$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft File: tKtoly4-518HsSc9r-d6HC28-cs.mft (raw, json) Hash identifier: aQkxuQTS+d/X/KbRLhcEXcwNOPciQDHDgQiMViZuks0= Subject key identifier: 21:FB:13:DC:59:A0:F7:02:15:A5:66:85:CF:15:72:38:56:F8:91:4E Authority key identifier: B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB Certificate issuer: /CN=A91A2886/serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft Manifest number: 1A Signing time: Sun 05 Apr 2026 08:17:54 +0000 Manifest this update: Sun 05 Apr 2026 08:17:53 +0000 Manifest next update: Sun 12 Apr 2026 08:17:53 +0000 Files and hashes: 1: tKtoly4-518HsSc9r-d6HC28-cs.crl (hash: nVvmSWhxtwlMTlLlHP8ZK4vqPSOYuGp94uoThj2kWxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2886, serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB Validity Not Before: Apr 5 08:17:53 2026 GMT Not After : Apr 12 08:17:53 2026 GMT Subject: CN=69d21ab1-3fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:29:b5:8e:1d:a9:e4:fa:2a:5b:65:83:93: 3f:62:9e:1f:a7:4b:f4:52:35:99:f9:9b:69:62:e4: c7:43:8f:52:7c:ef:2e:1a:88:e7:e7:0d:79:7d:a4: 0f:e2:c1:a4:2f:a1:32:b2:3b:4d:aa:ec:69:d2:06: 97:85:7f:e4:1f:9f:62:fe:e2:24:59:c4:92:57:e6: ce:ef:25:44:e5:17:6e:a4:53:8e:f3:8a:e6:2b:2c: ae:9a:cf:a9:21:eb:9c:ba:c4:dd:79:5e:bf:c9:c5: 0b:07:fa:0a:c0:09:0e:2d:bb:87:14:4e:67:0f:00: 0b:4f:e1:1d:10:bf:66:e8:ba:d5:43:41:f9:63:68: 47:23:19:49:3d:10:dd:bf:b4:60:f8:7b:30:8e:3a: c3:c3:d9:84:4f:c6:82:d8:66:0a:02:3d:a3:a7:e7: cf:9e:3a:ae:25:26:48:03:24:6f:64:8b:78:ca:93: f8:d8:88:5a:c2:78:ff:80:7d:88:4c:f7:b7:97:ec: b4:95:6d:b1:ff:a7:7c:15:ca:cd:e4:3c:a9:c6:c8: f7:e9:43:92:1a:ee:e0:e1:bf:db:61:a0:d0:0b:23: 01:44:22:2e:7d:11:39:25:65:0e:6f:50:fb:58:60: cb:a6:5a:2f:52:80:80:40:81:b4:f7:4d:45:d2:96: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FB:13:DC:59:A0:F7:02:15:A5:66:85:CF:15:72:38:56:F8:91:4E X509v3 Authority Key Identifier: keyid:B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:81:e2:a7:85:c4:96:0d:48:58:c4:08:47:64:e7:a0:f6:f9: 33:8a:03:0b:98:33:4a:61:d9:85:b0:ba:05:c6:49:36:4a:7b: 3d:c3:48:f9:38:3d:cb:3f:52:83:cc:8e:c1:b2:bd:c3:a5:d4: 80:4f:2d:5f:b6:fa:d8:53:0c:e3:4a:99:58:26:e9:e1:3e:31: 61:7b:a5:2b:d8:70:48:5c:3b:5a:a2:40:bc:e0:8b:5b:09:16: 43:8d:1e:e0:b4:dc:3b:e6:76:40:dd:11:8e:e2:59:67:5f:e7: 84:61:5d:02:0a:22:8f:1b:94:41:d8:c4:2a:16:b2:4a:ad:5f: 46:8c:64:30:0a:81:0e:b4:90:08:f0:6c:6d:27:0a:8a:07:1c: 40:28:4e:9b:82:0e:85:6f:95:03:5a:c5:da:16:d5:3b:5a:c5: 9f:ad:e1:63:32:ca:4a:80:1e:75:5f:6b:95:9d:b3:84:53:e1: cb:fa:f0:70:09:b3:1d:60:1f:82:f1:f5:14:47:7c:a2:d8:ec: 37:c2:d9:c8:0c:63:56:ff:52:29:05:2a:45:7b:72:89:e0:d8: b6:71:e3:fc:6f:04:5a:6f:f6:6c:f0:b8:7a:0b:60:ec:1b:d5: 13:06:92:41:fa:0e:00:d2:a9:6f:78:d7:09:6d:b6:97:2b:91: 37:7c:1d:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjg4NjExMC8GA1UEBRMoQjRBQjY4OTcyRTNFRTc1RjA3QjEyNzNEQUZFNzdBMUMy REJDRjlDQjAeFw0yNjA0MDUwODE3NTNaFw0yNjA0MTIwODE3NTNaMBgxFjAUBgNV BAMTDTY5ZDIxYWIxLTNmYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuAim1jh2p5PoqW2WDkz9inh+nS/RSNZn5m2li5MdDj1J87y4aiOfnDXl9pA/i waQvoTKyO02q7GnSBpeFf+Qfn2L+4iRZxJJX5s7vJUTlF26kU47ziuYrLK6az6kh 65y6xN15Xr/JxQsH+grACQ4tu4cUTmcPAAtP4R0Qv2boutVDQfljaEcjGUk9EN2/ tGD4ezCOOsPD2YRPxoLYZgoCPaOn58+eOq4lJkgDJG9ki3jKk/jYiFrCeP+AfYhM 97eX7LSVbbH/p3wVys3kPKnGyPfpQ5Ia7uDhv9thoNALIwFEIi59ETklZQ5vUPtY YMumWi9SgIBAgbT3TUXSlpdrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIfsT3Fmg 9wIVpWaFzxVyOFb4kU4wHwYDVR0jBBgwFoAUtKtoly4+518HsSc9r+d6HC28+csw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyODg2LzZDNTU0NTM0MTBB MzExRjFCRTcyQjVBRjM5M0Q4QzY3L3RLdG9seTQtNTE4SHNTYzlyLWQ2SEMyOC1j cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEt0b2x5NC01MThIc1NjOXItZDZIQzI4LWNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy ODg2LzZDNTU0NTM0MTBBMzExRjFCRTcyQjVBRjM5M0Q4QzY3L3RLdG9seTQtNTE4 SHNTYzlyLWQ2SEMyOC1jcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6geKnhcSWDUhYxAhHZOeg9vkzigMLmDNKYdmFsLoFxkk2Sns9w0j5OD3LP1KD zI7Bsr3DpdSATy1ftvrYUwzjSplYJunhPjFhe6Ur2HBIXDtaokC84ItbCRZDjR7g tNw75nZA3RGO4llnX+eEYV0CCiKPG5RB2MQqFrJKrV9GjGQwCoEOtJAI8GxtJwqK BxxAKE6bgg6Fb5UDWsXaFtU7WsWfreFjMspKgB51X2uVnbOEU+HL+vBwCbMdYB+C 8fUUR3yi2Ow3wtnIDGNW/1IpBSpFe3KJ4Ni2ceP8bwRab/Zs8Lh6C2DsG9UTBpJB +g4A0qlveNcJbbaXK5E3fB0q -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:49 2026 by rpki-client