$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json) Hash identifier: 25LeEgILXpzfsnlOM9DzK5u1Ln62/zXfnppAKaDmLuw= Subject key identifier: 8B:64:65:15:FC:6F:58:54:D0:AB:B0:56:B0:61:C7:7E:2B:40:2E:4D Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft Manifest number: 01A2 Signing time: Tue 21 Apr 2026 04:33:48 +0000 Manifest this update: Tue 21 Apr 2026 04:33:48 +0000 Manifest next update: Tue 28 Apr 2026 04:33:48 +0000 Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: opX9zbEh7NPh/HwjWt8ohFvOzwfswMqhMaBwDGsS6BE=) 2: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=) 3: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: +cfq+DBj705kE9pcPQ8fHhTnhcZwL0furcECRqclk3Y=) 4: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=) 5: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Validity Not Before: Apr 21 04:33:48 2026 GMT Not After : Apr 28 04:33:48 2026 GMT Subject: CN=69e6fe2c-428b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f8:4a:5b:11:d6:36:a4:4f:d1:a1:8a:d2:54: a4:85:90:f8:6f:0b:aa:fe:4c:ad:98:56:a2:07:26: 83:95:62:45:ce:ca:ef:05:23:b9:84:c1:59:8c:0f: 83:e6:26:1e:7b:85:b1:24:8b:fe:1f:99:e9:82:00: 18:26:5b:38:e7:fb:d7:96:0d:9d:89:5c:1d:8a:fd: 9d:d8:f5:3a:24:37:f2:17:68:37:7c:7e:39:0f:f8: 86:89:14:11:e2:cb:c0:ac:f2:bb:47:67:b6:89:4b: a7:a2:6d:7e:35:0e:87:d6:15:c0:a1:4c:52:54:d2: 20:5b:e8:52:0d:ed:ca:a1:b6:43:4a:db:84:f1:1e: c1:88:73:05:5f:90:47:e4:b5:ed:e3:a4:0f:72:60: fc:71:79:70:0f:ac:39:88:c3:86:20:c3:8b:c8:af: 8e:92:16:cc:b0:c8:ef:97:fb:20:98:c8:7a:f3:d1: fa:6d:93:b8:ac:9d:2e:f3:5a:27:1e:99:a7:49:e1: 11:b1:bc:54:46:0c:36:45:4c:ad:db:56:9b:3a:9d: 9d:55:96:38:a0:2a:07:fb:89:ea:b5:bf:03:52:5a: 93:a1:c6:44:f0:b9:96:8d:fc:ca:f0:d5:18:98:36: cd:a7:96:74:06:7f:2a:c9:ea:a7:04:a3:95:13:1d: 75:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:64:65:15:FC:6F:58:54:D0:AB:B0:56:B0:61:C7:7E:2B:40:2E:4D X509v3 Authority Key Identifier: keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:af:d3:de:00:96:c5:ea:12:e6:aa:57:58:ca:7d:cb:23:29: 2b:df:bd:54:b2:53:f2:f0:ec:d1:35:15:4a:92:42:b2:9e:57: 93:00:06:25:4f:19:55:7e:04:6a:37:60:06:c9:57:0b:57:c3: 18:44:05:94:ad:b8:1a:eb:71:a6:25:41:71:37:3a:34:a5:90: 46:c1:39:2c:b0:79:f8:e3:40:d3:76:dc:c3:d5:16:e1:ca:c6: 55:ef:fd:5c:70:10:c7:47:1f:6f:ce:05:b3:64:54:10:85:ca: bb:b3:d7:f8:8d:50:23:cc:ca:9a:12:51:9c:84:b1:c7:2f:58: ae:e2:28:22:fb:92:15:35:44:89:50:32:6b:0c:1d:da:1d:ec: 61:80:aa:72:70:92:d2:2d:ca:9c:1c:0d:d7:0c:68:15:0f:0f: fa:f7:41:cb:f5:e7:d4:49:9a:52:f9:43:00:89:93:3a:c8:6e: f6:4b:c0:16:15:e5:93:71:3e:87:d5:52:09:bc:de:1e:d9:c5: fd:6d:88:78:e8:3b:99:43:be:36:9d:89:14:3c:0a:03:f7:38: e0:1a:ef:95:07:b9:60:ea:f0:d6:c2:6b:ff:66:01:a6:fd:5a: 78:98:78:92:85:fd:91:49:05:de:f8:fa:72:a6:08:b1:f7:5b: 3e:ce:28:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC MTlFRjg0RDMwHhcNMjYwNDIxMDQzMzQ4WhcNMjYwNDI4MDQzMzQ4WjAYMRYwFAYD VQQDEw02OWU2ZmUyYy00MjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vhKWxHWNqRP0aGK0lSkhZD4bwuq/kytmFaiByaDlWJFzsrvBSO5hMFZjA+D 5iYee4WxJIv+H5npggAYJls45/vXlg2diVwdiv2d2PU6JDfyF2g3fH45D/iGiRQR 4svArPK7R2e2iUunom1+NQ6H1hXAoUxSVNIgW+hSDe3KobZDStuE8R7BiHMFX5BH 5LXt46QPcmD8cXlwD6w5iMOGIMOLyK+OkhbMsMjvl/sgmMh689H6bZO4rJ0u81on HpmnSeERsbxURgw2RUyt21abOp2dVZY4oCoH+4nqtb8DUlqTocZE8LmWjfzK8NUY mDbNp5Z0Bn8qyeqnBKOVEx11dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItkZRX8 b1hU0KuwVrBhx34rQC5NMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnq/T3gCWxeoS5qpXWMp9yyMpK9+9VLJT8vDs0TUVSpJCsp5XkwAGJU8ZVX4E ajdgBslXC1fDGEQFlK24GutxpiVBcTc6NKWQRsE5LLB5+ONA03bcw9UW4crGVe/9 XHAQx0cfb84Fs2RUEIXKu7PX+I1QI8zKmhJRnISxxy9YruIoIvuSFTVEiVAyawwd 2h3sYYCqcnCS0i3KnBwN1wxoFQ8P+vdBy/Xn1EmaUvlDAImTOshu9kvAFhXlk3E+ h9VSCbzeHtnF/W2IeOg7mUO+Np2JFDwKA/c44BrvlQe5YOrw1sJr/2YBpv1aeJh4 koX9kUkF3vj6cqYIsfdbPs4oAQ== -----END CERTIFICATE-----Generated at Wed Apr 22 00:19:17 2026 by rpki-client