$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: nHVUvH1d1BKgfzEY6Hz4L+M7DTs70VgFOSlOH+W9Akk= Subject key identifier: 5E:AE:20:54:E0:55:CD:E0:83:EA:82:02:CD:22:01:04:DC:78:A2:D1 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 04EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 04B7 Signing time: Tue 24 Mar 2026 23:44:14 +0000 Manifest this update: Tue 24 Mar 2026 23:44:14 +0000 Manifest next update: Tue 31 Mar 2026 23:44:14 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: BctibWrfFDdkQ3b5wpkQARjxHGUchdqcefvjy1Ifrhw=) 2: 942DCEF2FC0B11F0BEECCDA4756F56BC.roa (hash: J5KApiO82LjzqeOhyJKbcpqwAb46zG+PlR5LTK867CE=) 3: A6E8B05401D611F1A42696D7366F56BC.roa (hash: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g=) 4: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=) 5: E9616980121B11F19EC23EC11C3D8C67.roa (hash: KFfs3jutC9rYjrXOHZ8eYzPy4meG6duo+32x4C1iZzc=) 6: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Mar 24 23:44:14 2026 GMT Not After : Mar 31 23:44:14 2026 GMT Subject: CN=69c321ce-1519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:61:c7:82:b8:6e:51:f8:d8:7c:94:88:bf: fc:61:f7:7a:99:4e:ff:71:e4:c5:3f:ca:69:88:f4: 74:9c:86:58:3e:1f:b6:21:08:56:db:aa:66:70:e5: cb:71:63:f9:6f:a7:35:df:49:07:3f:32:0c:ec:89: 37:59:80:e2:67:1e:d3:d0:9e:7f:da:26:07:fe:e8: c8:9f:75:ca:69:18:81:18:f1:3b:b8:37:88:96:f4: 44:e0:ab:bd:49:27:1d:cf:9b:39:8a:f4:c1:5c:04: 98:a5:c6:b7:86:c9:7a:a7:77:a1:e8:b3:ff:69:00: 02:ed:d0:64:fb:70:eb:0c:8c:77:1a:84:98:fd:f4: e7:5c:87:42:9a:30:10:5f:d5:b3:f2:0a:b8:21:14: 58:2c:e6:f8:ef:19:d3:b6:cb:46:ae:4f:6f:54:50: 86:ff:16:5b:3b:ea:bc:49:76:60:c8:fc:ad:fc:f0: 4f:8f:99:33:38:cd:c3:2e:bd:25:95:15:31:14:0e: 9e:33:22:f8:81:3b:fd:52:24:d4:90:e1:32:fa:b0: b5:d3:f9:03:42:bd:8c:88:a0:3e:51:52:a5:a8:47: b5:2a:b6:88:e8:68:5d:fa:19:62:b6:0e:b8:38:c9: 1e:0b:60:71:09:80:44:b2:04:f3:74:41:77:c0:bb: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AE:20:54:E0:55:CD:E0:83:EA:82:02:CD:22:01:04:DC:78:A2:D1 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:73:ad:d6:55:4e:92:3c:19:d4:af:28:8f:69:d5:c5:35:4a: d3:2d:a6:6b:ae:ff:92:8e:eb:23:2e:1a:14:5d:eb:48:ed:a1: 37:4a:d4:bb:88:2b:17:a6:8b:8c:ad:90:0d:d8:ec:41:2e:88: 68:cc:98:b4:de:db:6f:f6:7d:af:e6:e7:fe:ae:a0:bc:b2:e8: 9e:7b:83:58:79:30:7b:71:e3:16:ba:db:5c:db:a6:29:eb:4e: 6c:30:0f:77:39:52:04:1a:fb:45:b8:03:63:d7:3a:74:10:6e: 82:9f:c7:72:d2:c6:86:a4:f9:0b:e9:30:91:bc:de:15:b9:df: f6:6e:bf:69:91:c9:3b:50:f5:f1:24:54:da:b3:37:cc:04:b9: 2a:30:da:62:f1:cc:17:0b:0e:90:41:b2:89:3c:32:54:23:8f: 75:20:42:d6:37:2d:0f:09:a7:10:a8:34:86:83:b3:99:85:93: 3e:0e:86:ea:09:47:fd:4f:f0:87:8b:4b:3e:eb:48:7c:70:24: e8:98:7b:b8:9c:a1:71:9a:dd:7c:4d:c4:63:ea:8b:34:f5:6d: aa:d7:42:c5:e1:ce:c2:8d:30:be:57:13:c5:70:08:8d:cc:76: 64:7d:56:86:d1:05:df:7d:97:7f:dd:79:d1:09:5d:f4:0b:87: 33:89:43:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjYwMzI0MjM0NDE0WhcNMjYwMzMxMjM0NDE0WjAYMRYwFAYD VQQDEw02OWMzMjFjZS0xNTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmRhx4K4blH42HyUiL/8Yfd6mU7/ceTFP8ppiPR0nIZYPh+2IQhW26pmcOXL cWP5b6c130kHPzIM7Ik3WYDiZx7T0J5/2iYH/ujIn3XKaRiBGPE7uDeIlvRE4Ku9 SScdz5s5ivTBXASYpca3hsl6p3eh6LP/aQAC7dBk+3DrDIx3GoSY/fTnXIdCmjAQ X9Wz8gq4IRRYLOb47xnTtstGrk9vVFCG/xZbO+q8SXZgyPyt/PBPj5kzOM3DLr0l lRUxFA6eMyL4gTv9UiTUkOEy+rC10/kDQr2MiKA+UVKlqEe1KraI6Ghd+hlitg64 OMkeC2BxCYBEsgTzdEF3wLvW0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6uIFTg Vc3gg+qCAs0iAQTceKLRMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsnOt1lVOkjwZ1K8oj2nVxTVK0y2ma67/ko7rIy4aFF3rSO2hN0rUu4grF6aL jK2QDdjsQS6IaMyYtN7bb/Z9r+bn/q6gvLLonnuDWHkwe3HjFrrbXNumKetObDAP dzlSBBr7RbgDY9c6dBBugp/HctLGhqT5C+kwkbzeFbnf9m6/aZHJO1D18SRU2rM3 zAS5KjDaYvHMFwsOkEGyiTwyVCOPdSBC1jctDwmnEKg0hoOzmYWTPg6G6glH/U/w h4tLPutIfHAk6Jh7uJyhcZrdfE3EY+qLNPVtqtdCxeHOwo0wvlcTxXAIjcx2ZH1W htEF332Xf9150Qld9AuHM4lDrg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:53:49 2026 by rpki-client