$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json) Hash identifier: j85alWvjNe8T2U4n+ddj5C41sTJzlXV+bE6OjWv6y04= Subject key identifier: 5D:52:DD:46:0C:26:92:EA:9B:5A:CE:65:C0:63:88:C4:75:F6:A1:07 Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft Manifest number: 0134 Signing time: Sun 05 Apr 2026 04:53:22 +0000 Manifest this update: Sun 05 Apr 2026 04:53:22 +0000 Manifest next update: Sun 12 Apr 2026 04:53:22 +0000 Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: H7LNLyJSuYxp0jLTO3QsKnwSysJHtaF+EUnaRfroxuE=) 2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: DxEefx3v0VIE+PRbAwkcYP/T2AQ/uh/zxBc6m9wV8g4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: Apr 5 04:53:22 2026 GMT Not After : Apr 12 04:53:22 2026 GMT Subject: CN=69d1eac2-bbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2e:d4:a7:c2:f5:8f:b6:f9:eb:82:15:4f:cb: 5f:69:16:7a:43:2c:8c:28:8f:5e:43:01:7e:f3:06: 0c:03:23:90:72:c8:63:af:21:92:dc:0f:76:b2:35: f6:16:a3:0e:64:ef:6a:0f:4c:e8:d8:c5:44:39:34: 61:ee:a2:c8:5c:c4:3c:a8:fa:5f:83:46:60:4e:8b: 07:69:29:45:68:fd:3b:46:62:e8:56:90:f1:fc:3e: db:48:28:ad:1b:a7:44:2a:dd:6a:f6:bd:4d:97:3d: 87:6d:69:db:07:60:ba:a2:92:7f:2e:c8:91:89:96: 34:1b:ff:6c:ed:21:a1:aa:2e:db:29:ad:75:2d:1e: ea:41:b2:be:45:a5:fd:47:98:c7:29:52:9e:33:15: dc:28:1b:10:6b:00:19:05:46:05:88:36:b7:34:52: 44:b3:6f:f0:12:6e:01:9c:ac:6e:fc:03:0d:f6:86: 7e:5c:55:e2:ae:6c:b4:99:da:19:34:3c:9c:68:23: 20:d6:2d:81:bb:8d:1a:ea:d1:70:16:94:b8:87:51: c4:90:93:7a:b6:6c:8f:94:ed:c6:6f:b0:99:2b:a9: ab:10:ef:bb:24:40:f0:f1:1d:0d:20:a5:c9:d2:4f: 5f:9b:a8:b5:82:03:91:3b:9d:8a:94:bb:4a:df:a2: 83:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:52:DD:46:0C:26:92:EA:9B:5A:CE:65:C0:63:88:C4:75:F6:A1:07 X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d2:e3:f4:ab:ea:17:dd:c8:64:59:ff:e0:cf:31:a8:3d:0f: ca:ef:b7:b2:eb:96:c4:c0:ff:8c:90:c4:b2:28:d6:d6:01:23: 9b:bf:20:2b:28:18:82:4a:02:3f:fe:c2:73:e2:bd:63:18:9f: 71:32:e8:90:2d:7d:a0:f4:45:35:0a:4a:72:ef:8a:b4:15:4d: 93:57:aa:ac:81:60:3c:40:6b:d4:5b:4a:f7:c1:1c:05:bd:f7: f6:61:e8:c5:5f:4d:51:cb:5d:84:b8:87:34:30:ee:fb:d8:dc: 97:d8:80:c1:26:65:a0:9b:e7:25:d6:3f:6f:40:6b:bb:44:a6: dd:94:06:bc:2e:9a:04:f9:4e:88:4e:93:f4:8e:04:82:a2:3e: 6b:02:62:24:9a:a6:a5:c9:da:c6:3a:a3:b2:22:f3:b2:02:5c: 1e:a5:1b:74:de:c7:e9:35:05:e2:a8:a8:d6:9a:ae:81:23:5f: 24:ba:63:d3:0f:5f:fa:bb:b5:bf:fd:00:4b:fb:eb:f0:49:d2: 1d:4c:74:23:99:88:1a:60:2d:7e:d4:aa:44:17:dd:1c:bf:9d: dc:a6:46:bc:fd:57:3a:d1:7a:c6:9d:a8:69:27:e7:ce:c8:35: 5d:25:96:ed:f8:5f:84:9f:98:99:34:91:3e:bb:62:57:73:3d: 84:e5:82:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKDRDQjIxMzJBNzIzNkE2RTNCNUI5NjMwQ0EwMzAxMTQ4 NjMyODU1RjcwHhcNMjYwNDA1MDQ1MzIyWhcNMjYwNDEyMDQ1MzIyWjAYMRYwFAYD VQQDEw02OWQxZWFjMi1iYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4C7Up8L1j7b564IVT8tfaRZ6QyyMKI9eQwF+8wYMAyOQcshjryGS3A92sjX2 FqMOZO9qD0zo2MVEOTRh7qLIXMQ8qPpfg0ZgTosHaSlFaP07RmLoVpDx/D7bSCit G6dEKt1q9r1Nlz2HbWnbB2C6opJ/LsiRiZY0G/9s7SGhqi7bKa11LR7qQbK+RaX9 R5jHKVKeMxXcKBsQawAZBUYFiDa3NFJEs2/wEm4BnKxu/AMN9oZ+XFXirmy0mdoZ NDycaCMg1i2Bu40a6tFwFpS4h1HEkJN6tmyPlO3Gb7CZK6mrEO+7JEDw8R0NIKXJ 0k9fm6i1ggORO52KlLtK36KDaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1S3UYM JpLqm1rOZcBjiMR19qEHMB8GA1UdIwQYMBaAFEyyEypyNqbjtbljDKAwEUhjKFX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi8wMUVERUY5NjVE QkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1TzF1V01Nb0RBUlNHTW9W ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1ZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi8wMUVERUY5NjVEQkUxMUVGOEEwNkVENDBDNEY5QUUwMi9UTElUS25JMnB1 TzF1V01Nb0RBUlNHTW9WZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj9Lj9KvqF93IZFn/4M8xqD0Pyu+3suuWxMD/jJDEsijW1gEjm78gKygYgkoC P/7Cc+K9YxifcTLokC19oPRFNQpKcu+KtBVNk1eqrIFgPEBr1FtK98EcBb339mHo xV9NUctdhLiHNDDu+9jcl9iAwSZloJvnJdY/b0Bru0Sm3ZQGvC6aBPlOiE6T9I4E gqI+awJiJJqmpcnaxjqjsiLzsgJcHqUbdN7H6TUF4qio1pqugSNfJLpj0w9f+ru1 v/0AS/vr8EnSHUx0I5mIGmAtftSqRBfdHL+d3KZGvP1XOtF6xp2oaSfnzsg1XSWW 7fhfhJ+YmTSRPrtiV3M9hOWCHA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:01:11 2026 by rpki-client