$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: Pt8zNax198dzhbEQ7yu1H8SJ7gu4/vTPPrIYQ4M7I/g= Subject key identifier: 1A:C5:C4:9D:BA:F9:64:17:23:3F:24:76:18:8B:E9:4D:B7:15:B6:13 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 0885 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 087D Signing time: Tue 28 Apr 2026 20:54:04 +0000 Manifest this update: Tue 28 Apr 2026 20:54:03 +0000 Manifest next update: Tue 05 May 2026 20:54:03 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: FbhFZqfdE2kjZM1eH7UxDzPC7l2emVi0MLSq+9hEjKk=) 2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: olzU9jiah+vCL2TYo6oua28ch8EeQcQTF/v3T6cuGv0=) 3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: O/7YA16zUHlRs4EqhBTZvR5d/9Wf8oxzD6m86xewXDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 20:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Apr 28 20:54:03 2026 GMT Not After : May 5 20:54:03 2026 GMT Subject: CN=69f11e6c-702f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:f3:bf:93:7c:c7:40:22:74:15:b5:c0:5a: 81:4f:7a:6b:c7:60:d4:f3:dc:8d:30:12:f5:ac:4b: 24:1e:7f:3b:c1:93:29:eb:ff:9f:55:08:f5:c7:08: b2:2b:af:76:f1:ed:6f:25:1f:9b:90:3e:6f:ef:dc: c9:a5:24:09:44:0c:60:3f:19:58:ef:19:27:5c:db: 55:ca:72:ff:36:05:c2:e7:60:c2:b9:e5:1d:7c:f0: 55:99:11:8d:31:57:5b:09:e1:98:f2:df:36:ce:7b: 3b:38:12:d4:30:a5:66:f8:b0:64:18:b5:89:99:ad: 6e:ca:11:d2:ef:18:45:e1:50:42:df:d7:8f:be:5b: f6:01:70:b2:53:32:16:c5:64:3c:27:ca:5f:7f:ce: 8c:4c:83:f3:66:63:e5:fc:70:91:5d:ad:b6:d8:3e: 5a:16:79:95:6b:03:b6:02:77:74:f8:bc:b4:e6:bc: 52:cd:75:a1:de:9a:8e:0b:2e:06:72:40:c9:99:4b: 58:6b:05:60:85:d3:90:85:3e:8f:5e:20:38:b9:77: bc:5a:4e:31:a4:18:5b:8b:40:1b:fa:89:60:95:86: 11:dd:4c:7f:9b:d1:ec:da:71:85:5a:b7:86:3f:bb: e1:de:ab:a5:58:49:1b:f7:87:91:27:91:af:c7:0d: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C5:C4:9D:BA:F9:64:17:23:3F:24:76:18:8B:E9:4D:B7:15:B6:13 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:2f:f1:ee:d7:1f:5d:56:2f:3d:d5:e1:12:d5:41:71:67:17: c0:f1:75:1c:ea:87:72:1f:80:5c:de:26:c4:f1:81:39:53:c6: b1:ca:22:92:bf:f3:5e:fd:b5:e9:51:b5:c4:56:65:c7:5b:1d: 27:de:05:36:bd:bc:42:68:c9:84:9d:18:a2:3c:f4:4f:c5:1d: 5e:d1:df:ad:ad:e4:51:43:db:c0:29:44:53:23:30:aa:73:fd: 53:95:50:c9:f2:d3:1d:6f:53:2c:8a:df:4b:92:db:7e:8d:09: d3:0d:ff:3d:dd:c1:6a:7b:a7:ab:39:8a:69:3c:76:6c:10:93: 7c:e4:82:83:1d:4e:f6:04:f2:b7:cb:01:43:2e:34:3a:2c:3f: 51:ff:30:8c:17:f8:97:0c:01:14:1a:63:59:cb:63:45:41:96: 17:60:4a:d0:05:47:23:03:37:30:6b:cc:19:eb:15:70:09:c5: ac:ed:96:4c:63:4e:c2:b4:62:30:14:8e:6d:63:cc:c4:79:cd: 3d:11:f4:90:02:85:2d:1b:cd:f7:a6:d3:66:8d:8f:49:c2:83: bf:b0:ca:a1:34:11:21:86:46:ef:5a:07:62:e6:62:be:5f:a8: 1e:86:d6:77:66:6b:10:f3:ab:eb:65:72:80:89:58:5e:42:d3: ac:9f:4e:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjYwNDI4MjA1NDAzWhcNMjYwNTA1MjA1NDAzWjAYMRYwFAYD VQQDEw02OWYxMWU2Yy03MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArm7zv5N8x0AidBW1wFqBT3prx2DU89yNMBL1rEskHn87wZMp6/+fVQj1xwiy K6928e1vJR+bkD5v79zJpSQJRAxgPxlY7xknXNtVynL/NgXC52DCueUdfPBVmRGN MVdbCeGY8t82zns7OBLUMKVm+LBkGLWJma1uyhHS7xhF4VBC39ePvlv2AXCyUzIW xWQ8J8pff86MTIPzZmPl/HCRXa222D5aFnmVawO2And0+Ly05rxSzXWh3pqOCy4G ckDJmUtYawVghdOQhT6PXiA4uXe8Wk4xpBhbi0Ab+olglYYR3Ux/m9Hs2nGFWreG P7vh3qulWEkb94eRJ5Gvxw1PGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrFxJ26 +WQXIz8kdhiL6U23FbYTMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaS/x7tcfXVYvPdXhEtVBcWcXwPF1HOqHch+AXN4mxPGBOVPGscoikr/zXv21 6VG1xFZlx1sdJ94FNr28QmjJhJ0Yojz0T8UdXtHfra3kUUPbwClEUyMwqnP9U5VQ yfLTHW9TLIrfS5Lbfo0J0w3/Pd3BanunqzmKaTx2bBCTfOSCgx1O9gTyt8sBQy40 Oiw/Uf8wjBf4lwwBFBpjWctjRUGWF2BK0AVHIwM3MGvMGesVcAnFrO2WTGNOwrRi MBSObWPMxHnNPRH0kAKFLRvN96bTZo2PScKDv7DKoTQRIYZG71oHYuZivl+oHobW d2ZrEPOr62VygIlYXkLTrJ9OoA== -----END CERTIFICATE-----Generated at Wed Apr 29 13:41:31 2026 by rpki-client