$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft File: TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json) Hash identifier: +9Ih2ctYJVRqJwF6JAkmGOXQYPNnmzP2+k4tBvYOB1I= Subject key identifier: 22:FA:3D:9B:5E:44:AC:1E:E5:13:85:76:E6:5C:07:80:8E:6B:76:C2 Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 Certificate issuer: /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft Manifest number: 013D Signing time: Wed 25 Mar 2026 04:36:13 +0000 Manifest this update: Wed 25 Mar 2026 04:36:13 +0000 Manifest next update: Wed 01 Apr 2026 04:36:13 +0000 Files and hashes: 1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: QsshxM8oQPY5wn60DVurotUV6kVFsoIMsCvu8KsDc4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B, serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Validity Not Before: Mar 25 04:36:13 2026 GMT Not After : Apr 1 04:36:13 2026 GMT Subject: CN=69c3663d-b5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:11:77:58:86:8a:d2:4c:6b:0f:99:50:ba: c9:46:e5:3f:91:3d:46:31:a3:b9:a0:93:a6:aa:52: 11:85:c6:6d:99:1c:9e:f8:8d:63:c2:d8:27:7b:10: c3:84:c6:b7:82:65:2b:d5:94:68:7a:33:44:e0:5d: c5:ed:f2:73:57:81:98:99:8f:d4:6f:d1:7b:91:0b: c2:dd:e2:a0:7b:05:68:77:17:aa:e0:3a:1c:d2:4a: 01:ab:ca:7d:2d:c0:d6:2c:3a:71:75:00:66:c5:5c: f0:02:fb:d8:a7:3d:16:a1:00:02:ab:2a:c6:e9:90: fb:19:c9:8c:17:d0:f9:b4:67:9d:ba:4e:09:1d:bc: de:31:9b:b5:df:fa:cf:d0:53:c8:87:2d:af:93:63: aa:5c:b4:0b:fb:cd:16:7a:9b:9f:d7:3b:b0:03:fb: dd:f9:48:5a:2c:2f:4a:77:07:40:3d:8c:97:4a:18: 2b:84:db:51:72:e9:f0:08:cf:28:cb:cc:a4:60:f9: 6d:17:fe:29:f4:0b:10:e3:ec:99:2a:52:16:cb:a6: f5:59:bd:6e:fc:e7:6a:a2:38:ef:01:bd:83:f7:6b: 0a:44:a4:33:73:a5:14:f8:4b:f5:15:86:ca:93:e9: 58:c7:ff:07:85:c0:34:c6:39:6b:f0:51:1a:73:fa: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FA:3D:9B:5E:44:AC:1E:E5:13:85:76:E6:5C:07:80:8E:6B:76:C2 X509v3 Authority Key Identifier: keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:7c:0d:65:ce:1b:fe:cb:fb:4a:b0:29:be:11:90:74:8c:90: c5:53:f3:69:4f:c1:7f:ce:ea:cc:d1:e4:87:d8:a1:f7:f8:a1: b3:98:4d:aa:1f:bb:66:37:34:9b:13:a7:6d:9f:1c:a0:67:d3: 53:82:f3:df:a6:ae:42:b1:78:26:3b:2d:1c:b4:ba:7a:51:5b: f5:ef:91:27:e2:fc:67:5d:30:99:4d:63:a7:1e:59:00:75:d2: b5:25:23:e6:0c:83:7d:34:9b:60:b2:fc:83:09:03:5d:d0:2e: 11:6a:44:69:92:d9:87:42:9f:18:4b:fa:86:28:85:8c:94:e7: 81:d6:bc:bf:1b:e1:ab:16:3c:b8:cc:43:4d:74:2b:8c:a1:8e: cf:98:95:1a:be:d7:f3:92:ef:dc:2d:12:e2:65:ea:d8:c5:fa: 35:4d:30:1f:12:6b:c2:3c:c3:f4:8d:1d:56:45:eb:9e:14:c8: 8d:c5:ea:7b:2d:d4:5d:39:83:08:c8:5c:61:06:9a:61:da:61: 9e:28:32:60:bc:78:93:94:d7:1d:fb:3c:34:37:4d:bb:a6:4e: 33:bb:7b:67:e4:56:df:c4:5f:75:ee:f8:03:a6:9f:f6:da:50: 51:5f:20:9d:ed:99:51:cb:0f:10:7f:03:88:c5:f8:7b:17:7e: b9:db:fc:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDRDQTAxMkY1QjRFODA0NjdFRjBFRUM0RjhDMDI0NEEy M0Q1Njk5QjUwHhcNMjYwMzI1MDQzNjEzWhcNMjYwNDAxMDQzNjEzWjAYMRYwFAYD VQQDEw02OWMzNjYzZC1iNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UoRd1iGitJMaw+ZULrJRuU/kT1GMaO5oJOmqlIRhcZtmRye+I1jwtgnexDD hMa3gmUr1ZRoejNE4F3F7fJzV4GYmY/Ub9F7kQvC3eKgewVodxeq4Doc0koBq8p9 LcDWLDpxdQBmxVzwAvvYpz0WoQACqyrG6ZD7GcmMF9D5tGeduk4JHbzeMZu13/rP 0FPIhy2vk2OqXLQL+80Wepuf1zuwA/vd+UhaLC9KdwdAPYyXShgrhNtRcunwCM8o y8ykYPltF/4p9AsQ4+yZKlIWy6b1Wb1u/OdqojjvAb2D92sKRKQzc6UU+Ev1FYbK k+lYx/8HhcA0xjlr8FEac/qcjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCL6PZte RKwe5ROFduZcB4COa3bCMB8GA1UdIwQYMBaAFEygEvW06ARn7w7sT4wCRKI9Vpm1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82QjM4QjgxNjQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JHZnZEdXhQakFKRW9qMVdt YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLQVM5YlRvQkdmdkR1eFBqQUpFb2oxV21iVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82QjM4QjgxNjQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JH ZnZEdXhQakFKRW9qMVdtYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuXwNZc4b/sv7SrApvhGQdIyQxVPzaU/Bf87qzNHkh9ih9/ihs5hNqh+7Zjc0 mxOnbZ8coGfTU4Lz36auQrF4JjstHLS6elFb9e+RJ+L8Z10wmU1jpx5ZAHXStSUj 5gyDfTSbYLL8gwkDXdAuEWpEaZLZh0KfGEv6hiiFjJTngda8vxvhqxY8uMxDTXQr jKGOz5iVGr7X85Lv3C0S4mXq2MX6NU0wHxJrwjzD9I0dVkXrnhTIjcXqey3UXTmD CMhcYQaaYdphnigyYLx4k5TXHfs8NDdNu6ZOM7t7Z+RW38Rfde74A6af9tpQUV8g ne2ZUcsPEH8DiMX4exd+udv8Ew== -----END CERTIFICATE-----Generated at Thu Mar 26 09:08:37 2026 by rpki-client