$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json) Hash identifier: tUGk9ZcR1RSQ/Tl4j4i7iL/IVLQfFcs8UTLajRkRAGM= Subject key identifier: 17:B8:1E:1E:20:BD:01:60:D4:1B:3B:3E:BA:32:8D:61:E2:D4:B3:CB Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0CF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft Manifest number: 0CE0 Signing time: Thu 26 Mar 2026 18:12:27 +0000 Manifest this update: Thu 26 Mar 2026 18:12:26 +0000 Manifest next update: Thu 02 Apr 2026 18:12:26 +0000 Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: mv8y4tyJAQ/6ojz1ifr3h7DRKiZXMDKOw4llWjyy1nM=) 2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: 1fv3/pXl5lcDYoLzTz47KptyfQ/fj025AndBgH7ATRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: Mar 26 18:12:26 2026 GMT Not After : Apr 2 18:12:26 2026 GMT Subject: CN=69c5770b-8c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b3:3f:58:40:22:0b:e0:a1:04:2b:6f:b3:1d: e8:81:4d:35:01:a3:26:65:25:31:4e:51:07:7e:9d: 7d:d6:d2:7c:99:01:3d:c8:0c:bb:04:bf:f0:02:43: c2:f1:41:18:7c:bb:06:9f:77:7a:0d:83:70:62:5e: 8a:fb:1e:c3:85:f2:d3:88:e0:a3:f9:8e:9b:9d:db: 04:cc:2d:4d:d9:4c:14:e9:0c:99:27:fe:7e:48:70: b4:4e:d2:d1:94:95:2c:8c:3b:91:38:ae:f9:36:f5: 22:52:e9:bc:b0:d7:9e:04:32:26:57:7b:92:16:9a: 26:bd:df:ac:6d:2d:90:11:96:80:54:59:8b:b9:87: aa:4b:3c:78:66:2b:5d:3f:7f:bb:f0:55:82:c6:9b: 5f:58:05:36:2b:cd:cb:4d:89:03:db:48:61:52:7c: ea:65:b5:9a:ba:f3:f8:57:41:cd:af:c6:92:fc:94: 3a:23:1c:32:8b:40:aa:2e:d1:cc:6d:f3:20:52:0c: 46:80:47:88:b0:d6:93:21:de:71:59:5e:f6:af:3e: 5a:59:e7:9b:9c:7a:21:12:ce:ec:49:3a:c4:97:47: b9:0f:c3:19:71:c2:de:85:f2:70:a9:5a:08:fd:13: 8d:ca:26:df:46:e5:6e:bc:ef:b2:9f:0d:c6:f4:c5: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B8:1E:1E:20:BD:01:60:D4:1B:3B:3E:BA:32:8D:61:E2:D4:B3:CB X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ff:ef:e6:cd:3c:28:df:80:c6:37:62:cc:29:c2:16:02:47: 2a:1e:70:6e:08:ab:a7:3d:e2:11:5a:3d:6a:f5:d6:cb:01:22: 58:ea:56:a0:1d:ab:38:47:81:82:f0:5c:4e:e1:a5:c5:54:c7: c8:6a:fc:d9:9f:53:7d:0f:69:a0:79:c6:19:6c:10:36:ea:1e: dd:05:c4:79:7b:45:86:b8:32:15:42:43:b3:a2:55:0f:e6:9f: a0:da:ae:68:07:5a:3d:cb:05:75:c5:d4:e9:0c:de:7e:e4:3b: 9d:b0:a1:e0:97:62:18:a3:03:10:7c:2b:67:48:86:d4:88:d9: 14:c6:54:cb:ff:36:c8:e9:46:ba:c7:8b:72:37:41:95:2e:53: 67:f8:59:5c:1f:26:78:c6:24:02:e3:d6:1d:fb:00:2e:c5:9b: 8d:02:32:86:1d:27:c1:17:8c:c6:4e:e7:27:da:b8:6e:c0:bf: 5d:c9:fe:8d:e3:fb:6c:2e:56:7c:56:3b:f6:ca:6e:70:57:6d: 1a:8e:25:58:a2:e3:c6:cd:3b:8b:e6:55:07:62:78:67:a8:53: 83:4a:22:6d:ad:07:d4:5c:a3:3f:16:a0:41:9f:d8:c9:7d:e0: 5c:19:55:63:99:d2:f7:60:7a:6a:1b:3c:e1:0d:09:be:6e:d5: c8:10:57:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjYwMzI2MTgxMjI2WhcNMjYwNDAyMTgxMjI2WjAYMRYwFAYD VQQDEw02OWM1NzcwYi04YzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rM/WEAiC+ChBCtvsx3ogU01AaMmZSUxTlEHfp191tJ8mQE9yAy7BL/wAkPC 8UEYfLsGn3d6DYNwYl6K+x7DhfLTiOCj+Y6bndsEzC1N2UwU6QyZJ/5+SHC0TtLR lJUsjDuROK75NvUiUum8sNeeBDImV3uSFpomvd+sbS2QEZaAVFmLuYeqSzx4Zitd P3+78FWCxptfWAU2K83LTYkD20hhUnzqZbWauvP4V0HNr8aS/JQ6Ixwyi0CqLtHM bfMgUgxGgEeIsNaTId5xWV72rz5aWeebnHohEs7sSTrEl0e5D8MZccLehfJwqVoI /RONyibfRuVuvO+ynw3G9MXkJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBe4Hh4g vQFg1Bs7ProyjWHi1LPLMB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pz dzhXQVlHbEpJdW4yZUlFZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATf/v5s08KN+AxjdizCnCFgJHKh5wbgirpz3iEVo9avXWywEiWOpWoB2rOEeB gvBcTuGlxVTHyGr82Z9TfQ9poHnGGWwQNuoe3QXEeXtFhrgyFUJDs6JVD+afoNqu aAdaPcsFdcXU6QzefuQ7nbCh4JdiGKMDEHwrZ0iG1IjZFMZUy/82yOlGuseLcjdB lS5TZ/hZXB8meMYkAuPWHfsALsWbjQIyhh0nwReMxk7nJ9q4bsC/Xcn+jeP7bC5W fFY79spucFdtGo4lWKLjxs07i+ZVB2J4Z6hTg0oiba0H1FyjPxagQZ/YyX3gXBlV Y5nS92B6ahs84Q0Jvm7VyBBXNw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:15:28 2026 by rpki-client