$ rpki-client -vvf rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft File: mTXGObPDUdvtWyk5lPcvgUzPm6k.mft (raw, json) Hash identifier: V7/sl9T4I8d/6DZOu2WNO2R9mJlD4KeEMmlZ7XgQKDU= Subject key identifier: 1A:F3:8F:2A:30:7A:E5:93:38:A3:A3:E8:10:B3:EE:5D:8C:25:7C:87 Authority key identifier: 99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 Certificate issuer: /CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Certificate serial: 223C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft Manifest number: 2222 Signing time: Sun 22 Mar 2026 15:46:53 +0000 Manifest this update: Sun 22 Mar 2026 15:46:52 +0000 Manifest next update: Sun 29 Mar 2026 15:46:52 +0000 Files and hashes: 1: mTXGObPDUdvtWyk5lPcvgUzPm6k.crl (hash: dL5/Pot9YpOACvTdCgvJXjQCwk22PiGTdsvmA0/ITb0=) 2: 5D2D29A2966D11EA96C50E81C4F9AE02.roa (hash: kFJ+TGQkQAcGMhJdugaT6QqqjbIgQb/V5WGvkK0LpAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8764 (0x223c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195D93, serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Validity Not Before: Mar 22 15:46:52 2026 GMT Not After : Mar 29 15:46:52 2026 GMT Subject: CN=69c00eec-9427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:99:49:df:ea:f6:fc:12:51:50:cd:a9:9b: 1d:20:af:0e:5c:4e:9b:2d:62:08:b7:e9:c6:7b:dc: 8e:6a:e4:de:32:38:f1:3f:35:1a:9d:37:6a:6f:5f: d3:a3:a8:b8:2e:46:ce:b8:6b:84:32:59:91:fa:e0: b8:06:37:7c:a0:f2:65:4d:4c:ce:4f:93:e7:8f:24: dc:7e:fb:67:e0:71:41:5b:84:18:2d:6c:d8:71:87: 51:97:ac:12:57:3f:cb:b4:c0:50:37:e8:ae:d4:3f: d9:69:db:d9:18:8a:53:aa:1c:f5:15:be:bb:97:54: 42:04:7e:3f:ef:1a:b7:84:aa:65:22:f8:6c:b0:ee: 04:1a:70:1e:3d:2e:9a:8a:64:07:af:70:45:67:0b: 57:fa:b1:08:3f:f6:bc:a2:f6:30:7c:8a:2f:87:6d: ae:e1:63:97:d9:8a:33:26:da:6c:19:88:60:64:34: fa:e6:7a:9b:4c:65:31:f2:98:f5:87:15:e0:b5:d7: 6d:2d:5a:2b:ce:f1:88:30:ce:1d:42:41:d5:21:3f: b9:21:58:62:ed:c9:b4:1b:e3:ff:83:de:37:b0:ff: bd:91:0f:05:9a:2a:dd:e0:3e:4f:09:ba:bd:7d:4a: 06:89:8f:1d:45:2d:90:fb:c2:61:c9:df:dd:15:bc: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F3:8F:2A:30:7A:E5:93:38:A3:A3:E8:10:B3:EE:5D:8C:25:7C:87 X509v3 Authority Key Identifier: keyid:99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:63:bf:a3:0d:7a:16:7c:bf:69:44:5d:e9:d8:69:8e:a3:07: cd:d0:25:1c:96:eb:e6:ca:71:ed:2d:90:28:15:fe:4a:83:85: 2c:a8:61:72:91:92:c2:55:c3:2a:44:56:67:93:2e:d3:3d:86: 14:dd:c9:19:a8:01:99:56:bd:ad:9c:04:87:19:27:54:4a:9f: f4:ee:12:30:47:bc:b4:4a:ac:1c:ea:aa:0c:2f:93:9f:4f:a5: f2:ce:b4:40:e2:09:a4:f8:14:59:a5:55:ce:28:5e:b2:4e:93: 53:3f:91:b0:56:d1:51:a3:ab:3a:ef:cf:70:e9:73:b2:75:6d: 84:ea:6a:ef:51:a5:34:7b:b6:a7:dd:69:2b:e3:9e:c8:b1:09: cd:c1:35:25:34:51:6a:01:6c:e8:5b:d8:3d:ec:1d:d2:25:7b: b3:38:06:cb:f0:4e:ce:f3:0a:06:b1:6b:97:07:dc:a2:80:5d: 40:2e:fc:ca:96:bf:49:8f:2d:a9:4e:61:99:ff:16:6c:6d:7a: 99:c8:d0:38:e9:8a:a5:3d:3e:0b:37:80:92:18:21:48:2d:05: a1:cf:29:6b:df:3e:d9:1e:e3:ef:9b:84:0f:41:6b:b5:2b:d0: 76:f4:3d:6a:5b:42:b9:78:6a:e8:19:8a:a8:78:85:cc:ca:59: 21:d7:1a:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVEOTMxMTAvBgNVBAUTKDk5MzVDNjM5QjNDMzUxREJFRDVCMjkzOTk0RjcyRjgx NENDRjlCQTkwHhcNMjYwMzIyMTU0NjUyWhcNMjYwMzI5MTU0NjUyWjAYMRYwFAYD VQQDEw02OWMwMGVlYy05NDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gWZSd/q9vwSUVDNqZsdIK8OXE6bLWIIt+nGe9yOauTeMjjxPzUanTdqb1/T o6i4LkbOuGuEMlmR+uC4Bjd8oPJlTUzOT5PnjyTcfvtn4HFBW4QYLWzYcYdRl6wS Vz/LtMBQN+iu1D/ZadvZGIpTqhz1Fb67l1RCBH4/7xq3hKplIvhssO4EGnAePS6a imQHr3BFZwtX+rEIP/a8ovYwfIovh22u4WOX2YozJtpsGYhgZDT65nqbTGUx8pj1 hxXgtddtLVorzvGIMM4dQkHVIT+5IVhi7cm0G+P/g943sP+9kQ8Fmird4D5PCbq9 fUoGiY8dRS2Q+8Jhyd/dFbwpowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrzjyow euWTOKOj6BCz7l2MJXyHMB8GA1UdIwQYMBaAFJk1xjmzw1Hb7VspOZT3L4FMz5up MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUQ5My81QzEwQTgxMERD NUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVkdnRXeWs1bFBjdmdVelBt NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21UWEdPYlBEVWR2dFd5azVsUGN2Z1V6UG02ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUQ5My81QzEwQTgxMERDNUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVk dnRXeWs1bFBjdmdVelBtNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApGO/ow16Fny/aURd6dhpjqMHzdAlHJbr5spx7S2QKBX+SoOFLKhhcpGSwlXD KkRWZ5Mu0z2GFN3JGagBmVa9rZwEhxknVEqf9O4SMEe8tEqsHOqqDC+Tn0+l8s60 QOIJpPgUWaVVzihesk6TUz+RsFbRUaOrOu/PcOlzsnVthOpq71GlNHu2p91pK+Oe yLEJzcE1JTRRagFs6FvYPewd0iV7szgGy/BOzvMKBrFrlwfcooBdQC78ypa/SY8t qU5hmf8WbG16mcjQOOmKpT0+CzeAkhghSC0Foc8pa98+2R7j75uED0FrtSvQdvQ9 altCuXhq6BmKqHiFzMpZIdcaFA== -----END CERTIFICATE-----Generated at Sun Mar 22 18:58:10 2026 by rpki-client