$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: 8X1J+wofX+S62pxNyF4do3HN4xvqB2ezujJ9hsWSA1Y= Subject key identifier: D8:73:CC:9A:ED:85:89:B8:01:A0:7D:56:A4:16:65:81:FB:75:2B:E7 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 1A73 Signing time: Sat 04 Apr 2026 17:22:43 +0000 Manifest this update: Sat 04 Apr 2026 17:22:42 +0000 Manifest next update: Sat 11 Apr 2026 17:22:42 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: rGqkctbuzwfMZqpt8KvPW6O03o1bcULuBefzjSg2F+0=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: WglSFimwBIxRaonVvtON24BGZwGg55rZ2VzaZUYH4UA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2738 (0xab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Apr 4 17:22:42 2026 GMT Not After : Apr 11 17:22:42 2026 GMT Subject: CN=69d148e3-54ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:1e:a3:4f:46:4c:84:bf:68:ba:3b:21:09: 79:41:a9:41:18:fc:0a:b2:98:59:db:85:a4:67:d1: 48:97:74:28:4b:84:40:87:ee:3f:56:7e:6a:b1:cb: c6:58:41:f0:80:1f:c6:1a:8e:5b:fd:b1:35:34:18: 9f:97:7a:cf:a3:c0:9b:bd:fa:10:8e:da:f1:c2:1a: c5:89:b8:f5:51:47:ec:ca:07:83:5c:cd:b7:58:24: 35:c9:92:e7:69:4e:63:ef:7b:a3:21:79:7c:39:bb: ae:14:1e:71:af:16:66:d0:6a:2a:f5:c4:29:d3:e2: c9:5a:4a:b1:f6:f8:75:36:88:e0:18:6b:dd:65:f0: 28:60:b4:cb:8a:d8:0c:77:5e:28:d1:cd:70:54:2c: 19:5c:2e:5f:40:58:95:fd:27:12:6b:62:19:04:83: a2:03:ec:ba:31:3d:37:ba:75:df:63:89:56:95:7d: 7c:cf:8c:2a:99:03:45:90:05:83:e2:e8:af:2b:e8: 0f:ee:2f:47:2b:9f:e0:29:31:e1:ff:9a:4d:23:19: 50:dc:71:22:bb:4f:42:69:a2:a7:5f:70:35:f3:f2: 87:9e:ab:e2:6e:a6:f0:d0:5a:c8:59:49:73:06:05: 6e:31:3f:7b:3f:32:50:5d:9d:ef:a7:ea:01:b8:05: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:73:CC:9A:ED:85:89:B8:01:A0:7D:56:A4:16:65:81:FB:75:2B:E7 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d4:54:3e:fd:ca:92:7d:59:db:b3:a0:78:ca:fe:ca:76:43: f5:f9:56:b0:54:4f:e2:e1:73:0b:73:f3:0f:1c:0c:65:ce:07: d3:34:6a:a5:fb:29:4c:96:74:55:2d:65:9e:8f:5c:e8:7f:c9: 5b:49:aa:f9:d8:1e:40:74:a1:fe:67:15:e3:38:78:83:fe:a1: 8a:65:98:c5:62:18:1a:35:6d:58:82:c0:89:c2:35:16:28:7b: 2b:e0:e7:a9:36:9c:bb:0b:9e:b2:33:cd:b5:08:e5:90:db:8f: ec:2f:7f:97:55:cb:6e:42:44:7f:66:87:e4:e1:94:dd:21:fd: 0c:16:96:06:af:23:b7:26:4e:62:5d:60:b6:70:20:17:b1:40: 64:75:24:9f:ca:3e:76:2b:d5:a6:9e:93:3e:fd:c5:4e:ce:9e: 94:56:a9:2f:3f:1c:8a:ec:a4:71:94:89:e4:92:8a:cf:4c:22: b1:3a:64:10:60:02:91:fd:33:05:91:4b:30:72:13:24:76:f4: e7:30:e3:59:10:8e:96:ad:1a:fb:7f:29:ef:ad:af:a5:52:e9: 7f:1c:ad:da:4b:1b:45:10:36:e3:d5:14:0e:66:4c:d2:6a:82: 57:e8:30:b6:cd:3f:4b:bf:c2:ba:39:90:14:27:f0:f0:88:c9: 3a:ee:73:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjYwNDA0MTcyMjQyWhcNMjYwNDExMTcyMjQyWjAYMRYwFAYD VQQDEw02OWQxNDhlMy01NGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkEeo09GTIS/aLo7IQl5QalBGPwKsphZ24WkZ9FIl3QoS4RAh+4/Vn5qscvG WEHwgB/GGo5b/bE1NBifl3rPo8CbvfoQjtrxwhrFibj1UUfsygeDXM23WCQ1yZLn aU5j73ujIXl8ObuuFB5xrxZm0Goq9cQp0+LJWkqx9vh1NojgGGvdZfAoYLTLitgM d14o0c1wVCwZXC5fQFiV/ScSa2IZBIOiA+y6MT03unXfY4lWlX18z4wqmQNFkAWD 4uivK+gP7i9HK5/gKTHh/5pNIxlQ3HEiu09CaaKnX3A18/KHnqvibqbw0FrIWUlz BgVuMT97PzJQXZ3vp+oBuAX/mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhzzJrt hYm4AaB9VqQWZYH7dSvnMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgNRUPv3Kkn1Z27OgeMr+ynZD9flWsFRP4uFzC3PzDxwMZc4H0zRqpfspTJZ0 VS1lno9c6H/JW0mq+dgeQHSh/mcV4zh4g/6himWYxWIYGjVtWILAicI1Fih7K+Dn qTacuwuesjPNtQjlkNuP7C9/l1XLbkJEf2aH5OGU3SH9DBaWBq8jtyZOYl1gtnAg F7FAZHUkn8o+divVpp6TPv3FTs6elFapLz8ciuykcZSJ5JKKz0wisTpkEGACkf0z BZFLMHITJHb05zDjWRCOlq0a+38p762vpVLpfxyt2ksbRRA249UUDmZM0mqCV+gw ts0/S7/CujmQFCfw8IjJOu5zuw== -----END CERTIFICATE-----Generated at Mon Apr 6 15:29:14 2026 by rpki-client