$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json) Hash identifier: OhojvnuPpcmMvaNJ0MiirSK9sajz5tG2Z+NdBrLpkGU= Subject key identifier: E3:8B:32:81:3C:44:75:FA:58:01:03:6A:14:E1:99:13:21:9B:71:50 Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft Manifest number: 04EC Signing time: Sat 04 Apr 2026 23:31:49 +0000 Manifest this update: Sat 04 Apr 2026 23:31:48 +0000 Manifest next update: Sat 11 Apr 2026 23:31:48 +0000 Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: AVB8SQUoVGovuvqpQO1o7JXGk+3vDUFlhmF0yp/EEY0=) 2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: lZ1bwrjyN0UbXwL+oCg+Wnabt6ugA+6V0SyJb/rt1uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Apr 4 23:31:48 2026 GMT Not After : Apr 11 23:31:48 2026 GMT Subject: CN=69d19f64-0a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:ff:18:a7:89:3b:37:7e:b5:eb:64:b0:ab: 73:e4:c9:1b:2a:cc:82:13:b4:82:be:a1:68:84:d2: 8a:9c:13:54:ef:80:48:dc:64:c8:7f:73:f4:ed:30: 24:b5:7d:f2:d5:21:f7:9d:21:ca:9c:17:82:77:aa: 52:43:87:0c:d8:a0:bc:5b:10:27:4b:5f:1f:5a:8c: 90:32:f2:c2:28:f4:7e:13:a8:29:d7:c3:1f:36:55: 67:06:ab:eb:54:ce:85:3e:4e:97:6c:49:2c:81:96: 68:40:94:a2:f0:ae:fa:5c:60:3c:02:23:4f:13:82: cf:6f:9a:3f:8e:bb:95:f7:4a:16:0a:54:63:23:bd: 64:61:f9:c8:98:dd:f2:fb:c8:e4:f0:de:38:64:ba: d7:aa:7c:28:92:e0:b3:cc:29:af:2f:f4:43:c6:57: 8a:8b:92:78:ea:44:47:ee:d2:a5:de:75:82:2a:8e: a7:4b:ca:66:19:39:f0:e9:2a:23:aa:85:f4:3f:25: 18:ed:7a:c0:b8:ac:7c:d4:e1:d3:15:97:f0:54:0a: ca:5f:ff:f3:80:be:c1:b8:88:17:50:34:49:83:a7: 41:6b:e0:cf:ce:64:ea:14:84:44:f3:df:a6:d6:a7: 9e:87:d0:c7:e7:9a:aa:4b:13:ea:be:09:3e:38:74: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8B:32:81:3C:44:75:FA:58:01:03:6A:14:E1:99:13:21:9B:71:50 X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:31:0b:9b:d3:a1:0d:01:1f:0a:57:fc:0e:3e:29:ab:24:1c: 13:87:0d:e5:85:21:75:a2:d4:a8:89:34:ea:87:41:5b:7a:88: e1:81:3b:d5:f6:8e:3b:1c:c3:81:51:0c:a3:d2:67:ed:81:59: 0f:89:ef:fd:b4:51:3d:96:38:3d:1b:c3:56:df:fa:58:2f:36: 28:4d:68:ba:e7:6f:bf:68:02:fb:c0:ba:b8:73:9d:6c:a5:ee: f0:d5:71:d4:86:1b:37:f0:dd:45:29:49:a2:a5:26:0e:60:86: db:7d:8a:bc:c2:9b:bf:37:ea:d7:39:46:60:10:63:6e:ee:b8: c6:21:1a:d8:11:47:24:81:78:d9:5e:6b:49:72:06:8b:57:32: 0e:bd:99:15:fc:aa:16:35:bf:c2:f7:20:c6:a2:54:c3:53:d0: 2b:84:28:e1:dd:93:85:65:d1:26:80:e2:5f:fe:80:4d:70:46: 33:aa:26:0a:2b:b3:1c:6e:c6:f7:6d:00:a7:09:42:6c:ff:8d: 81:94:58:7f:2b:88:be:56:76:2d:e0:09:76:30:78:dc:38:a1: 92:27:f2:82:2a:f3:47:54:b1:0e:36:02:35:ea:38:5e:cb:47: e7:08:3d:04:8e:29:ab:d9:aa:98:19:78:74:64:ee:c6:d1:9e: ae:38:25:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjYwNDA0MjMzMTQ4WhcNMjYwNDExMjMzMTQ4WjAYMRYwFAYD VQQDEw02OWQxOWY2NC0wYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr7/GKeJOzd+tetksKtz5MkbKsyCE7SCvqFohNKKnBNU74BI3GTIf3P07TAk tX3y1SH3nSHKnBeCd6pSQ4cM2KC8WxAnS18fWoyQMvLCKPR+E6gp18MfNlVnBqvr VM6FPk6XbEksgZZoQJSi8K76XGA8AiNPE4LPb5o/jruV90oWClRjI71kYfnImN3y +8jk8N44ZLrXqnwokuCzzCmvL/RDxleKi5J46kRH7tKl3nWCKo6nS8pmGTnw6Soj qoX0PyUY7XrAuKx81OHTFZfwVArKX//zgL7BuIgXUDRJg6dBa+DPzmTqFIRE89+m 1qeeh9DH55qqSxPqvgk+OHRQvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOLMoE8 RHX6WAEDahThmRMhm3FQMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF VFM5MkRxcXJEaXJrdmpGQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdDELm9OhDQEfClf8Dj4pqyQcE4cN5YUhdaLUqIk06odBW3qI4YE71faOOxzD gVEMo9Jn7YFZD4nv/bRRPZY4PRvDVt/6WC82KE1ouudvv2gC+8C6uHOdbKXu8NVx 1IYbN/DdRSlJoqUmDmCG232KvMKbvzfq1zlGYBBjbu64xiEa2BFHJIF42V5rSXIG i1cyDr2ZFfyqFjW/wvcgxqJUw1PQK4Qo4d2ThWXRJoDiX/6ATXBGM6omCiuzHG7G 920ApwlCbP+NgZRYfyuIvlZ2LeAJdjB43DihkifygirzR1SxDjYCNeo4XstH5wg9 BI4pq9mqmBl4dGTuxtGerjglHg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:08 2026 by rpki-client