$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: fLAxRj3l+IkFhX9s285g0Bony7cHFJtrWPfGAjbq0gY= Subject key identifier: ED:7B:92:10:8A:5F:CF:33:AD:9A:A4:76:95:02:08:62:2C:F3:64:17 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0C7C Signing time: Tue 24 Mar 2026 18:29:11 +0000 Manifest this update: Tue 24 Mar 2026 18:29:11 +0000 Manifest next update: Tue 31 Mar 2026 18:29:11 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: utDn8Cy4H/aKr1+KMQMs8w480LGitevMAeEloN92dmo=) 2: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: J2Vubqi8ic0NqlP+qdXl9htU+adGeTvh1ITR3W4ptX4=) 3: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nEmNA11Dyl7nTFmnZC9S6fy/8rzvC71ench9nRz81iE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Mar 24 18:29:11 2026 GMT Not After : Mar 31 18:29:11 2026 GMT Subject: CN=69c2d7f7-7448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:9e:d2:42:b8:20:e4:7c:6c:e3:7a:ce:eb: 1e:97:a8:14:43:40:79:db:70:cf:81:52:11:61:21: 00:00:a8:c5:44:e4:5e:95:76:83:a8:54:3f:cd:3e: f4:eb:37:14:9e:00:0c:bb:a1:fd:f1:b6:33:4d:fa: 54:7e:df:91:12:1c:ec:9f:da:8e:2a:1b:48:c3:f3: d6:55:9d:6a:2a:73:cc:4f:67:78:e8:38:ca:94:db: 4f:ac:b3:62:28:3c:6c:91:6b:bb:f6:78:54:85:48: 42:71:93:a9:46:c5:83:c8:e9:1a:88:bc:b2:dd:dc: 3d:20:8b:ac:eb:f8:6f:84:e3:3c:2d:62:1c:c1:f1: 70:35:ba:5b:f8:29:1b:57:d9:f9:49:24:a1:84:7a: 7d:0a:e2:4e:50:2f:00:1e:bb:5e:d3:73:1a:7a:d7: f0:32:64:5a:c4:16:5b:a4:84:92:35:45:b2:03:1e: 74:ac:8f:47:36:f3:ed:8e:26:2a:2e:9f:fb:b9:ff: fd:d9:90:5d:0d:5e:79:a5:77:1e:cd:10:1e:aa:31: e4:21:01:9c:e0:24:6d:0c:71:99:bd:3e:80:23:18: 0d:87:07:00:c7:c2:8a:dd:1f:c6:14:4f:0a:bc:82: 71:a4:91:11:ba:21:d4:b3:ca:c3:2a:9e:38:09:e2: 8e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7B:92:10:8A:5F:CF:33:AD:9A:A4:76:95:02:08:62:2C:F3:64:17 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:41:1e:51:91:dd:e9:64:48:30:9b:da:13:57:a6:02:80:cd: 4b:f6:bb:b6:9f:d5:81:3b:ca:30:09:df:01:6b:73:a7:58:57: 3e:7c:9d:5a:a3:34:ca:01:67:4c:26:f7:3a:eb:88:1b:89:61: 22:58:4d:1f:7a:60:18:f3:54:73:eb:bd:87:42:fa:b2:0b:99: 8b:02:9d:83:3e:a1:c1:9f:89:40:77:31:64:16:cd:51:7c:2c: bf:58:10:48:74:c2:2b:f9:be:74:03:4c:be:26:f6:d0:cd:af: 33:44:6b:53:bd:f1:f5:2d:85:f3:18:c3:07:e8:4f:03:b0:44: 20:dc:a3:b2:87:3d:86:83:56:09:81:6c:50:5c:3e:c0:4e:1c: 24:5f:41:52:9b:a1:b6:df:f7:95:f9:ef:84:74:3f:12:19:51: ae:4f:07:08:b6:43:93:be:53:69:1d:ea:3a:65:d9:e5:61:f8: 00:5b:11:6c:b0:df:a8:15:94:73:28:e0:32:57:81:3b:e6:fe: 28:67:88:46:bc:6c:61:60:3f:51:c2:44:47:28:73:f0:c5:ca: cc:7a:fd:c0:c1:6f:86:89:20:b0:33:f4:ef:ce:40:ec:2c:da: 5a:55:71:b1:92:c6:e6:ce:bc:c8:b9:17:1e:d1:48:74:a5:2a: 4f:cb:78:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjYwMzI0MTgyOTExWhcNMjYwMzMxMTgyOTExWjAYMRYwFAYD VQQDEw02OWMyZDdmNy03NDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTGe0kK4IOR8bON6zusel6gUQ0B523DPgVIRYSEAAKjFRORelXaDqFQ/zT70 6zcUngAMu6H98bYzTfpUft+REhzsn9qOKhtIw/PWVZ1qKnPMT2d46DjKlNtPrLNi KDxskWu79nhUhUhCcZOpRsWDyOkaiLyy3dw9IIus6/hvhOM8LWIcwfFwNbpb+Ckb V9n5SSShhHp9CuJOUC8AHrte03MaetfwMmRaxBZbpISSNUWyAx50rI9HNvPtjiYq Lp/7uf/92ZBdDV55pXcezRAeqjHkIQGc4CRtDHGZvT6AIxgNhwcAx8KK3R/GFE8K vIJxpJERuiHUs8rDKp44CeKO5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO17khCK X88zrZqkdpUCCGIs82QXMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtEEeUZHd6WRIMJvaE1emAoDNS/a7tp/VgTvKMAnfAWtzp1hXPnydWqM0ygFn TCb3OuuIG4lhIlhNH3pgGPNUc+u9h0L6sguZiwKdgz6hwZ+JQHcxZBbNUXwsv1gQ SHTCK/m+dANMvib20M2vM0RrU73x9S2F8xjDB+hPA7BEINyjsoc9hoNWCYFsUFw+ wE4cJF9BUpuhtt/3lfnvhHQ/EhlRrk8HCLZDk75TaR3qOmXZ5WH4AFsRbLDfqBWU cyjgMleBO+b+KGeIRrxsYWA/UcJERyhz8MXKzHr9wMFvhokgsDP0785A7CzaWlVx sZLG5s68yLkXHtFIdKUqT8t4qQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:05 2026 by rpki-client