$ rpki-client -vvf rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft File: tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft (raw, json) Hash identifier: k9jeUqm9FHXoTVotHYNwo67SMgLjTuVjRkhEegii9TM= Subject key identifier: 69:BB:4E:96:87:71:6A:82:B9:C1:1E:8A:E9:4B:DD:A3:C3:D5:DC:4F Authority key identifier: B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6 Certificate issuer: /CN=A91B637A/serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft Manifest number: 05 Signing time: Sun 05 Apr 2026 08:33:35 +0000 Manifest this update: Sun 05 Apr 2026 08:33:34 +0000 Manifest next update: Sun 12 Apr 2026 08:33:34 +0000 Files and hashes: 1: tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl (hash: kEpQLElGVqwrA+HmC0jaUmhjW8N7Nndvd3y8hNX4r4Q=) 2: D0F478D02E7011F1B3CAF1C4A3833773.roa (hash: bM7Q3Goo2yIx6mUK1MyLG8gg5MzYy2/CvHGPwmnvAsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B637A, serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6 Validity Not Before: Apr 5 08:33:34 2026 GMT Not After : Apr 12 08:33:34 2026 GMT Subject: CN=69d21e5f-23d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:23:85:ae:53:e2:79:ef:f2:d5:d6:46:77: ba:aa:cf:f5:1e:ba:90:6c:28:9c:b8:c5:30:8d:8b: 01:a5:bc:ac:9b:1b:c5:84:e3:01:74:c7:36:a0:9a: 40:37:c0:19:ea:ec:7c:b5:92:a9:81:a5:35:87:06: 01:65:94:0c:2b:17:a2:79:5c:f2:ed:ee:a4:aa:e8: 8e:33:b9:63:cb:cc:3a:4d:e9:7d:93:14:34:15:cf: 59:1d:c3:38:85:28:ce:d6:e8:01:3a:58:f9:2d:b5: f7:8e:89:f0:fe:99:28:20:8e:90:29:9b:db:91:f4: 6e:42:57:77:e0:ec:d5:e2:87:f0:5d:2d:ea:02:bc: 5d:b0:08:4c:4d:09:ea:63:e4:e6:13:b9:5b:44:c9: 00:df:06:45:34:f1:cf:30:f9:ee:b8:0e:f1:ec:63: 09:1d:a6:c1:88:5e:41:f7:54:e1:63:8d:40:70:22: c6:81:ce:50:cb:e3:b5:5e:30:9c:39:77:78:87:dd: 2f:7c:1f:9b:7c:04:73:75:82:38:5e:52:f0:4a:5a: c1:e0:0b:66:56:88:a0:d7:b6:b3:91:73:b3:fe:85: 66:c6:28:da:c8:7f:7a:79:0e:67:5b:5f:ad:fc:e9: ef:c6:f2:5b:b3:53:00:46:07:fc:3c:a0:c4:7e:b2: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BB:4E:96:87:71:6A:82:B9:C1:1E:8A:E9:4B:DD:A3:C3:D5:DC:4F X509v3 Authority Key Identifier: keyid:B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b0:26:df:dc:ad:d8:a0:d4:41:cf:1f:5c:94:fb:98:ae:fd: 91:86:0d:5c:e0:6c:0b:3d:63:93:7f:c2:29:4d:eb:a6:03:a2: d2:fc:b5:ae:e7:23:98:c0:63:8c:c5:1a:9a:cd:41:3e:3d:2f: 00:38:e0:e8:cf:7d:07:27:03:6b:a4:12:1f:0d:5b:45:55:ed: 32:0c:a0:f3:43:b4:ba:c4:ff:87:ac:08:1d:33:e1:f3:07:3a: ab:2b:17:1c:c2:da:cd:df:90:9d:1d:db:b8:ba:c5:cc:37:64: 07:db:41:a7:67:40:1f:fb:e5:53:aa:36:6b:ff:85:91:9b:e4: aa:03:10:95:b1:b4:00:de:67:3a:e4:07:23:46:4c:cc:f9:86: 22:1c:e0:4b:7d:c0:2f:94:cb:3b:ff:53:35:e6:9b:0c:15:bd: 7b:ad:34:ae:0f:e7:1f:d2:a6:59:87:b7:93:c4:3b:2d:3d:f4: 6c:d8:b0:bc:d1:63:07:d5:1d:ce:0b:96:90:8c:cd:83:36:fe: a6:50:b3:08:73:b4:8e:1e:ad:e3:69:a1:bc:8d:e1:19:18:65: a3:c3:56:f9:3b:db:31:ea:69:97:00:2c:20:ec:51:bb:f7:a0: be:7a:e9:7d:38:dd:de:7b:44:52:9c:10:a9:25:35:00:f5:21: 66:7f:6e:95 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjM3QTExMC8GA1UEBRMoQjVGREFEM0QxOEU3NDYyNENCMzk0MjNGQjUxNENBREJB Njc5MjZFNjAeFw0yNjA0MDUwODMzMzRaFw0yNjA0MTIwODMzMzRaMBgxFjAUBgNV BAMTDTY5ZDIxZTVmLTIzZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0cyOFrlPiee/y1dZGd7qqz/UeupBsKJy4xTCNiwGlvKybG8WE4wF0xzagmkA3 wBnq7Hy1kqmBpTWHBgFllAwrF6J5XPLt7qSq6I4zuWPLzDpN6X2TFDQVz1kdwziF KM7W6AE6WPkttfeOifD+mSggjpApm9uR9G5CV3fg7NXih/BdLeoCvF2wCExNCepj 5OYTuVtEyQDfBkU08c8w+e64DvHsYwkdpsGIXkH3VOFjjUBwIsaBzlDL47VeMJw5 d3iH3S98H5t8BHN1gjheUvBKWsHgC2ZWiKDXtrORc7P+hWbGKNrIf3p5DmdbX638 6e/G8luzUwBGB/w8oMR+sggvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUabtOlodx aoK5wR6K6Uvdo8PV3E8wHwYDVR0jBBgwFoAUtf2tPRjnRiTLOUI/tRTK26Z5JuYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MzdBLzNBQzAzQjU2MkU3 MDExRjE4MUM1REY3M0EzODMzNzczL3RmMnRQUmpuUmlUTE9VSV90UlRLMjZaNUp1 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGYydFBSam5SaVRMT1VJX3RSVEsyNlo1SnVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MzdBLzNBQzAzQjU2MkU3MDExRjE4MUM1REY3M0EzODMzNzczL3RmMnRQUmpuUmlU TE9VSV90UlRLMjZaNUp1WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhsCbf3K3YoNRBzx9clPuYrv2Rhg1c4GwLPWOTf8IpTeumA6LS/LWu5yOYwGOM xRqazUE+PS8AOODoz30HJwNrpBIfDVtFVe0yDKDzQ7S6xP+HrAgdM+HzBzqrKxcc wtrN35CdHdu4usXMN2QH20GnZ0Af++VTqjZr/4WRm+SqAxCVsbQA3mc65AcjRkzM +YYiHOBLfcAvlMs7/1M15psMFb17rTSuD+cf0qZZh7eTxDstPfRs2LC80WMH1R3O C5aQjM2DNv6mULMIc7SOHq3jaaG8jeEZGGWjw1b5O9sx6mmXACwg7FG796C+eul9 ON3ee0RSnBCpJTUA9SFmf26V -----END CERTIFICATE-----Generated at Sun Apr 5 19:37:33 2026 by rpki-client