$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json) Hash identifier: RHWccb6SmK1fgFsjXQdvWe+gmZ8wIvpVYuYkU4O5PZM= Subject key identifier: D4:79:10:3C:BB:69:E9:DF:83:F9:CE:A2:AC:05:EE:03:57:B4:92:64 Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft Manifest number: 012F Signing time: Fri 27 Mar 2026 05:02:07 +0000 Manifest this update: Fri 27 Mar 2026 05:02:06 +0000 Manifest next update: Fri 03 Apr 2026 05:02:06 +0000 Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: JOExqWdNqW2aqgAMj5jObkd2u/L44jwG0eKCPT11TNQ=) 2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: DxEefx3v0VIE+PRbAwkcYP/T2AQ/uh/zxBc6m9wV8g4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 05:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: Mar 27 05:02:06 2026 GMT Not After : Apr 3 05:02:06 2026 GMT Subject: CN=69c60f4f-9d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:01:a2:fb:14:76:82:eb:b4:67:c6:ce:4a: 43:69:90:5e:84:1d:c8:d4:91:89:56:24:40:31:62: f9:82:d8:f4:31:1e:3e:83:18:d2:a8:79:7c:91:e8: 6e:e4:7a:4b:7c:b9:55:06:f2:c0:cc:eb:61:b8:83: c6:eb:d0:2b:d5:f8:9b:5e:c9:bb:f4:f3:8e:79:76: c6:4b:d8:8a:39:a2:59:14:6a:f1:b4:77:1b:94:f7: 56:87:ec:e5:6e:14:70:61:9f:0c:3f:11:dd:e1:d5: af:5c:92:82:5d:1a:5a:b9:09:3b:8b:f1:96:ea:89: 2a:1f:a9:eb:bc:6a:b2:a1:49:99:cd:0a:b5:c4:1c: 9b:b8:18:84:2c:f5:8c:5a:ad:99:fe:38:a3:72:7b: 9e:d9:75:54:3e:8f:db:73:92:1b:65:88:e3:b9:ab: 6d:05:90:e6:4e:7a:2b:c8:71:64:34:e6:0b:ca:4b: 01:58:1a:24:c9:96:b1:f4:5a:a1:24:12:f2:3d:48: 8b:48:e8:06:a8:fc:c7:74:fc:9c:cf:51:54:3a:f6: b4:37:8e:77:53:9c:18:f0:98:dd:30:d1:c8:95:c3: e3:da:c1:81:2b:a6:cb:6d:0f:86:b2:5e:65:d3:35: 0e:5b:49:e8:4c:97:15:4d:8e:73:7c:71:35:b7:74: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:10:3C:BB:69:E9:DF:83:F9:CE:A2:AC:05:EE:03:57:B4:92:64 X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2e:f7:16:37:fc:7b:83:2f:2b:cd:60:2a:1b:6a:77:3f:89: 13:cb:b6:ae:0b:c6:41:9e:e9:2f:14:d8:be:2b:43:e4:36:78: cf:d0:03:93:2b:d8:f6:45:de:78:68:58:ed:ef:c5:9e:f8:23: ba:1e:13:46:c9:f6:5f:50:a5:42:bd:3d:10:41:73:a9:72:88: fc:3f:02:e0:eb:6a:5f:36:0b:82:76:f4:18:76:87:d7:e0:34: 67:b1:28:b1:db:f8:80:b1:ec:f2:82:7f:08:2f:7c:8b:30:5c: bb:d7:28:56:8d:8f:59:a3:ee:59:26:96:b3:d9:1e:f9:f4:37: 2b:1c:31:37:08:0d:17:c7:a1:ab:6c:d6:8f:e6:ab:c2:9f:2a: 22:f8:0d:c2:bf:02:65:b5:7a:13:4a:5a:61:95:97:8f:74:26: 7b:81:46:d5:24:bd:5a:63:1f:5d:c8:66:c4:30:f7:84:f1:ce: 49:ea:a5:54:89:de:96:97:66:c8:67:8a:be:5d:e7:24:39:53: a4:a1:f9:21:4f:d6:d4:7b:61:42:bb:61:1c:b8:6d:97:ab:db: 59:de:97:b1:0b:d7:08:75:2f:a4:89:8c:ed:37:b6:ce:f7:5f: d9:f9:bb:8e:84:04:3c:57:29:02:24:2f:a3:61:cd:99:83:c4: 70:9b:95:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKDRDQjIxMzJBNzIzNkE2RTNCNUI5NjMwQ0EwMzAxMTQ4 NjMyODU1RjcwHhcNMjYwMzI3MDUwMjA2WhcNMjYwNDAzMDUwMjA2WjAYMRYwFAYD VQQDEw02OWM2MGY0Zi05ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFYBovsUdoLrtGfGzkpDaZBehB3I1JGJViRAMWL5gtj0MR4+gxjSqHl8kehu 5HpLfLlVBvLAzOthuIPG69Ar1fibXsm79POOeXbGS9iKOaJZFGrxtHcblPdWh+zl bhRwYZ8MPxHd4dWvXJKCXRpauQk7i/GW6okqH6nrvGqyoUmZzQq1xBybuBiELPWM Wq2Z/jijcnue2XVUPo/bc5IbZYjjuattBZDmTnoryHFkNOYLyksBWBokyZax9Fqh JBLyPUiLSOgGqPzHdPycz1FUOva0N453U5wY8JjdMNHIlcPj2sGBK6bLbQ+Gsl5l 0zUOW0noTJcVTY5zfHE1t3QgbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNR5EDy7 aenfg/nOoqwF7gNXtJJkMB8GA1UdIwQYMBaAFEyyEypyNqbjtbljDKAwEUhjKFX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi8wMUVERUY5NjVE QkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1TzF1V01Nb0RBUlNHTW9W ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1ZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi8wMUVERUY5NjVEQkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1 TzF1V01Nb0RBUlNHTW9WZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAei73Fjf8e4MvK81gKhtqdz+JE8u2rgvGQZ7pLxTYvitD5DZ4z9ADkyvY9kXe eGhY7e/Fnvgjuh4TRsn2X1ClQr09EEFzqXKI/D8C4OtqXzYLgnb0GHaH1+A0Z7Eo sdv4gLHs8oJ/CC98izBcu9coVo2PWaPuWSaWs9ke+fQ3KxwxNwgNF8ehq2zWj+ar wp8qIvgNwr8CZbV6E0paYZWXj3Qme4FG1SS9WmMfXchmxDD3hPHOSeqlVInelpdm yGeKvl3nJDlTpKH5IU/W1HthQrthHLhtl6vbWd6XsQvXCHUvpImM7Te2zvdf2fm7 joQEPFcpAiQvo2HNmYPEcJuVjg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:38:43 2026 by rpki-client