$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json) Hash identifier: 5+a249z5xOY1hsNwHpzNgC0UJt04zkhYb+hsZOixh0U= Subject key identifier: 58:48:B4:67:ED:1B:29:59:95:90:C6:33:19:31:90:33:A4:7D:0F:56 Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft Manifest number: 015A Signing time: Wed 25 Mar 2026 04:16:23 +0000 Manifest this update: Wed 25 Mar 2026 04:16:22 +0000 Manifest next update: Wed 01 Apr 2026 04:16:22 +0000 Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: qAlfx6wYwpLFpOuHyWvlLdSsNaLSZh3C9gR7C0whepg=) 2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: l3+VnONZP7m8JwaUiP43A2WyQeN+GHf1Ta3Z96yt358=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Mar 25 04:16:22 2026 GMT Not After : Apr 1 04:16:22 2026 GMT Subject: CN=69c36196-a88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:15:24:81:9b:c6:4b:14:0e:3f:55:9c:de:bf: aa:9b:f3:0e:7c:b3:e1:34:17:98:66:87:8d:97:57: 55:7b:28:27:ba:a6:68:9e:37:c7:c9:6b:2f:ee:e0: a9:b5:b6:78:47:9f:21:53:ac:41:a6:b5:70:8d:82: 7c:c6:27:bf:80:df:5a:59:7c:8b:a3:1e:da:a0:78: d8:20:36:54:23:16:00:b9:fb:c5:b9:7e:d5:6f:da: 3a:36:9c:ad:32:f4:c0:ef:f2:7c:9e:30:10:c5:e8: 8b:8a:cf:b2:10:33:dc:14:8f:fc:49:b3:33:2a:4b: 99:76:91:9a:4c:74:17:11:00:dc:a8:8c:24:57:c8: e2:86:d2:14:24:7c:12:67:90:82:47:cc:35:70:b3: de:68:62:26:b4:3f:75:fb:fb:56:58:d9:d9:22:31: af:42:88:8d:96:c1:57:41:6f:7f:03:15:6f:53:ee: 5f:3f:e1:57:f5:2b:4d:2e:ee:ed:96:b3:ab:4a:1c: 42:89:ac:c8:fc:99:87:05:8e:92:41:a7:55:2d:0e: e0:58:fe:40:98:60:e8:ac:a3:24:55:fd:24:23:9c: c6:82:ed:cc:c6:a7:96:4a:67:b2:fc:5e:71:6d:55: e4:70:b9:58:fb:94:18:1d:04:fa:0f:c4:18:f7:d9: 66:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:48:B4:67:ED:1B:29:59:95:90:C6:33:19:31:90:33:A4:7D:0F:56 X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:12:07:68:d6:ed:44:55:1d:b3:2a:31:f3:2a:d8:78:a1:f0: 0b:51:f6:92:0f:46:ae:d3:39:8a:e7:57:1c:c9:cb:4c:d0:e2: 2b:1a:f9:0c:4c:22:22:96:94:d9:bf:3c:39:b4:c4:d9:30:9b: 4a:ae:b5:cf:db:f2:cc:dd:e9:f1:14:5f:12:d0:bd:64:a7:54: 4e:db:fc:95:cc:21:56:21:ba:3f:91:bb:b0:58:fb:bf:94:5c: 7c:f3:5c:ae:ff:a1:2b:b3:95:18:c5:d0:c2:42:b2:5d:37:0f: f1:4b:d5:20:da:78:54:6a:6d:9c:76:c4:b0:f1:bb:df:90:d8: 6b:73:90:0b:51:93:44:87:68:b5:fe:ee:16:a9:4b:d0:83:bb: 93:76:93:18:fb:f3:f9:32:8b:e9:66:01:74:fb:8b:15:3a:60: 74:bf:8c:81:1a:20:f0:d4:2b:da:b1:49:5c:69:37:48:2d:49: 10:88:3c:88:47:e5:b6:27:d3:c9:f9:e2:0a:1a:31:98:24:f4: 5b:29:04:54:7c:3b:82:bb:d9:66:b0:9e:39:f6:bf:b8:d4:d2: 20:6f:4b:8b:0f:e3:d0:08:57:80:5d:3d:3d:06:94:a0:d3:9e: 5c:97:63:df:ac:16:f0:ff:1f:f3:8f:2f:83:ec:76:26:11:18: b1:16:86:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjYwMzI1MDQxNjIyWhcNMjYwNDAxMDQxNjIyWjAYMRYwFAYD VQQDEw02OWMzNjE5Ni1hODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjRUkgZvGSxQOP1Wc3r+qm/MOfLPhNBeYZoeNl1dVeygnuqZonjfHyWsv7uCp tbZ4R58hU6xBprVwjYJ8xie/gN9aWXyLox7aoHjYIDZUIxYAufvFuX7Vb9o6Npyt MvTA7/J8njAQxeiLis+yEDPcFI/8SbMzKkuZdpGaTHQXEQDcqIwkV8jihtIUJHwS Z5CCR8w1cLPeaGImtD91+/tWWNnZIjGvQoiNlsFXQW9/AxVvU+5fP+FX9StNLu7t lrOrShxCiazI/JmHBY6SQadVLQ7gWP5AmGDorKMkVf0kI5zGgu3MxqeWSmey/F5x bVXkcLlY+5QYHQT6D8QY99lmEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhItGft GylZlZDGMxkxkDOkfQ9WMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm UVozelBmc0dpRndjTklpeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIhIHaNbtRFUdsyox8yrYeKHwC1H2kg9GrtM5iudXHMnLTNDiKxr5DEwiIpaU 2b88ObTE2TCbSq61z9vyzN3p8RRfEtC9ZKdUTtv8lcwhViG6P5G7sFj7v5RcfPNc rv+hK7OVGMXQwkKyXTcP8UvVINp4VGptnHbEsPG735DYa3OQC1GTRIdotf7uFqlL 0IO7k3aTGPvz+TKL6WYBdPuLFTpgdL+MgRog8NQr2rFJXGk3SC1JEIg8iEfltifT yfniChoxmCT0WykEVHw7grvZZrCeOfa/uNTSIG9Liw/j0AhXgF09PQaUoNOeXJdj 36wW8P8f848vg+x2JhEYsRaGBA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:50 2026 by rpki-client