$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: DmlMnSG/t3lwDHjmzGl1TIMqZNwU2j7FSh1G8QA1mjE= Subject key identifier: D5:74:79:1D:92:C1:4E:A4:02:4E:A4:36:B2:0D:C4:A6:E1:14:89:FD Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 045C Signing time: Tue 21 Apr 2026 00:05:25 +0000 Manifest this update: Tue 21 Apr 2026 00:05:25 +0000 Manifest next update: Tue 28 Apr 2026 00:05:25 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: Vm9nMUwx7sgCEJhxSo1kykeGfws51ijIyDdmAVm8ZNU=) 2: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: YLvOpo/gAJOyi4aEbUEuHHlI1c0Z1SZvTOBlRFCy2+E=) 3: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: 9Fd943GuQnIJTghRawSBwpY1MlmUVR4OO3uXynSyRN8=) 4: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 00:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Apr 21 00:05:25 2026 GMT Not After : Apr 28 00:05:25 2026 GMT Subject: CN=69e6bf45-cec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:dc:54:ed:93:59:08:cb:6c:f7:8e:f2:1b: 3d:ce:eb:7a:4c:77:ad:70:82:41:dd:96:01:c7:30: 92:ef:3f:34:77:ed:71:77:1e:33:0d:4f:ca:fa:ad: 6e:a2:2e:a9:a4:e1:ef:6d:68:85:27:af:78:9d:02: 62:c3:ef:3a:1b:a7:ea:6e:dc:e9:fa:92:a9:f6:35: 97:8b:a9:00:00:aa:51:66:7b:9f:14:2e:c3:74:42: 7d:05:90:b0:d0:8f:35:11:0b:ea:1f:a0:54:e5:da: d8:7f:6a:78:b1:e6:8b:a1:61:90:3f:c0:44:36:49: 6f:c0:22:43:57:b0:28:58:ff:09:c8:8f:d7:aa:06: 8f:96:e3:5e:47:97:5a:0d:ca:31:c9:3f:14:88:ce: 65:f5:a6:70:d0:a7:8a:3a:0c:fc:97:53:d1:cd:7f: bc:e2:38:83:f3:8e:06:95:48:e6:5c:6f:39:42:dc: d4:f2:68:de:a8:66:46:59:1a:ba:b1:15:6f:4e:d3: 34:3b:52:b3:af:82:5b:23:86:77:5e:b9:4f:0b:ba: 7e:a2:7f:79:8b:76:0f:41:23:1a:99:39:ff:83:97: f1:41:c7:c3:91:6c:3c:52:37:ee:7a:02:53:e7:06: 00:49:57:ba:9a:4e:85:74:18:4f:fd:ab:66:81:d6: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:74:79:1D:92:C1:4E:A4:02:4E:A4:36:B2:0D:C4:A6:E1:14:89:FD X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f6:6d:2f:1f:f9:d2:9c:c0:97:10:d2:7e:9b:8c:80:16:79: 17:a0:12:52:b4:99:a1:03:aa:e0:4d:0a:2f:09:7b:25:2a:c4: b6:95:12:c9:f2:ce:67:ec:28:3a:c3:a3:33:0f:bd:bc:d9:e4: f2:f4:75:8f:28:0e:2f:5a:26:e6:13:a5:9a:c7:98:76:f1:aa: f2:f8:86:a3:28:92:52:c0:e1:92:20:11:33:9c:46:72:75:58: 18:37:71:d8:74:87:bf:a6:b5:70:a0:10:78:a6:54:a3:dd:2d: 12:e4:10:34:7e:b1:ac:56:25:95:1c:3d:c3:94:11:67:72:55: dc:bb:f9:4c:7f:c7:e9:64:41:d1:82:a6:2f:13:2d:a3:bd:b9: 05:6f:df:c4:68:d1:0a:21:64:57:18:ec:b3:f5:60:f8:a1:a1: 3f:a0:2a:8d:a6:38:5c:cb:a5:25:4a:12:64:a8:49:ee:3d:20: a8:0c:1d:86:65:59:c7:10:2d:4e:3f:5c:57:55:f2:67:34:bd: f0:70:b1:3e:4e:12:74:d6:aa:ff:4f:cb:48:9a:aa:67:3b:a9: c2:fe:5c:29:02:f1:c5:9c:21:a9:3c:69:88:28:48:97:ce:7f: f4:f1:0e:25:0b:8e:9f:9f:99:9d:7b:3e:42:b0:c1:28:47:e0: 33:b5:ff:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjYwNDIxMDAwNTI1WhcNMjYwNDI4MDAwNTI1WjAYMRYwFAYD VQQDEw02OWU2YmY0NS1jZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFDcVO2TWQjLbPeO8hs9zut6THetcIJB3ZYBxzCS7z80d+1xdx4zDU/K+q1u oi6ppOHvbWiFJ694nQJiw+86G6fqbtzp+pKp9jWXi6kAAKpRZnufFC7DdEJ9BZCw 0I81EQvqH6BU5drYf2p4seaLoWGQP8BENklvwCJDV7AoWP8JyI/XqgaPluNeR5da DcoxyT8UiM5l9aZw0KeKOgz8l1PRzX+84jiD844GlUjmXG85QtzU8mjeqGZGWRq6 sRVvTtM0O1Kzr4JbI4Z3XrlPC7p+on95i3YPQSMamTn/g5fxQcfDkWw8UjfuegJT 5wYASVe6mk6FdBhP/atmgdaTBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNV0eR2S wU6kAk6kNrINxKbhFIn9MB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJvZtLx/50pzAlxDSfpuMgBZ5F6ASUrSZoQOq4E0KLwl7JSrEtpUSyfLOZ+wo OsOjMw+9vNnk8vR1jygOL1om5hOlmseYdvGq8viGoyiSUsDhkiARM5xGcnVYGDdx 2HSHv6a1cKAQeKZUo90tEuQQNH6xrFYllRw9w5QRZ3JV3Lv5TH/H6WRB0YKmLxMt o725BW/fxGjRCiFkVxjss/Vg+KGhP6AqjaY4XMulJUoSZKhJ7j0gqAwdhmVZxxAt Tj9cV1XyZzS98HCxPk4SdNaq/0/LSJqqZzupwv5cKQLxxZwhqTxpiChIl85/9PEO JQuOn5+ZnXs+QrDBKEfgM7X/vQ== -----END CERTIFICATE-----Generated at Wed Apr 22 05:42:22 2026 by rpki-client