$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft File: TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json) Hash identifier: ZAVUoVcwfn7195wjFfPke5eibKO65meYNV3h6TgGQns= Subject key identifier: 5F:47:C0:C7:33:37:B0:21:9E:42:FD:BC:22:B2:3E:D7:91:96:FB:00 Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 Certificate issuer: /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft Manifest number: 0143 Signing time: Sun 05 Apr 2026 04:43:31 +0000 Manifest this update: Sun 05 Apr 2026 04:43:31 +0000 Manifest next update: Sun 12 Apr 2026 04:43:31 +0000 Files and hashes: 1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: PZhXItBSrAqt4bzSlHJ3PkD5RmphXMilarJRvn0ug6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B, serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5 Validity Not Before: Apr 5 04:43:31 2026 GMT Not After : Apr 12 04:43:31 2026 GMT Subject: CN=69d1e873-dab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:33:8b:b1:4c:38:d1:47:c3:13:8e:af:92:31: da:58:61:4a:03:39:93:aa:b5:52:f3:be:ae:b0:0f: 30:3c:c4:2d:61:8e:95:7d:75:d1:4e:cf:35:00:ef: 33:68:49:8f:34:30:23:f4:6e:b5:ea:c2:ae:09:50: ae:e0:57:be:1a:ad:f5:94:58:dd:fb:63:dd:c9:8d: 23:9f:51:5b:63:f3:07:f0:9a:e7:90:2d:b1:17:a4: 63:18:cb:36:0f:5f:42:d9:71:79:6c:0b:44:1c:79: e1:3a:0c:f8:40:93:3f:6c:06:ef:f9:29:40:9b:c5: 84:62:38:5b:a8:90:db:8f:99:33:1a:fd:3b:8c:79: fb:4c:0a:d1:8d:56:ab:f8:02:ba:f5:b5:8f:b3:a2: f0:51:8a:e1:a4:a2:c6:58:35:fb:56:13:87:c4:82: 29:de:36:97:76:43:0b:f6:72:fe:95:85:ec:a5:5e: 1f:f9:bf:f2:91:17:54:d6:05:c8:c9:04:4c:a0:4b: 36:02:d0:bf:35:f9:87:3b:3a:76:db:ae:6a:e4:f5: 29:48:22:51:af:33:bc:6e:45:13:07:9c:f8:27:89: b5:e1:af:a4:73:6e:d7:6a:5e:b1:46:a2:04:ec:d9: 22:2d:d6:78:2e:1b:5a:e8:b2:28:bd:1b:b2:41:1a: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:47:C0:C7:33:37:B0:21:9E:42:FD:BC:22:B2:3E:D7:91:96:FB:00 X509v3 Authority Key Identifier: keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f2:cd:21:ec:5c:36:42:47:af:b8:51:ac:e8:b7:0a:9e:95: 7b:ba:c3:db:ef:66:b5:84:60:6b:fc:80:e0:3c:93:a4:f8:33: 9e:7d:51:1b:74:dc:08:73:74:5a:88:45:32:41:b2:c3:eb:ea: ef:f6:79:2a:8c:37:26:32:6e:14:ad:8f:0e:27:8b:cf:73:02: e5:8c:b4:59:76:e3:d1:39:0c:26:17:86:06:68:6c:f6:f6:e9: 6b:0c:db:ac:95:9c:52:75:11:19:e3:15:d3:32:e8:85:2a:bf: ff:bc:60:9f:19:cd:b0:df:34:72:43:df:31:f3:a7:f2:5e:13: 71:b4:15:b5:bb:3c:8f:e5:64:22:cb:43:4d:2b:87:cf:12:a1: bb:0b:00:4b:78:55:b0:2d:98:ca:2f:df:1a:b5:dc:1e:33:9f: 68:8e:87:e6:1c:ba:04:c8:9c:69:32:58:9b:73:06:a5:e3:89: e4:78:3b:69:5a:3e:7f:81:8b:0e:3f:89:ef:02:57:4d:66:15: 58:52:29:3f:eb:7a:b9:05:e8:79:2c:46:04:f2:34:71:c2:01: aa:d7:81:0a:09:65:8e:93:0e:e9:01:2a:f7:5a:6b:88:a2:6d: 1f:ab:e3:77:ef:c9:04:57:27:4f:b5:8e:0e:fa:b0:ea:8a:fe: 63:77:30:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDRDQTAxMkY1QjRFODA0NjdFRjBFRUM0RjhDMDI0NEEy M0Q1Njk5QjUwHhcNMjYwNDA1MDQ0MzMxWhcNMjYwNDEyMDQ0MzMxWjAYMRYwFAYD VQQDEw02OWQxZTg3My1kYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TOLsUw40UfDE46vkjHaWGFKAzmTqrVS876usA8wPMQtYY6VfXXRTs81AO8z aEmPNDAj9G616sKuCVCu4Fe+Gq31lFjd+2PdyY0jn1FbY/MH8JrnkC2xF6RjGMs2 D19C2XF5bAtEHHnhOgz4QJM/bAbv+SlAm8WEYjhbqJDbj5kzGv07jHn7TArRjVar +AK69bWPs6LwUYrhpKLGWDX7VhOHxIIp3jaXdkML9nL+lYXspV4f+b/ykRdU1gXI yQRMoEs2AtC/NfmHOzp2265q5PUpSCJRrzO8bkUTB5z4J4m14a+kc27Xal6xRqIE 7NkiLdZ4Lhta6LIovRuyQRp0uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF9HwMcz N7AhnkL9vCKyPteRlvsAMB8GA1UdIwQYMBaAFEygEvW06ARn7w7sT4wCRKI9Vpm1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82QjM4QjgxNjQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JHZnZEdXhQakFKRW9qMVdt YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLQVM5YlRvQkdmdkR1eFBqQUpFb2oxV21iVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82QjM4QjgxNjQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9US0FTOWJUb0JH ZnZEdXhQakFKRW9qMVdtYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkPLNIexcNkJHr7hRrOi3Cp6Ve7rD2+9mtYRga/yA4DyTpPgznn1RG3TcCHN0 WohFMkGyw+vq7/Z5Kow3JjJuFK2PDieLz3MC5Yy0WXbj0TkMJheGBmhs9vbpawzb rJWcUnURGeMV0zLohSq//7xgnxnNsN80ckPfMfOn8l4TcbQVtbs8j+VkIstDTSuH zxKhuwsAS3hVsC2Yyi/fGrXcHjOfaI6H5hy6BMicaTJYm3MGpeOJ5Hg7aVo+f4GL Dj+J7wJXTWYVWFIpP+t6uQXoeSxGBPI0ccIBqteBCglljpMO6QEq91priKJtH6vj d+/JBFcnT7WODvqw6or+Y3cwBA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:08 2026 by rpki-client