$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: J6qQe7sn/AciTIZx6g45X06ENYT41tzQcPQjs7f+9Bw= Subject key identifier: EE:89:14:94:51:21:EE:09:F3:20:82:83:0C:EE:4C:4A:E1:DD:09:33 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 04C7 Signing time: Mon 20 Apr 2026 23:55:50 +0000 Manifest this update: Mon 20 Apr 2026 23:55:50 +0000 Manifest next update: Mon 27 Apr 2026 23:55:50 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: AG+gzDUb9hmDTPMbTGOEkKHXZN4ynj8evFgIzt15Gac=) 2: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=) 3: A6E8B05401D611F1A42696D7366F56BC.roa (hash: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g=) 4: 854C56242DC511F1935CF053AD833773.roa (hash: eWwuI1BI3xWAQNdUogUtFWaXufp7/3SK31akLdgsVH4=) 5: 942DCEF2FC0B11F0BEECCDA4756F56BC.roa (hash: J5KApiO82LjzqeOhyJKbcpqwAb46zG+PlR5LTK867CE=) 6: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=) 7: 76ABC3662DC511F1AFF54E10AD833773.roa (hash: of3FRWMIcYkEaWQWOZhJTwnfrjFeAR8rTgZWsIgU1hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 23:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Apr 20 23:55:50 2026 GMT Not After : Apr 27 23:55:50 2026 GMT Subject: CN=69e6bd06-9fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:3f:4f:66:8d:ba:15:0f:5b:e7:00:8d:0e: 21:ed:fb:34:3a:bc:95:44:70:6e:65:14:f5:cb:14: e7:66:d9:34:82:d9:00:93:04:53:13:27:c6:dd:3a: f4:c5:2e:74:ab:90:8b:54:35:fc:9b:97:be:15:b1: ad:ec:d9:91:33:87:e5:54:2a:5e:b3:93:aa:01:0a: 91:1b:1e:f0:e0:00:26:25:d0:79:b4:d1:b2:b2:c3: 60:51:c0:96:78:e7:36:ed:8a:6e:03:43:46:fd:4c: eb:84:91:c4:d3:c5:d4:04:0b:ad:10:ba:d5:77:9b: ee:0f:e6:82:28:6d:b3:23:84:e5:17:b0:9b:56:9b: 9c:cc:73:6f:a6:66:4c:a2:a0:31:fa:84:73:12:b9: 9c:3a:c3:5f:5d:8d:a5:02:80:6e:9b:3c:61:f2:92: 5d:81:36:95:89:12:d7:3e:e4:72:f3:46:d8:98:5f: f9:4d:f2:3e:5c:dd:dc:ac:e1:34:8c:7e:79:79:0e: 59:ef:b9:08:00:19:fe:61:73:d9:d5:33:c0:71:02: a2:72:ca:76:43:9a:77:1d:00:88:09:9d:d7:c7:ba: 89:af:94:b2:97:ca:24:32:d2:6f:24:2d:e8:6d:68: 86:5c:6e:3d:0b:1a:6e:2f:54:2f:31:5c:51:65:81: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:89:14:94:51:21:EE:09:F3:20:82:83:0C:EE:4C:4A:E1:DD:09:33 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:eb:3f:26:d4:b1:4b:56:7c:94:5c:d8:35:ea:aa:e3:84:d9: 21:d8:b6:9f:7f:76:d2:ca:79:bf:33:6f:45:d2:64:58:f2:60: 15:93:9e:b2:e2:74:68:15:7e:28:49:1b:8a:e7:73:7b:49:36: 40:19:8a:cc:87:f7:bc:bc:21:cb:71:5f:28:72:bd:48:7c:fc: fe:5b:48:df:5f:9e:82:48:27:21:ae:19:ed:4e:b5:19:ec:f7: 3d:42:49:31:32:e2:73:d9:48:a4:cb:97:59:81:7e:5b:9e:d8: 9c:40:af:4f:05:79:d6:ee:03:9d:0e:b2:87:ab:e4:a5:83:9e: 8f:0f:62:b6:69:b6:c6:d5:f5:13:30:27:f4:8f:de:c3:5a:cf: c9:71:9a:df:b0:c9:a1:07:23:36:ae:ac:96:98:b4:d2:9f:21: 78:12:6d:45:76:92:c4:1b:fa:ae:b7:26:46:4d:eb:02:0f:d7: 79:7c:44:4f:90:66:6a:84:ea:f9:c4:29:1c:3a:4d:d6:ae:5d: 31:c5:91:9a:2e:86:31:e0:0d:b9:3a:3b:7e:c6:51:0e:23:67: 80:14:48:f7:35:8d:88:1c:af:1a:87:7f:75:82:9a:79:f6:68: 9f:f2:da:d1:75:dd:e8:e0:cd:08:5f:2e:9a:ef:e5:e7:69:05: c9:a8:40:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjYwNDIwMjM1NTUwWhcNMjYwNDI3MjM1NTUwWjAYMRYwFAYD VQQDEw02OWU2YmQwNi05ZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOQ/T2aNuhUPW+cAjQ4h7fs0OryVRHBuZRT1yxTnZtk0gtkAkwRTEyfG3Tr0 xS50q5CLVDX8m5e+FbGt7NmRM4flVCpes5OqAQqRGx7w4AAmJdB5tNGyssNgUcCW eOc27YpuA0NG/UzrhJHE08XUBAutELrVd5vuD+aCKG2zI4TlF7CbVpuczHNvpmZM oqAx+oRzErmcOsNfXY2lAoBumzxh8pJdgTaViRLXPuRy80bYmF/5TfI+XN3crOE0 jH55eQ5Z77kIABn+YXPZ1TPAcQKicsp2Q5p3HQCICZ3Xx7qJr5Syl8okMtJvJC3o bWiGXG49CxpuL1QvMVxRZYHHpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6JFJRR Ie4J8yCCgwzuTErh3QkzMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASus/JtSxS1Z8lFzYNeqq44TZIdi2n3920sp5vzNvRdJkWPJgFZOesuJ0aBV+ KEkbiudze0k2QBmKzIf3vLwhy3FfKHK9SHz8/ltI31+egkgnIa4Z7U61Gez3PUJJ MTLic9lIpMuXWYF+W57YnECvTwV51u4DnQ6yh6vkpYOejw9itmm2xtX1EzAn9I/e w1rPyXGa37DJoQcjNq6slpi00p8heBJtRXaSxBv6rrcmRk3rAg/XeXxET5BmaoTq +cQpHDpN1q5dMcWRmi6GMeANuTo7fsZRDiNngBRI9zWNiByvGod/dYKaefZon/La 0XXd6ODNCF8umu/l52kFyahAfQ== -----END CERTIFICATE-----Generated at Wed Apr 22 02:56:33 2026 by rpki-client