$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json) Hash identifier: SRbeU+yLhDyyVXamChosS4Zm46wHpNAdR8AtNkgxqvw= Subject key identifier: FF:27:39:8F:14:72:3A:D1:79:7A:3A:4B:EE:F6:AE:90:E2:61:F8:B7 Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 09B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft Manifest number: 20FE Signing time: Tue 24 Mar 2026 16:30:27 +0000 Manifest this update: Tue 24 Mar 2026 16:30:26 +0000 Manifest next update: Tue 31 Mar 2026 16:30:26 +0000 Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: Z5OCGV261bUhMKvWw4yH0ZDcLf0fMbh7Yji5ZiAf0Kk=) 2: 4A31F616E8DD11F0AFF4FBBE636F56BC.roa (hash: Wdgrnef6OjWOvwI+su2ONKUiV39rS9f7YeSG/xsumes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2483 (0x9b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Mar 24 16:30:26 2026 GMT Not After : Mar 31 16:30:26 2026 GMT Subject: CN=69c2bc22-115e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:a2:3a:53:32:cf:ad:10:d3:99:38:f1:05: 16:07:5f:b7:96:58:fe:32:d7:b1:73:45:ad:89:dd: b5:ea:3c:57:6c:6d:9e:c7:0d:32:7c:38:39:56:c2: da:42:d6:d8:6b:76:de:5f:7f:71:96:3d:f4:59:ee: 0d:ae:44:db:52:37:a0:86:79:89:51:4a:8f:d3:8e: ec:0d:70:55:02:f7:84:85:fd:6a:cd:e4:dc:ca:d4: d7:f0:e3:dd:1c:7a:70:8f:0e:16:42:30:74:cd:ca: 05:78:70:52:bb:9e:72:88:03:dd:5f:9d:9c:41:2e: 91:53:f6:9c:04:a8:52:1a:db:3d:a5:53:0d:e0:fe: 3b:83:e2:20:3c:05:0e:4c:79:68:45:5e:34:4f:b6: da:ef:4e:22:31:ec:11:5f:a9:ca:e5:e9:e0:fc:62: 8f:3e:3b:b2:e3:17:40:63:b1:71:fa:7a:aa:f0:ec: 55:d6:8e:46:6c:8f:17:d9:d9:e6:a1:19:92:7d:b6: bb:47:62:61:a2:8d:3e:96:e7:e8:bd:c0:9b:c2:9d: fa:87:fd:e2:9f:fd:83:9d:c6:fc:a5:ee:71:36:e5: 82:7e:03:da:74:40:db:12:18:c6:fe:23:c9:09:16: f7:cf:0d:cd:bb:55:5d:78:d6:f0:aa:e0:7f:95:e9: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:27:39:8F:14:72:3A:D1:79:7A:3A:4B:EE:F6:AE:90:E2:61:F8:B7 X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f8:88:49:dc:53:88:ea:aa:7f:26:4c:31:92:8f:64:3a:1c: 51:df:f3:28:d0:6f:5e:0a:09:67:aa:91:99:20:74:84:7b:85: 60:f5:8d:42:bd:8b:76:07:92:23:79:e8:2c:76:7e:e2:20:a9: d9:7e:3f:ec:4b:e1:9d:53:26:41:5d:b5:cc:45:78:e6:6e:46: 56:c0:79:6e:0e:c7:62:b3:6b:49:44:93:a7:88:0a:4c:76:86: 42:cb:92:0f:a7:42:fa:8e:ea:4c:5d:0c:fb:b5:07:a4:d8:c7: 7f:2b:7c:bf:96:46:91:e6:bb:80:06:42:2a:bd:30:e7:0c:fe: 93:e5:17:f2:37:ad:f4:4b:13:1a:17:99:e1:34:89:e8:ce:fa: 3e:78:6f:c8:12:69:45:c9:30:e1:f1:ef:6c:84:75:8b:34:51: e5:26:32:80:6c:34:3e:28:40:9f:fc:2e:e9:65:d4:d2:ea:b2: 64:da:d5:40:16:24:ec:0c:71:fb:81:a1:0b:2f:ff:ac:3c:e9: 0e:7c:4e:50:6a:ca:cf:ac:53:d1:91:79:3e:15:75:a2:d1:cd: 6f:94:a8:56:36:47:83:cc:2d:79:5a:cc:5f:c8:bb:5c:d6:0e: e5:f9:72:05:db:7e:da:86:44:95:86:8a:29:a8:47:a3:de:43: 88:b8:97:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjYwMzI0MTYzMDI2WhcNMjYwMzMxMTYzMDI2WjAYMRYwFAYD VQQDEw02OWMyYmMyMi0xMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwmiOlMyz60Q05k48QUWB1+3llj+Mtexc0Wtid216jxXbG2exw0yfDg5VsLa QtbYa3beX39xlj30We4NrkTbUjeghnmJUUqP047sDXBVAveEhf1qzeTcytTX8OPd HHpwjw4WQjB0zcoFeHBSu55yiAPdX52cQS6RU/acBKhSGts9pVMN4P47g+IgPAUO THloRV40T7ba704iMewRX6nK5eng/GKPPjuy4xdAY7Fx+nqq8OxV1o5GbI8X2dnm oRmSfba7R2Jhoo0+lufovcCbwp36h/3in/2Dncb8pe5xNuWCfgPadEDbEhjG/iPJ CRb3zw3Nu1VdeNbwquB/lek+BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8nOY8U cjrReXo6S+72rpDiYfi3MB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM TWx2QW5FdjB5dDg4cjdOQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPviISdxTiOqqfyZMMZKPZDocUd/zKNBvXgoJZ6qRmSB0hHuFYPWNQr2LdgeS I3noLHZ+4iCp2X4/7EvhnVMmQV21zEV45m5GVsB5bg7HYrNrSUSTp4gKTHaGQsuS D6dC+o7qTF0M+7UHpNjHfyt8v5ZGkea7gAZCKr0w5wz+k+UX8jet9EsTGheZ4TSJ 6M76PnhvyBJpRckw4fHvbIR1izRR5SYygGw0PihAn/wu6WXU0uqyZNrVQBYk7Axx +4GhCy//rDzpDnxOUGrKz6xT0ZF5PhV1otHNb5SoVjZHg8wteVrMX8i7XNYO5fly Bdt+2oZElYaKKahHo95DiLiXvg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:55 2026 by rpki-client