$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft File: TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json) Hash identifier: B5L9oeoT+ypvK+/MY3/LtUDGhwoRBxw3uHAy8Tx/jK0= Subject key identifier: D6:50:37:4E:36:8C:24:77:E1:30:C7:B2:17:25:CA:7F:00:0D:A9:EE Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft Manifest number: 7B Signing time: Fri 27 Mar 2026 07:18:59 +0000 Manifest this update: Fri 27 Mar 2026 07:18:58 +0000 Manifest next update: Fri 03 Apr 2026 07:18:58 +0000 Files and hashes: 1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: YkCjteqQvS9C8zQjOpdoA8sogVcy+0Wr02Nr175gD8w=) 2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 07:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Validity Not Before: Mar 27 07:18:58 2026 GMT Not After : Apr 3 07:18:58 2026 GMT Subject: CN=69c62f63-e9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:e7:2a:95:51:31:ec:04:45:53:d3:87:b8: d9:5c:93:3f:57:b1:3b:ce:64:6f:e0:e7:d2:4f:d5: d2:a4:96:9f:d8:ba:d4:a0:b3:7d:3b:d6:0b:65:df: b8:00:f4:a3:60:c5:c9:50:80:3c:77:b1:4a:d8:c1: e6:36:b9:48:96:32:45:9d:b0:3a:bf:c8:46:7c:11: bc:80:27:52:1c:56:3f:55:17:e6:37:e3:8a:fe:28: 2f:fe:ef:23:c6:19:44:fb:be:a5:f3:15:80:b5:c7: 73:d5:6b:73:7a:68:d8:21:6a:14:e5:93:55:e7:25: bd:84:39:a0:cf:a2:71:98:b4:ea:d7:ff:83:79:86: b5:af:a1:c7:30:0b:b7:f1:51:70:d0:b7:38:56:d4: 00:19:5a:19:02:23:f2:5a:26:8c:07:7f:4a:4b:aa: 3d:b0:bc:31:10:2f:c9:13:7a:cf:b0:b0:27:f5:54: 23:15:ab:cd:3d:86:0d:93:38:77:4e:8d:6d:12:6f: 8d:54:b7:5d:61:ae:38:a4:19:7f:78:3c:1b:75:7c: c1:e0:b0:d9:5b:44:61:a5:57:15:90:b4:35:a8:5b: ae:f7:b0:31:cd:b5:3c:51:6e:75:72:6b:f3:01:35: ef:bb:bf:aa:b3:6e:e7:37:29:c8:f4:82:b0:d5:03: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:50:37:4E:36:8C:24:77:E1:30:C7:B2:17:25:CA:7F:00:0D:A9:EE X509v3 Authority Key Identifier: keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:71:10:8e:02:b4:0f:e0:a4:41:14:c2:31:3b:12:15:1d:dc: f3:ee:03:5c:e1:49:fd:19:5e:d9:60:24:7d:b5:9f:d8:d6:09: 8a:c2:f4:c0:dc:b5:bc:cd:12:75:d9:7c:37:94:91:07:10:b8: b6:60:66:97:31:8e:02:de:c1:2b:b0:e1:19:a3:2d:c3:4f:dc: 42:69:c4:33:23:d2:12:fb:44:63:e1:fa:e7:db:25:a1:a0:5e: ee:9c:a5:f2:4c:5b:50:2b:ab:12:4a:3c:3a:f9:ec:41:a5:cf: c1:ea:b2:aa:ad:06:92:f9:a7:5d:1e:94:d4:a1:93:44:66:1b: a8:98:e1:bc:44:be:54:f1:5c:f2:93:76:3d:5d:1d:c8:50:88: 7b:82:cf:0d:6d:91:bd:b0:b7:f6:1f:d2:d4:20:61:5f:7f:65: b8:df:cc:6b:fa:1e:d8:1e:1b:37:1d:57:e9:e3:cd:12:0b:ff: de:4d:d8:0f:c1:fe:da:bf:42:df:0e:5d:bb:08:dc:b5:82:36: 4c:a8:05:8a:c7:97:7f:95:fa:3e:cb:13:0d:b5:26:2c:2e:54: cb:94:76:d0:8a:1f:d5:c5:3a:7c:91:22:0d:ed:e8:bb:8f:eb: bb:d3:c7:82:23:a3:ad:b9:4a:63:68:bf:0d:58:b1:04:dc:4c: 26:8e:d7:ed -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkI2RDExMC8GA1UEBRMoNEQ0RjNBQUNDNzM5NUExM0Q2NDIwMDdGOTkxMERGODgw NDBFNEJBQjAeFw0yNjAzMjcwNzE4NThaFw0yNjA0MDMwNzE4NThaMBgxFjAUBgNV BAMTDTY5YzYyZjYzLWU5YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk5OcqlVEx7ARFU9OHuNlckz9XsTvOZG/g59JP1dKklp/YutSgs3071gtl37gA 9KNgxclQgDx3sUrYweY2uUiWMkWdsDq/yEZ8EbyAJ1IcVj9VF+Y344r+KC/+7yPG GUT7vqXzFYC1x3PVa3N6aNghahTlk1XnJb2EOaDPonGYtOrX/4N5hrWvoccwC7fx UXDQtzhW1AAZWhkCI/JaJowHf0pLqj2wvDEQL8kTes+wsCf1VCMVq809hg2TOHdO jW0Sb41Ut11hrjikGX94PBt1fMHgsNlbRGGlVxWQtDWoW673sDHNtTxRbnVya/MB Ne+7v6qzbuc3Kcj0grDVA87xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1lA3TjaM JHfhMMeyFyXKfwANqe4wHwYDVR0jBBgwFoAUTU86rMc5WhPWQgB/mRDfiAQOS6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyQjZELzg2REY2QzdFNzEw NTExRjA4NTRGNUExNEM0RjlBRTAyL1RVODZyTWM1V2hQV1FnQl9tUkRmaUFRT1M2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFU4NnJNYzVXaFBXUWdCX21SRGZpQVFPUzZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy QjZELzg2REY2QzdFNzEwNTExRjA4NTRGNUExNEM0RjlBRTAyL1RVODZyTWM1V2hQ V1FnQl9tUkRmaUFRT1M2cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdcRCOArQP4KRBFMIxOxIVHdzz7gNc4Un9GV7ZYCR9tZ/Y1gmKwvTA3LW8zRJ1 2Xw3lJEHELi2YGaXMY4C3sErsOEZoy3DT9xCacQzI9IS+0Rj4frn2yWhoF7unKXy TFtQK6sSSjw6+exBpc/B6rKqrQaS+addHpTUoZNEZhuomOG8RL5U8Vzyk3Y9XR3I UIh7gs8NbZG9sLf2H9LUIGFff2W438xr+h7YHhs3HVfp480SC//eTdgPwf7av0Lf Dl27CNy1gjZMqAWKx5d/lfo+yxMNtSYsLlTLlHbQih/VxTp8kSIN7ei7j+u708eC I6OtuUpjaL8NWLEE3Ewmjtft -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:19 2026 by rpki-client