$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft File: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json) Hash identifier: YbhCiRhdVuFmpRvTOcQz8veUDGloxHx984iGNnobQbs= Subject key identifier: A6:E0:1D:45:56:5C:EA:1E:D8:42:16:77:34:CF:33:FB:91:96:F7:85 Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Certificate serial: 0AD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft Manifest number: 0AB9 Signing time: Thu 16 Apr 2026 19:23:52 +0000 Manifest this update: Thu 16 Apr 2026 19:23:52 +0000 Manifest next update: Thu 23 Apr 2026 19:23:52 +0000 Files and hashes: 1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: xNXvv/uUx0MeKx0JN5wgTDbRXVIsyVXHCF5jNE8D60Y=) 2: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: UKzO6fJ8O7kuibwIUH1aGZnI4vviF9UxI9CQHk+Pqrc=) 3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: EbOmNI7pCvPrjoYlxuO9Tzo0OfRycsU5uM6JLnWzUkE=) 4: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: OHHlg82SYMCj0nhG6pczg1mnIfcmqYmPHe/Fcr0oG4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2770 (0xad2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Validity Not Before: Apr 16 19:23:52 2026 GMT Not After : Apr 23 19:23:52 2026 GMT Subject: CN=69e13748-d472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:5f:82:14:45:35:ef:2a:2e:8d:7e:5c:bd: 8e:a9:ae:dc:de:4e:9a:ce:67:1d:4c:28:06:92:c8: e3:59:54:6a:6f:8a:27:b9:95:d4:3a:c5:85:3f:ab: 85:76:ca:97:87:ab:02:cb:bd:a2:a2:11:34:56:fd: a8:2a:dd:52:6a:4e:83:c0:a4:59:7c:e1:11:0b:e0: 38:4d:32:a2:46:3e:90:0d:ad:c8:3f:83:c0:5b:c8: ae:c8:a1:c9:df:c3:47:a6:f8:74:fe:97:9e:ff:c5: 74:c1:74:71:7c:2d:77:76:ee:24:b8:14:37:16:2c: ee:e7:d6:be:50:0d:04:4d:40:11:e9:10:98:64:f5: b1:f8:a7:b4:6d:53:5c:10:7c:bc:87:ca:1a:3a:41: 49:ec:d5:40:c6:92:4b:e9:67:13:54:95:3f:5e:a7: a2:95:9d:4e:63:57:b0:f0:1b:1e:7e:de:86:c7:f7: 8a:49:91:ae:33:5a:70:79:a1:b4:d4:4c:43:4c:10: 6c:59:30:54:e3:e4:d6:38:fa:d4:4f:c4:06:d5:ec: d7:14:b2:d9:51:4c:9c:48:6f:48:c1:85:05:c9:2a: 67:b1:4a:04:43:fe:f8:9f:db:5e:61:f5:08:73:8c: aa:a0:6b:79:bb:74:ec:5f:07:51:95:2e:0d:91:b2: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E0:1D:45:56:5C:EA:1E:D8:42:16:77:34:CF:33:FB:91:96:F7:85 X509v3 Authority Key Identifier: keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a3:4c:06:c8:a4:57:49:c8:90:55:19:f1:e6:71:3a:be:1c: a7:e6:ba:4c:68:79:32:46:14:bf:e8:51:1a:57:e2:ad:a5:9f: cf:83:0f:59:78:f8:b5:36:f2:9f:45:ca:88:b0:92:9b:66:cf: ae:2b:73:f0:5f:47:ae:27:7f:13:75:3a:2c:6f:b8:c4:9c:52: 50:a8:a3:c6:48:a4:ed:3b:a1:a5:27:5a:ff:52:94:b9:4e:81: f5:d7:e4:ce:6b:54:7d:7b:d0:10:0b:41:54:cc:c4:b9:0c:09: 25:58:73:fc:86:63:71:62:c5:bc:84:5a:9d:d9:9c:4f:9b:25: 17:81:a4:09:d8:36:6f:00:32:78:3c:20:f8:67:73:33:dd:86: e2:f6:85:46:fe:d5:73:d7:87:05:5f:f7:55:f6:a9:7e:24:44: 9b:44:75:a3:a9:fe:9f:2a:45:96:6f:89:e5:d4:fe:32:84:c3: 8c:fe:2e:14:2b:3b:d6:32:ed:af:aa:7b:59:41:16:64:f3:a4: 17:5b:49:42:14:2f:62:1c:ff:20:25:a4:49:37:49:29:9e:a1: b7:81:0a:97:40:1e:be:11:46:83:1d:68:3b:70:e5:e9:20:2f: 11:cd:96:2a:0b:4b:65:a4:00:6d:ce:63:fb:a8:e9:5a:50:c4: 17:25:37:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RUExMTAvBgNVBAUTKDRENTI1NDc0NkZFRjcyRUZCN0FDQzBDNTM0QUQ2MDhG NTBCQzM4MDQwHhcNMjYwNDE2MTkyMzUyWhcNMjYwNDIzMTkyMzUyWjAYMRYwFAYD VQQDEw02OWUxMzc0OC1kNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWxfghRFNe8qLo1+XL2Oqa7c3k6azmcdTCgGksjjWVRqb4onuZXUOsWFP6uF dsqXh6sCy72iohE0Vv2oKt1Sak6DwKRZfOERC+A4TTKiRj6QDa3IP4PAW8iuyKHJ 38NHpvh0/pee/8V0wXRxfC13du4kuBQ3Fizu59a+UA0ETUAR6RCYZPWx+Ke0bVNc EHy8h8oaOkFJ7NVAxpJL6WcTVJU/XqeilZ1OY1ew8Bseft6Gx/eKSZGuM1pweaG0 1ExDTBBsWTBU4+TWOPrUT8QG1ezXFLLZUUycSG9IwYUFySpnsUoEQ/74n9teYfUI c4yqoGt5u3TsXwdRlS4NkbItnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbgHUVW XOoe2EIWdzTPM/uRlveFMB8GA1UdIwQYMBaAFE1SVHRv73Lvt6zAxTStYI9QvDgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFQS9GNDJENENBMjcz RTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1LTNyTURGTksxZ2oxQzhP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RWSlVkR192Y3UtM3JNREZOSzFnajFDOE9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFQS9GNDJENENBMjczRTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1 LTNyTURGTksxZ2oxQzhPQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp6NMBsikV0nIkFUZ8eZxOr4cp+a6TGh5MkYUv+hRGlfiraWfz4MPWXj4tTby n0XKiLCSm2bPritz8F9Hrid/E3U6LG+4xJxSUKijxkik7TuhpSda/1KUuU6B9dfk zmtUfXvQEAtBVMzEuQwJJVhz/IZjcWLFvIRandmcT5slF4GkCdg2bwAyeDwg+Gdz M92G4vaFRv7Vc9eHBV/3VfapfiREm0R1o6n+nypFlm+J5dT+MoTDjP4uFCs71jLt r6p7WUEWZPOkF1tJQhQvYhz/ICWkSTdJKZ6ht4EKl0AevhFGgx1oO3Dl6SAvEc2W KgtLZaQAbc5j+6jpWlDEFyU3uw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:49:38 2026 by rpki-client