$ rpki-client -vvf rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft File: TonyDOHR4q7I1gVlBTEwvWB9W_0.mft (raw, json) Hash identifier: Ch8H9tCXVWatUO99Jn70hSdiDS7IWwUag0m++vzHVzE= Subject key identifier: C6:25:87:91:26:E6:CE:88:21:AB:F7:D9:10:5B:4D:6A:36:9C:96:41 Authority key identifier: 4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD Certificate issuer: /CN=A912465F/serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft Manifest number: 23 Signing time: Sun 05 Apr 2026 08:13:41 +0000 Manifest this update: Sun 05 Apr 2026 08:13:40 +0000 Manifest next update: Sun 12 Apr 2026 08:13:40 +0000 Files and hashes: 1: TonyDOHR4q7I1gVlBTEwvWB9W_0.crl (hash: iSc4Ukf9CSCgeCZbRbwFG0g3pZwrS1TmMSBfyIw6bu0=) 2: A885DC48100411F1A3563A300F3D8C67.roa (hash: tF3ywN7eYQwZg7AMUnYYT38GsrrKw6HcmRM3Hqi+nbg=) 3: 78CCC796100411F190DA552F0F3D8C67.roa (hash: 9ijSIQLwt2Gy2XEyUcUffnJwapZcaQTrQntZZWP4Uss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912465F, serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD Validity Not Before: Apr 5 08:13:40 2026 GMT Not After : Apr 12 08:13:40 2026 GMT Subject: CN=69d219b5-3a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:26:16:f9:eb:73:12:64:a9:1a:04:78:01: cc:f8:a1:d5:7d:4b:9a:9d:34:79:95:7d:ea:06:35: 60:a7:b8:e5:25:75:10:b3:52:93:7e:43:d5:b8:ee: 18:40:34:a7:fc:bf:37:56:40:02:c5:a2:3c:e8:d8: d9:44:2a:7f:c2:7c:b2:bf:d4:d0:65:11:1a:40:89: 0b:1a:76:4d:04:8c:93:78:00:17:6c:af:b4:5e:61: e0:b1:99:4e:e0:ff:29:c9:ff:f6:4f:3f:6a:42:49: d9:5a:fc:be:4c:3b:50:b6:1b:6b:19:f1:45:6e:22: 46:7c:8a:b4:ee:98:5a:d1:e9:c4:3c:1d:1d:23:01: 17:1b:69:9f:a5:c4:a0:b9:61:2f:75:c6:60:30:12: 17:11:40:d2:2f:1c:39:7c:ce:1e:ae:65:25:06:ad: aa:f7:08:4e:bb:08:93:31:a8:ba:2c:26:51:66:c4: 89:8f:f0:08:f2:5d:7a:eb:c7:5a:31:f1:89:de:fd: f3:a0:ba:69:c2:ad:ab:75:f4:df:fb:c8:6c:f9:d7: 5e:44:e7:f0:79:e7:7f:76:3d:50:b9:29:79:32:54: 11:89:b7:b1:e4:83:32:0f:53:3e:74:78:68:e8:7e: 48:85:a1:a5:74:4a:d2:80:dc:88:6f:a5:3c:3c:78: ea:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:25:87:91:26:E6:CE:88:21:AB:F7:D9:10:5B:4D:6A:36:9C:96:41 X509v3 Authority Key Identifier: keyid:4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:8d:20:57:25:fa:1f:a1:83:99:b3:97:40:7f:9c:61:bd:a8: 3d:7c:38:e2:c1:db:6a:9d:99:0f:28:3b:74:7e:81:55:3a:dd: bc:69:d4:3e:56:3a:7b:b6:46:bb:32:3a:5a:e3:d6:1b:2e:02: 04:44:53:f8:21:8e:68:6d:c2:18:97:ab:a7:ed:5f:c6:73:8d: 09:42:76:8b:a0:7e:9f:2c:62:d9:37:48:53:e8:d5:91:14:98: df:46:71:e0:f9:8f:55:bd:29:dc:fb:41:38:d0:85:9a:7a:49: 25:3a:47:d2:ad:fc:2e:c3:dd:2a:ac:a0:f9:b3:c6:9f:83:3d: 25:11:07:d7:74:f1:83:7f:f1:71:a3:25:2f:38:01:74:ee:7b: 92:ef:e5:19:cb:65:ac:3f:a2:82:23:8e:df:e6:a3:a5:ad:ab: 6d:25:65:68:4f:1b:36:84:9d:63:58:8a:63:8f:02:3b:76:73: 83:48:34:31:a8:7c:e9:4c:2d:d4:99:30:7b:b7:69:72:d9:f8: ef:6f:f0:b9:5e:a6:22:a4:b0:8f:e4:91:12:09:c8:15:5a:c2: ac:7e:50:09:0a:c6:68:85:63:1f:f2:8d:67:77:9a:84:4a:d7: 7d:4a:98:de:9c:6d:0b:2b:ea:60:5c:54:8e:84:ab:73:ec:ba: af:36:9c:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDY1RjExMC8GA1UEBRMoNEU4OUYyMENFMUQxRTJBRUM4RDYwNTY1MDUzMTMwQkQ2 MDdENUJGRDAeFw0yNjA0MDUwODEzNDBaFw0yNjA0MTIwODEzNDBaMBgxFjAUBgNV BAMTDTY5ZDIxOWI1LTNhNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBPyYW+etzEmSpGgR4Acz4odV9S5qdNHmVfeoGNWCnuOUldRCzUpN+Q9W47hhA NKf8vzdWQALFojzo2NlEKn/CfLK/1NBlERpAiQsadk0EjJN4ABdsr7ReYeCxmU7g /ynJ//ZPP2pCSdla/L5MO1C2G2sZ8UVuIkZ8irTumFrR6cQ8HR0jARcbaZ+lxKC5 YS91xmAwEhcRQNIvHDl8zh6uZSUGrar3CE67CJMxqLosJlFmxImP8AjyXXrrx1ox 8Yne/fOgumnCrat19N/7yGz5115E5/B55392PVC5KXkyVBGJt7HkgzIPUz50eGjo fkiFoaV0StKA3IhvpTw8eOofAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxiWHkSbm zoghq/fZEFtNajaclkEwHwYDVR0jBBgwFoAUTonyDOHR4q7I1gVlBTEwvWB9W/0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0NjVGLzcwMkMzNEM2MDY0 NzExRjFCNEJBRkJDNTJEM0Q4QzY3L1RvbnlET0hSNHE3STFnVmxCVEV3dldCOVdf MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvVG9ueURPSFI0cTdJMWdWbEJURXd2V0I5V18wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 NjVGLzcwMkMzNEM2MDY0NzExRjFCNEJBRkJDNTJEM0Q4QzY3L1RvbnlET0hSNHE3 STFnVmxCVEV3dldCOVdfMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRjSBXJfofoYOZs5dAf5xhvag9fDjiwdtqnZkPKDt0foFVOt28adQ+Vjp7tka7 Mjpa49YbLgIERFP4IY5obcIYl6un7V/Gc40JQnaLoH6fLGLZN0hT6NWRFJjfRnHg +Y9VvSnc+0E40IWaekklOkfSrfwuw90qrKD5s8afgz0lEQfXdPGDf/FxoyUvOAF0 7nuS7+UZy2WsP6KCI47f5qOlrattJWVoTxs2hJ1jWIpjjwI7dnODSDQxqHzpTC3U mTB7t2ly2fjvb/C5XqYipLCP5JESCcgVWsKsflAJCsZohWMf8o1nd5qEStd9Spje nG0LK+pgXFSOhKtz7LqvNpxD -----END CERTIFICATE-----Generated at Mon Apr 6 15:24:14 2026 by rpki-client