$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: UZCcDs10UD6RXm5WBZ3yvNnJoSR86Ab3sdW45VuLUkM= Subject key identifier: 1D:9C:D6:DA:0C:70:89:CF:E7:39:1A:74:07:48:03:6F:44:89:A1:62 Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0CD7 Signing time: Tue 24 Mar 2026 18:11:49 +0000 Manifest this update: Tue 24 Mar 2026 18:11:48 +0000 Manifest next update: Tue 31 Mar 2026 18:11:48 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: EcGR1Ftf33r50awD9xcIAThxh2pnibTd/1ohyvEoDRE=) 2: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: DfEb8YlsjclJ0EYnxu7RhPWpVEUZS3PESB0dUVbX1H4=) 3: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: TKxcs+BXUFiyDLVeeKpTCfJIMBeNCNlPXKLFC4ZDecY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3309 (0xced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Validity Not Before: Mar 24 18:11:48 2026 GMT Not After : Mar 31 18:11:48 2026 GMT Subject: CN=69c2d3e5-4de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:32:45:fb:68:a7:5f:ab:00:4f:88:b6:03: a9:3c:a2:14:62:8a:31:1f:90:e1:1f:e0:de:c0:3d: be:29:06:6f:dc:b5:1c:43:13:94:9b:3f:57:54:06: 29:2b:cc:25:22:3c:ab:55:8e:1f:ea:b2:74:1f:ce: de:27:b2:6e:47:79:88:f1:f7:86:c1:9c:a5:57:2c: e9:2c:fb:a0:b6:bf:86:0a:37:ec:1d:af:17:5f:bc: 92:00:23:98:a4:cb:b2:d0:ed:ed:4e:b0:a2:9e:ac: 77:e5:40:70:e0:14:89:3b:89:fa:d8:c8:da:e4:6d: 15:80:1a:1a:c9:2c:00:a3:72:ce:a0:e7:7f:ff:17: f8:e0:4c:96:3b:38:ce:67:87:ae:29:9a:1d:48:3d: cd:a5:8a:e7:a3:97:d9:7b:de:3b:23:42:a1:85:36: d9:dc:fa:a3:05:ed:e2:f2:30:cb:15:fe:a4:b0:71: 9c:48:48:2a:a0:10:85:c2:0d:26:01:3f:5c:3a:7a: a4:51:eb:62:16:cf:4c:ae:81:57:81:e7:a7:2e:aa: e4:ea:89:32:76:83:da:96:8c:7b:cc:0d:1d:7d:ab: da:bb:04:0d:18:f2:96:40:f3:dc:6d:89:c0:8b:6d: 59:42:67:50:44:71:f5:78:ba:06:ea:ec:b2:0e:4a: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9C:D6:DA:0C:70:89:CF:E7:39:1A:74:07:48:03:6F:44:89:A1:62 X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:31:24:76:3a:5e:38:46:95:ac:a3:cd:1a:56:e4:1c:f4:8d: a2:d4:07:d3:6c:05:77:f5:72:0b:06:ef:c1:44:cb:f8:b1:22: 34:ed:6e:a8:94:88:b0:e4:9a:82:f4:ec:3f:f2:8d:2a:81:b7: 3f:1e:94:71:fd:0d:ca:a8:52:33:9d:9c:66:d1:cb:9f:a5:1d: 32:d7:d2:8a:01:93:6b:d6:04:4d:60:ba:e6:80:75:b8:d7:5c: b8:d9:9b:5b:ea:a1:b2:4b:c1:6a:d8:11:9e:f2:70:fc:1f:e2: 10:b7:a4:b3:75:79:45:d7:1e:30:c2:79:f3:cd:71:ec:1b:1b: db:8c:6f:dc:68:5e:59:f4:86:4b:6a:83:be:c4:81:b7:a2:85: a8:1c:d8:d2:7e:59:d3:0b:07:75:0f:62:dd:b2:84:8e:e1:5c: 76:b5:f7:c7:5d:19:21:3b:32:4c:f7:f5:9d:8b:e6:44:8b:11: 57:1f:f2:14:15:83:24:28:81:cc:89:50:53:48:20:b3:eb:f7: e5:ec:65:34:01:65:a6:9a:2f:e1:82:08:a6:f3:47:e0:1e:ee: eb:e5:09:f5:7d:79:45:b5:90:6a:c9:70:20:d2:33:fe:5f:cf: 30:68:d6:5b:02:c8:48:67:91:bb:9e:f9:5a:10:51:2f:57:18: 7c:7a:c8:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjYwMzI0MTgxMTQ4WhcNMjYwMzMxMTgxMTQ4WjAYMRYwFAYD VQQDEw02OWMyZDNlNS00ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBUyRftop1+rAE+ItgOpPKIUYooxH5DhH+DewD2+KQZv3LUcQxOUmz9XVAYp K8wlIjyrVY4f6rJ0H87eJ7JuR3mI8feGwZylVyzpLPugtr+GCjfsHa8XX7ySACOY pMuy0O3tTrCinqx35UBw4BSJO4n62Mja5G0VgBoaySwAo3LOoOd//xf44EyWOzjO Z4euKZodSD3NpYrno5fZe947I0KhhTbZ3PqjBe3i8jDLFf6ksHGcSEgqoBCFwg0m AT9cOnqkUetiFs9MroFXgeenLqrk6okydoPalox7zA0dfavauwQNGPKWQPPcbYnA i21ZQmdQRHH1eLoG6uyyDkoDfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2c1toM cInP5zkadAdIA29EiaFiMB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAADEkdjpeOEaVrKPNGlbkHPSNotQH02wFd/VyCwbvwUTL+LEiNO1uqJSIsOSa gvTsP/KNKoG3Px6Ucf0NyqhSM52cZtHLn6UdMtfSigGTa9YETWC65oB1uNdcuNmb W+qhskvBatgRnvJw/B/iELeks3V5RdceMMJ5881x7Bsb24xv3GheWfSGS2qDvsSB t6KFqBzY0n5Z0wsHdQ9i3bKEjuFcdrX3x10ZITsyTPf1nYvmRIsRVx/yFBWDJCiB zIlQU0ggs+v35exlNAFlppov4YIIpvNH4B7u6+UJ9X15RbWQaslwINIz/l/PMGjW WwLISGeRu575WhBRL1cYfHrIHQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:51 2026 by rpki-client