$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: OPRL6LZMuu7UsjWU/TqEFvTW2/oBRixR/Hj2KTqm9Bw= Subject key identifier: 84:F9:33:19:5D:E2:06:E3:CA:51:32:FF:1A:F9:55:B8:A8:73:B0:E9 Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 0A58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 0A51 Signing time: Tue 24 Mar 2026 19:29:28 +0000 Manifest this update: Tue 24 Mar 2026 19:29:27 +0000 Manifest next update: Tue 31 Mar 2026 19:29:27 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: tXglfBLNUq0qvoF6Jh8b5dW0iY8l3sriANhmqOBaAKw=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: Gm0Iwe0hSOSwYso1nbi24JBkZ2QvXApNu8KFYRfNQDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2648 (0xa58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: Mar 24 19:29:27 2026 GMT Not After : Mar 31 19:29:27 2026 GMT Subject: CN=69c2e618-cac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:c0:ee:46:a2:da:50:cc:3d:65:5e:c6:64: 14:c3:fa:7c:f4:02:97:ec:d4:07:01:96:dc:20:7e: 50:b5:99:ca:70:6d:3c:8b:bd:e4:8c:f4:e4:cf:0b: d0:05:dd:8e:9f:53:1f:bc:ef:02:82:73:12:c8:86: bd:58:5f:4f:19:62:b1:b0:48:42:0a:ea:c4:1b:aa: a8:a2:28:e1:fc:1d:9b:1f:ad:e3:9e:75:f2:f1:4e: d4:44:a6:7a:3e:6a:78:5c:8e:f3:67:d6:7c:23:0e: 84:7e:b9:4d:1f:ce:97:00:c7:5f:77:3f:7a:13:4f: de:8a:29:27:0b:89:bd:03:7a:8a:9a:50:ef:dc:4c: 65:2b:eb:ac:ac:8a:99:e5:42:51:58:3b:bb:5f:48: 30:28:e2:c6:6e:ff:54:07:9c:23:5e:3c:75:75:52: 8e:29:f2:85:48:c8:f3:e0:ee:14:03:0e:dc:ca:b0: fa:fc:01:50:66:0a:50:9c:1a:91:8e:43:f2:8b:b8: d9:ae:a0:39:77:93:62:2a:33:c9:5d:d0:58:35:8c: 82:34:83:15:13:9e:5b:e2:52:d7:01:d1:57:30:f3: ab:ab:42:6b:56:65:5f:cc:2b:65:a1:f2:a0:de:b9: e2:fd:4f:a0:ac:6d:36:8a:33:2e:ab:06:12:d3:c7: 0c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F9:33:19:5D:E2:06:E3:CA:51:32:FF:1A:F9:55:B8:A8:73:B0:E9 X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:d2:29:68:11:53:fd:bd:a7:be:5b:14:44:9b:42:0f:ce:36: c9:81:77:24:71:04:92:98:21:cb:37:cd:61:bf:fe:c4:cd:8c: 3b:28:79:c6:1e:ff:ef:ab:08:67:72:3e:9e:e8:41:9f:c0:bf: f5:ce:6d:eb:87:16:08:f2:b8:5c:29:59:de:79:da:6d:49:69: c5:8e:9f:f5:65:29:35:01:d9:63:58:38:c2:b5:08:5e:4a:ed: ab:74:86:d3:e5:82:2a:fb:fc:64:42:66:05:42:61:0a:c9:68: d4:31:ee:64:ff:db:b1:a4:b1:08:f2:44:fb:b9:09:51:ab:74: c7:41:ad:24:41:05:41:99:0d:a1:ab:f6:f7:0c:1a:83:af:fd: ef:02:df:95:cb:9b:20:6c:5d:3e:10:1b:3b:eb:c8:22:a4:3a: 6d:b3:4a:f3:00:4a:05:73:f8:a7:ee:89:33:15:88:74:49:ce: 40:17:2d:0b:23:7c:c2:7a:f2:54:0f:b9:3e:90:29:6e:05:1a: 8c:9a:87:4c:35:f5:8f:f9:e4:5f:13:b0:44:05:85:fc:95:a4: 2e:b2:06:0f:4c:c1:f6:5f:f7:38:5c:a6:a7:9c:0e:85:df:d9: 5b:07:63:f7:98:b9:36:de:ce:88:a0:0d:6d:60:79:ec:c4:c9: dd:b7:4e:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjYwMzI0MTkyOTI3WhcNMjYwMzMxMTkyOTI3WjAYMRYwFAYD VQQDEw02OWMyZTYxOC1jYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr7A7kai2lDMPWVexmQUw/p89AKX7NQHAZbcIH5QtZnKcG08i73kjPTkzwvQ Bd2On1MfvO8CgnMSyIa9WF9PGWKxsEhCCurEG6qooijh/B2bH63jnnXy8U7URKZ6 Pmp4XI7zZ9Z8Iw6EfrlNH86XAMdfdz96E0/eiiknC4m9A3qKmlDv3ExlK+usrIqZ 5UJRWDu7X0gwKOLGbv9UB5wjXjx1dVKOKfKFSMjz4O4UAw7cyrD6/AFQZgpQnBqR jkPyi7jZrqA5d5NiKjPJXdBYNYyCNIMVE55b4lLXAdFXMPOrq0JrVmVfzCtlofKg 3rni/U+grG02ijMuqwYS08cMpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIT5Mxld 4gbjylEy/xr5Vbioc7DpMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdtIpaBFT/b2nvlsURJtCD842yYF3JHEEkpghyzfNYb/+xM2MOyh5xh7/76sI Z3I+nuhBn8C/9c5t64cWCPK4XClZ3nnabUlpxY6f9WUpNQHZY1g4wrUIXkrtq3SG 0+WCKvv8ZEJmBUJhCslo1DHuZP/bsaSxCPJE+7kJUat0x0GtJEEFQZkNoav29wwa g6/97wLflcubIGxdPhAbO+vIIqQ6bbNK8wBKBXP4p+6JMxWIdEnOQBctCyN8wnry VA+5PpApbgUajJqHTDX1j/nkXxOwRAWF/JWkLrIGD0zB9l/3OFymp5wOhd/ZWwdj 95i5Nt7OiKANbWB57MTJ3bdOvw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:07:55 2026 by rpki-client