$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json) Hash identifier: 7gbPJJ6f2Z/cN9du/1dACvZdCarAt7kl1Kp7B1C1AeY= Subject key identifier: 6E:C3:A0:2B:2D:98:61:11:BB:29:A7:5C:9C:38:C6:71:11:B8:F1:CA Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft Manifest number: 03B2 Signing time: Wed 25 Mar 2026 00:21:42 +0000 Manifest this update: Wed 25 Mar 2026 00:21:42 +0000 Manifest next update: Wed 01 Apr 2026 00:21:42 +0000 Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: +K3+HNJ8BWOMnl3gRfgIHJdi5t52ISl/TQPNfTLSOLI=) 2: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: 0LpQA+c9etZpakFJ96pF9ViQXg3PreBC8rMXqPButV0=) 3: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: YbO7++p8lkcUGyYQcIo4KYfwl6fPis53qsCTIDFujfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Validity Not Before: Mar 25 00:21:42 2026 GMT Not After : Apr 1 00:21:42 2026 GMT Subject: CN=69c32a96-f0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:0b:20:2b:20:f1:32:c0:00:d9:5b:78:50: 75:b7:56:c4:97:b2:46:12:ef:db:6e:31:2a:45:2f: d2:61:d3:4f:d5:e7:0d:27:df:88:6f:a7:d4:8e:c9: 81:1e:77:14:88:09:1e:69:05:c4:63:2b:f7:f6:81: b7:6b:02:61:9f:c7:c8:4c:91:b3:9c:d1:09:83:e0: 7d:05:ed:0e:88:ee:c4:c0:8a:c8:9e:8e:c7:f2:4d: 29:43:6d:e3:3d:55:fa:82:06:c4:d7:63:94:c3:0b: 96:b7:a3:23:2d:4b:ff:a1:9b:ac:43:40:58:43:91: 70:59:0f:27:92:b0:b3:16:e9:57:80:0f:1e:7d:fe: 9d:f7:92:1f:bb:f8:9b:c3:d3:0d:ab:ea:14:7f:6d: c4:37:13:b1:8e:05:14:39:cc:ea:ba:5e:6f:ea:4a: 50:f8:8b:3e:32:7e:70:a5:c2:2f:6d:ba:79:d6:39: 44:20:e7:50:1e:ab:c3:03:ad:a6:54:d8:4f:c3:5f: bc:2b:a1:8e:4c:74:08:1e:32:a5:24:c9:7c:19:9e: 0f:95:34:18:53:50:e7:1f:5a:4f:72:f0:6c:d8:56: 8d:d3:2b:d3:7b:4f:cb:c5:59:15:7d:e2:9b:c8:7f: 25:19:48:d7:0b:46:c7:4d:fe:ea:2c:f2:f6:c0:14: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C3:A0:2B:2D:98:61:11:BB:29:A7:5C:9C:38:C6:71:11:B8:F1:CA X509v3 Authority Key Identifier: keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:04:d0:40:4d:89:57:61:5c:49:af:46:d5:a9:75:bb:e8:d6: 64:9e:11:75:6c:bd:61:9e:d2:77:e9:da:a9:29:9a:e9:aa:fd: a2:a7:20:eb:85:2d:3b:a2:66:32:00:39:b2:81:ba:a1:2d:02: 37:c5:3f:68:cb:97:1f:17:b1:8b:7b:d9:37:08:a9:a0:dc:3d: d5:29:cb:1a:64:d2:8d:71:c9:d1:bd:53:d8:ff:cb:99:e0:df: 92:80:f9:bb:36:2a:16:39:85:a4:0f:61:4b:5c:18:56:20:23: 89:26:d4:5d:40:0e:2d:b0:3c:92:12:7d:38:f1:fa:2f:b5:43: 92:98:41:ee:35:88:29:25:e2:fa:35:ff:4a:f1:0f:3c:f0:6a: da:d4:b0:d3:a3:7b:43:8a:24:d2:9a:a3:b1:48:d3:5b:92:68: 6a:13:84:0b:cf:75:65:7e:55:6e:52:5f:f1:c7:6b:79:cb:d7: 5e:39:29:d8:e4:7b:35:0d:16:03:43:e1:d8:c1:4f:91:55:b1: 27:c4:b8:3b:8e:27:86:ad:aa:36:da:22:37:c7:74:f4:5a:9d: 5b:92:a3:9c:b3:cc:19:66:78:50:60:40:0a:16:ff:f5:9a:6d: 7b:a0:1b:fa:4f:0e:d1:4e:f1:33:5b:f8:b9:85:06:c1:d1:23: 34:04:6e:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBREQxMTAvBgNVBAUTKEI0RjI2MkY5OTg1N0UxMjBDQzlDQkM0QkZDMTdFRDU0 QUJBQkUyQkIwHhcNMjYwMzI1MDAyMTQyWhcNMjYwNDAxMDAyMTQyWjAYMRYwFAYD VQQDEw02OWMzMmE5Ni1mMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2QLICsg8TLAANlbeFB1t1bEl7JGEu/bbjEqRS/SYdNP1ecNJ9+Ib6fUjsmB HncUiAkeaQXEYyv39oG3awJhn8fITJGznNEJg+B9Be0OiO7EwIrIno7H8k0pQ23j PVX6ggbE12OUwwuWt6MjLUv/oZusQ0BYQ5FwWQ8nkrCzFulXgA8eff6d95Ifu/ib w9MNq+oUf23ENxOxjgUUOczqul5v6kpQ+Is+Mn5wpcIvbbp51jlEIOdQHqvDA62m VNhPw1+8K6GOTHQIHjKlJMl8GZ4PlTQYU1DnH1pPcvBs2FaN0yvTe0/LxVkVfeKb yH8lGUjXC0bHTf7qLPL2wBTxGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7DoCst mGERuymnXJw4xnERuPHKMB8GA1UdIwQYMBaAFLTyYvmYV+EgzJy8S/wX7VSrq+K7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFERC9FREM2NzYxNEQw RDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRTRE1uTHhMX0JmdFZLdXI0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQSmktWmhYNFNETW5MeExfQmZ0Vkt1cjRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFERC9FREM2NzYxNEQwRDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRT RE1uTHhMX0JmdFZLdXI0cnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPQTQQE2JV2FcSa9G1al1u+jWZJ4RdWy9YZ7Sd+naqSma6ar9oqcg64UtO6Jm MgA5soG6oS0CN8U/aMuXHxexi3vZNwipoNw91SnLGmTSjXHJ0b1T2P/LmeDfkoD5 uzYqFjmFpA9hS1wYViAjiSbUXUAOLbA8khJ9OPH6L7VDkphB7jWIKSXi+jX/SvEP PPBq2tSw06N7Q4ok0pqjsUjTW5JoahOEC891ZX5VblJf8cdrecvXXjkp2OR7NQ0W A0Ph2MFPkVWxJ8S4O44nhq2qNtoiN8d09FqdW5KjnLPMGWZ4UGBAChb/9Zpte6Ab +k8O0U7xM1v4uYUGwdEjNARuag== -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:15 2026 by rpki-client