$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json) Hash identifier: 5VYlOlU80TtaoBhlySbvxpdg/NJXjAl4KZcmUxKvS3A= Subject key identifier: 60:C9:D8:CB:D0:33:7A:0C:5A:76:A7:FA:94:36:BE:A5:0D:77:F5:B2 Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft Manifest number: 9B Signing time: Wed 25 Mar 2026 06:43:52 +0000 Manifest this update: Wed 25 Mar 2026 06:43:51 +0000 Manifest next update: Wed 01 Apr 2026 06:43:51 +0000 Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: eDAezxMDhvBaEnq4D5mqgIJhszaE1k6NXy1bHhx5V1U=) 2: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: uMO+2JAcztORNSv06a9gx7VlI/CanLXKpbYCi8Zh4kI=) 3: E641780E535211F0A795A950C4F9AE02.roa (hash: ed5G9bTTE4ta+9ZR/j/PVZoByMJafJHwh2lR+lbY92s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Validity Not Before: Mar 25 06:43:51 2026 GMT Not After : Apr 1 06:43:51 2026 GMT Subject: CN=69c38427-ec03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:98:92:10:25:8e:06:29:52:bb:87:b8:30: 01:ce:78:ae:82:da:3e:02:c4:2c:2b:d4:87:a8:5d: 7d:97:85:ee:40:54:55:05:62:a4:5e:0b:8c:53:e1: 40:c8:ce:ec:50:a0:62:8a:e8:55:87:b1:54:18:3b: 6a:72:c7:f1:70:b2:51:ab:6a:31:1e:ee:6e:2e:12: f9:77:32:24:61:b4:45:c1:d8:88:8e:e1:a5:4b:c7: 75:3c:e1:20:3f:13:0e:00:fa:f1:75:60:70:28:1c: 73:55:db:e3:ae:cd:67:43:bf:c2:42:e6:36:08:17: f9:1c:26:ac:d2:e9:e9:54:2e:fe:8f:12:3c:cd:2e: d3:d7:aa:9f:e6:27:65:89:1a:aa:11:64:cb:8f:98: f9:a6:16:5a:93:4a:81:99:92:bc:fb:f5:7f:ff:2d: be:9e:60:70:61:ec:2e:90:a5:0a:3d:81:1f:d6:3f: 68:3d:32:88:17:68:79:80:94:19:73:d0:81:28:f3: eb:2c:0f:22:9c:3e:81:3f:fc:8f:40:da:21:f5:5a: 39:7c:5e:13:ee:6d:1f:95:d8:f4:db:f3:3d:d3:e5: bd:16:57:b3:f8:c6:ed:3d:eb:d2:97:0f:07:53:87: ee:23:1e:80:8b:17:c6:e8:fa:1d:d0:21:cd:78:e4: 9d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C9:D8:CB:D0:33:7A:0C:5A:76:A7:FA:94:36:BE:A5:0D:77:F5:B2 X509v3 Authority Key Identifier: keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:8e:a6:7d:67:d1:a0:b4:ad:6f:40:c7:e3:90:d7:6f:ac:e2: c9:d1:41:40:25:0d:f0:ac:76:6e:cf:de:fb:83:8c:40:e8:36: 1d:43:be:0b:2d:29:71:86:ae:cc:f4:19:ef:b5:4d:c5:79:a6: 24:9f:36:5b:ce:45:7f:b1:29:3c:73:1d:9f:3b:55:a1:07:20: d5:38:09:03:5b:d8:49:22:6e:3d:1b:ec:26:00:b9:7f:a2:99: 72:b2:8c:b1:c3:ee:09:a9:50:a8:b8:d7:13:59:ec:58:0e:fe: dd:e3:18:af:85:1f:e6:4b:20:c9:4c:75:58:87:6e:47:b9:46: 5c:69:41:66:12:ae:66:9d:61:ed:6d:02:21:3e:80:a0:e1:93: 98:cf:ca:15:12:d7:8b:41:c8:d1:20:7f:5f:91:d7:fe:2f:6b: 17:75:8c:ec:f8:6e:92:a6:c8:fc:bd:12:2d:a8:63:39:a5:ca: 06:c7:6c:c2:c8:df:13:37:93:f6:a9:ca:42:97:9c:a7:a5:a7: 52:35:78:9b:30:5e:54:01:14:88:94:3e:cc:3d:fb:61:13:83: 3f:ed:eb:70:f1:d9:d3:84:b9:b3:a0:69:f0:bd:a9:75:65:6d: f2:4e:91:21:4d:4f:dc:d6:d3:55:fe:9f:2e:4d:c5:24:e1:6a: d4:16:6b:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFCQUMxMTAvBgNVBAUTKEI0MDM4QUI2NDAzOUYzMTQ1NjIyQTIwRkY3MEVEN0JF MUQ0RTdGOTEwHhcNMjYwMzI1MDY0MzUxWhcNMjYwNDAxMDY0MzUxWjAYMRYwFAYD VQQDEw02OWMzODQyNy1lYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIGYkhAljgYpUruHuDABzniugto+AsQsK9SHqF19l4XuQFRVBWKkXguMU+FA yM7sUKBiiuhVh7FUGDtqcsfxcLJRq2oxHu5uLhL5dzIkYbRFwdiIjuGlS8d1POEg PxMOAPrxdWBwKBxzVdvjrs1nQ7/CQuY2CBf5HCas0unpVC7+jxI8zS7T16qf5idl iRqqEWTLj5j5phZak0qBmZK8+/V//y2+nmBwYewukKUKPYEf1j9oPTKIF2h5gJQZ c9CBKPPrLA8inD6BP/yPQNoh9Vo5fF4T7m0fldj02/M90+W9Flez+MbtPevSlw8H U4fuIx6AixfG6Pod0CHNeOSdmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGDJ2MvQ M3oMWnan+pQ2vqUNd/WyMB8GA1UdIwQYMBaAFLQDirZAOfMUViKiD/cO174dTn+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUJBQy82NDlCQzNCMjUw QzkxMUYwQjQ3MzAyNDZDNEY5QUUwMi90QU9LdGtBNTh4UldJcUlQOXc3WHZoMU9m NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RBT0t0a0E1OHhSV0lxSVA5dzdYdmgxT2Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUJBQy82NDlCQzNCMjUwQzkxMUYwQjQ3MzAyNDZDNEY5QUUwMi90QU9LdGtBNTh4 UldJcUlQOXc3WHZoMU9mNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp46mfWfRoLStb0DH45DXb6ziydFBQCUN8Kx2bs/e+4OMQOg2HUO+Cy0pcYau zPQZ77VNxXmmJJ82W85Ff7EpPHMdnztVoQcg1TgJA1vYSSJuPRvsJgC5f6KZcrKM scPuCalQqLjXE1nsWA7+3eMYr4Uf5ksgyUx1WIduR7lGXGlBZhKuZp1h7W0CIT6A oOGTmM/KFRLXi0HI0SB/X5HX/i9rF3WM7PhukqbI/L0SLahjOaXKBsdswsjfEzeT 9qnKQpecp6WnUjV4mzBeVAEUiJQ+zD37YRODP+3rcPHZ04S5s6Bp8L2pdWVt8k6R IU1P3NbTVf6fLk3FJOFq1BZrgA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:58:27 2026 by rpki-client