$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: y5WcZ+WBZaG2Y9jaQmdJTwbnniLfhbT4BjQLoeHEGf4= Subject key identifier: 3F:4A:8F:A2:3E:42:45:86:20:DC:70:8C:F6:48:7E:E8:8E:35:1E:FD Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 049A Signing time: Fri 20 Mar 2026 23:30:57 +0000 Manifest this update: Fri 20 Mar 2026 23:30:57 +0000 Manifest next update: Fri 27 Mar 2026 23:30:57 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: sX89/foPWd6oF7lBsTN1VXH511A70hpFg+AYxNZ3PY4=) 2: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: UZnHMueWtrpb+JywnXsopY8oC5x4rGsb8m2Kk1OPC6Q=) 3: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 9llJReApVBmo5bvUcRrTyqYgxX0J7Rw+SzZuoT8YjSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: Mar 20 23:30:57 2026 GMT Not After : Mar 27 23:30:57 2026 GMT Subject: CN=69bdd8b1-d89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d7:e7:ce:27:a0:13:cd:38:48:88:90:48:0c: ca:e4:63:05:ff:86:a0:0c:41:f5:45:e1:a2:7c:c6: f7:0e:e3:b0:1d:f4:f8:8c:56:d4:61:de:a0:a6:a5: 7b:49:4f:0d:1d:3d:e1:7c:a1:3e:a2:f6:f6:cf:66: 48:fb:19:2f:6e:5c:19:f2:b7:0c:4f:79:94:24:d3: e4:17:05:53:d9:98:35:18:62:1f:97:d2:6c:cf:7f: 0b:5b:32:2f:5a:13:c7:91:84:33:5f:29:ee:df:9a: 1a:28:3d:ff:7b:24:f4:0e:ca:5a:6f:4d:ec:55:09: da:fb:5d:b7:63:98:bc:15:07:fc:9a:ce:81:c7:49: 42:f8:6d:ad:55:e2:56:11:d7:bf:0a:4b:c4:91:ff: 48:93:d6:3d:81:44:e4:bb:86:6a:f9:dc:8a:a0:c8: 69:2e:40:69:ff:23:52:4a:c3:9a:f3:c0:50:b5:d5: 1a:7d:7b:18:e0:0b:b5:ca:46:d9:ee:a5:02:76:0c: 60:95:d3:0d:98:2c:dc:30:03:c1:23:a5:e3:35:ec: 98:d3:15:52:91:9d:f0:50:4f:2c:dd:c3:af:b4:55: 7a:6e:44:23:63:62:c0:dd:82:63:97:13:ae:0e:7f: 1a:e3:29:20:18:33:6d:10:b0:55:e7:08:20:e8:07: 8d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4A:8F:A2:3E:42:45:86:20:DC:70:8C:F6:48:7E:E8:8E:35:1E:FD X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:41:00:8d:e6:7e:af:e6:97:f1:27:06:df:ff:f7:dd:da:00: 4c:04:93:e7:aa:fb:e1:25:00:52:2c:16:2d:97:52:e3:92:57: 15:42:65:13:3c:ba:9b:f2:01:ad:18:24:4b:0a:d5:81:4b:5d: 32:ae:22:5e:89:10:2c:7e:50:da:86:7b:fa:45:5e:5c:da:94: b8:33:65:bc:b0:8c:eb:a2:3e:a3:9c:0a:24:e9:93:ed:74:03: b9:e0:01:69:f1:9c:77:a4:e5:7c:c6:78:b5:3c:d3:6f:a7:b6: 37:4e:ec:6e:16:e5:11:90:bf:b2:67:37:8d:ff:a7:eb:c3:3e: ef:bc:73:6b:3e:ac:bf:86:88:03:21:c6:9b:a5:4c:f2:e8:ae: df:60:b1:07:2b:8e:0e:24:5e:97:ab:59:12:44:52:05:68:f9: e9:30:12:d2:a0:3d:f8:6a:7d:e2:c7:af:2c:fe:8f:b3:fc:9d: 30:eb:74:92:89:3e:24:49:3f:6e:37:29:78:b9:22:ba:60:cf: 84:1a:85:df:9b:65:9b:76:9c:b8:4f:dc:26:fa:76:bc:8b:aa: cf:2e:11:3c:14:45:2b:5a:85:a6:48:0f:e2:6b:24:b7:6a:f6: c0:5f:0e:88:29:2e:59:6f:23:dd:7b:b6:60:e5:9c:1a:e4:78: b2:b2:ec:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjYwMzIwMjMzMDU3WhcNMjYwMzI3MjMzMDU3WjAYMRYwFAYD VQQDEw02OWJkZDhiMS1kODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NfnziegE804SIiQSAzK5GMF/4agDEH1ReGifMb3DuOwHfT4jFbUYd6gpqV7 SU8NHT3hfKE+ovb2z2ZI+xkvblwZ8rcMT3mUJNPkFwVT2Zg1GGIfl9Jsz38LWzIv WhPHkYQzXynu35oaKD3/eyT0Dspab03sVQna+123Y5i8FQf8ms6Bx0lC+G2tVeJW Ede/CkvEkf9Ik9Y9gUTku4Zq+dyKoMhpLkBp/yNSSsOa88BQtdUafXsY4Au1ykbZ 7qUCdgxgldMNmCzcMAPBI6XjNeyY0xVSkZ3wUE8s3cOvtFV6bkQjY2LA3YJjlxOu Dn8a4ykgGDNtELBV5wgg6AeNAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9Kj6I+ QkWGINxwjPZIfuiONR79MB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkEEAjeZ+r+aX8ScG3//33doATAST56r74SUAUiwWLZdS45JXFUJlEzy6m/IB rRgkSwrVgUtdMq4iXokQLH5Q2oZ7+kVeXNqUuDNlvLCM66I+o5wKJOmT7XQDueAB afGcd6TlfMZ4tTzTb6e2N07sbhblEZC/smc3jf+n68M+77xzaz6sv4aIAyHGm6VM 8uiu32CxByuODiRel6tZEkRSBWj56TAS0qA9+Gp94sevLP6Ps/ydMOt0kok+JEk/ bjcpeLkiumDPhBqF35tlm3acuE/cJvp2vIuqzy4RPBRFK1qFpkgP4mskt2r2wF8O iCkuWW8j3Xu2YOWcGuR4srLsyw== -----END CERTIFICATE-----Generated at Sun Mar 22 00:11:12 2026 by rpki-client