$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft File: tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json) Hash identifier: ularf/Q2bLfi3vhu8EqV4AJbBGPxi9bJdPCdQgc5If0= Subject key identifier: ED:71:77:AA:E2:BC:A4:C4:5C:65:51:C5:69:26:4B:EA:58:B3:3E:5B Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Certificate serial: 09CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft Manifest number: 09B3 Signing time: Sat 04 Apr 2026 19:46:04 +0000 Manifest this update: Sat 04 Apr 2026 19:46:04 +0000 Manifest next update: Sat 11 Apr 2026 19:46:04 +0000 Files and hashes: 1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: ZUfAMs1VcZytlMEH/6CVXJVLAjpNVSe5vukByB19YAo=) 2: B350B67E964611EDA10D8777C4F9AE02.roa (hash: rAwkR3CgIMkhVxrjkO6BBicjMZkAEBzOtpU7NjRngaY=) 3: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: u7UReDbBhUIS75vFBgtwpT87KJJAUp7AZ+DWcKC1QwM=) 4: D7120558A7ED11EA95BED565C4F9AE02.roa (hash: v8/LA8iLDwEiTe0PXMCijlgf4PJo7BysQG01+COmlK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2507 (0x9cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Validity Not Before: Apr 4 19:46:04 2026 GMT Not After : Apr 11 19:46:04 2026 GMT Subject: CN=69d16a7c-afb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:67:23:a9:af:bd:68:9d:11:92:d7:84:d1:0b: 91:7a:e8:f0:7f:79:5d:3d:4a:7e:a0:e7:a4:6e:5b: 4f:1c:33:25:4b:55:c3:a1:78:a9:36:93:7a:06:18: f5:f0:33:66:17:58:6d:e2:5b:72:55:62:6b:03:4c: f4:b6:42:d7:3c:8c:2c:b5:26:d7:c7:b0:c5:4e:de: 72:66:ae:40:5c:ea:9e:c3:d6:cc:e7:12:e7:fd:39: b8:91:17:7b:74:78:ea:76:be:86:f3:8a:df:f4:f6: 20:95:bd:c1:e9:06:22:28:af:a8:36:a6:46:98:8c: 10:7f:ae:95:35:8b:7d:34:78:55:bf:11:19:d3:88: ce:d0:1e:e9:6b:7b:e2:fc:f5:bb:84:aa:c0:c8:1a: db:db:be:8a:6b:57:af:34:a6:84:f9:83:33:53:52: 1f:fd:63:19:94:fa:02:c7:f3:76:f4:fa:43:dc:65: 49:69:93:5e:43:d3:b6:2e:07:4a:0a:fd:87:d3:c2: 65:78:54:0b:38:94:b4:e0:e1:89:4a:32:79:6b:ac: 08:68:5d:13:d4:bd:a5:f2:64:c1:5e:8f:4e:52:7c: 09:a2:76:82:3e:da:7a:ab:aa:09:99:b3:a0:af:d7: 1d:38:e1:d0:7f:b0:59:2a:31:09:85:d1:27:90:10: 61:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:71:77:AA:E2:BC:A4:C4:5C:65:51:C5:69:26:4B:EA:58:B3:3E:5B X509v3 Authority Key Identifier: keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9b:78:ef:1f:19:65:72:61:3b:fb:0f:0c:00:1e:94:26:71: eb:86:a4:46:3d:36:28:e3:27:1b:8e:83:54:54:a2:49:cf:dd: de:37:9c:69:a6:07:ce:da:1c:93:ce:22:5d:2a:fb:34:94:53: 59:aa:de:23:9e:45:26:ee:fd:17:61:a9:77:b9:00:28:10:9c: a9:9d:23:8b:73:11:4e:46:c2:58:59:63:62:c5:92:69:be:22: 28:87:3a:71:3b:49:9c:60:5f:03:7c:97:33:9c:85:ee:13:1c: 7a:e5:67:ce:8f:a9:8e:89:f1:77:bf:53:e0:9b:54:ad:10:a7: e3:6d:d2:1c:3d:07:8d:b5:c6:c6:71:cb:17:2a:f2:dc:1c:e0: 35:b8:54:17:ef:0d:9f:46:8e:e0:3d:9e:c8:02:96:6f:2c:ed: 85:84:65:41:67:11:61:e5:f5:e4:ce:56:16:3c:97:16:5b:4e: 66:3b:6e:f8:48:1e:c9:0e:ac:c7:e0:f7:59:de:82:c1:00:44: 5c:6f:9c:5f:29:ae:30:fc:0a:db:24:0f:de:64:2f:99:f4:81: 46:fa:e0:28:3c:e4:da:70:bc:bc:6f:43:c7:33:fc:80:61:97: 0f:7e:62:2c:a7:b8:fa:d3:b6:a9:ff:53:57:62:49:3a:a5:fa: d1:71:e0:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2 REQzQ0I2QzgwHhcNMjYwNDA0MTk0NjA0WhcNMjYwNDExMTk0NjA0WjAYMRYwFAYD VQQDEw02OWQxNmE3Yy1hZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Wcjqa+9aJ0RkteE0QuReujwf3ldPUp+oOekbltPHDMlS1XDoXipNpN6Bhj1 8DNmF1ht4ltyVWJrA0z0tkLXPIwstSbXx7DFTt5yZq5AXOqew9bM5xLn/Tm4kRd7 dHjqdr6G84rf9PYglb3B6QYiKK+oNqZGmIwQf66VNYt9NHhVvxEZ04jO0B7pa3vi /PW7hKrAyBrb276Ka1evNKaE+YMzU1If/WMZlPoCx/N29PpD3GVJaZNeQ9O2LgdK Cv2H08JleFQLOJS04OGJSjJ5a6wIaF0T1L2l8mTBXo9OUnwJonaCPtp6q6oJmbOg r9cdOOHQf7BZKjEJhdEnkBBhDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1xd6ri vKTEXGVRxWkmS+pYsz5bMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3 RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0 c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1OC9CMzg5MzA0RUE3RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVK Qjgwb2lMNTB1SnB0MDh0c2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXJt47x8ZZXJhO/sPDAAelCZx64akRj02KOMnG46DVFSiSc/d3jecaaYHztoc k84iXSr7NJRTWareI55FJu79F2Gpd7kAKBCcqZ0ji3MRTkbCWFljYsWSab4iKIc6 cTtJnGBfA3yXM5yF7hMceuVnzo+pjonxd79T4JtUrRCn423SHD0HjbXGxnHLFyry 3BzgNbhUF+8Nn0aO4D2eyAKWbyzthYRlQWcRYeX15M5WFjyXFltOZjtu+EgeyQ6s x+D3Wd6CwQBEXG+cXymuMPwK2yQP3mQvmfSBRvrgKDzk2nC8vG9DxzP8gGGXD35i LKe4+tO2qf9TV2JJOqX60XHgoQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:16 2026 by rpki-client