$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json) Hash identifier: bxKp9qoXg2dQCoFeUNqkmgcI83UwBHpxYXalenc96UM= Subject key identifier: 7D:05:13:79:7D:91:5F:0C:88:82:F8:E9:39:FD:1E:2A:E0:58:17:B2 Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 0613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft Manifest number: 060B Signing time: Sat 04 Apr 2026 22:40:47 +0000 Manifest this update: Sat 04 Apr 2026 22:40:46 +0000 Manifest next update: Sat 11 Apr 2026 22:40:46 +0000 Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: DGYxieAO0TaJTNpVJp3esRktWHoDQg+GjQWcZPzdXzY=) 2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: FH7SMQY4WyVt9Ewh8gjU/J4biuTaLOVJJpWUTHyF1xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1555 (0x613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: Apr 4 22:40:46 2026 GMT Not After : Apr 11 22:40:46 2026 GMT Subject: CN=69d1936f-d4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:23:1c:b6:c1:44:5e:76:a5:dc:8c:46:44:01: e8:f8:a0:65:4c:ef:54:63:aa:22:a1:68:46:b5:07: 4e:95:3f:cf:f1:fb:85:4d:af:bf:33:c7:a7:67:d2: 37:95:79:54:7e:ba:ec:ac:35:4f:c5:e7:9f:69:b7: e0:f0:9c:8d:a7:13:ea:02:c1:6b:f3:29:45:ea:a7: 8d:d1:62:e5:fe:35:5c:34:2b:4c:12:96:e3:d4:1e: 55:fd:23:b8:0a:d3:54:ab:02:42:2e:e4:f8:96:11: 98:6b:ed:ca:e2:d3:33:29:2b:bc:5c:f3:06:1f:53: 6f:05:7a:09:d8:a3:f0:b4:3f:0c:90:5c:c6:2d:12: 4c:b9:f7:be:e1:ab:79:97:e8:aa:97:f0:3c:f2:64: 9f:43:65:e5:39:be:65:4e:49:44:50:91:8d:44:b7: fa:6e:02:4d:f0:6b:46:86:d6:99:7d:e5:02:ab:c2: 1a:40:fe:35:12:18:80:a2:f8:af:f9:0e:6b:67:65: ca:22:08:00:a7:c0:95:fb:61:99:fa:23:6d:44:71: 63:13:5e:66:d2:5f:45:bf:48:2c:89:a7:cf:a9:4d: c5:4e:bf:4d:51:f0:c8:f5:34:61:ce:1c:9a:4b:09: f3:df:2d:79:ab:5f:46:53:9b:bd:94:1f:85:12:aa: 6c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:05:13:79:7D:91:5F:0C:88:82:F8:E9:39:FD:1E:2A:E0:58:17:B2 X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:0a:1e:87:9a:e1:1f:71:84:0c:45:86:c7:8e:0c:e7:76:80: 73:54:1b:49:03:da:64:d1:26:18:a7:0a:9d:e4:df:ae:aa:fa: 99:dc:92:a6:11:49:df:66:d8:4f:20:1b:a1:28:fa:26:66:b3: 61:c4:54:f7:0c:95:95:a3:5d:95:3e:cc:d4:eb:3c:f4:8c:4a: 96:4e:bd:99:6b:86:d0:e4:0e:d0:70:24:80:1a:4a:2e:b9:61: 2e:d8:4c:95:f2:ba:0f:de:36:08:bd:03:0b:c6:0d:47:ba:96: bb:f7:a4:23:2a:01:19:ba:c2:10:dc:32:c5:12:6e:fb:a7:fd: cf:46:3c:cb:42:c3:51:f4:5c:b7:de:54:98:56:e7:d5:22:3b: fa:70:64:ba:25:5b:a1:84:79:3d:45:67:8f:b2:17:93:88:a2: 84:69:74:8a:66:b3:22:b4:66:4d:77:af:eb:91:5d:b8:1f:86: a5:bb:e6:52:6f:4c:74:21:52:cd:41:0a:9a:86:84:16:05:e6: 9f:9e:2f:46:04:03:63:6a:97:d8:e5:d2:c8:46:42:8b:83:fe: b9:db:bd:01:8c:ed:f7:40:68:20:20:44:47:45:bd:e7:24:3b: 39:5c:01:a3:48:fe:15:61:9a:65:ac:c3:9e:67:54:08:b5:1d: a1:dc:da:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjYwNDA0MjI0MDQ2WhcNMjYwNDExMjI0MDQ2WjAYMRYwFAYD VQQDEw02OWQxOTM2Zi1kNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iMctsFEXnal3IxGRAHo+KBlTO9UY6oioWhGtQdOlT/P8fuFTa+/M8enZ9I3 lXlUfrrsrDVPxeefabfg8JyNpxPqAsFr8ylF6qeN0WLl/jVcNCtMEpbj1B5V/SO4 CtNUqwJCLuT4lhGYa+3K4tMzKSu8XPMGH1NvBXoJ2KPwtD8MkFzGLRJMufe+4at5 l+iql/A88mSfQ2XlOb5lTklEUJGNRLf6bgJN8GtGhtaZfeUCq8IaQP41EhiAoviv +Q5rZ2XKIggAp8CV+2GZ+iNtRHFjE15m0l9Fv0gsiafPqU3FTr9NUfDI9TRhzhya Swnz3y15q19GU5u9lB+FEqpshwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0FE3l9 kV8MiIL46Tn9HirgWBeyMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVgoeh5rhH3GEDEWGx44M53aAc1QbSQPaZNEmGKcKneTfrqr6mdySphFJ32bY TyAboSj6JmazYcRU9wyVlaNdlT7M1Os89IxKlk69mWuG0OQO0HAkgBpKLrlhLthM lfK6D942CL0DC8YNR7qWu/ekIyoBGbrCENwyxRJu+6f9z0Y8y0LDUfRct95UmFbn 1SI7+nBkuiVboYR5PUVnj7IXk4iihGl0imazIrRmTXev65FduB+GpbvmUm9MdCFS zUEKmoaEFgXmn54vRgQDY2qX2OXSyEZCi4P+udu9AYzt90BoICBER0W95yQ7OVwB o0j+FWGaZazDnmdUCLUdodzaDA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:47 2026 by rpki-client