$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: SoMY2AI38cwhWPL8MwOT5yXtk0316H86gGO54QZ/ZAE= Subject key identifier: 91:47:39:14:FC:5D:90:37:8C:EB:0D:3B:80:90:82:25:3D:84:9B:0E Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: 0146 Signing time: Sun 05 Apr 2026 04:41:31 +0000 Manifest this update: Sun 05 Apr 2026 04:41:30 +0000 Manifest next update: Sun 12 Apr 2026 04:41:30 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: c79RoB9yHFg2LLGmOeD2GL9ctjg4By1RHevMmjiJ2ko=) 2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: /neZtyP8CB+i0xa/1UQQQx4y8u+LD3tIdTWWjj7eFPE=) 3: 6A5F29CED8A511F0B3F453F094D3641D.roa (hash: x8Gadu5mzZc6qu26lRbm5uUV5MWN8eTQq1KShULlErA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Apr 5 04:41:30 2026 GMT Not After : Apr 12 04:41:30 2026 GMT Subject: CN=69d1e7fa-bef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:16:40:52:32:b6:31:06:ed:ed:aa:25:f4: a6:93:54:76:da:84:24:f6:59:7b:9f:f3:b3:3d:b9: c3:a4:43:a9:e5:87:5f:fa:7b:fa:b2:ca:f1:a4:9d: fb:b6:96:7f:bb:50:73:1c:66:43:4b:c3:e6:7e:27: da:ac:59:07:39:7e:cd:19:9c:33:2e:19:c0:0e:5a: f9:6d:64:7e:69:a7:09:e1:6e:47:6e:54:20:30:7e: ac:96:06:c3:4d:43:4f:af:fa:78:ad:59:1e:da:17: 65:7d:b6:18:ed:32:27:a2:17:e5:af:5f:ec:d9:53: 5d:58:f3:67:8c:23:e8:19:e8:b9:6b:cb:36:f5:4a: 4a:99:61:c5:b6:5c:18:51:99:bd:f4:96:f0:69:24: 21:70:e0:bf:a8:66:19:e4:c8:3b:d5:9a:43:ec:8a: 28:fc:53:8f:cb:70:1e:aa:c7:a7:71:86:d0:2e:a0: 55:22:66:30:a7:3e:3a:64:ce:6b:a5:6c:ee:58:28: 04:49:a3:da:bc:df:24:25:0d:61:d9:ea:83:d5:35: 0e:7a:fc:d7:c0:dc:d5:ff:fc:1d:2f:89:0a:05:82: 08:a9:9c:23:b1:3a:d8:79:eb:b1:90:9d:58:b1:58: 37:7d:45:8b:c6:1a:20:f0:39:eb:53:64:51:f6:6b: 45:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:47:39:14:FC:5D:90:37:8C:EB:0D:3B:80:90:82:25:3D:84:9B:0E X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4b:aa:7e:0f:49:77:28:df:93:1b:7f:d8:04:71:29:1e:dd: 91:f4:5b:52:09:cf:bd:0c:31:d6:71:4a:34:ea:b3:36:dc:9b: 38:f0:a8:32:c4:1e:77:65:34:ab:1b:10:aa:97:ca:0d:5f:81: df:ed:a5:4c:6c:27:f1:d2:05:9a:47:77:37:f3:57:48:46:9b: 9a:df:db:46:83:00:8a:47:83:f2:db:eb:67:2c:39:02:4b:29: 4b:62:1d:14:7e:7c:47:8e:9d:27:e4:81:2a:ad:ec:75:90:94: d5:11:1a:1f:da:c2:0c:7d:fa:4c:60:8b:f2:ed:29:10:77:aa: be:f1:31:e2:09:d5:9a:35:aa:86:d9:bf:b0:04:73:42:b0:34: 8a:b7:e1:73:79:dc:eb:a4:c7:e9:5f:57:86:4b:d3:34:8a:c6: 1e:eb:be:72:62:ac:83:fb:fd:4c:c8:34:f2:8e:fc:d7:7f:46: cb:56:b1:5b:48:9b:ab:d7:b8:65:0b:59:1a:e6:73:49:e8:aa: 92:43:fd:08:bd:f1:e0:06:e1:36:bd:34:ee:7a:99:d7:70:7c: 54:fc:59:d6:ff:bf:3c:30:3d:71:eb:65:68:e2:66:f7:b5:59: a8:e4:36:39:f3:be:b0:c0:98:82:d7:67:0b:c5:f8:ff:75:40: d3:ee:c0:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjYwNDA1MDQ0MTMwWhcNMjYwNDEyMDQ0MTMwWjAYMRYwFAYD VQQDEw02OWQxZTdmYS1iZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4sWQFIytjEG7e2qJfSmk1R22oQk9ll7n/OzPbnDpEOp5Ydf+nv6ssrxpJ37 tpZ/u1BzHGZDS8PmfifarFkHOX7NGZwzLhnADlr5bWR+aacJ4W5HblQgMH6slgbD TUNPr/p4rVke2hdlfbYY7TInohflr1/s2VNdWPNnjCPoGei5a8s29UpKmWHFtlwY UZm99JbwaSQhcOC/qGYZ5Mg71ZpD7Ioo/FOPy3AeqsencYbQLqBVImYwpz46ZM5r pWzuWCgESaPavN8kJQ1h2eqD1TUOevzXwNzV//wdL4kKBYIIqZwjsTrYeeuxkJ1Y sVg3fUWLxhog8DnrU2RR9mtFywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFHORT8 XZA3jOsNO4CQgiU9hJsOMB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfUuqfg9Jdyjfkxt/2ARxKR7dkfRbUgnPvQwx1nFKNOqzNtybOPCoMsQed2U0 qxsQqpfKDV+B3+2lTGwn8dIFmkd3N/NXSEabmt/bRoMAikeD8tvrZyw5AkspS2Id FH58R46dJ+SBKq3sdZCU1REaH9rCDH36TGCL8u0pEHeqvvEx4gnVmjWqhtm/sARz QrA0irfhc3nc66TH6V9XhkvTNIrGHuu+cmKsg/v9TMg08o78139Gy1axW0ibq9e4 ZQtZGuZzSeiqkkP9CL3x4AbhNr007nqZ13B8VPxZ1v+/PDA9cetlaOJm97VZqOQ2 OfO+sMCYgtdnC8X4/3VA0+7Axg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:38 2026 by rpki-client