$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: Natg3NmCqNJlQGxrx5fFGrkKWR+bvRNS6f5ddvu/VKQ= Subject key identifier: DA:D3:2D:85:6B:53:CA:96:8F:61:21:59:16:5F:06:3C:60:D8:31:EE Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 2894 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 2877 Signing time: Tue 24 Mar 2026 15:32:38 +0000 Manifest this update: Tue 24 Mar 2026 15:32:38 +0000 Manifest next update: Tue 31 Mar 2026 15:32:38 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: oK2tyvtMnI2MWCIpyFzYwtBt3KxGTF4yWpKfwwvKhHY=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: UmJO0KSnCSvHXcJ5e26UAgnZ2y1lkvWGmHME2yVB9kg=) 3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: LsrfohQQqBt1OXduUHyIG+bruizijWoUQfCjHYmeZgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10388 (0x2894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Mar 24 15:32:38 2026 GMT Not After : Mar 31 15:32:38 2026 GMT Subject: CN=69c2ae96-b802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:31:be:65:38:a2:95:b4:1d:ae:4a:01:a1:ba: 24:11:ee:da:85:b5:c9:f5:ef:ec:b4:c8:7a:fd:10: 50:ba:14:67:69:da:61:09:8c:ae:be:ae:8f:1b:27: 8e:40:ac:cf:f3:91:5e:0f:71:8c:bf:8f:5a:28:60: a8:56:46:c2:0d:bc:8f:1a:d2:48:41:4b:69:ff:ab: ad:be:c4:fb:10:9b:95:4c:fa:dd:8c:3b:07:57:90: 6b:d4:ea:c7:8e:e5:bf:16:2e:30:ba:3d:85:72:e6: 21:d0:0d:77:e3:d2:00:36:3d:68:c9:3d:54:5e:0a: d0:41:6d:8d:42:c3:55:b5:08:0b:49:8f:3b:97:85: c4:36:ec:b3:55:f3:3a:d9:52:7c:20:53:1d:ee:f6: 42:47:63:61:93:22:75:7c:83:72:82:aa:ee:6d:8a: 7f:09:e4:fe:6b:27:4c:25:93:d6:42:22:c4:54:f7: dd:1b:57:4d:2d:62:c4:27:da:cc:90:aa:8a:64:c2: a3:0c:8b:95:2e:3d:52:f8:90:ac:8e:30:8e:c1:e3: 54:e3:08:83:9b:93:68:75:d6:9b:b4:a6:87:57:0d: fa:32:16:5f:45:15:a5:3d:f4:c1:62:b6:7e:c0:60: 5c:75:a3:d5:2e:52:ac:c8:4f:ac:29:95:98:3b:0e: 56:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D3:2D:85:6B:53:CA:96:8F:61:21:59:16:5F:06:3C:60:D8:31:EE X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6c:a2:b4:63:97:af:14:e1:88:f2:c4:7d:72:8d:d8:b2:b6: 8e:bc:55:6b:38:8d:a8:49:8d:d3:5c:25:60:82:47:93:8a:62: 13:52:bc:fd:56:75:f4:41:1c:69:e2:86:14:71:22:09:6e:94: cb:d9:a1:88:ab:b6:50:7f:41:93:ed:f7:f8:a1:08:0a:2e:63: 50:39:9e:ce:41:1e:6d:ef:9e:72:07:50:9c:62:18:8d:92:2c: d1:91:a1:62:08:9f:4a:88:df:49:5a:da:82:9d:ab:9c:3e:5c: b6:ea:62:5a:cf:12:22:65:1c:90:c1:15:40:54:34:08:12:06: 2e:89:da:f6:18:2d:c7:2d:fc:3c:ec:a1:dd:09:00:26:ef:74: 7b:69:14:f3:a4:18:e4:5a:f4:75:3e:82:3a:e9:aa:42:46:bc: df:89:f9:f8:5e:20:75:e2:7b:f2:d8:8d:bc:00:c9:95:4b:71: bf:51:c5:fb:35:d6:d4:db:5a:e3:8b:21:6a:ed:2a:35:ce:f4: d8:06:c0:bf:ce:ea:b6:d9:0b:25:01:89:da:17:98:86:0a:1c: 66:43:47:d5:ee:6e:a1:d3:5a:88:39:2f:aa:49:b9:0e:4c:b3: ff:58:32:d7:b8:da:7c:84:a7:c9:bc:84:01:36:24:ab:c7:54: 0a:6f:4a:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjYwMzI0MTUzMjM4WhcNMjYwMzMxMTUzMjM4WjAYMRYwFAYD VQQDEw02OWMyYWU5Ni1iODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jG+ZTiilbQdrkoBobokEe7ahbXJ9e/stMh6/RBQuhRnadphCYyuvq6PGyeO QKzP85FeD3GMv49aKGCoVkbCDbyPGtJIQUtp/6utvsT7EJuVTPrdjDsHV5Br1OrH juW/Fi4wuj2FcuYh0A1349IANj1oyT1UXgrQQW2NQsNVtQgLSY87l4XENuyzVfM6 2VJ8IFMd7vZCR2NhkyJ1fINygqrubYp/CeT+aydMJZPWQiLEVPfdG1dNLWLEJ9rM kKqKZMKjDIuVLj1S+JCsjjCOweNU4wiDm5NoddabtKaHVw36MhZfRRWlPfTBYrZ+ wGBcdaPVLlKsyE+sKZWYOw5WLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrTLYVr U8qWj2EhWRZfBjxg2DHuMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAamyitGOXrxThiPLEfXKN2LK2jrxVaziNqEmN01wlYIJHk4piE1K8/VZ19EEc aeKGFHEiCW6Uy9mhiKu2UH9Bk+33+KEICi5jUDmezkEebe+ecgdQnGIYjZIs0ZGh YgifSojfSVragp2rnD5ctupiWs8SImUckMEVQFQ0CBIGLona9hgtxy38POyh3QkA Ju90e2kU86QY5Fr0dT6COumqQka834n5+F4gdeJ78tiNvADJlUtxv1HF+zXW1Nta 44shau0qNc702AbAv87qttkLJQGJ2heYhgocZkNH1e5uodNaiDkvqkm5Dkyz/1gy 17jafISnybyEATYkq8dUCm9KPg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:18 2026 by rpki-client