$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft File: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft (raw, json) Hash identifier: 4XnE/xlgqYlgUaxdPLHQdqWiQfyXQyeIGO/gucRzs68= Subject key identifier: A7:19:D3:61:70:B2:ED:A7:C6:E1:5F:EB:36:AB:62:1D:81:CA:CC:63 Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB Certificate issuer: /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft Manifest number: 40 Signing time: Tue 24 Mar 2026 20:30:17 +0000 Manifest this update: Tue 24 Mar 2026 20:30:16 +0000 Manifest next update: Tue 31 Mar 2026 20:30:16 +0000 Files and hashes: 1: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl (hash: HvUfddRhN/TZY7PNgbiOLDlUPlCmXGYPgcMwqTU0mhY=) 2: 527245ACD42311F0A8A37057C4F9AE02.roa (hash: 90KcSYGKJ6Yif8EcJa/nVE5hc/e19RIZHwPBzlm+xR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Validity Not Before: Mar 24 20:30:16 2026 GMT Not After : Mar 31 20:30:16 2026 GMT Subject: CN=69c2f458-449a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4b:4d:1a:da:7a:00:f7:de:6e:7d:76:bf:f9: af:73:7c:f2:12:b4:01:18:45:07:37:c1:8d:1f:09: 99:54:80:e5:81:d3:65:d4:61:7b:c3:6e:44:25:ee: e5:ab:6f:ce:84:24:80:ff:d6:39:64:15:75:cc:37: 6f:92:a5:90:11:66:03:bb:04:03:8b:55:3e:43:1b: f9:89:ce:c4:18:03:02:87:46:53:7f:a5:5d:bb:8d: 06:3a:e2:cb:ee:4e:7e:ea:01:ed:45:f2:ac:98:fa: a5:4b:4a:61:8a:63:a0:15:49:cc:c9:16:6b:5e:80: 04:76:35:26:d4:17:4e:26:fe:16:b4:6a:58:01:a9: b8:91:c7:2e:a9:22:7f:08:65:aa:15:37:dd:0c:d0: a7:37:cb:22:47:9c:fc:e9:52:5b:7a:52:cb:36:f1: 3e:89:c2:f2:d0:b3:db:e5:2c:b5:74:86:da:e5:d3: 04:f2:81:cb:e6:5c:70:25:69:d0:8a:2e:dc:e7:b7: 9c:7d:e6:6f:f6:57:3b:1a:ee:70:5a:af:e1:99:9f: 52:34:79:7f:84:d9:33:76:ff:cd:48:1a:21:0d:f1: 5a:1c:c6:9a:b8:c3:25:c6:5c:c1:da:85:69:d2:97: a1:45:9e:45:2d:48:41:af:12:a4:85:2e:7f:92:e0: 61:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:19:D3:61:70:B2:ED:A7:C6:E1:5F:EB:36:AB:62:1D:81:CA:CC:63 X509v3 Authority Key Identifier: keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:c8:61:99:33:9f:3f:85:93:e5:fa:7e:88:49:8c:19:52:01: cf:b0:66:16:63:f2:36:38:1e:4b:4f:ca:85:68:df:e3:b5:a9: d3:e0:88:8c:af:e6:fc:bb:81:4c:87:f2:a6:4d:d9:1a:32:3d: cc:a8:c5:f1:58:a3:b2:e0:36:ab:a2:c1:b5:6c:50:04:04:b6: c4:8a:11:aa:be:e6:ca:6c:53:00:ba:11:49:f6:6c:06:cb:7d: 93:ab:58:bd:81:fc:f8:30:dd:a3:88:89:5f:5e:9d:6f:54:48: 23:e9:f3:35:f3:11:75:f1:91:f2:00:5c:87:fd:ea:83:8a:72: ac:a1:74:8a:2b:5d:a4:09:36:86:a7:4c:c6:33:74:83:92:92: 21:40:3a:2c:57:a8:7d:62:45:e0:8d:8f:4a:de:59:fc:82:34: df:ca:c2:7a:17:c0:c6:71:6b:23:5f:f7:db:df:78:fe:e1:bf: eb:aa:bb:a9:83:8e:12:78:b2:80:b1:43:28:97:72:be:c1:39: f2:ae:5d:de:80:a6:7d:9e:bb:8f:70:17:9d:7e:d7:7b:e2:5c: d6:65:15:43:7c:9e:c6:b4:a0:8b:83:07:7a:a5:3f:c5:81:ef: 21:da:c7:fa:33:92:e5:1f:a5:db:5f:f0:45:ad:32:28:30:4b: 94:0c:12:91 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTREMTExMC8GA1UEBRMoQjY5NEE4QzUyOEYwQjlBNEQ0NTNCQzQ0MjBFNTBCNTE5 RENGRDBBQjAeFw0yNjAzMjQyMDMwMTZaFw0yNjAzMzEyMDMwMTZaMBgxFjAUBgNV BAMTDTY5YzJmNDU4LTQ0OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoS00a2noA995ufXa/+a9zfPIStAEYRQc3wY0fCZlUgOWB02XUYXvDbkQl7uWr b86EJID/1jlkFXXMN2+SpZARZgO7BAOLVT5DG/mJzsQYAwKHRlN/pV27jQY64svu Tn7qAe1F8qyY+qVLSmGKY6AVSczJFmtegAR2NSbUF04m/ha0algBqbiRxy6pIn8I ZaoVN90M0Kc3yyJHnPzpUlt6Uss28T6JwvLQs9vlLLV0htrl0wTygcvmXHAladCK Ltznt5x95m/2Vzsa7nBar+GZn1I0eX+E2TN2/81IGiEN8Vocxpq4wyXGXMHahWnS l6FFnkUtSEGvEqSFLn+S4GFZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpxnTYXCy 7afG4V/rNqtiHYHKzGMwHwYDVR0jBBgwFoAUtpSoxSjwuaTUU7xEIOULUZ3P0Ksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NEQxLzk1MEQ3NzAyQ0U2 RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFUVVU3eEVJT1VMVVozUDBL cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHBTb3hTand1YVRVVTd4RUlPVUxVWjNQMEtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NEQxLzk1MEQ3NzAyQ0U2RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFU VVU3eEVJT1VMVVozUDBLcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBFyGGZM58/hZPl+n6ISYwZUgHPsGYWY/I2OB5LT8qFaN/jtanT4IiMr+b8u4FM h/KmTdkaMj3MqMXxWKOy4DarosG1bFAEBLbEihGqvubKbFMAuhFJ9mwGy32Tq1i9 gfz4MN2jiIlfXp1vVEgj6fM18xF18ZHyAFyH/eqDinKsoXSKK12kCTaGp0zGM3SD kpIhQDosV6h9YkXgjY9K3ln8gjTfysJ6F8DGcWsjX/fb33j+4b/rqrupg44SeLKA sUMol3K+wTnyrl3egKZ9nruPcBedftd74lzWZRVDfJ7GtKCLgwd6pT/Fge8h2sf6 M5LlH6XbX/BFrTIoMEuUDBKR -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:55 2026 by rpki-client