$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: kGPFqVzDbPo9B8KeMhvqKgnqbZeT5EuMkFnA9RMgd00= Subject key identifier: 58:19:50:BC:9A:5A:25:32:05:69:8E:94:3A:0F:AF:4E:95:5C:16:CA Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 021E Signing time: Wed 25 Mar 2026 02:19:07 +0000 Manifest this update: Wed 25 Mar 2026 02:19:07 +0000 Manifest next update: Wed 01 Apr 2026 02:19:07 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: Ncm0aoTnrwmY4Nr+1h2NvOS8FStOWfEA5yNC76fKOQw=) 2: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: /sW7La6h9x+hyUPvzqNyMJ8vxN6nXJwOe40nIYe1WC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Mar 25 02:19:07 2026 GMT Not After : Apr 1 02:19:07 2026 GMT Subject: CN=69c3461b-c1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a4:4f:0d:eb:08:3c:db:50:ec:e0:fc:b5:9f: 88:e4:53:5e:fd:90:8f:6b:c3:1a:14:50:d5:0a:75: ae:88:a5:55:44:fe:bc:93:87:95:4a:1d:f5:d6:f9: ea:df:d4:35:2d:f6:15:e3:d8:53:5f:bd:af:55:c1: f2:e6:24:75:99:cb:1d:f6:b7:74:ec:b5:ae:65:8d: 61:54:da:ab:e7:9a:97:4a:bb:ab:a7:9f:2d:35:5d: 6f:71:98:01:2d:11:b5:f6:53:98:b2:a7:2b:b8:8d: 35:fe:6b:aa:c3:1c:a3:9c:cc:8a:6d:6a:fe:24:95: 22:77:ed:15:85:82:9a:29:a8:68:5e:97:85:df:85: 20:a0:37:88:2c:c7:a6:ea:19:fa:20:d0:c7:d4:14: 4b:f1:98:70:3e:40:89:9b:85:2a:bd:df:d2:3c:a0: 99:19:ed:f3:5c:79:6f:ce:da:ef:15:e0:f6:b8:a9: 83:73:a3:30:9a:de:a0:14:ef:d0:67:df:55:52:17: 19:a6:78:3e:c3:00:7c:21:95:89:a6:fa:5e:51:26: 7d:73:69:55:7b:cf:18:0f:ed:04:30:1b:1a:ed:44: e2:88:a1:b1:1c:f6:a7:2d:84:6c:39:0e:36:80:10: 7b:9d:9a:9b:37:d1:59:7d:fe:53:96:cd:09:7d:5e: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:19:50:BC:9A:5A:25:32:05:69:8E:94:3A:0F:AF:4E:95:5C:16:CA X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a1:16:90:24:0d:eb:bc:6d:b5:f6:e1:1a:0b:8e:b0:c7:d6: 66:40:84:e7:0a:9a:a2:0c:c2:a1:1f:01:8a:f1:c2:49:e3:dd: 1b:e0:de:f4:ae:cb:18:60:91:6b:56:fb:9b:6f:2b:a0:59:3a: 10:24:6a:13:b6:5c:05:41:05:0b:91:03:d0:82:fb:58:dc:3e: 96:e4:4d:18:79:9c:e0:5c:90:b0:f7:cd:dc:89:10:d0:6f:91: 7e:08:10:22:f2:ae:3c:ef:3d:22:35:c7:28:b6:8c:90:48:ce: fb:cc:f9:57:ca:1f:6c:98:d3:3e:be:ab:93:36:e3:56:01:5e: c3:18:40:bb:29:b4:ec:72:3d:ad:3d:48:97:d5:13:e8:47:f8: c1:f7:d9:53:57:3f:00:fc:ed:5b:45:8d:8b:e2:d4:c4:6a:dd: 86:ab:bf:31:ea:37:17:b5:33:10:50:9c:0d:3f:44:16:68:42: 3c:41:9e:ec:25:e1:15:e9:4c:8b:ec:51:66:66:d7:b4:13:a6: ce:82:92:74:2b:bf:0d:ae:18:f2:3c:fa:2e:ed:ae:cd:2f:e3: a9:b5:b1:ca:ad:1f:a8:ae:69:cd:86:50:20:62:a9:c8:51:c5: 36:eb:ec:d0:b7:fc:2c:00:d2:ce:3b:43:eb:d8:91:71:1c:c9: 40:0e:0f:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjYwMzI1MDIxOTA3WhcNMjYwNDAxMDIxOTA3WjAYMRYwFAYD VQQDEw02OWMzNDYxYi1jMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qRPDesIPNtQ7OD8tZ+I5FNe/ZCPa8MaFFDVCnWuiKVVRP68k4eVSh311vnq 39Q1LfYV49hTX72vVcHy5iR1mcsd9rd07LWuZY1hVNqr55qXSrurp58tNV1vcZgB LRG19lOYsqcruI01/muqwxyjnMyKbWr+JJUid+0VhYKaKahoXpeF34UgoDeILMem 6hn6INDH1BRL8ZhwPkCJm4Uqvd/SPKCZGe3zXHlvztrvFeD2uKmDc6Mwmt6gFO/Q Z99VUhcZpng+wwB8IZWJpvpeUSZ9c2lVe88YD+0EMBsa7UTiiKGxHPanLYRsOQ42 gBB7nZqbN9FZff5Tls0JfV7AowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgZULya WiUyBWmOlDoPr06VXBbKMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfKEWkCQN67xttfbhGguOsMfWZkCE5wqaogzCoR8BivHCSePdG+De9K7LGGCR a1b7m28roFk6ECRqE7ZcBUEFC5ED0IL7WNw+luRNGHmc4FyQsPfN3IkQ0G+RfggQ IvKuPO89IjXHKLaMkEjO+8z5V8ofbJjTPr6rkzbjVgFewxhAuym07HI9rT1Il9UT 6Ef4wffZU1c/APztW0WNi+LUxGrdhqu/Meo3F7UzEFCcDT9EFmhCPEGe7CXhFelM i+xRZmbXtBOmzoKSdCu/Da4Y8jz6Lu2uzS/jqbWxyq0fqK5pzYZQIGKpyFHFNuvs 0Lf8LADSzjtD69iRcRzJQA4PBg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:32 2026 by rpki-client