$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json) Hash identifier: DklVy28/W46ySN016Zbup7aBfdfbvHOdAgK+G0lhz6w= Subject key identifier: 9A:41:ED:D9:19:48:14:EC:96:E5:6D:7E:FC:16:86:99:FC:82:B1:C0 Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Certificate serial: 18B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft Manifest number: 189A Signing time: Thu 26 Mar 2026 16:27:19 +0000 Manifest this update: Thu 26 Mar 2026 16:27:18 +0000 Manifest next update: Thu 02 Apr 2026 16:27:18 +0000 Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: ouX1pwwSzch3R93OYnbq2xo2aZ/4wIN4AtW07zisPYg=) 2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: TAF/4rrr92fj80k4rXF09UZ7GAsTjO+mKvPw6lKrblE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6322 (0x18b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Validity Not Before: Mar 26 16:27:18 2026 GMT Not After : Apr 2 16:27:18 2026 GMT Subject: CN=69c55e66-238d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:6e:32:e7:d9:7b:3f:24:c7:fa:a7:0c:47: 40:41:cb:06:2b:58:dd:85:9a:e0:c9:e8:ad:7c:11: b2:6f:53:f1:06:be:c9:b9:b7:0c:8c:f2:98:58:24: a7:96:8d:ad:6a:c7:31:c0:c4:c2:4d:07:8d:85:8d: 88:fc:a8:3c:c4:5c:57:06:01:9c:f7:83:0b:61:85: c8:1c:7d:99:f2:ef:52:6e:2b:1c:bc:08:f7:33:99: 50:65:b7:43:76:04:dc:af:e3:d5:52:7a:f6:1e:37: d8:ee:6b:40:91:b4:fb:c9:21:0f:94:7d:3a:7c:38: 5f:48:2f:46:da:d0:64:fb:1a:6c:b2:35:7d:fc:14: 13:3b:60:9f:b3:94:40:78:cd:e5:cd:da:d3:0b:5b: a3:49:6c:f5:fd:9d:c2:be:69:24:6f:a9:22:fd:e7: 6a:ea:c4:ae:b2:1d:a6:6a:bb:28:d0:57:0a:25:5d: d0:03:31:4a:61:04:83:f8:cc:28:04:97:a9:43:f7: c2:7d:7c:59:46:52:c0:c6:f6:74:c7:85:96:d6:e7: a1:97:e6:12:a1:a6:50:6e:cf:10:10:83:38:77:41: aa:23:bd:9e:65:87:ba:9e:e8:9d:df:ee:7a:15:80: 00:fa:2f:8b:ba:57:17:81:07:62:23:dd:1a:1c:40: c2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:41:ED:D9:19:48:14:EC:96:E5:6D:7E:FC:16:86:99:FC:82:B1:C0 X509v3 Authority Key Identifier: keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:da:0a:63:c4:2a:cc:60:37:f2:0a:29:df:6c:69:26:e2:b3: 33:33:14:db:d3:78:89:a9:19:1b:1d:5f:8d:cc:15:00:e1:7e: 34:18:e4:de:a7:6b:af:3c:eb:d8:de:c0:fe:dc:9a:13:d3:1b: 47:70:da:c4:69:bd:a6:64:38:a3:09:f3:9b:be:f2:6a:87:6d: ec:ef:bc:a5:8d:c8:08:ff:bc:1c:3c:87:bf:d6:57:08:c7:2a: 11:6c:c1:cb:ba:2d:eb:07:25:2b:e5:f0:29:88:2c:81:21:dd: 52:dc:a4:de:95:7f:3a:72:be:5f:8d:90:be:bf:1d:20:aa:94: 5a:66:02:55:e2:5e:5f:9f:5e:19:d5:18:41:87:67:af:99:ad: c2:82:18:1b:a4:df:11:fa:b6:dd:53:79:58:d8:97:4c:42:77: 5e:42:32:a3:1a:9f:1f:8b:76:e3:05:96:aa:e3:00:71:5b:b4: 8b:c0:bd:74:4d:22:8e:21:7c:c2:8c:d4:2a:22:0f:9d:a8:4c: b6:24:3b:39:3a:94:0f:81:52:7c:0e:29:c7:78:93:43:85:ca: c4:f9:41:3e:16:69:e8:f6:d7:b1:1e:d7:b5:c1:e7:c7:5d:fc: 3b:36:54:b6:33:5a:fb:60:83:3c:71:b1:f3:e0:eb:21:6c:1a: fc:0b:a3:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEwRTQxMTAvBgNVBAUTKDRDMkU2MjcxNjMyMEFGRDRBMDE3MDA2NzZCRThCRjky NjRGNDVFNDIwHhcNMjYwMzI2MTYyNzE4WhcNMjYwNDAyMTYyNzE4WjAYMRYwFAYD VQQDEw02OWM1NWU2Ni0yMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjNuMufZez8kx/qnDEdAQcsGK1jdhZrgyeitfBGyb1PxBr7JubcMjPKYWCSn lo2tascxwMTCTQeNhY2I/Kg8xFxXBgGc94MLYYXIHH2Z8u9SbiscvAj3M5lQZbdD dgTcr+PVUnr2HjfY7mtAkbT7ySEPlH06fDhfSC9G2tBk+xpssjV9/BQTO2Cfs5RA eM3lzdrTC1ujSWz1/Z3Cvmkkb6ki/edq6sSush2marso0FcKJV3QAzFKYQSD+Mwo BJepQ/fCfXxZRlLAxvZ0x4WW1uehl+YSoaZQbs8QEIM4d0GqI72eZYe6nuid3+56 FYAA+i+LulcXgQdiI90aHEDCuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpB7dkZ SBTsluVtfvwWhpn8grHAMB8GA1UdIwQYMBaAFEwuYnFjIK/UoBcAZ2vov5Jk9F5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTBFNC80NDk4NjhGQ0I4 ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5U2dGd0JuYS1pX2ttVDBY a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDNWljV01ncjlTZ0Z3Qm5hLWlfa21UMFhrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTBFNC80NDk4NjhGQ0I4ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5 U2dGd0JuYS1pX2ttVDBYa0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm9oKY8QqzGA38gop32xpJuKzMzMU29N4iakZGx1fjcwVAOF+NBjk3qdrrzzr 2N7A/tyaE9MbR3DaxGm9pmQ4ownzm77yaodt7O+8pY3ICP+8HDyHv9ZXCMcqEWzB y7ot6wclK+XwKYgsgSHdUtyk3pV/OnK+X42Qvr8dIKqUWmYCVeJeX59eGdUYQYdn r5mtwoIYG6TfEfq23VN5WNiXTEJ3XkIyoxqfH4t24wWWquMAcVu0i8C9dE0ijiF8 wozUKiIPnahMtiQ7OTqUD4FSfA4px3iTQ4XKxPlBPhZp6PbXsR7XtcHnx138OzZU tjNa+2CDPHGx8+DrIWwa/AujSQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:46:48 2026 by rpki-client