$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft File: tljvayeSnHt_X7Jsue5qQSzoXdQ.mft (raw, json) Hash identifier: bbNk4JmQTXncctJD4pLNNCNgtypO+BJOBFnifq0BNwY= Subject key identifier: C3:8D:52:CA:77:59:E2:6D:E0:24:F8:E9:4D:B5:51:DC:2E:4A:43:6A Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 Certificate issuer: /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4 Certificate serial: 085D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft Manifest number: 0843 Signing time: Sat 18 Apr 2026 20:47:46 +0000 Manifest this update: Sat 18 Apr 2026 20:47:46 +0000 Manifest next update: Sat 25 Apr 2026 20:47:46 +0000 Files and hashes: 1: tljvayeSnHt_X7Jsue5qQSzoXdQ.crl (hash: Fo8wnYmVWwSVUbC6FSV3P/9tED2xeAOtsZS0/JvTxmY=) 2: 0886DE60D4D311ECBE99375AC4F9AE02.roa (hash: Q+M0wOPGgg1Hskurs4am6L9I8fPJGpOHtrzr/zGhOeY=) 3: EFC0CAB2F81111EEB4681B75C4F9AE02.roa (hash: BTeoFCLWLpJ86fj7WEbev+ObD3ksVZlkHRSpsEYdtlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 20:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072, serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4 Validity Not Before: Apr 18 20:47:46 2026 GMT Not After : Apr 25 20:47:46 2026 GMT Subject: CN=69e3edf2-7f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:bd:27:5c:28:f1:f6:db:3f:af:eb:ce:d0: f4:08:de:fa:74:94:b4:5f:02:13:00:99:12:b1:59: 12:e2:66:4b:39:08:b1:71:3d:67:45:51:b3:61:97: 7f:70:d0:ab:1a:2d:6b:b2:7e:14:89:0c:30:57:1d: f5:11:79:58:3a:86:30:00:d9:5c:ce:0d:57:43:98: e3:21:29:de:7e:d6:c4:dd:3b:b8:9d:72:11:c3:36: c0:a3:83:ea:97:89:86:a0:b0:7f:be:ee:85:2d:79: 58:fc:80:d9:01:d4:a5:90:9c:cf:d7:46:e2:90:57: 8e:07:e6:b2:22:bc:be:d9:1e:00:5a:a3:8c:b6:fb: 9d:22:92:12:42:e7:80:87:d7:25:5d:84:ca:55:f8: 06:f2:8b:b7:c8:6a:54:93:a6:84:62:f8:48:96:52: f9:d8:22:06:80:b0:03:15:9e:07:32:70:25:9a:43: 07:19:ee:85:20:f0:f1:d9:f8:7f:9e:3a:22:d0:e9: 69:a2:d4:c3:a6:7b:24:a5:cd:eb:ae:0c:9f:d0:bd: 9c:75:f1:3a:13:be:ef:97:a8:a6:00:ba:3e:ae:33: 1c:93:13:19:1a:63:0a:9c:7c:2c:9f:85:bc:ec:34: 67:6d:6c:83:6d:32:4b:95:0f:2e:8b:25:aa:55:68: a7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8D:52:CA:77:59:E2:6D:E0:24:F8:E9:4D:B5:51:DC:2E:4A:43:6A X509v3 Authority Key Identifier: keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:24:f5:b3:83:af:72:70:b3:a8:51:e2:27:c0:88:c4:9a:18: 0c:9d:98:48:db:30:33:1e:6b:92:92:7a:96:7c:1a:e7:2b:92: f0:1a:fb:9e:4e:3c:5c:94:16:b0:a9:72:d2:1c:24:8f:22:ee: f3:9a:4a:82:2e:36:83:8a:2f:21:17:d5:ff:1d:60:c0:c6:24: 87:18:e3:77:13:01:db:5a:d5:9f:4a:74:88:5c:7b:c7:c8:ba: cc:ab:ca:76:9c:0c:b7:fc:8a:10:d3:ff:64:24:53:8e:25:9a: 95:61:73:69:43:a2:75:a7:c1:1a:40:06:17:3d:5b:2e:02:1a: 6c:18:00:ed:1c:f9:fc:aa:2c:10:cf:ad:3a:ec:66:2a:9f:8f: c9:b8:05:90:38:7e:64:1a:7d:24:f3:01:8d:6b:46:15:d8:a0: c4:44:ea:a2:a2:6c:8e:49:ca:1a:5c:7e:03:54:2d:4b:43:d0: c0:f4:0c:9f:8f:6d:35:ad:61:48:56:2e:ec:41:b0:23:47:46: 5e:86:f1:92:3c:a3:ff:ad:8d:ab:a8:fa:32:2d:2d:5c:d8:53: 24:19:c7:cf:f3:12:b0:24:da:a5:60:f7:74:23:aa:bc:03:b3: f9:c1:91:49:0b:3f:de:ff:fc:8d:d9:5d:ac:2a:e2:21:ef:1d: 03:d1:ff:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEI2NThFRjZCMjc5MjlDN0I3RjVGQjI2Q0I5RUU2QTQx MkNFODVERDQwHhcNMjYwNDE4MjA0NzQ2WhcNMjYwNDI1MjA0NzQ2WjAYMRYwFAYD VQQDEw02OWUzZWRmMi03ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoW9J1wo8fbbP6/rztD0CN76dJS0XwITAJkSsVkS4mZLOQixcT1nRVGzYZd/ cNCrGi1rsn4UiQwwVx31EXlYOoYwANlczg1XQ5jjISneftbE3Tu4nXIRwzbAo4Pq l4mGoLB/vu6FLXlY/IDZAdSlkJzP10bikFeOB+ayIry+2R4AWqOMtvudIpISQueA h9clXYTKVfgG8ou3yGpUk6aEYvhIllL52CIGgLADFZ4HMnAlmkMHGe6FIPDx2fh/ njoi0OlpotTDpnskpc3rrgyf0L2cdfE6E77vl6imALo+rjMckxMZGmMKnHwsn4W8 7DRnbWyDbTJLlQ8uiyWqVWingwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMONUsp3 WeJt4CT46U21UdwuSkNqMB8GA1UdIwQYMBaAFLZY72snkpx7f1+ybLnuakEs6F3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wNjlBMDZFNjBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25IdF9YN0pzdWU1cVFTem9Y ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RsanZheWVTbkh0X1g3SnN1ZTVxUVN6b1hkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA3Mi8wNjlBMDZFNjBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25I dF9YN0pzdWU1cVFTem9YZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMiT1s4OvcnCzqFHiJ8CIxJoYDJ2YSNswMx5rkpJ6lnwa5yuS8Br7nk48XJQW sKly0hwkjyLu85pKgi42g4ovIRfV/x1gwMYkhxjjdxMB21rVn0p0iFx7x8i6zKvK dpwMt/yKENP/ZCRTjiWalWFzaUOidafBGkAGFz1bLgIabBgA7Rz5/KosEM+tOuxm Kp+PybgFkDh+ZBp9JPMBjWtGFdigxETqoqJsjknKGlx+A1QtS0PQwPQMn49tNa1h SFYu7EGwI0dGXobxkjyj/62Nq6j6Mi0tXNhTJBnHz/MSsCTapWD3dCOqvAOz+cGR SQs/3v/8jdldrCriIe8dA9H/VA== -----END CERTIFICATE-----Generated at Mon Apr 20 09:39:32 2026 by rpki-client