$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: B+7ftDHL8JgkLn2z1sgx+PJgRHS7nRyM8i7Hfs4zWQc= Subject key identifier: 42:E7:70:36:1A:B8:BF:19:08:D6:45:F1:35:1C:FB:5C:00:89:D3:06 Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 020D Signing time: Wed 25 Mar 2026 02:18:52 +0000 Manifest this update: Wed 25 Mar 2026 02:18:52 +0000 Manifest next update: Wed 01 Apr 2026 02:18:52 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: b/gupzQ6fWAaEidlrHxStN9M3X1iDIoYdHryButh9s4=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: LTD30aegM2n/FIPS7PJPfAtlPCR/CQg1h9hsg7fN65E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: Mar 25 02:18:52 2026 GMT Not After : Apr 1 02:18:52 2026 GMT Subject: CN=69c3460c-d86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3b:c2:54:10:e0:7c:c1:1d:ef:2f:86:ae:6f: 00:0c:3b:45:e2:60:30:7e:d5:e3:77:29:d5:2f:77: eb:76:d0:a9:d0:3f:7c:8f:4e:35:95:8a:8c:60:9c: 14:58:8c:b1:e5:8f:22:b3:83:6f:aa:a2:7a:8b:44: 22:99:b5:b1:a5:bc:b5:32:7e:e9:89:ad:fa:9b:34: a4:a0:48:bb:3a:f1:b7:2f:8b:69:57:90:cf:f2:b6: 8b:6f:ca:a2:96:2c:1c:e0:5a:9b:3b:b2:4b:cd:4e: 5a:0d:52:e1:d3:9c:77:a4:df:74:dd:f0:c7:15:59: 23:ee:36:a3:64:6a:40:d9:43:00:5d:3d:dc:99:64: da:02:df:3d:ce:66:59:99:86:75:eb:fc:a5:9a:d9: 0f:84:3b:10:24:04:01:1b:3d:26:77:8c:e5:7d:88: 30:04:26:f4:b7:ef:3c:66:9b:dc:70:21:41:0b:b8: 5c:97:28:4e:80:f3:59:8a:7d:e0:df:7a:36:a6:14: eb:4c:a2:e2:5c:86:86:c7:83:69:a2:53:da:97:a6: 54:ba:3c:67:0c:ce:e5:ce:55:bc:bb:e5:07:e7:cf: 25:3f:1d:6d:0f:a1:b8:b6:46:b8:b7:98:94:a5:26: 93:90:a3:0c:af:37:9d:ed:8e:9f:fd:d7:fa:e8:89: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E7:70:36:1A:B8:BF:19:08:D6:45:F1:35:1C:FB:5C:00:89:D3:06 X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:17:75:d2:19:8b:c7:24:da:86:06:c4:25:f8:7d:a6:82:da: 7b:63:62:00:d0:15:2c:f9:6d:5d:9f:bc:2b:78:8e:ae:00:de: f5:9f:1c:0d:91:b1:be:5b:89:70:5a:29:87:0b:6d:ee:70:36: 34:51:fb:6d:37:7b:f0:e1:c1:a9:a2:51:d2:0e:12:2b:2b:7c: 31:09:06:2a:e1:e9:d4:a9:f4:0e:18:fa:1b:fd:19:5d:f6:4d: 81:c8:18:53:1f:94:ae:84:71:83:9c:e8:a0:5e:a4:f8:84:0a: 73:7d:fa:a5:de:58:b7:06:47:1f:e7:2c:90:f4:17:33:b7:6e: 81:76:0a:2a:93:91:29:f4:03:4f:98:52:88:23:f9:1e:97:dc: 21:78:2e:36:69:fb:ef:ad:c1:fd:6c:f8:d1:1d:95:5a:bf:bf: 29:2f:40:c5:b1:05:bd:16:ff:c6:08:a8:4f:31:ec:c4:c5:a5: 14:76:38:d7:e1:fe:1e:e2:2d:54:35:98:d3:5f:82:dd:7b:f6: 0e:f2:4d:2d:dd:72:95:fa:9b:ec:fe:5c:84:59:96:9c:fd:44: 50:34:81:a9:af:89:b5:42:b1:cb:4d:6d:4c:d8:08:c6:91:0a: 09:f6:7d:5a:52:95:29:db:a5:25:75:e0:40:2a:61:8a:2c:7d: 8c:14:42:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjYwMzI1MDIxODUyWhcNMjYwNDAxMDIxODUyWjAYMRYwFAYD VQQDEw02OWMzNDYwYy1kODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DvCVBDgfMEd7y+Grm8ADDtF4mAwftXjdynVL3frdtCp0D98j041lYqMYJwU WIyx5Y8is4NvqqJ6i0QimbWxpby1Mn7pia36mzSkoEi7OvG3L4tpV5DP8raLb8qi liwc4FqbO7JLzU5aDVLh05x3pN903fDHFVkj7jajZGpA2UMAXT3cmWTaAt89zmZZ mYZ16/ylmtkPhDsQJAQBGz0md4zlfYgwBCb0t+88ZpvccCFBC7hclyhOgPNZin3g 33o2phTrTKLiXIaGx4NpolPal6ZUujxnDM7lzlW8u+UH588lPx1tD6G4tka4t5iU pSaTkKMMrzed7Y6f/df66ImruwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELncDYa uL8ZCNZF8TUc+1wAidMGMB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYBd10hmLxyTahgbEJfh9poLae2NiANAVLPltXZ+8K3iOrgDe9Z8cDZGxvluJ cFophwtt7nA2NFH7bTd78OHBqaJR0g4SKyt8MQkGKuHp1Kn0Dhj6G/0ZXfZNgcgY Ux+UroRxg5zooF6k+IQKc336pd5YtwZHH+cskPQXM7dugXYKKpORKfQDT5hSiCP5 HpfcIXguNmn7763B/Wz40R2VWr+/KS9AxbEFvRb/xgioTzHsxMWlFHY41+H+HuIt VDWY01+C3Xv2DvJNLd1ylfqb7P5chFmWnP1EUDSBqa+JtUKxy01tTNgIxpEKCfZ9 WlKVKdulJXXgQCphiix9jBRCqw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:36:51 2026 by rpki-client