$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json) Hash identifier: KKCdR71nm+7G8qFPTBsRC4ZtOdhvGBEG1OLbbBdevMo= Subject key identifier: 5C:A5:D5:3E:26:1D:4B:97:B7:97:5C:E0:41:A4:E4:85:3D:85:C9:6B Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59 Certificate issuer: /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft Manifest number: 012C Signing time: Wed 25 Mar 2026 04:54:06 +0000 Manifest this update: Wed 25 Mar 2026 04:54:05 +0000 Manifest next update: Wed 01 Apr 2026 04:54:05 +0000 Files and hashes: 1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: bC/RdKZ5AKE83sqRjyrWkOvNI6ebr3humprY28uCPhY=) 2: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: xaj9ev9gObxEarMjWAx7hyuUavQ9BGr2NQce4XrNjSg=) 3: 43749A72824E11F0A1C4B018C4F9AE02.roa (hash: o9Xs3io38RTaw4LTZVDWVNHdH5+V8NMTsg37SGZ03EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59 Validity Not Before: Mar 25 04:54:05 2026 GMT Not After : Apr 1 04:54:05 2026 GMT Subject: CN=69c36a6e-c0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:67:c5:03:e3:35:e1:be:9e:60:99:b3:76: 82:44:2b:7e:8f:2f:3b:56:72:83:d6:80:47:60:4e: ea:af:f8:fb:00:0e:11:46:00:6f:fd:4e:eb:31:34: 06:be:d1:84:c0:e6:a1:18:2d:7c:88:4c:65:b7:c0: e4:6b:1a:39:df:c9:4a:2a:7b:36:68:f4:e9:ee:54: f7:5d:b7:64:0a:4f:31:25:3e:a7:9f:4d:e1:43:2f: 67:41:aa:5f:b2:ef:bc:e7:d2:d6:df:a7:dd:66:b0: 9d:b2:2d:b6:e4:f9:d9:8a:6d:83:b8:41:38:42:b3: be:c6:23:f7:d9:7f:7e:d8:15:35:92:18:e5:1d:17: 27:79:e5:27:b9:b6:2d:ba:62:18:9b:d7:90:fa:f5: 6d:81:04:7b:c0:d9:50:38:07:08:ac:02:eb:c1:82: 93:66:04:b3:9f:e7:9a:58:76:43:5e:ee:b8:2d:0c: 57:7a:ef:5c:fe:54:dd:7c:02:9e:03:5b:8c:ca:7c: 26:5a:45:fe:9c:6f:cb:46:fe:a9:4e:17:a6:35:3c: d9:7d:b6:90:fb:29:d2:c8:56:4a:1e:60:34:6a:69: 71:92:1c:4f:0b:9a:5b:af:f1:2b:1e:39:f5:0d:b7: 04:d0:4c:22:0c:3a:dd:81:59:5b:79:6b:12:28:d4: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A5:D5:3E:26:1D:4B:97:B7:97:5C:E0:41:A4:E4:85:3D:85:C9:6B X509v3 Authority Key Identifier: keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:3d:7b:b1:ff:0b:a7:91:f4:88:ea:c6:f2:a3:fc:85:8f:54: 99:90:d4:91:2a:87:26:ef:a9:2b:0a:e3:33:c0:c1:d4:cf:5f: b8:43:41:07:a8:f6:1e:e6:b2:44:72:63:5f:8d:be:4c:d5:9a: 0c:c2:a5:4b:1f:93:32:52:b5:2f:95:fc:69:87:e6:e4:e1:86: 6a:aa:dd:49:d4:0c:8c:17:ce:3c:98:b9:0c:f8:d6:5b:f5:0d: 68:18:2f:2d:44:af:2f:02:d5:02:35:20:ca:d2:cc:9e:e9:bf: 33:38:e2:52:40:9a:6a:ef:d4:6e:e5:46:02:dc:99:68:7c:ee: 3c:3f:ef:70:b9:17:c5:00:b7:2c:ac:5a:18:8f:d6:5e:2a:0f: 7f:75:b1:a7:5a:b8:61:c5:1f:e0:aa:8c:d2:11:3e:52:99:36: 4d:ad:1a:58:2a:28:e8:2a:b1:b8:8b:32:02:36:c0:31:22:e2: 19:9e:8f:4c:90:8e:fb:bd:56:9d:d5:ee:96:e7:b7:cc:39:86: bd:9b:cf:ff:65:9f:43:30:94:00:58:fb:3c:46:eb:cc:1b:e3: 32:20:7d:39:6e:7b:3e:d3:03:0e:9e:58:c4:33:18:8c:a4:09: 34:d1:2c:fe:e1:6a:c7:79:c3:cd:a7:4f:c6:c3:c7:e9:56:ea: 70:5b:26:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDRFN0VEOTUxQzRGODlGMTFGMTk0NDY4RUE4MTU0NEQ3 MzM1RTRGNTkwHhcNMjYwMzI1MDQ1NDA1WhcNMjYwNDAxMDQ1NDA1WjAYMRYwFAYD VQQDEw02OWMzNmE2ZS1jMGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUFnxQPjNeG+nmCZs3aCRCt+jy87VnKD1oBHYE7qr/j7AA4RRgBv/U7rMTQG vtGEwOahGC18iExlt8Dkaxo538lKKns2aPTp7lT3XbdkCk8xJT6nn03hQy9nQapf su+859LW36fdZrCdsi225PnZim2DuEE4QrO+xiP32X9+2BU1khjlHRcneeUnubYt umIYm9eQ+vVtgQR7wNlQOAcIrALrwYKTZgSzn+eaWHZDXu64LQxXeu9c/lTdfAKe A1uMynwmWkX+nG/LRv6pThemNTzZfbaQ+ynSyFZKHmA0amlxkhxPC5pbr/ErHjn1 DbcE0EwiDDrdgVlbeWsSKNR0iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyl1T4m HUuXt5dc4EGk5IU9hclrMB8GA1UdIwQYMBaAFE5+2VHE+J8R8ZRGjqgVRNczXk9Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GMTRFRUQ5ODZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54SHhsRWFPcUJWRTF6TmVU MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RuN1pVY1Q0bnhIeGxFYU9xQlZFMXpOZVQxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkM4Ri9GMTRFRUQ5ODZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54 SHhsRWFPcUJWRTF6TmVUMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwz17sf8Lp5H0iOrG8qP8hY9UmZDUkSqHJu+pKwrjM8DB1M9fuENBB6j2Huay RHJjX42+TNWaDMKlSx+TMlK1L5X8aYfm5OGGaqrdSdQMjBfOPJi5DPjWW/UNaBgv LUSvLwLVAjUgytLMnum/MzjiUkCaau/UbuVGAtyZaHzuPD/vcLkXxQC3LKxaGI/W XioPf3Wxp1q4YcUf4KqM0hE+Upk2Ta0aWCoo6CqxuIsyAjbAMSLiGZ6PTJCO+71W ndXulue3zDmGvZvP/2WfQzCUAFj7PEbrzBvjMiB9OW57PtMDDp5YxDMYjKQJNNEs /uFqx3nDzadPxsPH6VbqcFsmiQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:04:05 2026 by rpki-client