$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json) Hash identifier: aUBAaX18xmTUiiH/WnLRFlaegb9B6aG5CZVhIdvP4Xs= Subject key identifier: 5F:39:59:84:91:4E:F4:B1:69:7C:E1:69:85:CD:C5:D6:FF:75:09:28 Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft Manifest number: C2 Signing time: Sun 29 Mar 2026 06:42:51 +0000 Manifest this update: Sun 29 Mar 2026 06:42:51 +0000 Manifest next update: Sun 05 Apr 2026 06:42:51 +0000 Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: HGnRD5xwwiU3qSKawW+ugg/FUT/zpldPm7culK8dySU=) 2: BA8DE47CDFE311F08DEF0674556F56BC.roa (hash: mmdoH+5fMH1SUT2ncOmpXZx/2twUEHAZ4APCf5ovSWY=) 3: 5905CBAEDFE111F083058845556F56BC.roa (hash: 4DuTgqQScmTd+yOhRtQdVkw1Ggj97Z9py9s2ziQdubQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 06:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Validity Not Before: Mar 29 06:42:51 2026 GMT Not After : Apr 5 06:42:51 2026 GMT Subject: CN=69c8c9eb-1b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:7b:3a:69:94:50:51:63:12:a6:65:0d:2f: 00:2e:e8:2c:d2:fe:d4:cb:c6:2f:e5:da:73:c6:20: 3f:71:b2:b5:4a:60:fa:d4:67:e6:27:d4:00:33:a6: 13:17:20:dc:e5:4f:96:b7:82:32:1a:12:db:64:27: dd:2d:54:94:e0:28:9d:51:95:fe:2d:d6:79:b2:b0: ec:56:4c:c1:62:1b:ea:6b:e7:77:49:96:fb:8d:5a: 6c:ca:a1:d7:00:2c:b5:cb:06:28:d5:63:e3:fe:45: ab:b4:35:39:2f:c3:ed:1d:f3:db:53:c3:c4:ba:96: ae:4d:4b:9c:83:e2:59:34:9a:76:52:fc:f3:19:47: 8a:01:c6:a4:33:f8:42:a9:75:5b:4e:4a:46:fd:86: af:14:63:75:18:e4:56:98:2d:97:8c:9f:f0:be:8b: 08:ca:3d:ce:81:c2:a9:b3:ce:13:42:9a:18:85:e7: e8:17:a0:f6:db:91:72:cf:fa:3b:b1:57:da:57:fe: 2c:87:f5:c3:86:86:f6:c3:14:d2:d1:80:e4:a2:58: cd:3d:75:3c:8f:aa:60:f1:7c:dc:df:8a:f0:c2:47: 76:72:fd:a5:1b:b6:96:3f:ef:15:23:d2:f5:34:ed: d7:fc:88:98:60:25:79:75:32:d7:c8:a5:73:e6:1d: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:39:59:84:91:4E:F4:B1:69:7C:E1:69:85:CD:C5:D6:FF:75:09:28 X509v3 Authority Key Identifier: keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:02:1a:51:43:90:76:e2:da:12:a5:15:ed:01:f0:3c:30:c8: a0:d2:d8:f8:bc:c2:27:ef:a6:70:c1:0b:1a:b1:9b:d7:5e:73: 90:aa:7d:21:0c:da:63:0e:88:29:41:d6:b0:00:0e:18:a4:8b: 81:fe:1c:0d:b0:63:9f:6c:59:21:b1:88:5f:58:b5:cd:3f:e8: e9:4d:a7:8c:54:d2:e1:2e:c0:3b:f4:77:fb:d8:7b:f5:ee:f7: b0:29:4b:dd:55:b5:92:a9:64:6a:bc:e5:31:d4:b8:41:57:f9: 2c:9e:33:cb:d0:14:9a:87:81:53:f8:80:9a:3f:1d:be:e0:4e: 7f:5c:9a:03:06:4d:4a:c8:de:f4:12:cb:2a:c0:5b:ae:69:49: dd:ea:c0:a3:74:fc:93:5a:5d:50:74:c8:03:ea:d0:cd:45:f9: 2a:47:4d:1a:c9:d0:38:14:0a:a1:86:34:3d:06:cd:a1:92:18: 5f:10:89:05:00:b4:36:1b:f7:f1:79:54:d7:5e:10:85:d1:ce: 6d:0e:6a:f0:59:a0:ec:59:35:a4:6e:69:58:dc:6f:01:6f:da: 35:5a:f1:c4:95:02:3d:10:17:02:08:c3:8d:1b:c8:c0:19:23: 22:43:58:2e:79:ff:aa:a9:0a:86:bd:1e:d5:39:26:d1:51:49: 11:ea:48:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwNzAxMTAvBgNVBAUTKDRFRkI5M0I0OUJGMUJBNTYwMDhERkM2MDYwOEI1MjE2 QUVDOTlBQzYwHhcNMjYwMzI5MDY0MjUxWhcNMjYwNDA1MDY0MjUxWjAYMRYwFAYD VQQDEw02OWM4YzllYi0xYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXp7OmmUUFFjEqZlDS8ALugs0v7Uy8Yv5dpzxiA/cbK1SmD61GfmJ9QAM6YT FyDc5U+Wt4IyGhLbZCfdLVSU4CidUZX+LdZ5srDsVkzBYhvqa+d3SZb7jVpsyqHX ACy1ywYo1WPj/kWrtDU5L8PtHfPbU8PEupauTUucg+JZNJp2UvzzGUeKAcakM/hC qXVbTkpG/YavFGN1GORWmC2XjJ/wvosIyj3OgcKps84TQpoYhefoF6D225Fyz/o7 sVfaV/4sh/XDhob2wxTS0YDkoljNPXU8j6pg8Xzc34rwwkd2cv2lG7aWP+8VI9L1 NO3X/IiYYCV5dTLXyKVz5h1y8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF85WYSR TvSxaXzhaYXNxdb/dQkoMB8GA1UdIwQYMBaAFE77k7Sb8bpWAI38YGCLUhauyZrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA3MC9BRTM2NDY5NjEz ODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVsWUFqZnhnWUl0U0ZxN0pt c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODA3MC9BRTM2NDY5NjEzODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVs WUFqZnhnWUl0U0ZxN0ptc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtgIaUUOQduLaEqUV7QHwPDDIoNLY+LzCJ++mcMELGrGb115zkKp9IQzaYw6I KUHWsAAOGKSLgf4cDbBjn2xZIbGIX1i1zT/o6U2njFTS4S7AO/R3+9h79e73sClL 3VW1kqlkarzlMdS4QVf5LJ4zy9AUmoeBU/iAmj8dvuBOf1yaAwZNSsje9BLLKsBb rmlJ3erAo3T8k1pdUHTIA+rQzUX5KkdNGsnQOBQKoYY0PQbNoZIYXxCJBQC0Nhv3 8XlU114QhdHObQ5q8Fmg7Fk1pG5pWNxvAW/aNVrxxJUCPRAXAgjDjRvIwBkjIkNY Lnn/qqkKhr0e1Tkm0VFJEepIGw== -----END CERTIFICATE-----Generated at Mon Mar 30 11:01:33 2026 by rpki-client