$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: 1Q9JCwFPwGCW+Ut2Vlsl6prGWmkKoDQ/dtBFZXnu8Gg= Subject key identifier: 81:90:BC:69:EC:A1:B3:E6:CB:A4:45:64:BE:CA:1E:6A:A8:78:3C:84 Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0BBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0BA3 Signing time: Sat 04 Apr 2026 18:54:59 +0000 Manifest this update: Sat 04 Apr 2026 18:54:58 +0000 Manifest next update: Sat 11 Apr 2026 18:54:58 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: p+O+K/0Ql/4DSdWopFNNROODe/Tfu4k9syg3qq3cdKc=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: 1Rl4AWS27tXktsB4oZ9/cQrbDdYUzTGKNR1jiXI3rWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: Apr 4 18:54:58 2026 GMT Not After : Apr 11 18:54:58 2026 GMT Subject: CN=69d15e83-eed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:0d:3f:86:fd:dd:73:9a:52:aa:51:d8:4f: 1a:ad:c2:6e:87:28:c3:5c:5c:4f:22:51:1b:36:9e: 57:fa:e9:ec:fb:a9:ee:e9:35:3e:9c:92:94:b1:52: 90:79:cd:59:1a:03:35:45:1b:53:c7:91:6a:b3:b7: 4b:0a:1f:40:23:43:05:a2:4f:00:12:53:8b:ed:1c: 30:e0:fa:1c:f0:3c:a9:2c:42:d7:8f:ce:ab:9e:7e: 1d:4e:c5:a9:45:cc:bd:b1:f7:46:f2:97:e8:9a:39: 20:1f:76:a5:9d:12:86:a4:4c:af:fd:78:dd:0b:da: 87:0e:2c:3c:44:68:f2:23:2e:f9:78:74:ee:3f:ec: d3:b6:6f:61:37:17:0b:44:38:4f:3c:41:ef:e7:1b: 12:cf:e9:f5:b2:0f:ff:c0:eb:d1:6d:1a:c1:a8:d7: af:ac:21:8c:9b:b8:4e:2e:6e:46:10:9f:4f:d1:63: 47:97:ef:23:56:b6:f3:03:49:f3:0b:f2:74:9f:7a: b9:2a:37:0f:df:06:da:2c:e2:c3:57:15:f2:4e:54: 52:77:00:9d:eb:3f:be:a8:d1:50:eb:ea:6d:8b:08: cf:ef:1d:4f:8e:fc:52:58:22:13:a5:15:fb:d2:23: ad:f1:d4:e2:57:1f:0a:e6:fa:69:85:1d:67:e5:d2: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:90:BC:69:EC:A1:B3:E6:CB:A4:45:64:BE:CA:1E:6A:A8:78:3C:84 X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:25:6a:81:8b:02:7f:47:c4:47:1e:2f:ad:0f:ca:ab:7e:a8: 25:16:14:10:19:d8:b8:97:03:a3:cc:b6:99:ad:cc:10:5c:ba: 2d:9e:10:c6:54:7c:a9:7a:1b:a8:e6:66:8f:27:1d:5b:94:a3: 16:8a:48:27:eb:72:a5:41:ca:f5:ae:cc:8a:c8:05:d1:33:c0: 98:63:a5:96:ff:26:fd:6a:a5:77:39:ca:92:d3:5e:b6:50:24: 11:b0:d2:1a:29:a5:b7:fd:47:35:24:8c:bd:8d:a1:c9:e3:23: 9b:9f:66:a2:be:54:0d:db:bc:91:56:41:5c:0b:43:4c:c2:d3: 28:0c:2f:95:b2:ab:b3:a4:83:e7:00:a2:46:59:41:c5:f0:ea: 89:a5:8e:4e:9e:99:54:6e:a4:d5:88:22:af:18:07:18:1f:cc: 5f:a5:dc:db:68:55:7d:0b:6f:f7:3b:ba:49:1f:ed:83:1d:85: 9f:b1:4b:e7:7e:32:f6:ca:a4:38:87:70:d5:49:29:52:25:ea: d0:86:23:ae:68:80:c4:68:7a:23:14:62:07:74:ff:1c:02:14: 67:05:a9:35:ae:78:d2:9e:68:8b:67:ba:65:a4:7f:24:09:3d: 3c:a8:b0:39:ac:7a:58:a0:2e:bf:0a:04:ac:52:1c:e9:a2:c0: c6:aa:82:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjYwNDA0MTg1NDU4WhcNMjYwNDExMTg1NDU4WjAYMRYwFAYD VQQDEw02OWQxNWU4My1lZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtgNP4b93XOaUqpR2E8arcJuhyjDXFxPIlEbNp5X+uns+6nu6TU+nJKUsVKQ ec1ZGgM1RRtTx5Fqs7dLCh9AI0MFok8AElOL7Rww4Poc8DypLELXj86rnn4dTsWp Rcy9sfdG8pfomjkgH3alnRKGpEyv/XjdC9qHDiw8RGjyIy75eHTuP+zTtm9hNxcL RDhPPEHv5xsSz+n1sg//wOvRbRrBqNevrCGMm7hOLm5GEJ9P0WNHl+8jVrbzA0nz C/J0n3q5KjcP3wbaLOLDVxXyTlRSdwCd6z++qNFQ6+ptiwjP7x1PjvxSWCITpRX7 0iOt8dTiVx8K5vpphR1n5dKO7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGQvGns obPmy6RFZL7KHmqoeDyEMB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAliVqgYsCf0fERx4vrQ/Kq36oJRYUEBnYuJcDo8y2ma3MEFy6LZ4QxlR8qXob qOZmjycdW5SjFopIJ+typUHK9a7MisgF0TPAmGOllv8m/WqldznKktNetlAkEbDS Gimlt/1HNSSMvY2hyeMjm59mor5UDdu8kVZBXAtDTMLTKAwvlbKrs6SD5wCiRllB xfDqiaWOTp6ZVG6k1YgirxgHGB/MX6Xc22hVfQtv9zu6SR/tgx2Fn7FL534y9sqk OIdw1UkpUiXq0IYjrmiAxGh6IxRiB3T/HAIUZwWpNa540p5oi2e6ZaR/JAk9PKiw Oax6WKAuvwoErFIc6aLAxqqCrg== -----END CERTIFICATE-----Generated at Mon Apr 6 15:29:01 2026 by rpki-client