$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json) Hash identifier: NToXM02ihhlYLCaJevdsTQkAkbnnZIVzfdb1Jm5XBEI= Subject key identifier: 68:DD:2B:CA:5D:53:43:4F:3E:4C:34:53:70:A3:9C:8D:53:DD:4B:83 Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Certificate serial: 0EB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft Manifest number: 0EA6 Signing time: Tue 24 Mar 2026 17:34:06 +0000 Manifest this update: Tue 24 Mar 2026 17:34:06 +0000 Manifest next update: Tue 31 Mar 2026 17:34:06 +0000 Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: pLlR/ejdrvsoQ0HT3sULe85B/GDeZ4hsmfeN8NDdenE=) 2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: RzqIGI8r+oQW3NlWivzrVB3dYHmPEddV5f3NgyB8w0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3768 (0xeb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Validity Not Before: Mar 24 17:34:06 2026 GMT Not After : Mar 31 17:34:06 2026 GMT Subject: CN=69c2cb0e-32a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:51:e0:d0:bf:23:97:4d:66:aa:bc:a2:ba: 1a:26:a7:24:55:d1:43:29:08:86:ae:16:9c:90:7d: f2:80:4d:13:05:45:2a:18:09:1c:a7:f7:38:5b:cc: d8:e8:fc:e8:9d:4f:18:83:bd:4d:6d:60:14:d0:97: 37:a7:b7:9e:43:a9:ec:78:bd:4b:c6:42:31:69:1d: ab:21:a6:dd:b4:b7:92:9a:2f:fd:d4:7e:60:b3:a9: 2d:b9:0d:d3:19:8e:2c:2b:39:cf:bb:fe:cd:be:bf: 10:46:b9:41:85:fc:d8:c6:8a:47:39:fe:48:2d:5b: 55:45:b4:68:82:a3:c6:5b:5d:3b:95:31:a8:d1:84: df:d3:b1:bf:b3:e8:84:0c:99:dd:75:f4:78:44:32: 5c:75:9e:7b:73:f9:40:6d:b7:44:a2:25:a7:85:97: 6d:e5:2f:c0:5f:9e:73:45:0d:8e:e9:e2:b7:36:7b: 3e:f5:c4:8d:85:5c:59:94:c1:dc:37:6d:20:83:7f: b0:a4:4d:8b:00:6a:7c:c6:3e:db:a0:0c:3e:d9:dd: a7:55:76:72:b7:59:51:38:f4:16:18:b1:31:9a:11: 87:db:80:be:5b:f8:94:31:f0:6b:c5:a9:e7:52:02: 51:dd:85:bd:33:05:28:3d:1a:07:24:7f:bf:a0:b2: 0b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DD:2B:CA:5D:53:43:4F:3E:4C:34:53:70:A3:9C:8D:53:DD:4B:83 X509v3 Authority Key Identifier: keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5b:50:c5:b2:0e:d1:99:1c:cd:94:0f:92:a0:51:fc:01:1d: 63:be:20:26:d3:b7:03:b2:1e:97:d9:56:6d:85:c7:78:53:f8: 6b:b4:41:58:d7:5b:15:11:02:8c:54:cf:44:43:f7:ac:a1:ca: 5b:cd:f0:28:6d:3c:fb:af:5b:16:d4:52:78:b9:ab:f1:71:ff: fe:91:db:d1:67:61:5f:e1:36:28:df:73:98:1a:36:1e:81:fd: 30:76:83:7d:4f:c5:eb:10:ac:3a:d8:f8:03:fa:e3:bb:ae:c6: e7:5f:32:5b:d3:ef:1b:45:e2:cb:a7:29:f8:b7:2f:fe:9c:dc: ad:49:1a:ec:c2:a7:af:d1:4b:e8:ba:43:b0:9d:63:98:92:ff: 65:a1:16:3d:4d:99:1a:39:f1:12:9f:c4:dc:33:cd:5b:b3:32: 72:df:f8:b2:a0:9b:63:66:04:2d:21:c6:23:30:d0:b8:10:c3: 8f:10:f6:83:0a:be:09:aa:f7:32:26:80:c5:4b:37:99:53:67: 72:87:d3:c4:4b:f6:36:cf:ea:73:6b:43:01:c2:69:34:07:f6: e3:11:21:76:b5:28:95:96:e8:99:43:25:00:18:cd:71:8d:0d: f7:e1:ea:b6:28:a1:28:e2:c2:9d:16:99:85:a2:56:7c:c8:40: 00:38:5a:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3QzkxMTAvBgNVBAUTKDRGMzE1RUVGNUFDQjJFREE3QTM3MjlFNzlFMTM1OTkw QzAxRTcwNzQwHhcNMjYwMzI0MTczNDA2WhcNMjYwMzMxMTczNDA2WjAYMRYwFAYD VQQDEw02OWMyY2IwZS0zMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkslR4NC/I5dNZqq8oroaJqckVdFDKQiGrhackH3ygE0TBUUqGAkcp/c4W8zY 6PzonU8Yg71NbWAU0Jc3p7eeQ6nseL1LxkIxaR2rIabdtLeSmi/91H5gs6ktuQ3T GY4sKznPu/7Nvr8QRrlBhfzYxopHOf5ILVtVRbRogqPGW107lTGo0YTf07G/s+iE DJnddfR4RDJcdZ57c/lAbbdEoiWnhZdt5S/AX55zRQ2O6eK3Nns+9cSNhVxZlMHc N20gg3+wpE2LAGp8xj7boAw+2d2nVXZyt1lROPQWGLExmhGH24C+W/iUMfBrxann UgJR3YW9MwUoPRoHJH+/oLILQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjdK8pd U0NPPkw0U3CjnI1T3UuDMB8GA1UdIwQYMBaAFE8xXu9ayy7aejcp554TWZDAHnB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdDOS9DMzU5RTc1RUFD MTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0cDZOeW5ubmhOWmtNQWVj SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6RmU3MXJMTHRwNk55bm5uaE5aa01BZWNIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTdDOS9DMzU5RTc1RUFDMTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0 cDZOeW5ubmhOWmtNQWVjSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACFtQxbIO0ZkczZQPkqBR/AEdY74gJtO3A7Iel9lWbYXHeFP4a7RBWNdbFREC jFTPREP3rKHKW83wKG08+69bFtRSeLmr8XH//pHb0WdhX+E2KN9zmBo2HoH9MHaD fU/F6xCsOtj4A/rju67G518yW9PvG0Xiy6cp+Lcv/pzcrUka7MKnr9FL6LpDsJ1j mJL/ZaEWPU2ZGjnxEp/E3DPNW7Myct/4sqCbY2YELSHGIzDQuBDDjxD2gwq+Car3 MiaAxUs3mVNncofTxEv2Ns/qc2tDAcJpNAf24xEhdrUolZbomUMlABjNcY0N9+Hq tiihKOLCnRaZhaJWfMhAADhajA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:10 2026 by rpki-client