$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft File: 2TIL_awMkLNCikT8fcoOL3kJd0E.mft (raw, json) Hash identifier: PwTPcPd2VyNGD886RHPaekyMF1rElghC5M8JwphA0EI= Subject key identifier: C2:E8:4E:D7:73:35:D2:7F:4E:08:58:52:60:FB:C8:73:90:15:F6:1A Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft Manifest number: CA Signing time: Sun 05 Apr 2026 06:14:11 +0000 Manifest this update: Sun 05 Apr 2026 06:14:11 +0000 Manifest next update: Sun 12 Apr 2026 06:14:11 +0000 Files and hashes: 1: 2TIL_awMkLNCikT8fcoOL3kJd0E.crl (hash: 96HwYdqL+IDFRg0xB9esp53/eeFwHZfLW+awM6cfHC0=) 2: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (hash: Ah769txZ1i8LI8a9aR/4aMRU/GBmcnuWkAw7rNhxenA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Apr 5 06:14:11 2026 GMT Not After : Apr 12 06:14:11 2026 GMT Subject: CN=69d1fdb3-42f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:d6:f7:15:f7:eb:a5:9b:6e:4d:fb:89:68: 54:79:01:43:1c:55:73:9e:4c:d7:bd:0e:b0:f5:69: 99:72:bc:54:fc:b3:aa:86:53:fd:2a:fd:2b:36:9f: f4:cb:36:42:8d:79:60:75:8e:47:b7:00:85:13:b7: fd:ff:ce:20:46:41:cb:1b:c1:f5:ae:1b:a9:ee:d7: 5d:8e:a5:dd:b6:b3:71:74:43:28:16:dc:49:66:c1: 82:e4:39:53:2c:0f:31:3e:7a:af:60:de:28:11:a2: 16:f1:14:59:d7:b5:28:78:9d:94:34:bd:c2:77:34: 70:5e:d7:70:9a:28:80:d6:3b:7b:e6:d0:ca:f5:d0: 1a:8f:06:88:e0:80:94:dd:33:fe:36:1f:7c:d3:e4: c0:38:fa:2e:e9:36:12:f4:0d:d8:b5:4c:ab:1d:8b: 79:34:0a:86:1b:9a:f3:fa:e3:e3:3f:8c:ef:c5:b6: e9:8a:47:a3:20:89:22:a8:64:5d:b7:3f:b0:6b:a6: 7a:48:b2:a1:8f:7e:a1:4a:e2:16:19:f9:1e:dd:15: f1:2a:5a:fb:27:40:a3:d3:9a:d9:f0:9e:fb:4d:62: 3e:0a:1f:13:13:a0:b8:fc:bd:df:3a:eb:42:22:c3: 54:ef:83:57:a4:bc:79:42:1f:19:34:52:29:90:84: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E8:4E:D7:73:35:D2:7F:4E:08:58:52:60:FB:C8:73:90:15:F6:1A X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a5:25:40:4f:3e:1f:f8:32:7c:24:e8:ea:bb:69:fa:db:b2: de:2c:84:7d:2b:66:b3:0e:c7:89:cf:f3:4b:7c:5e:ac:e1:fb: 9e:37:0d:70:9c:45:ec:b7:72:44:ff:5c:e7:4f:11:6a:bd:60: ad:07:d2:36:0c:66:55:9a:33:da:27:5a:30:9c:57:a3:04:7a: c6:50:21:c1:3c:1a:b6:2c:84:3f:82:92:f1:fa:ab:aa:85:c2: 70:86:86:26:c0:f2:d7:7d:87:94:82:70:fb:b7:1c:b4:03:a5: 3b:5a:22:14:c4:45:94:d2:6d:4a:66:ac:92:24:d3:e0:5f:7f: 88:10:88:2c:dc:90:12:86:cc:2f:2d:e7:e2:bc:04:76:fb:c3: cc:59:aa:d5:eb:93:9e:90:fa:0a:73:30:e4:32:40:2d:b8:2a: c0:2a:1d:e6:06:fc:3b:94:81:53:2e:88:13:bd:8b:28:b4:82: 1f:cc:84:2c:24:dd:7f:f6:b2:b1:b1:6c:d5:e1:81:4b:23:b1: 50:9c:7d:1a:81:a8:1d:80:88:f7:46:40:69:5e:20:ad:6f:b0: 73:7e:9b:aa:ed:f5:30:bf:0d:23:79:1c:62:e7:a1:eb:84:9e: be:ac:e8:cd:52:67:5d:80:80:55:d0:11:c0:07:94:ae:c7:94: f9:99:c3:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBREUxMTAvBgNVBAUTKEQ5MzIwQkZEQUMwQzkwQjM0MjhBNDRGQzdEQ0EwRTJG NzkwOTc3NDEwHhcNMjYwNDA1MDYxNDExWhcNMjYwNDEyMDYxNDExWjAYMRYwFAYD VQQDEw02OWQxZmRiMy00MmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvovW9xX366Wbbk37iWhUeQFDHFVznkzXvQ6w9WmZcrxU/LOqhlP9Kv0rNp/0 yzZCjXlgdY5HtwCFE7f9/84gRkHLG8H1rhup7tddjqXdtrNxdEMoFtxJZsGC5DlT LA8xPnqvYN4oEaIW8RRZ17UoeJ2UNL3CdzRwXtdwmiiA1jt75tDK9dAajwaI4ICU 3TP+Nh980+TAOPou6TYS9A3YtUyrHYt5NAqGG5rz+uPjP4zvxbbpikejIIkiqGRd tz+wa6Z6SLKhj36hSuIWGfke3RXxKlr7J0Cj05rZ8J77TWI+Ch8TE6C4/L3fOutC IsNU74NXpLx5Qh8ZNFIpkITufQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLoTtdz NdJ/TghYUmD7yHOQFfYaMB8GA1UdIwQYMBaAFNkyC/2sDJCzQopE/H3KDi95CXdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0FERS84OUE0OTNFMkZF NEQxMUVGQTFBRkZDMUFDNEY5QUUwMi8yVElMX2F3TWtMTkNpa1Q4ZmNvT0wza0pk MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0FERS84OUE0OTNFMkZFNEQxMUVGQTFBRkZDMUFDNEY5QUUwMi8yVElMX2F3TWtM TkNpa1Q4ZmNvT0wza0pkMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPaUlQE8+H/gyfCTo6rtp+tuy3iyEfStmsw7Hic/zS3xerOH7njcNcJxF7Ldy RP9c508Rar1grQfSNgxmVZoz2idaMJxXowR6xlAhwTwatiyEP4KS8fqrqoXCcIaG JsDy132HlIJw+7cctAOlO1oiFMRFlNJtSmaskiTT4F9/iBCILNyQEobMLy3n4rwE dvvDzFmq1euTnpD6CnMw5DJALbgqwCod5gb8O5SBUy6IE72LKLSCH8yELCTdf/ay sbFs1eGBSyOxUJx9GoGoHYCI90ZAaV4grW+wc36bqu31ML8NI3kcYueh64Sevqzo zVJnXYCAVdARwAeUrseU+ZnDYg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:47:04 2026 by rpki-client