$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: BtYiOEMU4KRh8Tt4WJxO0Aar4+suqe6K4Jh9MAsvYHo= Subject key identifier: 41:23:2E:F2:4B:71:25:40:73:31:9D:00:39:56:F7:63:D4:0B:1D:E2 Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 065A Signing time: Sat 04 Apr 2026 22:25:55 +0000 Manifest this update: Sat 04 Apr 2026 22:25:55 +0000 Manifest next update: Sat 11 Apr 2026 22:25:55 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: rEkmbKDekUcPoVZoJx0oIwujM9UAvYS9045kxllMoAM=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: jONR2iUJdd8sTfAf2GKMQLcf6yBJF3ccZJWFs5abXDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: Apr 4 22:25:55 2026 GMT Not After : Apr 11 22:25:55 2026 GMT Subject: CN=69d18ff3-6d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:c8:05:23:e5:ba:23:7c:ec:4f:4c:87:28: cd:10:20:88:db:61:dc:60:d7:53:54:d3:a3:04:9d: e3:d8:4f:a1:8a:13:0e:8b:ae:ee:e3:f0:d9:8f:b2: 1c:7d:b9:cd:ea:1a:64:fc:54:04:a1:70:27:c9:e9: 6f:51:39:30:00:90:31:b9:d7:36:7c:77:ad:c7:8b: 1e:96:1e:dc:59:29:24:85:e2:27:21:8d:45:0e:4b: 29:18:87:bc:40:a4:85:e5:42:d5:97:5f:c4:dd:b9: a1:0a:15:1b:8f:e2:ad:d9:19:a4:e6:19:60:b4:b7: be:a2:8b:19:40:77:8b:28:87:38:bf:08:c1:e0:63: 69:b0:3a:9a:27:47:dc:4e:9b:1c:26:6e:90:0f:5a: 9d:55:a5:b1:82:c4:75:d5:e8:fe:7b:9c:a6:53:ed: 06:89:bc:dd:4f:7a:f2:1d:55:1a:8e:05:54:96:f4: 34:3c:26:87:49:b9:e9:22:84:d7:0d:b4:ee:5c:28: b0:10:21:4b:84:b4:f1:a1:ca:e0:64:1a:47:0c:a7: 7a:c4:f1:09:bd:bf:3f:45:d9:fa:03:e7:92:a3:04: c3:13:86:ab:05:9e:b8:91:69:b6:11:06:4f:f6:a1: c4:d1:2e:b4:44:4b:ed:55:34:45:c9:43:3d:5c:68: 3a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:23:2E:F2:4B:71:25:40:73:31:9D:00:39:56:F7:63:D4:0B:1D:E2 X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:1c:8f:67:f9:80:be:86:9e:19:ef:6f:d5:d5:cb:c9:47:17: 15:ab:14:9f:81:46:a8:d0:66:ca:45:f6:f2:87:be:80:bb:84: 82:f1:02:e2:d0:2c:24:f2:52:d2:c4:a0:97:b7:52:fb:34:88: 54:ee:d1:79:eb:71:53:17:df:35:91:7c:01:2b:ad:12:d1:b9: 17:94:73:5e:61:c1:79:39:41:da:fa:f9:ee:d4:f1:d3:22:d4: aa:00:7e:4f:31:fc:9c:a2:db:85:f5:43:27:93:87:16:0e:01: 04:6f:75:84:8b:21:d7:55:e4:c8:92:a1:32:b0:3b:63:5f:5d: 11:94:29:f9:30:66:b7:a8:37:1e:87:cc:9b:78:33:17:1c:3f: 2b:cd:1e:da:6d:d0:3d:bc:2d:36:71:d3:99:0d:27:d8:23:8a: 71:79:52:5d:c9:b5:e3:fd:80:91:91:25:cb:b8:25:59:6b:73: 8f:8f:b8:97:3a:28:98:73:ea:89:f7:1c:06:7d:4a:54:cc:62: de:0a:40:ba:38:eb:ca:2b:63:f8:9e:67:e6:f6:58:d9:54:06: 0f:e1:65:b3:68:6e:1a:cc:6c:53:7e:a6:d8:df:ef:41:26:f1: c3:6a:2e:2e:ee:c3:08:db:0b:51:7d:75:39:b6:ee:a9:a7:2d: cc:b9:31:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjYwNDA0MjIyNTU1WhcNMjYwNDExMjIyNTU1WjAYMRYwFAYD VQQDEw02OWQxOGZmMy02ZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4jIBSPluiN87E9MhyjNECCI22HcYNdTVNOjBJ3j2E+hihMOi67u4/DZj7Ic fbnN6hpk/FQEoXAnyelvUTkwAJAxudc2fHetx4selh7cWSkkheInIY1FDkspGIe8 QKSF5ULVl1/E3bmhChUbj+Kt2Rmk5hlgtLe+oosZQHeLKIc4vwjB4GNpsDqaJ0fc TpscJm6QD1qdVaWxgsR11ej+e5ymU+0GibzdT3ryHVUajgVUlvQ0PCaHSbnpIoTX DbTuXCiwECFLhLTxocrgZBpHDKd6xPEJvb8/Rdn6A+eSowTDE4arBZ64kWm2EQZP 9qHE0S60REvtVTRFyUM9XGg6zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEjLvJL cSVAczGdADlW92PUCx3iMB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoRyPZ/mAvoaeGe9v1dXLyUcXFasUn4FGqNBmykX28oe+gLuEgvEC4tAsJPJS 0sSgl7dS+zSIVO7ReetxUxffNZF8ASutEtG5F5RzXmHBeTlB2vr57tTx0yLUqgB+ TzH8nKLbhfVDJ5OHFg4BBG91hIsh11XkyJKhMrA7Y19dEZQp+TBmt6g3HofMm3gz Fxw/K80e2m3QPbwtNnHTmQ0n2COKcXlSXcm14/2AkZEly7glWWtzj4+4lzoomHPq ifccBn1KVMxi3gpAujjryitj+J5n5vZY2VQGD+Fls2huGsxsU36m2N/vQSbxw2ou Lu7DCNsLUX11ObbuqactzLkxBQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:18 2026 by rpki-client