$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft File: tKtoly4-518HsSc9r-d6HC28-cs.mft (raw, json) Hash identifier: 5Q6G5oOuKvos+ErH3Nsu+/z38rVWBO9GUV9xujbwqtw= Subject key identifier: B2:3B:EF:D7:1E:EA:98:AE:56:E1:AA:2B:39:55:A5:2A:4C:F2:60:61 Authority key identifier: B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB Certificate issuer: /CN=A91A2886/serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft Manifest number: 15 Signing time: Fri 27 Mar 2026 08:36:08 +0000 Manifest this update: Fri 27 Mar 2026 08:36:08 +0000 Manifest next update: Fri 03 Apr 2026 08:36:08 +0000 Files and hashes: 1: tKtoly4-518HsSc9r-d6HC28-cs.crl (hash: wVmIWzaCMSnF5BnWK1S2qK96udvSUkbIlluDHEOvQd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 08:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2886, serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB Validity Not Before: Mar 27 08:36:08 2026 GMT Not After : Apr 3 08:36:08 2026 GMT Subject: CN=69c64178-9c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:61:64:b3:7e:bf:7e:23:6a:fc:cd:5e:99: 4a:c6:43:9a:ee:41:c5:97:86:5d:fb:2b:0c:7a:6a: 82:29:ce:79:b1:11:c9:28:b0:42:ea:84:93:88:29: 4f:43:58:fa:33:7a:d9:ac:69:0c:be:5b:dd:48:c6: e8:54:64:3d:9a:dc:2d:cd:cc:99:cf:7b:59:d8:21: f1:1c:ff:4a:5c:77:8c:18:b1:d7:dc:d5:c3:7e:8b: de:d7:a6:50:47:ab:65:93:52:71:20:19:f8:70:b2: 60:53:5b:fd:75:a5:dd:39:27:0d:35:ec:18:6f:ec: 15:fd:9e:d7:cb:a2:ee:1f:13:37:e1:a4:c0:c1:25: b7:d1:95:96:a9:71:46:3f:c9:01:3f:ba:7a:4c:fc: d9:2a:a1:b7:50:00:0e:5c:d3:f2:7e:5f:22:d6:e3: 0b:02:b6:32:19:7c:0a:0f:92:8e:42:3e:0f:40:e1: f7:a2:d4:f8:3d:d3:14:f3:76:e8:9d:cd:c2:5b:e2: 7e:f7:83:f9:fc:11:aa:1c:19:0e:e3:f6:8d:0a:9e: 3a:8e:8e:b5:80:a1:45:6a:d8:81:6c:d1:49:1d:6c: 94:fe:49:70:12:d9:90:f3:a6:83:78:fd:81:f2:91: 59:c7:1c:9f:8f:aa:60:ea:26:81:fd:ed:f1:1d:db: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3B:EF:D7:1E:EA:98:AE:56:E1:AA:2B:39:55:A5:2A:4C:F2:60:61 X509v3 Authority Key Identifier: keyid:B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:1b:4d:bc:7e:8e:e4:dd:b3:6f:86:47:9c:f6:d8:66:67:c7: 1d:c3:24:1a:06:72:13:c0:9f:6a:f3:72:b1:28:35:cd:2e:0e: de:5b:1b:8b:01:d9:95:c3:8c:1a:b8:8c:4f:d5:0a:17:88:c2: d0:68:08:d9:0b:e0:bc:02:ea:22:b3:c8:76:7a:4b:27:d1:89: fa:d3:a6:3d:eb:d6:70:39:5d:36:28:51:d4:f3:dd:9d:52:11: 42:9a:cc:b7:65:f8:e8:f2:11:4c:07:83:a2:43:aa:6d:fa:1b: 7c:b6:49:bf:e6:ee:5f:5c:68:70:18:66:f4:22:0d:b2:63:33: ee:4c:8e:45:f9:e0:17:f1:c3:f1:8f:91:4d:b2:1c:3a:b4:14: 1b:f4:a9:b5:ca:6c:cf:16:09:33:fa:43:57:dd:1a:3f:b2:1a: 84:68:a4:55:c6:b0:43:87:ed:99:2c:01:45:99:db:a2:bd:7b: 2c:f7:70:4c:28:64:f3:70:17:ae:f3:78:b8:f9:3c:43:da:02: 36:e2:9a:0e:ea:61:a1:ca:6e:df:ec:88:5b:07:71:b1:84:f7: 3e:21:4c:46:c9:9b:da:a0:f1:83:4b:54:88:11:9e:b0:08:10: 46:db:72:db:b4:45:6d:fc:ec:fc:67:06:10:5d:05:52:ab:ab: d1:7a:4c:d2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjg4NjExMC8GA1UEBRMoQjRBQjY4OTcyRTNFRTc1RjA3QjEyNzNEQUZFNzdBMUMy REJDRjlDQjAeFw0yNjAzMjcwODM2MDhaFw0yNjA0MDMwODM2MDhaMBgxFjAUBgNV BAMTDTY5YzY0MTc4LTljMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcomFks36/fiNq/M1emUrGQ5ruQcWXhl37Kwx6aoIpznmxEckosELqhJOIKU9D WPozetmsaQy+W91IxuhUZD2a3C3NzJnPe1nYIfEc/0pcd4wYsdfc1cN+i97XplBH q2WTUnEgGfhwsmBTW/11pd05Jw017Bhv7BX9ntfLou4fEzfhpMDBJbfRlZapcUY/ yQE/unpM/NkqobdQAA5c0/J+XyLW4wsCtjIZfAoPko5CPg9A4fei1Pg90xTzduid zcJb4n73g/n8EaocGQ7j9o0KnjqOjrWAoUVq2IFs0UkdbJT+SXAS2ZDzpoN4/YHy kVnHHJ+PqmDqJoH97fEd20zTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsjvv1x7q mK5W4aorOVWlKkzyYGEwHwYDVR0jBBgwFoAUtKtoly4+518HsSc9r+d6HC28+csw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyODg2LzZDNTU0NTM0MTBB MzExRjFCRTcyQjVBRjM5M0Q4QzY3L3RLdG9seTQtNTE4SHNTYzlyLWQ2SEMyOC1j cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEt0b2x5NC01MThIc1NjOXItZDZIQzI4LWNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy ODg2LzZDNTU0NTM0MTBBMzExRjFCRTcyQjVBRjM5M0Q4QzY3L3RLdG9seTQtNTE4 SHNTYzlyLWQ2SEMyOC1jcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCoG028fo7k3bNvhkec9thmZ8cdwyQaBnITwJ9q83KxKDXNLg7eWxuLAdmVw4wa uIxP1QoXiMLQaAjZC+C8Auois8h2eksn0Yn606Y969ZwOV02KFHU892dUhFCmsy3 Zfjo8hFMB4OiQ6pt+ht8tkm/5u5fXGhwGGb0Ig2yYzPuTI5F+eAX8cPxj5FNshw6 tBQb9Km1ymzPFgkz+kNX3Ro/shqEaKRVxrBDh+2ZLAFFmduivXss93BMKGTzcBeu 83i4+TxD2gI24poO6mGhym7f7IhbB3GxhPc+IUxGyZvaoPGDS1SIEZ6wCBBG23Lb tEVt/Oz8ZwYQXQVSq6vRekzS -----END CERTIFICATE-----Generated at Sat Mar 28 10:26:46 2026 by rpki-client