$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft File: TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft (raw, json) Hash identifier: yVs20SMaq3PuoVhSwX4dKtReGejjYeuwh0kRXhefzws= Subject key identifier: 28:3C:4C:35:BD:61:5D:7C:7C:4E:9E:81:73:4A:AE:1C:88:4E:BA:83 Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3 Certificate issuer: /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft Manifest number: 020E Signing time: Sun 05 Apr 2026 02:31:49 +0000 Manifest this update: Sun 05 Apr 2026 02:31:48 +0000 Manifest next update: Sun 12 Apr 2026 02:31:48 +0000 Files and hashes: 1: TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl (hash: SPD9VxnLui2yjpXzxTajv2lFy5rYNUE9AZmG84Ki/GA=) 2: 5EAB725014A211EEA889E832C4F9AE02.roa (hash: ZLFetUISCazTri6FrtDTduL4atfJrtp2vrG15M5wXe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3 Validity Not Before: Apr 5 02:31:48 2026 GMT Not After : Apr 12 02:31:48 2026 GMT Subject: CN=69d1c994-5724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:38:cd:08:46:62:0e:11:ca:b1:93:11:53: 0a:2e:59:79:82:81:5f:9e:cc:83:ee:ba:2f:76:d6: ce:e3:21:0d:1d:ff:34:b3:68:b3:27:91:31:8a:f2: 58:8d:7c:b7:57:92:7e:a5:1f:b0:37:48:7f:f6:75: 68:07:7e:98:52:15:d7:86:24:02:b8:28:df:1b:68: 37:3e:97:03:50:37:0e:fe:c6:3a:83:67:a1:16:65: 9b:31:ee:cd:86:c6:81:57:b6:58:b6:73:af:8b:28: 3f:24:04:11:7e:ab:3a:42:16:a8:13:f0:97:30:a9: be:7d:b2:62:63:50:f8:f2:2a:2d:f1:c1:79:3d:c2: c7:41:ba:00:e2:ef:32:61:5e:af:6a:70:bd:23:ff: ed:e6:3b:d3:2c:3f:ba:f8:79:17:b4:19:21:2e:b5: 64:a1:5c:c4:90:2f:d5:cf:4f:09:4c:02:e8:f3:83: a6:bc:da:c6:f4:8a:3a:35:97:aa:d4:46:bf:42:3f: 86:6b:0a:a5:b4:d3:1b:e6:a4:25:da:69:9c:0f:6b: ae:03:4c:a1:39:94:90:22:8b:f5:27:8f:96:85:11: 1c:09:71:57:48:43:38:51:1d:23:5e:73:39:d0:0e: bc:9e:4c:f9:9f:f5:a7:70:6d:4c:d7:83:3f:3d:f0: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3C:4C:35:BD:61:5D:7C:7C:4E:9E:81:73:4A:AE:1C:88:4E:BA:83 X509v3 Authority Key Identifier: keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f8:53:8c:61:f9:d2:74:7c:bb:15:e9:7c:34:17:64:38:68: 48:43:9a:f9:22:22:8e:b2:56:dc:c6:17:47:30:9d:24:64:e6: 24:66:55:6f:27:66:cc:48:57:ee:45:34:f2:30:c7:cc:aa:d1: 02:bc:e3:f6:48:a2:35:96:68:b8:d8:b6:b6:ec:78:fb:3c:f2: 00:40:33:df:41:95:d1:74:8d:d7:fb:77:c7:5f:1e:15:eb:2d: 7b:b2:2c:0d:c1:8e:c7:5c:ed:e7:61:3e:7a:2f:0f:c8:04:fd: 4d:a4:85:79:f1:66:72:ce:0a:fb:87:22:40:58:4d:3b:19:76: 77:36:f7:c3:ca:82:7d:b0:2c:e6:03:c3:9c:2d:eb:51:78:70: 9a:13:74:3f:5b:6b:eb:ed:a3:fe:70:d7:4c:22:77:6c:1a:7b: 92:02:e5:e7:49:2b:78:e4:36:78:c5:a7:ce:a6:51:e3:fa:a3: 1c:5f:31:54:ff:7d:24:2a:26:50:0e:e0:ee:b5:29:84:ee:06: ac:85:63:58:8c:f1:54:be:a6:35:68:da:80:9a:f7:6d:d2:a5: 66:ca:2a:f1:1c:a5:a8:2e:67:c5:3f:c5:41:95:87:49:b6:7d: 6b:5c:81:40:4b:ce:5f:67:30:43:96:63:23:6e:78:71:db:b9: 11:57:c9:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNzExMTAvBgNVBAUTKDRDRUVFRTZEMzY2M0MxM0ZEODJFOTMxREFDNjlGMTcw NDZGQzk5QjMwHhcNMjYwNDA1MDIzMTQ4WhcNMjYwNDEyMDIzMTQ4WjAYMRYwFAYD VQQDEw02OWQxYzk5NC01NzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvs4zQhGYg4RyrGTEVMKLll5goFfnsyD7rovdtbO4yENHf80s2izJ5ExivJY jXy3V5J+pR+wN0h/9nVoB36YUhXXhiQCuCjfG2g3PpcDUDcO/sY6g2ehFmWbMe7N hsaBV7ZYtnOviyg/JAQRfqs6QhaoE/CXMKm+fbJiY1D48iot8cF5PcLHQboA4u8y YV6vanC9I//t5jvTLD+6+HkXtBkhLrVkoVzEkC/Vz08JTALo84OmvNrG9Io6NZeq 1Ea/Qj+GawqltNMb5qQl2mmcD2uuA0yhOZSQIov1J4+WhREcCXFXSEM4UR0jXnM5 0A68nkz5n/WncG1M14M/PfAIiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCg8TDW9 YV18fE6egXNKrhyITrqDMB8GA1UdIwQYMBaAFEzu7m02Y8E/2C6THaxp8XBG/Jmz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI3MS8yODE0RjBERTEx QjExMUVFOTA0N0JGMThDNEY5QUUwMi9UTzd1YlRaandUX1lMcE1kckdueGNFYjht Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RPN3ViVFpqd1RfWUxwTWRyR254Y0ViOG1iTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI3MS8yODE0RjBERTExQjExMUVFOTA0N0JGMThDNEY5QUUwMi9UTzd1YlRaandU X1lMcE1kckdueGNFYjhtYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKPhTjGH50nR8uxXpfDQXZDhoSEOa+SIijrJW3MYXRzCdJGTmJGZVbydmzEhX 7kU08jDHzKrRArzj9kiiNZZouNi2tux4+zzyAEAz30GV0XSN1/t3x18eFeste7Is DcGOx1zt52E+ei8PyAT9TaSFefFmcs4K+4ciQFhNOxl2dzb3w8qCfbAs5gPDnC3r UXhwmhN0P1tr6+2j/nDXTCJ3bBp7kgLl50kreOQ2eMWnzqZR4/qjHF8xVP99JCom UA7g7rUphO4GrIVjWIzxVL6mNWjagJr3bdKlZsoq8RylqC5nxT/FQZWHSbZ9a1yB QEvOX2cwQ5ZjI254cdu5EVfJrg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:02 2026 by rpki-client