$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: soFo6lmvERzJhdlQxVKWVs7faN24fXzK7zMLwjcGn34= Subject key identifier: 86:6D:FD:F0:8C:52:27:E2:D5:9E:BF:28:0C:B5:99:5A:E5:5D:56:DB Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 03D1 Signing time: Wed 25 Mar 2026 00:14:48 +0000 Manifest this update: Wed 25 Mar 2026 00:14:48 +0000 Manifest next update: Wed 01 Apr 2026 00:14:48 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: 4aYTS9Ja1S5Tt/75dzpQupndKAE4CjRyR3pwjL6nD98=) 2: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=) 3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=) 4: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Mar 25 00:14:48 2026 GMT Not After : Apr 1 00:14:48 2026 GMT Subject: CN=69c328f8-73ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:30:84:d9:82:9c:70:a7:ad:30:f4:84:a3: 64:82:84:68:10:b8:cf:db:92:fd:31:e7:50:41:6e: d5:e6:5c:da:5c:87:e6:1f:99:53:f9:c4:8d:d3:0a: 6e:7f:60:72:c5:46:06:b0:4e:4b:4d:0c:3e:a3:61: d3:7c:e8:b3:36:ee:f0:36:18:55:00:3a:7f:1d:7b: c5:23:da:b3:bf:ce:91:fb:8b:7d:3f:96:2a:00:6a: a5:05:db:fd:a1:6e:a9:a9:8d:d6:89:f1:c8:ac:5c: e2:c0:4a:f6:f9:ca:38:f2:ec:43:a2:2d:3e:de:fc: d9:ad:5c:b3:10:5e:ad:f3:73:df:64:b8:92:72:e9: de:57:ff:13:b9:80:77:12:f0:15:2f:2b:62:90:f4: 7f:7d:de:ad:1c:19:fc:78:38:5d:09:a7:cc:12:9a: 22:0e:c3:c0:73:da:46:d4:10:ac:38:29:12:c5:f4: 3a:40:7f:11:84:63:a9:52:f1:e3:03:13:5e:d1:b4: ba:a8:f0:08:7e:80:10:3e:12:d2:cc:4a:d1:c9:ab: 4a:d1:4a:76:ae:cb:b1:7c:6c:0b:48:7f:0d:b4:d2: 40:94:0b:4b:ff:44:f6:c9:bc:50:f1:cf:b7:4c:b1: ec:fb:3b:3f:2b:c3:42:ac:f2:5c:94:f3:81:f3:1c: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6D:FD:F0:8C:52:27:E2:D5:9E:BF:28:0C:B5:99:5A:E5:5D:56:DB X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ea:13:72:04:b6:91:ac:12:38:48:cb:4c:c8:a4:eb:ea:22: 2a:db:47:f2:90:e8:9c:f4:98:88:45:3a:4b:96:f5:77:91:d1: bc:ae:f5:5c:81:e6:86:b3:52:a6:c1:7d:b6:ef:07:3a:ea:c8: e6:50:dc:0a:43:73:ba:01:5e:78:17:9b:8c:d9:fc:a8:97:26: 57:02:af:16:63:b5:7f:b4:3a:34:71:c1:37:9d:9e:f2:14:b6: 13:ba:7c:6d:a0:ce:9b:82:43:8f:d2:12:16:67:08:6a:af:9c: 53:a6:0d:7b:d2:fa:a8:db:07:15:09:2b:b3:27:59:9f:7d:b1: 2b:da:83:01:4f:7d:6a:a6:a1:4f:aa:53:93:db:06:1f:cc:f7: e1:b2:79:0f:ef:9f:31:72:4a:90:be:b8:68:bf:85:f7:fe:af: a3:1d:81:7f:e1:27:1c:54:5f:ba:93:d5:93:1f:63:67:f8:94: ea:c4:c1:2c:31:b8:57:af:01:86:51:2a:ca:ff:aa:e0:43:e8: ba:2d:03:ab:62:31:a4:c2:6e:16:87:40:9c:2d:46:44:ad:09: 2f:3f:2c:fe:ad:97:04:58:c8:2f:a8:2f:44:16:90:8c:5a:65: aa:ea:0f:ad:13:75:00:f1:59:01:81:53:0a:63:3c:b7:d1:0f: 55:18:e0:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYwMzI1MDAxNDQ4WhcNMjYwNDAxMDAxNDQ4WjAYMRYwFAYD VQQDEw02OWMzMjhmOC03M2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qowhNmCnHCnrTD0hKNkgoRoELjP25L9MedQQW7V5lzaXIfmH5lT+cSN0wpu f2ByxUYGsE5LTQw+o2HTfOizNu7wNhhVADp/HXvFI9qzv86R+4t9P5YqAGqlBdv9 oW6pqY3WifHIrFziwEr2+co48uxDoi0+3vzZrVyzEF6t83PfZLiScuneV/8TuYB3 EvAVLytikPR/fd6tHBn8eDhdCafMEpoiDsPAc9pG1BCsOCkSxfQ6QH8RhGOpUvHj AxNe0bS6qPAIfoAQPhLSzErRyatK0Up2rsuxfGwLSH8NtNJAlAtL/0T2ybxQ8c+3 TLHs+zs/K8NCrPJclPOB8xx8IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZt/fCM Uifi1Z6/KAy1mVrlXVbbMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWuoTcgS2kawSOEjLTMik6+oiKttH8pDonPSYiEU6S5b1d5HRvK71XIHmhrNS psF9tu8HOurI5lDcCkNzugFeeBebjNn8qJcmVwKvFmO1f7Q6NHHBN52e8hS2E7p8 baDOm4JDj9ISFmcIaq+cU6YNe9L6qNsHFQkrsydZn32xK9qDAU99aqahT6pTk9sG H8z34bJ5D++fMXJKkL64aL+F9/6vox2Bf+EnHFRfupPVkx9jZ/iU6sTBLDG4V68B hlEqyv+q4EPoui0Dq2IxpMJuFodAnC1GRK0JLz8s/q2XBFjIL6gvRBaQjFplquoP rRN1APFZAYFTCmM8t9EPVRjgsw== -----END CERTIFICATE-----Generated at Thu Mar 26 09:56:26 2026 by rpki-client