$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: NGMD7H91ku7tkVyqM0zJVKhaTRJ4+Qn6FkUf6tQkFoU= Subject key identifier: B5:F9:98:72:C0:42:54:BA:5C:A5:24:F9:8F:77:14:F7:13:E6:96:5E Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 289A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 287D Signing time: Sat 04 Apr 2026 15:32:40 +0000 Manifest this update: Sat 04 Apr 2026 15:32:39 +0000 Manifest next update: Sat 11 Apr 2026 15:32:39 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: 1OSJJ597jFsfiRMfK0ZCaYSvcWX7V686wbUcSRPdBgA=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: UmJO0KSnCSvHXcJ5e26UAgnZ2y1lkvWGmHME2yVB9kg=) 3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: LsrfohQQqBt1OXduUHyIG+bruizijWoUQfCjHYmeZgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10394 (0x289a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Apr 4 15:32:39 2026 GMT Not After : Apr 11 15:32:39 2026 GMT Subject: CN=69d12f18-8557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:84:e8:7a:39:a2:d2:e7:06:31:2e:1e:b4: b0:8b:dd:47:da:49:05:43:b2:63:0c:7b:02:a0:49: a2:03:6b:8f:32:ca:80:cc:38:77:ab:eb:7c:ab:2b: f5:5b:07:79:fa:44:01:d5:ec:a7:d3:b5:66:fc:b2: 4d:e4:71:f8:df:c8:0a:8f:f1:1f:37:c4:c8:ac:8b: a2:0e:00:a7:c7:f9:d1:ad:1c:e4:34:1f:ad:97:a1: c7:e3:28:4e:eb:e6:7a:27:d7:4d:7d:ad:20:6f:50: 26:fa:ce:fa:60:5d:9e:e1:ea:23:0f:b6:8d:52:e4: 7e:20:5d:91:4b:73:59:a0:20:f4:78:06:10:13:8f: cf:32:38:81:a0:63:90:ef:34:9a:98:9e:07:69:99: 63:1d:ca:cb:09:a0:57:c0:03:76:08:5d:6a:fc:61: 59:e6:f5:04:dd:8d:db:c4:28:e5:e3:25:83:56:05: 76:79:3a:cf:31:15:c7:7f:31:e6:a7:42:4c:63:0c: 61:ad:ad:b1:94:52:b7:86:64:45:3b:cd:b4:a6:cb: 19:b8:42:ef:8d:dd:8f:3d:99:90:81:3d:16:e3:ad: af:3e:fa:e8:af:52:f1:cf:d4:ab:f5:71:72:38:40: fb:cb:b3:ff:bf:1f:2d:b6:1a:f6:d6:5c:1b:0f:74: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F9:98:72:C0:42:54:BA:5C:A5:24:F9:8F:77:14:F7:13:E6:96:5E X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:91:41:5f:10:9e:4f:4d:55:17:5d:f8:d7:ba:ff:00:69:30: 9b:38:a6:04:88:ce:08:8b:3a:4b:a9:db:6d:60:5c:f9:f7:a6: 44:43:cf:d1:8e:d9:5e:5c:95:6c:21:27:f9:14:a9:47:1b:5a: 30:86:88:32:30:2c:0e:04:6d:a8:5c:32:2e:b4:f1:f3:b2:92: 9e:d6:df:67:0f:15:ac:0e:d7:9c:4c:d0:20:52:15:ee:db:3e: 98:d6:86:d3:f8:61:2e:38:af:51:47:c3:fa:8b:61:7f:42:5b: 90:c2:87:b6:de:11:8f:a7:98:3e:4a:a1:b2:de:93:a2:83:8e: fa:64:48:9b:a3:d1:8f:33:a9:05:42:87:2d:c8:58:7e:e1:ec: cb:a1:94:3d:8e:90:dc:88:d0:2f:ea:de:f2:4b:7b:fc:fd:57: 2c:d5:1f:83:b1:96:95:7f:5b:2f:83:30:e2:c5:42:63:e6:86: 9d:77:84:33:a7:db:6d:cc:8b:e4:20:6c:9a:56:b4:37:4d:51: e9:74:17:b9:3a:57:3a:7f:20:9d:b5:ef:82:b9:23:8b:7d:5f: 82:d8:47:97:8e:65:0b:a7:e9:93:df:2f:7b:29:ec:f5:39:1a: 75:f7:8f:b0:b4:4f:4b:05:a8:71:00:1d:22:b3:e2:2d:b8:53: ff:c1:ee:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjYwNDA0MTUzMjM5WhcNMjYwNDExMTUzMjM5WjAYMRYwFAYD VQQDEw02OWQxMmYxOC04NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyaE6Ho5otLnBjEuHrSwi91H2kkFQ7JjDHsCoEmiA2uPMsqAzDh3q+t8qyv1 Wwd5+kQB1eyn07Vm/LJN5HH438gKj/EfN8TIrIuiDgCnx/nRrRzkNB+tl6HH4yhO 6+Z6J9dNfa0gb1Am+s76YF2e4eojD7aNUuR+IF2RS3NZoCD0eAYQE4/PMjiBoGOQ 7zSamJ4HaZljHcrLCaBXwAN2CF1q/GFZ5vUE3Y3bxCjl4yWDVgV2eTrPMRXHfzHm p0JMYwxhra2xlFK3hmRFO820pssZuELvjd2PPZmQgT0W462vPvror1Lxz9Sr9XFy OED7y7P/vx8tthr21lwbD3SMGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLX5mHLA QlS6XKUk+Y93FPcT5pZeMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHJFBXxCeT01VF13417r/AGkwmzimBIjOCIs6S6nbbWBc+femREPP0Y7ZXlyV bCEn+RSpRxtaMIaIMjAsDgRtqFwyLrTx87KSntbfZw8VrA7XnEzQIFIV7ts+mNaG 0/hhLjivUUfD+othf0JbkMKHtt4Rj6eYPkqhst6TooOO+mRIm6PRjzOpBUKHLchY fuHsy6GUPY6Q3IjQL+re8kt7/P1XLNUfg7GWlX9bL4Mw4sVCY+aGnXeEM6fbbcyL 5CBsmla0N01R6XQXuTpXOn8gnbXvgrkji31fgthHl45lC6fpk98veyns9TkadfeP sLRPSwWocQAdIrPiLbhT/8Hukg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:58:04 2026 by rpki-client