$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: y6ITzZQ+vbdwWpsTVPGcMsucw0H3CVemiLZDqgiSZRc= Subject key identifier: F6:A8:5B:46:23:D4:65:66:DA:1E:9B:77:D8:A4:82:2C:44:01:99:11 Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 3575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 354A Signing time: Sat 04 Apr 2026 14:29:46 +0000 Manifest this update: Sat 04 Apr 2026 14:29:46 +0000 Manifest next update: Sat 11 Apr 2026 14:29:46 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: mvKzEJRbEYI6VMhRMuWxuCyj+/JXmYwUm41ymqOuO7w=) 2: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=) 3: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13685 (0x3575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Apr 4 14:29:46 2026 GMT Not After : Apr 11 14:29:46 2026 GMT Subject: CN=69d1205a-82e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e9:ba:e0:bc:59:75:a1:3f:4f:38:7f:f8:12: 75:c4:a4:c7:d5:7e:c0:52:57:0a:0c:01:72:8e:0f: a1:86:79:d7:8c:b6:63:8b:ee:a8:29:77:a4:90:fd: 29:01:b0:2c:2d:16:68:42:d7:5d:38:84:02:7f:3c: f3:cb:44:39:84:8d:03:bc:85:0b:67:69:35:1b:5f: 4a:b3:29:16:f1:11:3a:63:a8:3a:f6:be:28:33:29: ce:76:85:3f:9a:f4:c8:6b:39:6f:bc:72:1b:2a:3e: c2:1f:68:90:76:4a:5f:30:0a:18:f7:70:a4:e7:ee: 75:cc:55:13:97:7e:7f:2a:85:10:92:e3:c1:32:fe: cb:ab:52:51:9b:d0:2f:1f:c7:b5:50:bd:0c:0c:37: 66:50:31:3b:32:6e:d4:c7:d1:e0:3c:ec:27:a7:3c: a9:01:8b:45:20:9f:31:7e:fe:f4:95:9d:8f:25:31: cf:96:85:d5:16:b6:32:2e:ae:cd:ad:38:b9:cd:26: 27:e1:06:6f:f8:d0:64:8d:ee:f6:a4:54:00:0e:4a: ca:95:13:5c:42:79:26:d2:57:a1:84:e3:48:9e:20: 24:df:ea:f8:80:81:3d:bb:16:6e:b9:19:5a:5c:bd: cc:02:3c:97:ef:67:7f:7e:f1:fc:b3:c3:75:c6:81: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A8:5B:46:23:D4:65:66:DA:1E:9B:77:D8:A4:82:2C:44:01:99:11 X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1e:6e:6b:3c:0e:2a:69:cf:28:25:e0:00:63:a3:d6:f6:2e: 6c:b7:1d:87:f8:14:52:c0:74:c6:1a:81:28:49:83:c5:e4:30: 13:7f:1d:7e:44:75:2a:05:79:b8:c8:a0:1a:7a:9a:70:34:7f: 06:dd:13:0e:48:85:87:60:b0:98:57:e2:dc:78:b3:e8:fb:c9: b3:a8:db:3d:4d:ea:5f:72:0c:0f:83:84:ba:6b:0a:e0:c9:69: a0:96:61:a4:50:e3:ab:4d:ff:2b:ab:3e:b0:de:12:41:2c:45: c8:78:fe:2f:35:17:5a:97:36:4d:db:2b:53:ef:b5:66:f6:f3: 5c:01:cf:be:4f:6f:0a:c0:82:d9:93:05:cf:df:5d:d7:f5:39: 09:1f:10:9e:29:d1:73:6f:81:05:05:28:4a:f6:68:79:f7:ce: 95:c6:90:e9:a5:2e:c3:64:d9:10:93:2e:58:05:20:be:e6:5e: fc:1b:95:61:92:0b:de:92:89:c4:d5:49:9a:1c:6d:96:9e:7e: 0d:0e:27:6a:08:44:71:1b:17:d6:e9:fa:d6:ea:36:bb:a1:ae: 8e:8c:c1:68:ad:08:98:94:42:67:86:3f:1f:dc:42:69:58:17: 5d:dd:10:f0:62:04:a3:b6:71:48:17:24:45:d1:d7:c0:cc:f0: 9d:b4:94:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjYwNDA0MTQyOTQ2WhcNMjYwNDExMTQyOTQ2WjAYMRYwFAYD VQQDEw02OWQxMjA1YS04MmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAium64LxZdaE/Tzh/+BJ1xKTH1X7AUlcKDAFyjg+hhnnXjLZji+6oKXekkP0p AbAsLRZoQtddOIQCfzzzy0Q5hI0DvIULZ2k1G19KsykW8RE6Y6g69r4oMynOdoU/ mvTIazlvvHIbKj7CH2iQdkpfMAoY93Ck5+51zFUTl35/KoUQkuPBMv7Lq1JRm9Av H8e1UL0MDDdmUDE7Mm7Ux9HgPOwnpzypAYtFIJ8xfv70lZ2PJTHPloXVFrYyLq7N rTi5zSYn4QZv+NBkje72pFQADkrKlRNcQnkm0lehhONIniAk3+r4gIE9uxZuuRla XL3MAjyX72d/fvH8s8N1xoHgTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPaoW0Yj 1GVm2h6bd9ikgixEAZkRMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGx5uazwOKmnPKCXgAGOj1vYubLcdh/gUUsB0xhqBKEmDxeQwE38dfkR1KgV5 uMigGnqacDR/Bt0TDkiFh2CwmFfi3Hiz6PvJs6jbPU3qX3IMD4OEumsK4MlpoJZh pFDjq03/K6s+sN4SQSxFyHj+LzUXWpc2TdsrU++1ZvbzXAHPvk9vCsCC2ZMFz99d 1/U5CR8QninRc2+BBQUoSvZoeffOlcaQ6aUuw2TZEJMuWAUgvuZe/BuVYZIL3pKJ xNVJmhxtlp5+DQ4naghEcRsX1un61uo2u6GujozBaK0ImJRCZ4Y/H9xCaVgXXd0Q 8GIEo7ZxSBckRdHXwMzwnbSUoA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:57 2026 by rpki-client