$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: c1M6d2sNtPDwoFOoivZ9AYd3dnfW2bxYdYKb2Zk/jEc= Subject key identifier: 2E:E8:0B:C0:C7:B1:65:49:D0:B4:14:40:E5:BD:1A:E7:21:84:EF:A7 Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 351A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: A1A8 Signing time: Tue 24 Mar 2026 14:30:03 +0000 Manifest this update: Tue 24 Mar 2026 14:30:03 +0000 Manifest next update: Tue 31 Mar 2026 14:30:03 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: zc79/nAj17Eor7lrl64h1gk/0D6y0kb2dYMCwBJGhHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13594 (0x351a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Mar 24 14:30:03 2026 GMT Not After : Mar 31 14:30:03 2026 GMT Subject: CN=69c29feb-7d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:a6:bc:b5:fa:4f:eb:a6:a4:a4:4e:f3:cd: 9a:ef:db:80:93:04:23:33:88:b4:22:d6:ae:a5:40: 45:f4:2a:33:b6:18:ad:4e:ab:ae:a5:cc:4c:1f:08: 94:3a:ae:ba:23:82:37:4d:6e:f6:03:a5:96:e9:36: e9:29:cb:bb:bf:ee:15:0d:bc:a0:5b:56:03:82:12: a7:11:0e:9f:13:33:05:fa:08:42:ee:fc:1d:f3:89: e2:34:7c:7c:ad:08:5f:93:42:6e:1b:8b:fe:d1:c9: b8:63:4b:67:cc:52:19:a6:8c:82:26:2a:5c:96:ea: c5:e4:98:02:d0:16:18:1d:a4:a2:86:e3:6b:97:63: 7f:f7:25:03:c9:7e:84:fa:c6:da:4b:d0:84:5f:1b: a8:43:0c:3e:db:28:d7:4c:9d:20:80:a5:b9:b2:02: a8:ab:db:11:a5:88:a3:5b:ee:01:8a:eb:4d:c3:e7: bd:94:9a:4b:71:0f:8a:f9:9c:c6:be:03:67:ba:d8: 03:80:1b:5a:43:c0:aa:5c:a2:e9:2b:3b:21:8d:b7: e2:67:a1:da:08:3c:d9:83:1e:b3:ff:a3:81:95:25: 10:4d:40:6f:87:ce:bb:ed:0a:26:26:8e:b2:93:55: 59:16:b6:07:fc:02:c1:49:af:5c:b6:e4:e3:d4:89: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E8:0B:C0:C7:B1:65:49:D0:B4:14:40:E5:BD:1A:E7:21:84:EF:A7 X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:fa:d0:e1:93:c4:1c:d5:f0:bb:d4:94:9e:06:a0:bf:8e:21: f3:e7:d2:f3:04:14:ea:01:0c:0f:22:f1:17:c4:7a:17:72:a4: ee:b9:4f:34:52:de:e9:ad:74:ee:29:db:50:6a:fd:3f:91:b9: 20:2c:b5:35:74:7f:6c:89:23:73:94:c2:3d:b3:70:a4:a3:18: 09:ec:0d:23:41:8c:58:b9:3b:de:da:c9:b0:ae:f4:16:72:de: d1:c2:52:18:d9:cc:61:3a:d2:10:72:23:e3:3b:bf:18:d7:99: c2:f1:67:5d:77:95:d1:1f:60:ce:65:e8:24:91:a3:c5:01:53: 14:3c:27:94:d9:b7:5d:c2:fd:bb:1b:85:7d:27:e4:1c:04:d8: 10:02:e7:80:29:d2:66:e6:53:98:d0:56:43:7b:09:ee:88:da: cf:a3:9e:f5:fc:52:20:4e:d9:f2:95:7d:1c:f3:9c:d7:fc:58: cd:c9:f7:7d:69:60:62:20:4f:82:e2:48:71:77:99:ee:7b:8d: 01:6c:02:77:bf:dd:87:1a:33:d6:56:74:63:b9:5c:24:60:e7: 80:7d:b8:db:c7:52:81:93:73:7f:ba:d8:32:b4:2e:06:d8:86: 3c:a3:8c:64:d9:eb:b5:82:08:8c:77:ce:3e:e6:1c:0e:7a:37: b9:8c:e3:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjYwMzI0MTQzMDAzWhcNMjYwMzMxMTQzMDAzWjAYMRYwFAYD VQQDEw02OWMyOWZlYi03ZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF+mvLX6T+umpKRO882a79uAkwQjM4i0ItaupUBF9CozthitTquupcxMHwiU Oq66I4I3TW72A6WW6TbpKcu7v+4VDbygW1YDghKnEQ6fEzMF+ghC7vwd84niNHx8 rQhfk0JuG4v+0cm4Y0tnzFIZpoyCJipclurF5JgC0BYYHaSihuNrl2N/9yUDyX6E +sbaS9CEXxuoQww+2yjXTJ0ggKW5sgKoq9sRpYijW+4BiutNw+e9lJpLcQ+K+ZzG vgNnutgDgBtaQ8CqXKLpKzshjbfiZ6HaCDzZgx6z/6OBlSUQTUBvh8677QomJo6y k1VZFrYH/ALBSa9ctuTj1InsXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7oC8DH sWVJ0LQUQOW9GuchhO+nMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAPrQ4ZPEHNXwu9SUngagv44h8+fS8wQU6gEMDyLxF8R6F3Kk7rlPNFLe6a10 7inbUGr9P5G5ICy1NXR/bIkjc5TCPbNwpKMYCewNI0GMWLk73trJsK70FnLe0cJS GNnMYTrSEHIj4zu/GNeZwvFnXXeV0R9gzmXoJJGjxQFTFDwnlNm3XcL9uxuFfSfk HATYEALngCnSZuZTmNBWQ3sJ7ojaz6Oe9fxSIE7Z8pV9HPOc1/xYzcn3fWlgYiBP guJIcXeZ7nuNAWwCd7/dhxoz1lZ0Y7lcJGDngH2428dSgZNzf7rYMrQuBtiGPKOM ZNnrtYIIjHfOPuYcDno3uYzjiw== -----END CERTIFICATE-----Generated at Thu Mar 26 05:56:55 2026 by rpki-client