7:65:e4:ef:3e:7e:86:9c:2d:dd:9c:ef:1b: 09:fa:fc:fd:51:95:a3:f1:ab:a3:63:30:df:33:52: 05:31:6f:8b:bf:fa:81:af:56:10:2d:0f:8d:52:b6: 31:ea:49:47:fa:65:a3:2c:de:3a:d7:d3:15:93:b2: 6a:61:0a:d0:dc:13:bf:d3:cb:d5:7c:f8:e7:01:31: f1:52:c4:4c:c1:74:e6:37:53:58:ce:91:4c:81:48: 61:5d:82:a4:f4:21:a6:bc:86:ca:e7:9f:1d:ce:6b: cc:0a:34:bb:a7:ca:48:96:05:46:ae:cc:84:05:fa: 24:cd:5b:76:b1:4a:d2:64:9a:66:54:6c:5e:59:da: 17:a4:65:c3:cc:a1:09:94:35:af:d8:53:90:78:8a: c0:3a:a0:d1:60:0c:eb:f3:4b:e0:fc:71:e9:51:a1: a4:b1:7f:4a:e7:ef:d4:a8:21:fe:fb:d7:4e:e0:11: e1:9b:5e:92:bd:d5:8c:fd:ba:6f:94:6f:9f:4b:a4: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D1:31:96:D6:44:82:2C:96:E1:FB:49:B8:06:7F:D4:D5:C3:52:B3 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:68:02:97:ba:e4:eb:e7:50:f7:6d:15:dd:a9:2e:02:34:e5: 44:3e:6d:bb:42:f8:c7:27:b3:25:a8:5e:5e:c7:a7:f0:b2:b6: 84:19:f4:23:b2:eb:6a:3e:e7:d8:8f:26:7c:86:7d:6b:16:12: 45:a5:23:ca:bc:ea:32:de:f1:80:d5:61:ed:07:67:48:ac:76: da:20:f8:61:da:1a:0e:66:9c:75:42:ce:29:38:a6:27:b3:4b: c4:86:43:63:0b:b8:36:b4:8f:b4:92:52:32:50:cf:c4:ab:db: 2c:34:e8:34:0b:5a:6d:8f:3d:13:83:cb:c1:24:00:15:12:3e: 3e:25:03:60:1d:39:b7:04:c1:58:32:fe:c7:f1:0a:48:ef:28: 4b:5e:d4:4c:02:ca:7c:55:3e:d9:3d:d5:e3:e5:eb:b2:59:88: 96:2c:6f:0b:30:dc:40:b3:a0:be:6d:d2:72:eb:f7:0a:09:11: c3:26:48:e0:83:be:44:97:53:91:2b:f1:2c:29:66:b3:2d:07: 64:c6:aa:c6:57:be:cc:8d:29:a0:5a:b4:1f:00:a1:3f:dd:10: dd:f9:fb:be:ea:bf:f9:c0:d4:3a:24:85:72:a9:3c:d3:2e:42: ac:6f:ca:53:47:0d:6f:78:fc:c2:4b:14:ae:35:f3:48:a3:18: e5:83:f2:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjYwMzI0MjEyNDI2WhcNMjYwMzMxMjEyNDI2WjAYMRYwFAYD VQQDEw02OWMzMDEwYS04ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RTPNHVzKEjje0TmYjO+67Ghluep1pyOsxbvftK6i+nm3CwhK+pI6SruVnAY Udl+FRQHNem/xJ5+WwLuH/dl5O8+foacLd2c7xsJ+vz9UZWj8aujYzDfM1IFMW+L v/qBr1YQLQ+NUrYx6klH+mWjLN4619MVk7JqYQrQ3BO/08vVfPjnATHxUsRMwXTm N1NYzpFMgUhhXYKk9CGmvIbK558dzmvMCjS7p8pIlgVGrsyEBfokzVt2sUrSZJpm VGxeWdoXpGXDzKEJlDWv2FOQeIrAOqDRYAzr80vg/HHpUaGksX9K5+/UqCH++9dO 4BHhm16SvdWM/bpvlG+fS6Tg2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPnRMZbW RIIsluH7SbgGf9TVw1KzMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk2gCl7rk6+dQ920V3akuAjTlRD5tu0L4xyezJaheXsen8LK2hBn0I7Lraj7n 2I8mfIZ9axYSRaUjyrzqMt7xgNVh7QdnSKx22iD4YdoaDmacdULOKTimJ7NLxIZD Ywu4NrSPtJJSMlDPxKvbLDToNAtabY89E4PLwSQAFRI+PiUDYB05twTBWDL+x/EK SO8oS17UTALKfFU+2T3V4+XrslmIlixvCzDcQLOgvm3Scuv3CgkRwyZI4IO+RJdT kSvxLClmsy0HZMaqxle+zI0poFq0HwChP90Q3fn7vuq/+cDUOiSFcqk80y5CrG/K U0cNb3j8wksUrjXzSKMY5YPyeQ== -----END CERTIFICATE-----Generated at Thu Mar 26 03:32:36 2026 by rpki-client