$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft File: tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json) Hash identifier: h44cuLNUNBL03dgfCohD/X/2Y/GkX0WQwvrFUNWACbI= Subject key identifier: 53:EF:C6:2A:C9:E4:A1:D0:31:3D:12:0A:DC:3F:39:2D:13:5E:A3:06 Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft Manifest number: 5E Signing time: Fri 27 Mar 2026 07:41:51 +0000 Manifest this update: Fri 27 Mar 2026 07:41:50 +0000 Manifest next update: Fri 03 Apr 2026 07:41:50 +0000 Files and hashes: 1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: Y2jkUXXH2shU4IsDYt7FhdHqfBIFS3gfZU7yeCk22fE=) 2: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: hNDoKvtTaJr3/l4SpLoIbXrusm7ipL9CQHs8BHkoeEc=) 3: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=) 4: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: OMcpNf88AE2cPyG8acihz1Bkk8xz4Ahg+L34+LyVpoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 07:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Validity Not Before: Mar 27 07:41:50 2026 GMT Not After : Apr 3 07:41:50 2026 GMT Subject: CN=69c634be-4e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:92:a0:84:7b:f3:3b:6e:9a:ba:ba:90:65: a1:c4:bb:5c:ef:b1:5e:e1:71:6d:db:7e:9f:53:06: 78:00:1d:33:b3:13:04:20:db:73:14:9a:5c:6c:03: c4:02:8e:04:7c:82:ca:96:57:08:fe:d6:47:ac:bb: b4:82:5f:37:b1:d2:3c:c0:74:fb:9c:cb:85:1a:ea: df:fd:db:da:b2:15:aa:26:2d:29:d5:5c:23:a3:5a: c6:2b:c5:21:23:f1:7a:2d:73:9a:9e:b8:6d:74:a0: 50:50:78:f5:86:3d:94:94:0b:a9:d0:31:63:6d:a8: c8:66:89:23:64:af:8f:d6:22:f6:c6:40:bb:e7:d9: b0:29:2f:3f:30:91:0a:ec:6f:7d:da:e9:b4:9b:89: cf:6a:48:27:8a:94:4f:d8:36:ba:87:2f:cc:b0:3d: c6:2a:42:6f:d1:ea:7c:9a:a1:a9:13:53:e9:d3:34: 53:98:b9:4d:a2:eb:1a:6c:f2:ba:4c:26:ee:42:74: 82:6e:5a:fa:bf:92:6f:bc:1d:23:7b:db:92:c2:9f: 40:3e:40:28:93:22:34:5c:43:c4:df:0c:95:44:d4: 89:07:57:73:54:18:47:8e:88:3c:f0:ef:38:32:6a: e3:7f:fe:45:4b:4d:1e:43:56:6f:f3:a2:a4:85:23: b4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EF:C6:2A:C9:E4:A1:D0:31:3D:12:0A:DC:3F:39:2D:13:5E:A3:06 X509v3 Authority Key Identifier: keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:9a:3d:c3:ef:41:3e:72:da:a2:4e:ac:e4:4e:cb:36:cf:86: 62:44:cb:4d:0c:e7:ab:39:c4:53:aa:98:99:86:fc:f3:c4:06: ef:56:2d:f0:10:f0:b5:0d:df:c4:21:1f:3f:90:a4:a0:be:62: 6d:b0:1c:34:d3:18:22:a3:88:fd:5d:33:1c:e9:08:ce:d8:72: df:05:07:25:95:79:2a:57:57:b1:70:81:1e:e4:80:c4:78:c4: e2:aa:f4:08:bd:19:1d:ea:e9:3c:76:84:11:f8:73:a2:be:1b: cf:1a:b0:42:82:44:a1:78:23:15:a6:2b:63:46:4d:10:46:4b: d3:29:38:5a:b0:d3:7a:9c:eb:9e:76:ac:d4:7e:56:81:a2:48: 43:2a:52:81:40:78:ba:b9:41:08:93:6a:3f:1a:61:ae:ef:f4: c2:a6:3a:d8:e0:b1:16:8c:4a:aa:7a:d8:79:9e:53:fd:a6:a6: 24:0c:92:ed:68:3c:d1:2d:2f:32:40:b0:f5:31:28:68:aa:db: fc:c8:f6:aa:82:f4:79:5e:f5:7f:28:23:63:49:39:49:18:9a: 1e:1e:a3:c9:b9:69:71:c6:82:ef:5d:2c:ad:fa:f3:06:70:75: 1e:1a:77:b7:52:82:62:6f:16:0a:d2:59:e5:23:28:5a:43:21: c2:dc:cd:21 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkI0NjExMC8GA1UEBRMoQjU0RTA4NDY1QjU0NUNFRUYxRTJFMTAwOTc3NUQ5MUJB NDEyQjYzRDAeFw0yNjAzMjcwNzQxNTBaFw0yNjA0MDMwNzQxNTBaMBgxFjAUBgNV BAMTDTY5YzYzNGJlLTRlOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpqJKghHvzO26aurqQZaHEu1zvsV7hcW3bfp9TBngAHTOzEwQg23MUmlxsA8QC jgR8gsqWVwj+1kesu7SCXzex0jzAdPucy4Ua6t/929qyFaomLSnVXCOjWsYrxSEj 8Xotc5qeuG10oFBQePWGPZSUC6nQMWNtqMhmiSNkr4/WIvbGQLvn2bApLz8wkQrs b33a6bSbic9qSCeKlE/YNrqHL8ywPcYqQm/R6nyaoakTU+nTNFOYuU2i6xps8rpM Ju5CdIJuWvq/km+8HSN725LCn0A+QCiTIjRcQ8TfDJVE1IkHV3NUGEeOiDzw7zgy auN//kVLTR5DVm/zoqSFI7RbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUU+/GKsnk odAxPRIK3D85LRNeowYwHwYDVR0jBBgwFoAUtU4IRltUXO7x4uEAl3XZG6QStj0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQjQ2LzA4ODcwMUI4QUJC NDExRjBBQkYyMDk0MEM0RjlBRTAyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3Rq MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFU0SVJsdFVYTzd4NHVFQWwzWFpHNlFTdGowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy QjQ2LzA4ODcwMUI4QUJCNDExRjBBQkYyMDk0MEM0RjlBRTAyL3RVNElSbHRVWE83 eDR1RUFsM1haRzZRU3RqMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDCmj3D70E+ctqiTqzkTss2z4ZiRMtNDOerOcRTqpiZhvzzxAbvVi3wEPC1Dd/E IR8/kKSgvmJtsBw00xgio4j9XTMc6QjO2HLfBQcllXkqV1excIEe5IDEeMTiqvQI vRkd6uk8doQR+HOivhvPGrBCgkSheCMVpitjRk0QRkvTKThasNN6nOuedqzUflaB okhDKlKBQHi6uUEIk2o/GmGu7/TCpjrY4LEWjEqqeth5nlP9pqYkDJLtaDzRLS8y QLD1MShoqtv8yPaqgvR5XvV/KCNjSTlJGJoeHqPJuWlxxoLvXSyt+vMGcHUeGne3 UoJibxYK0lnlIyhaQyHC3M0h -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:31 2026 by rpki-client