$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft File: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json) Hash identifier: G/0uhcRjfyAZJzgJnEfPHfs42vQubulhcES/deDA0Co= Subject key identifier: 22:DA:86:4B:B8:68:99:D1:F1:A3:E9:15:03:E4:E1:97:B7:5A:B4:8E Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Certificate serial: 0AD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft Manifest number: 0ABE Signing time: Sun 26 Apr 2026 19:23:02 +0000 Manifest this update: Sun 26 Apr 2026 19:23:02 +0000 Manifest next update: Sun 03 May 2026 19:23:02 +0000 Files and hashes: 1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: MUTgqO8vxu474SOSlPaJKvFynVmkOsXpZxhrNsplg+I=) 2: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: OHHlg82SYMCj0nhG6pczg1mnIfcmqYmPHe/Fcr0oG4g=) 3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: EbOmNI7pCvPrjoYlxuO9Tzo0OfRycsU5uM6JLnWzUkE=) 4: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: UKzO6fJ8O7kuibwIUH1aGZnI4vviF9UxI9CQHk+Pqrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 19:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2775 (0xad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Validity Not Before: Apr 26 19:23:02 2026 GMT Not After : May 3 19:23:02 2026 GMT Subject: CN=69ee6616-e728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:e6:77:00:8c:d8:16:a4:72:3f:ac:89:69: 87:48:95:ea:03:1d:51:1a:cc:25:c3:65:09:ad:c4: 35:81:37:64:8e:00:55:5e:6c:13:3c:5f:9e:cf:24: 89:76:99:40:ba:e9:1d:75:a5:84:e6:3d:d1:be:61: cd:aa:92:a5:b5:04:37:3f:e3:75:60:d9:72:c9:3d: fd:24:4d:df:67:67:63:64:76:5d:3a:c9:1b:92:1c: 23:64:bc:87:a1:3e:56:36:68:21:50:84:ac:5d:60: 1d:b6:2d:73:58:28:1f:42:d7:a6:0c:6a:83:e9:92: 83:d6:9d:ac:0b:24:fe:38:a6:93:ec:75:17:6b:ce: 33:ac:e6:68:b0:a4:2d:cd:f6:50:87:9a:b2:20:ef: 5b:7c:cd:f5:ac:70:0e:f7:13:5e:ca:c4:a9:51:77: a4:32:4a:8c:4f:2b:8f:e7:ff:4e:36:1a:57:d3:3c: 86:5a:ac:e7:83:58:8f:d1:be:80:1b:a6:37:f9:90: aa:0a:d4:93:10:c7:e9:9c:a7:c2:bf:0d:38:94:4d: a8:c2:c2:fd:ca:5f:fe:52:03:5f:fa:dd:30:44:01: 1b:1a:33:4f:22:1e:fe:91:7a:7d:85:cd:ea:9a:05: de:c7:66:89:0e:30:cc:a9:1e:9f:14:6f:ff:e2:d5: 18:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DA:86:4B:B8:68:99:D1:F1:A3:E9:15:03:E4:E1:97:B7:5A:B4:8E X509v3 Authority Key Identifier: keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a9:c8:38:02:c1:e6:22:84:08:da:b0:b8:3c:75:fb:ad:3c: 0d:45:fa:7f:26:ca:99:bc:6d:e5:82:2b:ed:99:64:8d:d0:53: 9f:6c:e3:2b:d4:3b:84:53:ba:8d:b1:a2:fd:56:cf:ee:02:b2: 87:30:42:27:d4:2e:4a:d0:1b:35:b3:90:4a:47:6a:25:bb:ca: 07:7e:4f:cf:40:92:5c:1f:0c:09:d3:29:5c:7b:96:63:4c:0f: 45:cc:21:3b:a8:cd:ef:38:02:bf:c4:60:af:87:da:d6:20:be: f1:f1:93:f8:76:c0:05:6f:6b:da:b9:8e:51:9b:93:f0:3d:fc: a5:a2:0d:9c:7a:fb:c5:89:d2:f4:e2:bb:eb:91:99:08:d1:ba: df:ee:28:1e:2c:36:6a:9c:5e:94:2f:40:51:69:16:40:8b:7e: 0a:6b:0d:c6:a9:ee:72:65:c5:0b:04:f5:38:fb:b8:0e:85:ed: b0:0f:1d:11:34:b0:76:53:63:5e:17:be:b6:a2:69:85:39:23: 34:f8:7e:e0:70:6e:f5:54:9a:5a:d9:0f:77:33:c6:e6:a2:9b: ba:14:0b:9f:a4:28:62:0b:c6:3f:87:77:77:e8:71:09:06:e7: a0:50:c9:b0:ef:77:91:91:1b:37:67:2b:4a:34:2d:eb:2d:3a: 7d:f5:5c:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RUExMTAvBgNVBAUTKDRENTI1NDc0NkZFRjcyRUZCN0FDQzBDNTM0QUQ2MDhG NTBCQzM4MDQwHhcNMjYwNDI2MTkyMzAyWhcNMjYwNTAzMTkyMzAyWjAYMRYwFAYD VQQDEw02OWVlNjYxNi1lNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7bmdwCM2Bakcj+siWmHSJXqAx1RGswlw2UJrcQ1gTdkjgBVXmwTPF+ezySJ dplAuukddaWE5j3RvmHNqpKltQQ3P+N1YNlyyT39JE3fZ2djZHZdOskbkhwjZLyH oT5WNmghUISsXWAdti1zWCgfQtemDGqD6ZKD1p2sCyT+OKaT7HUXa84zrOZosKQt zfZQh5qyIO9bfM31rHAO9xNeysSpUXekMkqMTyuP5/9ONhpX0zyGWqzng1iP0b6A G6Y3+ZCqCtSTEMfpnKfCvw04lE2owsL9yl/+UgNf+t0wRAEbGjNPIh7+kXp9hc3q mgXex2aJDjDMqR6fFG//4tUYBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLahku4 aJnR8aPpFQPk4Ze3WrSOMB8GA1UdIwQYMBaAFE1SVHRv73Lvt6zAxTStYI9QvDgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFQS9GNDJENENBMjcz RTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1LTNyTURGTksxZ2oxQzhP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RWSlVkR192Y3UtM3JNREZOSzFnajFDOE9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFQS9GNDJENENBMjczRTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1 LTNyTURGTksxZ2oxQzhPQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiqnIOALB5iKECNqwuDx1+608DUX6fybKmbxt5YIr7ZlkjdBTn2zjK9Q7hFO6 jbGi/VbP7gKyhzBCJ9QuStAbNbOQSkdqJbvKB35Pz0CSXB8MCdMpXHuWY0wPRcwh O6jN7zgCv8Rgr4fa1iC+8fGT+HbABW9r2rmOUZuT8D38paINnHr7xYnS9OK765GZ CNG63+4oHiw2apxelC9AUWkWQIt+CmsNxqnucmXFCwT1OPu4DoXtsA8dETSwdlNj Xhe+tqJphTkjNPh+4HBu9VSaWtkPdzPG5qKbuhQLn6QoYgvGP4d3d+hxCQbnoFDJ sO93kZEbN2crSjQt6y06ffVcAQ== -----END CERTIFICATE-----Generated at Mon Apr 27 09:17:32 2026 by rpki-client