$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json) Hash identifier: 10bF5MNLSDk3uKKgbX1Fu80vnDm+jOx6FG8+HlTdB+Y= Subject key identifier: EB:B1:42:10:FC:AB:B3:1E:DD:AB:59:C2:73:AB:FA:3F:F2:5A:B2:9B Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft Manifest number: 03B8 Signing time: Sun 05 Apr 2026 00:27:24 +0000 Manifest this update: Sun 05 Apr 2026 00:27:23 +0000 Manifest next update: Sun 12 Apr 2026 00:27:23 +0000 Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: bDxvjWPa/Y+O69qOwHdz/ZWP3ytBnyqBUILT8USm03w=) 2: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: 0LpQA+c9etZpakFJ96pF9ViQXg3PreBC8rMXqPButV0=) 3: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: YbO7++p8lkcUGyYQcIo4KYfwl6fPis53qsCTIDFujfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Validity Not Before: Apr 5 00:27:23 2026 GMT Not After : Apr 12 00:27:23 2026 GMT Subject: CN=69d1ac6c-9d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:65:a0:11:a6:51:e8:6b:8c:04:1b:f0:9e: f4:a2:f4:9b:4c:af:9e:f5:5f:d8:82:98:d0:f1:85: a7:68:e2:c2:86:0d:fa:2d:93:de:4d:0b:12:f3:ec: 33:1c:d7:30:c6:b5:a4:67:a6:5b:5b:ba:08:09:89: 41:9a:cb:7c:94:b0:4f:69:69:3a:41:6e:90:92:6b: 33:0d:b0:c4:3b:3d:b5:a0:96:3c:c7:f6:6c:ee:ca: d6:b2:2a:af:72:65:41:8e:07:6d:5c:9e:f1:58:15: cd:09:60:f4:dc:dc:b5:e5:89:3e:71:c7:a0:4d:c6: 85:4d:71:1c:b1:44:57:26:1a:8e:c7:36:1e:45:ae: d0:a6:13:08:37:eb:f1:af:7d:9a:ee:f3:fc:ac:4d: c3:48:9e:94:5f:2e:dc:d0:7e:ed:67:7d:0d:e8:8a: 8b:60:13:2e:b7:8b:5f:38:4e:f9:57:20:ad:d7:30: 5e:f0:c4:8e:11:3e:01:67:75:e7:18:83:ed:66:85: b5:f0:5e:95:11:8b:7c:c4:8b:49:51:88:27:b9:b8: 4e:3a:b5:2e:8b:81:75:c3:66:43:02:20:b2:77:40: 6d:12:45:c3:f8:b5:0d:ed:68:bf:a6:44:90:7d:5c: 89:9a:e2:50:b3:b4:14:21:5e:81:2c:ff:78:b4:b4: ab:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B1:42:10:FC:AB:B3:1E:DD:AB:59:C2:73:AB:FA:3F:F2:5A:B2:9B X509v3 Authority Key Identifier: keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:57:a7:64:cc:db:4c:be:c0:f8:43:c6:db:e6:a4:22:13:15: b7:d5:19:00:34:31:71:83:16:f5:0e:9f:9a:e9:07:ed:02:60: 4b:e8:d7:e2:60:f7:a9:90:b6:1e:c5:c5:b3:37:23:34:d2:b2: 53:6c:96:7f:55:c8:1f:ed:04:86:a6:23:3f:8a:a8:a1:d8:92: 3a:99:65:ae:7a:4d:24:cd:94:05:12:20:28:85:81:92:66:b4: e7:c0:0c:60:69:7d:b3:c6:a9:fd:60:73:64:34:6b:7b:62:95: 36:3d:31:c8:b4:31:5c:e2:82:0f:80:75:9f:ec:18:ba:09:fb: b3:61:c9:6c:3f:b3:2b:ae:fa:04:6a:9b:09:02:64:8f:c6:df: 34:e7:cd:12:29:05:62:1d:e0:98:40:4f:dd:2a:88:7c:46:4e: aa:5b:23:45:70:b3:2b:ab:00:90:c7:a1:86:de:12:00:c6:8d: b6:e3:a5:63:5e:6d:3c:64:c2:ad:c4:e8:1f:5b:e0:13:6b:21: 67:87:c5:a6:96:c5:3d:24:22:55:7c:58:47:10:7b:64:83:03: c1:b6:be:ce:ff:da:33:01:8e:9a:bd:6c:ba:ca:88:07:56:e3: c5:91:3f:81:e1:dd:57:67:08:cb:05:65:81:7a:be:62:bb:80: df:8a:cc:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBREQxMTAvBgNVBAUTKEI0RjI2MkY5OTg1N0UxMjBDQzlDQkM0QkZDMTdFRDU0 QUJBQkUyQkIwHhcNMjYwNDA1MDAyNzIzWhcNMjYwNDEyMDAyNzIzWjAYMRYwFAYD VQQDEw02OWQxYWM2Yy05ZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKZloBGmUehrjAQb8J70ovSbTK+e9V/YgpjQ8YWnaOLChg36LZPeTQsS8+wz HNcwxrWkZ6ZbW7oICYlBmst8lLBPaWk6QW6QkmszDbDEOz21oJY8x/Zs7srWsiqv cmVBjgdtXJ7xWBXNCWD03Ny15Yk+ccegTcaFTXEcsURXJhqOxzYeRa7QphMIN+vx r32a7vP8rE3DSJ6UXy7c0H7tZ30N6IqLYBMut4tfOE75VyCt1zBe8MSOET4BZ3Xn GIPtZoW18F6VEYt8xItJUYgnubhOOrUui4F1w2ZDAiCyd0BtEkXD+LUN7Wi/pkSQ fVyJmuJQs7QUIV6BLP94tLSrfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOuxQhD8 q7Me3atZwnOr+j/yWrKbMB8GA1UdIwQYMBaAFLTyYvmYV+EgzJy8S/wX7VSrq+K7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFERC9FREM2NzYxNEQw RDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRTRE1uTHhMX0JmdFZLdXI0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQSmktWmhYNFNETW5MeExfQmZ0Vkt1cjRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFERC9FREM2NzYxNEQwRDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRT RE1uTHhMX0JmdFZLdXI0cnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtVenZMzbTL7A+EPG2+akIhMVt9UZADQxcYMW9Q6fmukH7QJgS+jX4mD3qZC2 HsXFszcjNNKyU2yWf1XIH+0EhqYjP4qoodiSOpllrnpNJM2UBRIgKIWBkma058AM YGl9s8ap/WBzZDRre2KVNj0xyLQxXOKCD4B1n+wYugn7s2HJbD+zK676BGqbCQJk j8bfNOfNEikFYh3gmEBP3SqIfEZOqlsjRXCzK6sAkMehht4SAMaNtuOlY15tPGTC rcToH1vgE2shZ4fFppbFPSQiVXxYRxB7ZIMDwba+zv/aMwGOmr1susqIB1bjxZE/ geHdV2cIywVlgXq+YruA34rMeg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:09 2026 by rpki-client