$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: 6wZCPdUImRwB9Xinl9Uzf0P79uczD9W0P+biQWwoRJU= Subject key identifier: 4F:E2:E5:E2:83:41:1B:B2:07:A1:E4:67:69:62:29:F5:E4:A1:CD:1E Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 042C Signing time: Tue 24 Mar 2026 23:59:38 +0000 Manifest this update: Tue 24 Mar 2026 23:59:38 +0000 Manifest next update: Tue 31 Mar 2026 23:59:38 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: pNav1B9szcunmcGy0syCyC+V70rp/pGMo/9vqiQtttU=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: xpRfyiF/Cwbm/S2d07PVYILgag6XLAeF1LTYw+95K4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E, serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: Mar 24 23:59:38 2026 GMT Not After : Mar 31 23:59:38 2026 GMT Subject: CN=69c3256a-6444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:58:9d:bc:d9:a5:ee:e6:f6:d6:e2:fb:e7: 75:dd:52:f5:0c:f6:7e:00:41:f0:35:f1:75:55:ba: c0:b3:91:51:c5:6e:37:c2:ce:0d:8c:7d:9f:3c:11: 3a:de:1d:ff:49:80:e9:6f:18:42:90:dc:79:f6:4e: de:71:a5:af:e2:c7:fa:15:a5:6e:9d:52:19:51:42: a2:32:cc:12:5e:df:93:9d:39:b5:77:5c:a5:82:92: bb:e3:10:ae:76:b0:9c:bb:a1:7d:62:ce:f8:d6:f1: d1:97:a4:12:74:17:a7:cd:e7:e7:3f:63:00:a9:94: 0c:38:4f:e9:97:33:e4:be:1c:2a:0d:ae:75:78:39: 0a:8a:d8:0b:ac:25:e6:91:ee:df:1b:4b:82:20:47: 5d:cb:d1:2f:04:08:50:a4:51:00:30:21:a8:11:a3: 18:02:c2:6f:5e:51:22:98:97:44:2f:73:e5:e5:53: 73:b3:bb:bb:ea:91:2c:dc:9e:73:90:dc:95:33:cb: 60:66:ed:8f:64:c7:5b:5f:5c:2c:b8:86:97:1b:f1: fe:eb:ac:bd:03:37:bc:9e:65:3b:0d:3b:b8:6f:30: b8:2d:69:0f:b0:d6:6b:db:0e:5c:f3:f7:3b:df:e7: a3:f8:12:87:15:fa:10:d4:5d:69:d4:93:d5:a8:03: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E2:E5:E2:83:41:1B:B2:07:A1:E4:67:69:62:29:F5:E4:A1:CD:1E X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:6e:49:e6:fb:e3:e6:ee:2d:29:46:92:e3:36:5b:04:bf:66: 81:10:cf:54:5c:03:b8:e3:58:e3:05:ba:5e:83:e2:22:b1:23: 35:54:47:79:4c:a6:d7:f4:b8:66:06:58:34:dd:d5:0f:3f:76: 40:5f:58:f0:61:1a:16:13:3c:b1:40:19:9c:3d:8e:35:0f:66: 88:f0:28:47:80:21:08:80:89:9f:f9:72:3e:54:43:a8:56:ad: aa:6d:f8:f0:f6:f1:73:42:2c:e2:59:01:b6:40:3b:fb:38:57: a5:4c:a2:51:1e:23:0b:65:6d:b6:c6:e1:14:00:1e:ec:3e:6f: 41:eb:9d:d6:83:25:77:50:a7:5e:ee:f6:f3:6b:92:c5:a3:57: cb:76:bf:23:2a:8d:c9:5c:67:e9:32:d9:00:c1:34:9c:f1:dd: f5:e6:a3:51:83:7e:f1:d5:99:68:5d:33:ec:f6:ba:d6:1e:f2: 07:ca:66:17:e4:75:b2:fb:f6:60:3d:cd:e5:b4:2b:fe:0d:05: 04:56:5d:6d:3a:c1:88:50:5a:70:a3:d0:bc:8f:b4:66:ec:ab: b7:f1:70:d6:57:02:36:8b:67:bb:f0:6c:b9:26:16:26:00:36: 79:67:97:ea:8d:e0:66:01:e8:f8:64:87:5c:aa:bf:87:4e:ba: ea:1a:41:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjYwMzI0MjM1OTM4WhcNMjYwMzMxMjM1OTM4WjAYMRYwFAYD VQQDEw02OWMzMjU2YS02NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2hYnbzZpe7m9tbi++d13VL1DPZ+AEHwNfF1VbrAs5FRxW43ws4NjH2fPBE6 3h3/SYDpbxhCkNx59k7ecaWv4sf6FaVunVIZUUKiMswSXt+TnTm1d1ylgpK74xCu drCcu6F9Ys741vHRl6QSdBenzefnP2MAqZQMOE/plzPkvhwqDa51eDkKitgLrCXm ke7fG0uCIEddy9EvBAhQpFEAMCGoEaMYAsJvXlEimJdEL3Pl5VNzs7u76pEs3J5z kNyVM8tgZu2PZMdbX1wsuIaXG/H+66y9Aze8nmU7DTu4bzC4LWkPsNZr2w5c8/c7 3+ej+BKHFfoQ1F1p1JPVqAOPFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/i5eKD QRuyB6HkZ2liKfXkoc0eMB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0m5J5vvj5u4tKUaS4zZbBL9mgRDPVFwDuONY4wW6XoPiIrEjNVRHeUym1/S4 ZgZYNN3VDz92QF9Y8GEaFhM8sUAZnD2ONQ9miPAoR4AhCICJn/lyPlRDqFatqm34 8Pbxc0Is4lkBtkA7+zhXpUyiUR4jC2VttsbhFAAe7D5vQeud1oMld1CnXu7282uS xaNXy3a/IyqNyVxn6TLZAME0nPHd9eajUYN+8dWZaF0z7Pa61h7yB8pmF+R1svv2 YD3N5bQr/g0FBFZdbTrBiFBacKPQvI+0Zuyrt/Fw1lcCNotnu/BsuSYWJgA2eWeX 6o3gZgHo+GSHXKq/h0666hpBVA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:54:40 2026 by rpki-client