$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft File: TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json) Hash identifier: cPSyqnlweSoY1ZfhdHEbPSWP0PArLkOl1TMgkxMx774= Subject key identifier: D0:2F:1D:40:01:3A:75:F1:22:E9:D4:4E:2B:82:80:21:B5:29:A8:B0 Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 Certificate issuer: /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft Manifest number: 0C72 Signing time: Thu 26 Mar 2026 18:31:39 +0000 Manifest this update: Thu 26 Mar 2026 18:31:39 +0000 Manifest next update: Thu 02 Apr 2026 18:31:39 +0000 Files and hashes: 1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: l0c/wsFUxDqNNKnVx5hCS7nAmA7LbSys13SuqsICj5o=) 2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: fCQoX/IOk+ffJFhlDwImCtw5kH5m+tUwlmOkb8YNpXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5533, serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Validity Not Before: Mar 26 18:31:39 2026 GMT Not After : Apr 2 18:31:39 2026 GMT Subject: CN=69c57b8b-2c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:03:94:c0:79:c4:3b:08:88:7d:4b:23:9e: 9a:c4:d4:3c:82:83:14:fc:06:67:3c:c9:18:2e:81: 93:ec:f9:13:1a:40:b4:8a:3f:ad:8a:40:07:0e:8b: e1:03:50:dd:28:f0:66:07:3f:44:ba:0b:83:83:1b: 0f:7d:13:44:1e:c1:9e:4f:be:de:14:7c:ea:40:24: 70:40:87:b9:45:7b:05:91:72:62:a0:65:7e:55:86: 18:18:c5:6d:74:f8:12:ce:74:4d:bc:08:1c:dc:ca: 95:9d:6a:71:e7:bc:1b:b2:48:99:1d:1c:3a:ed:c6: be:16:05:af:fa:91:f3:31:83:1e:8c:d7:82:fe:d0: 9e:20:ac:35:72:39:ba:09:96:30:3c:51:a8:38:70: a0:1f:92:86:3d:7d:66:62:21:1c:7a:39:b1:ae:ad: 70:7f:a1:e1:e6:2f:10:c6:38:04:e6:08:fa:bb:6a: 7a:85:d5:9a:8b:71:54:7e:e9:6a:59:07:b1:b1:0d: e1:52:1a:19:0e:0e:22:f4:4f:44:9a:f5:d5:91:ab: 80:67:4e:97:6e:e5:f6:22:8f:e3:80:1d:14:41:40: be:ee:91:a8:a8:5e:4d:37:8a:c6:06:22:ac:77:2f: 82:d7:85:cf:81:5d:fc:1d:ca:52:15:0b:60:aa:66: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2F:1D:40:01:3A:75:F1:22:E9:D4:4E:2B:82:80:21:B5:29:A8:B0 X509v3 Authority Key Identifier: keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:b0:27:b2:68:ec:31:d4:e5:f5:64:80:b6:eb:a3:e3:38:d2: 0c:3f:ae:89:20:d6:ca:d5:8f:cc:5e:44:0d:f2:60:70:ea:bc: c3:76:43:63:d5:ce:85:bd:d6:ac:70:a8:d9:7d:b8:9d:96:66: 89:b7:c3:a3:b3:fb:9b:71:82:d9:09:e9:97:cb:00:e3:0f:04: c5:cf:e1:0e:3b:62:74:f4:74:d4:ad:9d:90:00:ee:0e:b8:52: 86:52:a1:ff:2e:f0:29:bc:95:f5:cc:f5:26:70:a4:69:5f:74: f8:2b:28:03:be:58:a1:07:9b:a4:4c:5c:b2:ad:37:32:3a:93: b6:d1:90:59:a3:ee:6c:24:97:cd:aa:03:86:c7:7a:a6:a5:8f: 76:0e:5d:c0:36:35:8c:f9:c5:7c:3d:86:81:5c:1c:cf:e6:e8: 6d:df:20:fb:f0:49:fb:9d:a5:39:7f:ea:77:bf:8d:00:66:80: 7e:bb:cc:cf:38:78:5c:32:7b:e6:01:d5:3b:06:a4:91:87:22: aa:07:24:61:ea:bd:33:f2:dc:19:c6:d2:02:96:f1:fa:f0:3e: 60:01:6e:30:9c:5b:30:a5:15:94:64:6e:03:af:a1:ae:54:72: a6:3a:ba:9a:75:75:f6:e0:26:1c:20:6a:2c:a8:88:d2:49:ab: 20:6e:e8:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1MzMxMTAvBgNVBAUTKDRDODFGMDE5M0ExQzU3MjQ0NTdGNTJFMDRFMTFGMjUy NzNFNkZFRTAwHhcNMjYwMzI2MTgzMTM5WhcNMjYwNDAyMTgzMTM5WjAYMRYwFAYD VQQDEw02OWM1N2I4Yi0yYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunQDlMB5xDsIiH1LI56axNQ8goMU/AZnPMkYLoGT7PkTGkC0ij+tikAHDovh A1DdKPBmBz9EuguDgxsPfRNEHsGeT77eFHzqQCRwQIe5RXsFkXJioGV+VYYYGMVt dPgSznRNvAgc3MqVnWpx57wbskiZHRw67ca+FgWv+pHzMYMejNeC/tCeIKw1cjm6 CZYwPFGoOHCgH5KGPX1mYiEcejmxrq1wf6Hh5i8QxjgE5gj6u2p6hdWai3FUfulq WQexsQ3hUhoZDg4i9E9EmvXVkauAZ06XbuX2Io/jgB0UQUC+7pGoqF5NN4rGBiKs dy+C14XPgV38HcpSFQtgqmYqqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAvHUAB OnXxIunUTiuCgCG1KaiwMB8GA1UdIwQYMBaAFEyB8Bk6HFckRX9S4E4R8lJz5v7g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTUzMy8wNjExNTFGMjFB NEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5UkZmMUxnVGhIeVVuUG1f dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RJSHdHVG9jVnlSRmYxTGdUaEh5VW5QbV91QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTUzMy8wNjExNTFGMjFBNEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5 UkZmMUxnVGhIeVVuUG1fdUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtrAnsmjsMdTl9WSAtuuj4zjSDD+uiSDWytWPzF5EDfJgcOq8w3ZDY9XOhb3W rHCo2X24nZZmibfDo7P7m3GC2Qnpl8sA4w8Exc/hDjtidPR01K2dkADuDrhShlKh /y7wKbyV9cz1JnCkaV90+CsoA75YoQebpExcsq03MjqTttGQWaPubCSXzaoDhsd6 pqWPdg5dwDY1jPnFfD2GgVwcz+bobd8g+/BJ+52lOX/qd7+NAGaAfrvMzzh4XDJ7 5gHVOwakkYciqgckYeq9M/LcGcbSApbx+vA+YAFuMJxbMKUVlGRuA6+hrlRypjq6 mnV19uAmHCBqLKiI0kmrIG7oIA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:16:24 2026 by rpki-client