$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json) Hash identifier: q6k5cGwRyhK3KA0u6dTd+z8Lro1WoMleTny/JzVbbUo= Subject key identifier: 4E:76:95:E9:65:FC:CC:2D:96:82:71:1A:E3:D7:32:19:92:C9:FB:C1 Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Certificate serial: 19AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft Manifest number: 199B Signing time: Tue 24 Mar 2026 16:18:52 +0000 Manifest this update: Tue 24 Mar 2026 16:18:52 +0000 Manifest next update: Tue 31 Mar 2026 16:18:52 +0000 Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: oJxmO394vf0e1MKhe+dXgDoqtxSZxKWmXz6o1h5bf4Y=) 2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: tuFhPkM88OAOhbJHPJWo76XV19a6w7QlA1gqkoBuKS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6571 (0x19ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Validity Not Before: Mar 24 16:18:52 2026 GMT Not After : Mar 31 16:18:52 2026 GMT Subject: CN=69c2b96c-99d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7d:a7:6f:95:9b:99:e5:7f:37:81:4f:c8:10: 46:d5:10:54:76:e7:e3:58:88:74:29:a0:b5:d8:db: b2:50:8b:d0:fb:e3:4b:63:11:bb:4a:3a:13:a9:11: 00:5d:5b:0a:90:c5:22:ff:cc:f5:1d:03:7a:9d:66: c3:ed:e6:64:f6:65:fb:28:53:2f:ac:b3:61:3f:b4: 19:47:b6:b1:10:86:35:92:89:9e:f8:8b:0c:04:51: 6f:5e:82:ef:f1:47:38:4f:20:4e:8b:ec:46:b5:93: 36:81:76:80:2b:68:04:5a:ea:fb:34:8a:6a:e1:58: 40:d0:b4:08:da:60:e6:1a:ba:43:0b:37:3b:f5:f2: 3a:da:b7:5d:95:f8:88:47:bc:cf:1d:ac:29:50:0c: d2:f6:93:3b:a7:3d:e1:6a:2c:ec:06:7e:2d:07:c6: dd:8a:4b:6a:9a:d9:f7:fe:af:ca:7c:43:71:95:05: e2:5a:8d:af:28:cf:79:15:3f:0e:d8:cf:74:6c:0d: 17:a7:3a:7d:17:7a:fb:c3:a4:cd:a6:21:7b:ed:db: 7c:54:a9:67:86:01:5c:90:7b:c9:87:2d:e0:66:fc: 8b:89:cb:0a:cd:e4:8e:50:fd:8f:9e:4a:ee:0a:f1: cd:7b:a6:8a:64:36:1a:1d:26:d2:b0:33:98:69:db: d6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:76:95:E9:65:FC:CC:2D:96:82:71:1A:E3:D7:32:19:92:C9:FB:C1 X509v3 Authority Key Identifier: keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5a:92:02:bb:22:20:79:c3:ae:19:76:e7:66:7d:ca:dd:5d: f9:ae:91:50:6b:2c:ea:5f:7c:e2:7d:3a:98:e8:d1:13:62:cb: 00:f0:1f:af:21:bc:ce:63:c5:4a:dc:78:c2:60:ee:58:7f:70: 37:6f:84:f5:00:cd:1a:8a:33:8d:ee:f0:5a:c2:a4:61:39:75: 23:ee:97:4f:d1:5e:96:f4:ae:76:8d:d8:f6:6b:1a:d6:f8:9c: e5:04:15:d2:a0:7d:ab:fd:d4:7a:ea:b4:8a:03:12:f1:3e:24: 68:79:da:e2:c5:27:3c:59:c7:24:e7:a2:0e:8d:8b:cf:25:ae: fc:f3:26:68:45:00:6d:78:d3:da:a4:08:18:3e:fb:3b:88:08: 0a:d1:6a:a6:66:a8:24:9a:0a:45:1b:4d:df:90:57:13:0c:2e: 78:2d:f6:d2:83:f8:c5:67:0d:27:ff:e8:59:42:6f:6a:02:de: bb:06:dd:08:a9:98:8f:6e:14:7d:eb:f0:ab:53:04:57:7c:83: 9b:a4:9c:26:f8:4a:05:b2:f8:2e:a4:64:68:a4:02:2b:9a:37: f8:1e:40:7b:06:6c:3c:e3:2f:ab:53:6b:b2:02:0d:03:d9:d9: 2e:d7:1c:2a:fc:30:90:d9:ce:08:ca:2f:a0:29:b6:66:37:bd: 15:98:f3:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx QjVFQjE1OEUwHhcNMjYwMzI0MTYxODUyWhcNMjYwMzMxMTYxODUyWjAYMRYwFAYD VQQDEw02OWMyYjk2Yy05OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkH2nb5WbmeV/N4FPyBBG1RBUdufjWIh0KaC12NuyUIvQ++NLYxG7SjoTqREA XVsKkMUi/8z1HQN6nWbD7eZk9mX7KFMvrLNhP7QZR7axEIY1kome+IsMBFFvXoLv 8Uc4TyBOi+xGtZM2gXaAK2gEWur7NIpq4VhA0LQI2mDmGrpDCzc79fI62rddlfiI R7zPHawpUAzS9pM7pz3haizsBn4tB8bdiktqmtn3/q/KfENxlQXiWo2vKM95FT8O 2M90bA0Xpzp9F3r7w6TNpiF77dt8VKlnhgFckHvJhy3gZvyLicsKzeSOUP2Pnkru CvHNe6aKZDYaHSbSsDOYadvWhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE52lell /MwtloJxGuPXMhmSyfvBMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2 RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M4QS9FN0ZGQzVGNDg2RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOeksz WHUwUzhTbVNHZ3NiWHJGWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnVqSArsiIHnDrhl252Z9yt1d+a6RUGss6l984n06mOjRE2LLAPAfryG8zmPF Stx4wmDuWH9wN2+E9QDNGoozje7wWsKkYTl1I+6XT9FelvSudo3Y9msa1vic5QQV 0qB9q/3Ueuq0igMS8T4kaHna4sUnPFnHJOeiDo2LzyWu/PMmaEUAbXjT2qQIGD77 O4gICtFqpmaoJJoKRRtN35BXEwwueC320oP4xWcNJ//oWUJvagLeuwbdCKmYj24U fevwq1MEV3yDm6ScJvhKBbL4LqRkaKQCK5o3+B5AewZsPOMvq1NrsgINA9nZLtcc KvwwkNnOCMovoCm2Zje9FZjz1w== -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:34 2026 by rpki-client