$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: 7Eb8w1oi6S22N7uImMSMiPZdD/D2J6JOCN5J3X6TIG4= Subject key identifier: 1E:3D:B8:59:42:55:63:7E:CE:5C:21:A1:5C:EA:A7:D8:73:E3:83:E9 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0EAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E91 Signing time: Tue 24 Mar 2026 17:37:56 +0000 Manifest this update: Tue 24 Mar 2026 17:37:55 +0000 Manifest next update: Tue 31 Mar 2026 17:37:55 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: i4EFmqiSdPbbwLIqAmVi7+aJiTVGLCKGmat70jDxZtQ=) 2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: dWYmbgaVBCtICno2DXbASgGqvt29K/L5vXNYpaWvnIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3756 (0xeac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Mar 24 17:37:55 2026 GMT Not After : Mar 31 17:37:55 2026 GMT Subject: CN=69c2cbf4-1a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:9d:02:80:df:45:7b:df:a0:17:aa:92:f7: 84:fc:2b:0e:40:a9:37:8d:e9:29:07:7b:72:f5:db: d4:67:59:cf:6c:e1:20:1b:f0:58:df:42:5b:89:62: 95:5d:9e:c1:7f:f4:5e:ac:9b:4b:c2:34:75:69:77: 15:e5:18:83:45:fa:b1:2c:ee:54:13:c7:7c:bd:cf: 55:74:34:1f:fd:4c:de:14:f8:d1:02:f6:d7:df:ed: ce:17:d8:e1:84:db:94:fb:92:24:3b:20:7e:18:8d: 3c:e6:7d:7a:c6:fb:0d:fc:0a:26:34:5b:f7:b6:f6: 31:da:b8:ba:f3:00:3e:5c:73:f5:88:55:f0:f8:b5: c8:c2:ec:c7:a9:00:9a:43:3d:84:de:99:40:d0:83: e1:8e:0b:0c:20:8f:8c:36:e9:86:47:42:7c:bd:e8: fb:9e:18:41:82:ad:1d:15:8c:6e:8b:45:c3:4b:9f: ab:5b:5c:c4:40:85:e2:e2:b5:c1:b1:db:62:39:5d: e4:5f:31:a7:96:e2:62:b8:b5:c7:4f:83:64:69:cc: ba:f6:61:fe:13:a2:96:7b:13:e9:7e:e5:13:32:33: df:f2:2a:c0:6b:f5:ae:ec:ea:3c:2b:37:3e:30:36: ea:65:f1:7a:7f:12:c8:7a:0a:6e:b5:28:a1:ee:f1: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3D:B8:59:42:55:63:7E:CE:5C:21:A1:5C:EA:A7:D8:73:E3:83:E9 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:83:e1:3b:c8:89:91:5f:53:f5:b7:d9:a3:43:2b:54:d5:f1: d8:7e:38:0b:00:71:9b:69:8f:65:1e:69:01:12:46:fc:d0:f5: 59:12:04:4c:b3:d5:69:4f:3c:22:0e:15:fe:77:cd:09:58:a1: a3:f8:1f:a6:5f:0d:d4:68:51:9e:22:00:5f:40:8b:1b:8f:26: 1d:61:9d:e9:ab:76:37:49:32:1d:33:9e:54:11:45:72:8c:0e: 2a:ae:78:8e:34:31:2a:91:58:36:88:1f:d5:40:e7:a1:11:a5: 04:3a:92:6a:be:91:ca:c0:8a:f2:2f:f6:3d:58:8e:30:1a:4d: 50:56:e8:9f:54:69:4d:32:04:90:b6:82:50:73:32:60:fc:39: 85:e8:56:01:05:86:e2:70:b0:8b:ac:62:96:ca:b4:88:67:cb: a6:c0:71:63:15:76:37:c4:23:e2:08:66:c3:d6:66:25:03:a2: bb:3f:bb:85:c2:22:a5:86:12:b0:6c:8a:e7:05:7f:ce:56:b9: 8c:8e:37:89:e9:cf:3a:ce:f9:c5:23:a4:88:af:96:99:bb:f0: ea:82:82:44:76:01:43:9e:be:0c:b2:2b:f9:1d:4a:72:22:e5: ca:d2:7a:0d:77:cb:81:d9:2c:36:f9:7f:8f:f6:95:26:1e:ac: 21:3f:31:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjYwMzI0MTczNzU1WhcNMjYwMzMxMTczNzU1WjAYMRYwFAYD VQQDEw02OWMyY2JmNC0xYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKadAoDfRXvfoBeqkveE/CsOQKk3jekpB3ty9dvUZ1nPbOEgG/BY30JbiWKV XZ7Bf/RerJtLwjR1aXcV5RiDRfqxLO5UE8d8vc9VdDQf/UzeFPjRAvbX3+3OF9jh hNuU+5IkOyB+GI085n16xvsN/AomNFv3tvYx2ri68wA+XHP1iFXw+LXIwuzHqQCa Qz2E3plA0IPhjgsMII+MNumGR0J8vej7nhhBgq0dFYxui0XDS5+rW1zEQIXi4rXB sdtiOV3kXzGnluJiuLXHT4Nkacy69mH+E6KWexPpfuUTMjPf8irAa/Wu7Oo8Kzc+ MDbqZfF6fxLIegputSih7vHJfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB49uFlC VWN+zlwhoVzqp9hz44PpMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASoPhO8iJkV9T9bfZo0MrVNXx2H44CwBxm2mPZR5pARJG/ND1WRIETLPVaU88 Ig4V/nfNCViho/gfpl8N1GhRniIAX0CLG48mHWGd6at2N0kyHTOeVBFFcowOKq54 jjQxKpFYNogf1UDnoRGlBDqSar6RysCK8i/2PViOMBpNUFbon1RpTTIEkLaCUHMy YPw5hehWAQWG4nCwi6xilsq0iGfLpsBxYxV2N8Qj4ghmw9ZmJQOiuz+7hcIipYYS sGyK5wV/zla5jI43ienPOs75xSOkiK+Wmbvw6oKCRHYBQ56+DLIr+R1KciLlytJ6 DXfLgdksNvl/j/aVJh6sIT8xzw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:27 2026 by rpki-client