$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json) Hash identifier: GJ6ruIxiEwq4MYYWpahyL4dr4InFCQqKTWKoBCKXeP0= Subject key identifier: 4F:FC:19:96:12:93:FE:2E:45:AA:1A:88:61:20:8B:9E:49:49:03:20 Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Certificate serial: 35D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft Manifest number: 3567 Signing time: Tue 24 Mar 2026 14:16:55 +0000 Manifest this update: Tue 24 Mar 2026 14:16:54 +0000 Manifest next update: Tue 31 Mar 2026 14:16:54 +0000 Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: EN57BTzP55CdXQtxCWROs4Ce1ltLxN+2ApPSGnf1B8c=) 2: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: DmeP00Tglg1B2vHEmL9YYBPAmu6yzXlrGlk/VI9+C3Y=) 3: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: K0D7rg55G2Vxgg4st1LsCOaUPeB0t55XfIkLwQZOLfU=) 4: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: /gJ9ZwtzzOTKqCZBrZuocfhT4XIIICVgFwfqJxZhD14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13780 (0x35d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Validity Not Before: Mar 24 14:16:54 2026 GMT Not After : Mar 31 14:16:54 2026 GMT Subject: CN=69c29cd7-2c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:31:2c:b5:cf:f6:95:da:54:cf:a9:27:1f: 61:51:39:c0:e9:fa:43:01:4f:6a:ed:04:78:64:70: 61:27:dc:73:4d:e8:02:3e:bd:88:be:e1:97:91:82: cd:15:6e:83:34:62:4b:e5:f9:13:6d:0f:bf:fa:35: 51:e2:71:21:89:af:9c:34:5f:25:7b:9b:5f:0d:98: 04:80:a4:da:7b:55:ac:84:32:be:62:80:11:7b:7a: b0:21:1b:57:f2:26:80:3f:6a:92:bd:76:4f:16:8d: 48:58:31:11:40:f8:a4:f5:de:c4:69:18:2c:a6:6b: 4a:d6:f5:ec:90:26:f2:86:c0:55:eb:7d:86:dc:5c: 4b:23:10:fc:b9:45:28:92:53:e6:e5:13:89:95:e3: a3:a4:6e:4a:4d:04:a5:26:e2:27:1d:c9:0a:42:72: 69:1e:68:c7:2e:7a:f1:43:96:86:09:ce:96:55:ae: b0:31:d0:ae:25:ea:2b:b7:a6:47:5d:40:e9:0b:e9: 8e:d6:e6:24:83:78:5d:9f:58:a3:82:00:d2:31:86: 84:17:2e:d9:39:31:da:ce:25:c3:4e:b8:be:70:65: 3e:97:d3:cd:b9:6c:db:37:1a:4e:66:a3:e9:16:ac: ca:e3:f3:4d:a2:00:8f:71:e7:02:39:c6:6b:75:a5: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FC:19:96:12:93:FE:2E:45:AA:1A:88:61:20:8B:9E:49:49:03:20 X509v3 Authority Key Identifier: keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f8:40:e7:19:1b:46:cb:fe:20:cc:85:30:67:d3:0f:9b:e2: 79:46:92:d9:3a:4a:75:26:69:d4:4c:53:6a:cc:3e:05:8d:1a: bd:34:fd:ac:e5:34:1d:99:40:56:2e:59:7d:27:29:67:5b:54: 1a:5f:4b:ac:60:a2:36:e9:6f:97:79:de:d3:e1:68:67:15:c6: 43:a2:9d:2e:4f:66:30:70:6e:6b:00:0a:25:d7:a5:c0:30:38: 0a:84:fe:39:f2:61:7a:cd:f3:15:bd:f6:2a:98:98:cb:ec:07: df:45:89:7a:03:1a:63:ea:3d:33:9f:52:74:18:ae:7b:ec:06: c8:c0:c0:71:19:47:c5:b0:15:8f:10:d6:70:1c:81:ba:ec:70: 58:17:2b:08:24:a4:50:60:80:c6:2b:ae:f5:d2:8e:e5:ff:d7: 3e:98:6e:60:f2:58:ce:df:db:a2:a1:92:1e:27:4d:fd:10:dd: 12:a5:0f:06:65:e0:c5:2a:05:1b:9e:5d:ce:b6:24:17:39:ed: 9c:7c:b1:87:f8:38:98:05:3c:53:5f:61:3c:d2:0b:8c:e1:a7: 8f:e6:63:1f:67:c3:03:8a:52:ed:80:dd:66:23:de:21:14:39: b6:48:08:57:47:f7:25:f8:d9:26:d3:31:a8:bb:eb:5f:3f:76: c4:28:49:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy MEFDMDM1MjcwHhcNMjYwMzI0MTQxNjU0WhcNMjYwMzMxMTQxNjU0WjAYMRYwFAYD VQQDEw02OWMyOWNkNy0yYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMQxLLXP9pXaVM+pJx9hUTnA6fpDAU9q7QR4ZHBhJ9xzTegCPr2IvuGXkYLN FW6DNGJL5fkTbQ+/+jVR4nEhia+cNF8le5tfDZgEgKTae1WshDK+YoARe3qwIRtX 8iaAP2qSvXZPFo1IWDERQPik9d7EaRgspmtK1vXskCbyhsBV632G3FxLIxD8uUUo klPm5ROJleOjpG5KTQSlJuInHckKQnJpHmjHLnrxQ5aGCc6WVa6wMdCuJeort6ZH XUDpC+mO1uYkg3hdn1ijggDSMYaEFy7ZOTHaziXDTri+cGU+l9PNuWzbNxpOZqPp FqzK4/NNogCPcecCOcZrdaVtzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/8GZYS k/4uRaoaiGEgi55JSQMgMB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC82OUYwNEJBODFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThU U3BxT1BuM2FqWTBnckFOU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArvhA5xkbRsv+IMyFMGfTD5vieUaS2TpKdSZp1ExTasw+BY0avTT9rOU0HZlA Vi5ZfScpZ1tUGl9LrGCiNulvl3ne0+FoZxXGQ6KdLk9mMHBuawAKJdelwDA4CoT+ OfJhes3zFb32KpiYy+wH30WJegMaY+o9M59SdBiue+wGyMDAcRlHxbAVjxDWcByB uuxwWBcrCCSkUGCAxiuu9dKO5f/XPphuYPJYzt/boqGSHidN/RDdEqUPBmXgxSoF G55dzrYkFzntnHyxh/g4mAU8U19hPNILjOGnj+ZjH2fDA4pS7YDdZiPeIRQ5tkgI V0f3JfjZJtMxqLvrXz92xChJQg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:00 2026 by rpki-client