$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft File: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft (raw, json) Hash identifier: 7/1gEh5k/rfREHCE6KlIff0Ro0j3OEjEJIAUsj6LYqo= Subject key identifier: 32:42:1E:9D:05:25:9E:4B:2F:93:29:98:2D:37:76:18:EB:96:53:B9 Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB Certificate issuer: /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft Manifest number: 35 Signing time: Mon 02 Mar 2026 20:36:24 +0000 Manifest this update: Mon 02 Mar 2026 20:36:24 +0000 Manifest next update: Mon 09 Mar 2026 20:36:24 +0000 Files and hashes: 1: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl (hash: +/bFKreYSTHotbpvtKmXEvOK2Q0+kgbwK5JaAzurEAo=) 2: 527245ACD42311F0A8A37057C4F9AE02.roa (hash: 90KcSYGKJ6Yif8EcJa/nVE5hc/e19RIZHwPBzlm+xR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 20:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Validity Not Before: Mar 2 20:36:24 2026 GMT Not After : Mar 9 20:36:24 2026 GMT Subject: CN=69a5f4c8-1816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8b:12:8e:1d:08:8e:4d:87:61:6a:a7:cc:ac: a6:0a:a6:3f:b9:81:be:62:34:c8:8b:b7:3f:c2:c1: de:6d:75:ed:4c:46:85:89:39:7b:c3:f5:ee:57:bd: 67:c3:83:b4:1b:b2:00:e2:43:ac:4f:08:78:1f:ad: 37:a3:e8:91:38:45:d9:af:87:0f:8e:59:42:97:e3: 5d:7c:7e:60:d1:2d:ea:ff:16:dd:22:06:a7:07:5b: ce:70:72:13:3f:65:02:1f:c4:da:24:13:6b:fa:a0: 72:c3:29:ee:71:ae:b6:eb:c4:91:32:82:28:2d:b0: 16:d8:4f:5a:20:02:75:5b:88:38:d2:8d:15:44:97: 63:3a:08:ee:a7:9f:b2:3d:16:67:05:2d:78:41:db: 96:46:1b:1f:d6:8d:7c:c6:44:ad:b1:1a:17:35:cb: b0:ad:0a:e9:5e:f6:c3:01:63:06:31:7c:7d:60:86: 93:03:ce:2c:13:c2:2a:04:04:63:25:1c:3d:3a:ab: ef:fb:d4:e7:bc:d2:03:95:1c:31:66:cd:91:74:1f: c8:2f:10:c5:d9:3f:e3:c4:79:57:ec:6c:d8:30:22: 5c:84:6d:39:be:80:db:51:57:b2:88:5b:03:15:50: 12:e0:d9:9a:fe:06:69:15:6e:31:f6:00:3f:ed:c6: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:42:1E:9D:05:25:9E:4B:2F:93:29:98:2D:37:76:18:EB:96:53:B9 X509v3 Authority Key Identifier: keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:3e:a9:fd:84:6e:b4:8b:76:1a:ae:79:e4:98:bd:2a:b2:aa: f4:43:85:14:8f:05:3a:6a:33:4f:23:7d:f4:48:53:15:9f:e0: 5c:42:e1:db:b3:ac:d6:54:8b:e0:be:a1:18:40:d0:ea:d1:f9: 7c:79:9a:20:e2:65:e5:65:36:fc:ec:21:c4:b0:a5:a7:47:80: b6:1d:d5:ef:0c:85:d9:5f:a0:57:a4:39:a7:65:67:cf:5a:69: 4f:d5:35:64:5b:df:df:e3:d6:db:3f:77:6c:fa:24:f4:6b:d6: f9:40:e1:d9:99:c3:80:82:30:21:7d:e6:a6:3d:ba:10:b7:e1: 24:dd:e9:ee:64:c5:ba:7b:b8:78:01:47:40:c3:f4:1a:01:6a: ee:19:4d:35:72:5a:30:95:a4:0d:7c:dc:d4:ba:b6:d8:25:a4: 48:f5:f6:4d:cb:46:ca:f2:6e:b4:96:08:b0:e9:b6:76:10:c4: 25:f0:fb:28:20:fd:de:68:32:23:d9:68:ec:06:cf:59:80:fa: eb:9f:e9:db:c2:cc:6b:2d:01:5f:54:f0:93:21:93:64:b0:bf: 86:4f:8d:c3:7f:37:1d:e3:12:93:cd:03:c2:25:d9:04:f3:50: e3:ea:7f:e8:8a:ba:8a:2e:30:f3:f9:46:31:43:98:25:bc:b3: 16:b6:5f:9b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTREMTExMC8GA1UEBRMoQjY5NEE4QzUyOEYwQjlBNEQ0NTNCQzQ0MjBFNTBCNTE5 RENGRDBBQjAeFw0yNjAzMDIyMDM2MjRaFw0yNjAzMDkyMDM2MjRaMBgxFjAUBgNV BAMTDTY5YTVmNGM4LTE4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2ixKOHQiOTYdhaqfMrKYKpj+5gb5iNMiLtz/Cwd5tde1MRoWJOXvD9e5XvWfD g7QbsgDiQ6xPCHgfrTej6JE4Rdmvhw+OWUKX4118fmDRLer/Ft0iBqcHW85wchM/ ZQIfxNokE2v6oHLDKe5xrrbrxJEygigtsBbYT1ogAnVbiDjSjRVEl2M6CO6nn7I9 FmcFLXhB25ZGGx/WjXzGRK2xGhc1y7CtCule9sMBYwYxfH1ghpMDziwTwioEBGMl HD06q+/71Oe80gOVHDFmzZF0H8gvEMXZP+PEeVfsbNgwIlyEbTm+gNtRV7KIWwMV UBLg2Zr+BmkVbjH2AD/txqhVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMkIenQUl nksvkymYLTd2GOuWU7kwHwYDVR0jBBgwFoAUtpSoxSjwuaTUU7xEIOULUZ3P0Ksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NEQxLzk1MEQ3NzAyQ0U2 RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFUVVU3eEVJT1VMVVozUDBL cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdHBTb3hTand1YVRVVTd4RUlPVUxVWjNQMEtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 NEQxLzk1MEQ3NzAyQ0U2RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3dWFU VVU3eEVJT1VMVVozUDBLcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwPqn9hG60i3YarnnkmL0qsqr0Q4UUjwU6ajNPI330SFMVn+BcQuHbs6zWVIvg vqEYQNDq0fl8eZog4mXlZTb87CHEsKWnR4C2HdXvDIXZX6BXpDmnZWfPWmlP1TVk W9/f49bbP3ds+iT0a9b5QOHZmcOAgjAhfeamPboQt+Ek3enuZMW6e7h4AUdAw/Qa AWruGU01clowlaQNfNzUurbYJaRI9fZNy0bK8m60lgiw6bZ2EMQl8PsoIP3eaDIj 2WjsBs9ZgPrrn+nbwsxrLQFfVPCTIZNksL+GT43Dfzcd4xKTzQPCJdkE81Dj6n/o irqKLjDz+UYxQ5glvLMWtl+b -----END CERTIFICATE-----Generated at Wed Mar 4 08:20:30 2026 by rpki-client