$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft File: TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json) Hash identifier: ySSq/N2rLbf443wGWir79T11pgVaFHr2TOzdn2J4ALM= Subject key identifier: 52:4A:9B:5C:E7:B7:0C:D1:94:5A:1E:8F:2A:DD:5D:79:2D:B2:9E:5C Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 Certificate issuer: /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft Manifest number: 0C77 Signing time: Sat 04 Apr 2026 18:26:32 +0000 Manifest this update: Sat 04 Apr 2026 18:26:31 +0000 Manifest next update: Sat 11 Apr 2026 18:26:31 +0000 Files and hashes: 1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: 9oHL7ddtQRc+SSYUc24bUjVcjAj/DKRnEDVha7ua968=) 2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: fCQoX/IOk+ffJFhlDwImCtw5kH5m+tUwlmOkb8YNpXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5533, serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Validity Not Before: Apr 4 18:26:31 2026 GMT Not After : Apr 11 18:26:31 2026 GMT Subject: CN=69d157d8-d31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:de:5d:eb:08:24:65:63:35:49:c1:63:56: 17:c5:20:99:60:ac:c8:16:c9:06:d7:a4:c3:f1:79: d8:81:6d:f9:f8:5f:8d:07:75:7c:fb:62:2a:96:17: cb:49:d9:5a:ee:8b:4f:20:5d:d9:ac:82:dc:11:e9: 85:16:a3:19:6e:ca:7b:71:a1:f0:47:72:de:0c:96: 77:47:82:d3:8e:f2:e1:f8:6b:5e:0a:33:16:20:50: 0d:a1:97:20:6c:14:fb:f0:ef:64:4a:34:4c:d7:69: a7:af:d4:84:20:ce:95:2c:cf:31:13:59:cb:69:6a: 01:1b:df:96:e6:a4:74:55:74:40:6e:3e:08:65:27: 30:c2:65:63:d1:13:cb:c3:dc:84:92:df:4e:ca:21: cb:06:14:a2:30:91:a5:ce:db:12:d9:29:fc:e7:94: 84:0e:b9:15:e3:73:b6:c3:fc:4b:64:73:f7:b6:9e: 23:da:06:cb:42:35:87:eb:f4:c7:d5:9f:19:74:c8: c8:f0:13:34:02:63:33:2b:e9:04:80:3d:fa:45:2d: 5d:79:6d:3a:77:e8:35:b4:81:b3:96:a2:75:8e:bd: ef:ba:42:10:30:70:93:33:e1:d4:f9:ea:c0:e8:a7: 1d:93:ba:e5:78:23:c0:b6:17:42:59:14:5e:55:4d: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4A:9B:5C:E7:B7:0C:D1:94:5A:1E:8F:2A:DD:5D:79:2D:B2:9E:5C X509v3 Authority Key Identifier: keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:43:8a:a9:44:e2:ee:08:fa:c5:95:09:c8:e8:32:55:cc:30: 90:2f:d7:3a:a0:76:a0:a0:a9:dc:5b:24:b7:ed:10:d9:18:b8: fa:fe:63:4a:94:53:c1:0d:2a:76:18:bf:14:ac:e2:32:95:18: 63:13:aa:0e:f9:61:29:5b:16:8a:b9:08:d3:2d:11:3c:91:36: 34:4e:20:37:2d:87:91:75:60:98:cd:c7:b6:c2:3d:b1:51:6b: 39:89:3f:b9:c5:69:d4:da:3e:71:82:b5:3b:64:f8:19:59:03: da:0f:e9:00:de:70:3d:fe:78:15:09:7a:96:22:9d:e0:28:d7: 1c:6d:cf:8d:0b:36:a5:3d:36:08:bb:e1:ba:7d:cf:34:f8:b8: c5:d0:86:ee:aa:df:cd:06:73:b0:e7:89:2d:43:c1:fe:f2:00: 55:90:8c:1d:c0:43:a5:3a:59:86:44:7d:7b:b5:44:8e:cb:69: 9e:98:1d:2f:c8:aa:0d:00:17:a9:79:c2:41:d0:a7:f3:a9:5f: 23:15:09:76:e8:f7:45:7b:97:f5:a1:33:b9:0a:e2:2b:53:17: 79:9a:9e:44:f5:d6:15:83:2f:ad:ae:f3:ae:97:b5:98:3b:5a: 46:d4:4a:03:c4:d3:cd:49:d3:56:b1:d1:cf:b7:8d:b0:9a:d9: 07:95:1c:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1MzMxMTAvBgNVBAUTKDRDODFGMDE5M0ExQzU3MjQ0NTdGNTJFMDRFMTFGMjUy NzNFNkZFRTAwHhcNMjYwNDA0MTgyNjMxWhcNMjYwNDExMTgyNjMxWjAYMRYwFAYD VQQDEw02OWQxNTdkOC1kMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkXeXesIJGVjNUnBY1YXxSCZYKzIFskG16TD8XnYgW35+F+NB3V8+2IqlhfL Sdla7otPIF3ZrILcEemFFqMZbsp7caHwR3LeDJZ3R4LTjvLh+GteCjMWIFANoZcg bBT78O9kSjRM12mnr9SEIM6VLM8xE1nLaWoBG9+W5qR0VXRAbj4IZScwwmVj0RPL w9yEkt9OyiHLBhSiMJGlztsS2Sn855SEDrkV43O2w/xLZHP3tp4j2gbLQjWH6/TH 1Z8ZdMjI8BM0AmMzK+kEgD36RS1deW06d+g1tIGzlqJ1jr3vukIQMHCTM+HU+erA 6Kcdk7rleCPAthdCWRReVU2KIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJKm1zn twzRlFoejyrdXXktsp5cMB8GA1UdIwQYMBaAFEyB8Bk6HFckRX9S4E4R8lJz5v7g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTUzMy8wNjExNTFGMjFB NEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5UkZmMUxnVGhIeVVuUG1f dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RJSHdHVG9jVnlSRmYxTGdUaEh5VW5QbV91QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTUzMy8wNjExNTFGMjFBNEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5 UkZmMUxnVGhIeVVuUG1fdUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAakOKqUTi7gj6xZUJyOgyVcwwkC/XOqB2oKCp3Fskt+0Q2Ri4+v5jSpRTwQ0q dhi/FKziMpUYYxOqDvlhKVsWirkI0y0RPJE2NE4gNy2HkXVgmM3HtsI9sVFrOYk/ ucVp1No+cYK1O2T4GVkD2g/pAN5wPf54FQl6liKd4CjXHG3PjQs2pT02CLvhun3P NPi4xdCG7qrfzQZzsOeJLUPB/vIAVZCMHcBDpTpZhkR9e7VEjstpnpgdL8iqDQAX qXnCQdCn86lfIxUJduj3RXuX9aEzuQriK1MXeZqeRPXWFYMvra7zrpe1mDtaRtRK A8TTzUnTVrHRz7eNsJrZB5Uc9A== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:19 2026 by rpki-client