$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: Pmv0JWFLFs0u9DLU46VF+BroSYeiT9Keq3soifymtpo= Subject key identifier: 8B:E2:40:FE:C9:0C:48:2B:10:29:DF:02:FE:FC:9D:85:BF:53:C5:B1 Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: E3 Signing time: Wed 25 Mar 2026 05:48:39 +0000 Manifest this update: Wed 25 Mar 2026 05:48:39 +0000 Manifest next update: Wed 01 Apr 2026 05:48:39 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: tfWO48p6hVyeioAU8nSAnuhq97B4Yka+XUmLOmcqyns=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: 0gHNtWChBEUR4YEQpsBzxLagBwCzjHIiYU13EWlRZC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Mar 25 05:48:39 2026 GMT Not After : Apr 1 05:48:39 2026 GMT Subject: CN=69c37737-20b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:1f:5d:20:66:12:9f:b3:03:a9:68:37:9f: af:66:ee:e9:53:74:03:db:4e:45:3d:f7:5b:7a:1b: 7e:77:46:4a:8f:c1:d4:b0:34:87:6c:f7:2d:9a:a2: 24:80:92:7b:0d:73:6d:c4:f8:ae:e8:e1:6f:3c:f2: 1f:7d:e0:04:f7:57:ff:de:a8:95:b3:67:7e:6e:bb: c3:00:d0:95:6d:ce:35:a3:fc:78:6c:fc:2b:41:07: 42:7c:00:4c:02:77:e9:c1:d0:57:3c:ac:0d:44:d1: 2e:b1:67:f6:2c:4b:b1:47:ff:cf:7c:58:61:03:ac: 57:88:e7:e5:14:08:34:6e:a7:bf:60:fc:4e:e4:cf: b1:2d:2e:f2:41:52:84:66:9d:45:cf:7f:d3:a3:1d: 46:cb:ec:ee:64:5d:9c:6d:6b:6b:31:bd:b1:55:a4: a9:da:e6:92:6c:12:69:80:79:bf:14:09:d5:17:ec: 67:20:e9:d9:a9:5f:71:23:bd:3f:6d:fb:59:7e:d8: cd:c3:79:df:a4:31:f6:87:70:80:34:47:42:64:37: 67:38:18:d9:17:15:34:3a:9b:f8:bd:12:ad:47:c0: 26:3b:69:dc:16:ca:f3:ea:d5:a3:90:81:5e:ad:f0: 6c:2d:d9:b3:19:ad:62:8c:88:be:a4:67:62:33:8e: 42:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E2:40:FE:C9:0C:48:2B:10:29:DF:02:FE:FC:9D:85:BF:53:C5:B1 X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c0:86:26:aa:aa:bc:f7:1f:f4:08:f3:53:1c:41:a3:ae:d8: ae:fb:d6:12:56:0b:df:ee:d9:66:21:aa:e4:61:c1:c9:80:5b: 81:a3:08:98:e8:52:79:70:14:87:89:82:75:b2:63:bc:d5:2e: 77:89:17:a7:81:0c:3a:b6:45:ff:24:98:c6:2b:db:12:f1:33: 93:d0:41:f4:0a:d4:be:c9:eb:47:ab:e8:1d:a3:ec:13:5e:b2: 4d:45:50:b5:39:e5:93:34:58:fd:53:fc:32:da:82:b6:20:bc: 3e:18:d9:06:be:98:c0:af:a3:98:1a:30:8a:00:f0:a9:2c:b3: 26:78:75:eb:f0:2a:76:83:44:02:3a:92:ab:4e:cc:85:fe:5f: 62:25:e3:92:e2:39:c2:b3:d5:72:b3:54:dd:78:7e:e2:4b:8c: 71:4e:25:35:63:07:b5:9a:29:e6:38:86:27:4b:0f:12:ec:ae: 08:41:30:09:8e:17:3e:b4:d6:f4:db:9f:c7:b0:be:1b:a0:19: 00:12:7c:d7:49:b7:01:55:f5:da:6f:b0:be:cd:f8:11:86:37: 5b:60:2c:f6:4d:15:da:dc:ad:92:f4:7d:df:4e:88:5d:a4:10: b4:62:3a:0a:ed:8a:72:73:97:33:7c:82:81:ae:bf:66:bf:a9: 36:0c:d7:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNjExMTAvBgNVBAUTKEI0OUIyQjExRDM4NzZERUNERTEzRjVFOEY1OUU2NDFB N0QwOTNGQjkwHhcNMjYwMzI1MDU0ODM5WhcNMjYwNDAxMDU0ODM5WjAYMRYwFAYD VQQDEw02OWMzNzczNy0yMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1A0fXSBmEp+zA6loN5+vZu7pU3QD205FPfdbeht+d0ZKj8HUsDSHbPctmqIk gJJ7DXNtxPiu6OFvPPIffeAE91f/3qiVs2d+brvDANCVbc41o/x4bPwrQQdCfABM AnfpwdBXPKwNRNEusWf2LEuxR//PfFhhA6xXiOflFAg0bqe/YPxO5M+xLS7yQVKE Zp1Fz3/Tox1Gy+zuZF2cbWtrMb2xVaSp2uaSbBJpgHm/FAnVF+xnIOnZqV9xI70/ bftZftjNw3nfpDH2h3CANEdCZDdnOBjZFxU0Opv4vRKtR8AmO2ncFsrz6tWjkIFe rfBsLdmzGa1ijIi+pGdiM45CpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIviQP7J DEgrECnfAv78nYW/U8WxMB8GA1UdIwQYMBaAFLSbKxHTh23s3hP16PWeZBp9CT+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE2MS83MTMyRUY5QUQ5 MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJlemVFX1hvOVo1a0duMEpQ N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE2MS83MTMyRUY5QUQ5MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJl emVFX1hvOVo1a0duMEpQN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF8CGJqqqvPcf9AjzUxxBo67YrvvWElYL3+7ZZiGq5GHByYBbgaMImOhSeXAU h4mCdbJjvNUud4kXp4EMOrZF/ySYxivbEvEzk9BB9ArUvsnrR6voHaPsE16yTUVQ tTnlkzRY/VP8MtqCtiC8PhjZBr6YwK+jmBowigDwqSyzJnh16/AqdoNEAjqSq07M hf5fYiXjkuI5wrPVcrNU3Xh+4kuMcU4lNWMHtZop5jiGJ0sPEuyuCEEwCY4XPrTW 9Nufx7C+G6AZABJ810m3AVX12m+wvs34EYY3W2As9k0V2tytkvR9306IXaQQtGI6 Cu2KcnOXM3yCga6/Zr+pNgzXpw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:06:34 2026 by rpki-client