$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: fOMjbaP8P71tj34OusMS/aEjQj8OXVc+XndJWiChRSA= Subject key identifier: B8:A1:91:43:E8:B8:9C:61:05:E9:53:EE:36:30:28:BF:32:FC:AB:2F Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 076C Signing time: Sat 04 Apr 2026 21:27:20 +0000 Manifest this update: Sat 04 Apr 2026 21:27:20 +0000 Manifest next update: Sat 11 Apr 2026 21:27:20 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: jpyLrEz4kl3DmAHrJ8O+21MzNq5FsZPLuaik2X6HoXY=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=) 3: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=) 4: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Apr 4 21:27:20 2026 GMT Not After : Apr 11 21:27:20 2026 GMT Subject: CN=69d18238-4dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bb:eb:fe:19:fc:42:b4:47:13:18:84:ea:8b: 72:65:07:36:61:eb:3c:d2:66:c1:a4:6b:ec:26:fd: ad:a7:70:71:55:75:fa:c2:d5:28:19:ff:c8:e1:a6: de:d0:21:40:e1:1f:06:89:68:ea:4b:b8:40:9e:3d: 68:54:cf:99:3a:31:96:84:d9:36:fc:26:15:1c:4f: 34:90:f5:fe:81:6f:02:ed:de:d1:cf:42:dc:ac:96: 2c:ec:72:58:36:9d:67:1f:58:b4:c5:38:4c:6d:fb: 66:4d:c1:fb:8a:18:91:6f:c9:34:d9:8f:3d:de:a9: 0d:f4:9b:e1:10:b9:61:59:f3:92:6d:6c:3f:5e:cc: df:23:f6:e9:58:2b:98:c3:2a:7a:2e:2f:43:04:72: 9b:a9:bf:92:b4:65:e7:68:be:d7:48:a2:d5:cd:56: 80:89:66:04:17:52:d4:e8:2b:6f:60:5c:01:09:bc: 0e:2f:53:f2:c9:35:af:59:dc:e6:75:98:26:51:63: 79:d7:eb:b4:ac:2a:23:5b:3c:e7:64:22:7a:2a:60: 16:f2:23:96:a1:36:1e:45:28:38:83:72:13:f6:c8: 45:23:76:54:ff:5c:c6:d9:47:c1:53:9d:7b:0e:22: d7:2a:92:29:01:76:53:8d:00:23:07:4c:26:a6:39: fb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A1:91:43:E8:B8:9C:61:05:E9:53:EE:36:30:28:BF:32:FC:AB:2F X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:7f:6c:d5:c1:fd:4f:d5:c4:80:03:98:e3:84:4f:e6:63:2c: 61:f2:b2:a6:7e:3c:fc:49:9d:79:a5:1f:f1:4e:95:29:0b:0b: 44:1b:74:11:64:38:fc:10:b2:ad:df:ec:c2:27:92:a3:eb:16: 6d:71:b6:8d:ad:8f:c6:05:58:7a:7e:ef:68:ce:85:e3:69:d0: 20:61:d1:9b:bb:ac:22:56:84:4c:17:4e:ab:f1:79:14:fb:24: bc:ca:62:98:2a:bf:e6:b2:9e:1d:5e:7c:5e:f2:98:4b:0f:39: 16:d3:5a:0e:51:cc:79:0a:26:ab:45:90:46:43:24:10:44:6d: 70:b8:fc:f8:36:6d:50:a6:86:c5:88:1c:c0:93:32:df:50:dc: 66:35:ab:ce:03:cb:0c:bf:f7:fc:1d:e3:67:bd:37:bb:b2:94: 92:8e:ee:1d:de:96:65:b9:f9:f4:19:7a:5d:b2:1c:1f:75:b4: 60:0f:80:a4:4f:df:a5:ec:82:4b:37:be:5b:0e:d5:95:d6:3b: 4a:fa:47:7e:f3:f5:03:5a:87:b6:b2:47:b6:0f:1b:b8:b7:36: 89:e2:8a:45:41:6c:1a:56:18:a8:bb:b3:32:85:3d:c6:d9:31: 89:b0:0c:6f:15:bb:f2:69:0d:ba:90:56:d8:eb:ed:ef:bc:de: f0:00:db:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjYwNDA0MjEyNzIwWhcNMjYwNDExMjEyNzIwWjAYMRYwFAYD VQQDEw02OWQxODIzOC00ZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Lvr/hn8QrRHExiE6otyZQc2Yes80mbBpGvsJv2tp3BxVXX6wtUoGf/I4abe 0CFA4R8GiWjqS7hAnj1oVM+ZOjGWhNk2/CYVHE80kPX+gW8C7d7Rz0LcrJYs7HJY Np1nH1i0xThMbftmTcH7ihiRb8k02Y893qkN9JvhELlhWfOSbWw/XszfI/bpWCuY wyp6Li9DBHKbqb+StGXnaL7XSKLVzVaAiWYEF1LU6CtvYFwBCbwOL1PyyTWvWdzm dZgmUWN51+u0rCojWzznZCJ6KmAW8iOWoTYeRSg4g3IT9shFI3ZU/1zG2UfBU517 DiLXKpIpAXZTjQAjB0wmpjn7xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLihkUPo uJxhBelT7jYwKL8y/KsvMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJH9s1cH9T9XEgAOY44RP5mMsYfKypn48/EmdeaUf8U6VKQsLRBt0EWQ4/BCy rd/swieSo+sWbXG2ja2PxgVYen7vaM6F42nQIGHRm7usIlaETBdOq/F5FPskvMpi mCq/5rKeHV58XvKYSw85FtNaDlHMeQomq0WQRkMkEERtcLj8+DZtUKaGxYgcwJMy 31DcZjWrzgPLDL/3/B3jZ703u7KUko7uHd6WZbn59Bl6XbIcH3W0YA+ApE/fpeyC Sze+Ww7VldY7SvpHfvP1A1qHtrJHtg8buLc2ieKKRUFsGlYYqLuzMoU9xtkxibAM bxW78mkNupBW2Ovt77ze8ADb1Q== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:11 2026 by rpki-client